Network Security Engineer - (217)

VAE is looking for a Network Security Engineer to work on the Army Global Unified Network (AGUN) – Increment 1 (INC1) program. The Army’s Global Enterprise Network Modernization – OCONUS (GENM-O) is a critical mission provider responsible for keeping the Army connected through global network modernization projects. A successful candidate should have proven ability to lead, problem solve, and deliver superior results as part of a high performing team in a fast-paced environment. On this program, you will have the opportunity to build advanced network security systems and software utilizing cloud capabilities in support of this complex program. Based in DevOps framework, you will participate in and/or direct the development of major deliverables throughout all aspects of solution development lifecycle including scope and work estimation, architecture and design, coding, unit testing, and operations network services.

Responsibilities:

• Analyze network firewalls / VPNs and additional security tools and support the development of migration plans to move tenants to the new AGUN enterprise environment.
• Support the development of Engineering Implementation Plans (EIPs).
• Develop dashboards using security element managers and/or Kibana.
• Support occasional evening and nighttime service outage windows as well as troubleshooting efforts in the event there is an outage caused by project network changes.
• Assist with support and operations where necessary.
• Working within the AGUN security team, supporting firewall edits and issue troubleshooting
• Make changes to an active production network using approved methodologies.

• Bachelor’s degree and 4 – 8 years of prior relevant experience or Masters with 2 – 6 years of related experience. A combination of education and experience will be considered in lieu of a degree.
• Previous experience working on a firewall team or supporting firewall edits and issue troubleshooting to resolution is a must.
• Active Secret clearance preferred
• 8570 IAT II and Operating System certification
• Demonstrated experience performing firewall rule analysis and maintenance.
• Experience with Panorama, Palo Alto NGFW and/or AppGate SDP ZTNA
• Experience with ELK stack and/or Kafka
• Experience with Site-to-Site VPNs.
• 802.1x implementation experience.
• CCNP or PCNSE is a plus.
• Understanding of holistic service architectures.
• Experience working cross functionally across multiple teams.
• Sound understanding of Network Management and Monitoring.
• Excellent problem solving, analytical skills and technical troubleshooting skills.
• Knowledge of Linux environments.
• Knowledge of security practices, networking protocols, firewalls, and zero trust Security.
• Prior experience working within Army’s IT infrastructure is preferred
• Experience with DevOps pipeline and IaC-based tools/frameworks such as Terraform, Ansible, and GitLab.
• Knowledge and experience working with one or more of the following: Bash, YAML, JSON, and Python