Senior Network Security Engineer

Role: Senior Network Security Engineer
Full Time | Annapolis, MD (Onsite)
Salary Range: $130k to $150k per year

The Senior Network Security Engineer will participate in planning and coordinating the design, installation, and connectivity of computer and network systems to ensure stable, scalable, redundant, and secure network operations.

Minimum Qualifications:
a. Associate degree in an Information Technology (IT) related field (as determined by the AOC).

b. Active certifications as follows:
Cisco Certified Network Professional (CCNP) Enterprise or (CCNP) Security Certification.

c. Preferred certifications as follows:
(1) Cisco Certified Internetwork Expert (CCIE) in Enterprise Infrastructure or Security Certification.
(2) Palo Alto Networks Certified Network Security Engineer (PCNSE) Certification.
(3) Prisma Certified Cloud Security Engineer (PCCSE) Certification from Palo Alto Networks.

Minimum Experience:
a. Ten (10) years of CONUS technical experience in IT networking.
b. Bachelor’s degree in an Information Technology (IT) related field (as determined by the AOC).

Experience with:
(1) Layer 2 & 3 optimization and boundary virtual switching systems.
(2) Scalable routing protocols (BGP, EIGRP, OSPF).
(3) Enterprise Data Center and cloud Networking for Virtualization, SDN, Load Balancing, storage.
(4) Zero Trust Network Access and micro-segmentation.
(5) High Availability in Enterprise.
(6) Advanced WAN service layers, SDWANs and WAN Optimization applications.
(7) Current Network Security Services applications, services, and appliances including, but not limited to:
i Identity Management.
ii Network Access Control.
iii Application Layer Inspection.
iv Content and Malware Filtering.
v Data Loss and Intrusion Prevention.
vi Zero-day threats.
vii IPsec and SSL VPN.
viii PKI.
ix Two-Factor Authentication.
(8) Enterprise VoIP and physical security environments - access control and video surveillance network applications.
(9) Quality-of-Service design and implementation.
(10) Network Management Protocols, Applications and Operating System capabilities
(11) Installation and configuration of Cisco Catalyst, Nexus, and Palo Alto platforms
(12) Installation, configuration, securing and troubleshooting enterprise wireless access systems.


Responsibilities:
1. You will be responsible for the following:

a. Designing, developing, analyzing, troubleshooting, and documenting computer networks and infrastructure.

b. Performance monitoring, troubleshooting, and documentation of a statewide network, utilizing industry best practices for security, disaster recovery and business continuity, change control, and client support.

c. Developing and analyzing network designs and protocols including prototyping and assessment.

d. Performing planning, engineering, forecasting and implementation, and identification of resource requirements for network systems.

e. Leading and/or assisting in major network projects to support capacity growth, upgrades and new products/features, and integration.

f. Evaluating current network systems and recommending changes in maintenance and systems standards, and training support personnel on the conversion, implementation, and troubleshooting.

g. Applying in-depth up-to-date knowledge of standards, guidelines, industry trends and similar for LAN, WAN, Wireless, Data Center, Cloud networking and interconnection.

h. Driving improvements in network process, efficiency, and standardization.

i. Ensuring security compliance, change control processes and adherence to standards.

j. Providing upper tier of diagnosis, isolation, and resolution of network problems.
(1) Identifying and documenting root cause.
(2) Proactively identifying potential issues in the production environment and recommending potential solutions

k. Developing comprehensive graphical and text-based documentation and effectively managing the implementation process from design to acceptance.

l. Hosting weekly status meetings/calls with team or on as needed basis.

m. Leading, scheduling, and overseeing the activities with other team members to resolve end user hardware and software problems in a timely and accurate fashion.

n. Assisting in the creation of robust network designs, acting as the escalation point of contact and lead engineer for implementations and provide ongoing support and maintenance.

o. Oversight of the configuration, maintenance, and documentation of routers, switches, wireless controllers, load balancers, security appliances, WAN optimizers, and management and security appliances.