Enterprise Security Infrastructure Engineer

Seeking an experienced Enterprise Security Infrastructure Engineer to support the NASA Office of Chief Information Officer (OCIO) Network and Telecommunications Services (NaTS) under the Advanced Enterprise Global Information Technology (IT) Solutions (AEGIS) contract. This job requires working closely with key NASA program customers, managers, leaders, and technical Subject Matter Experts (SMEs) across NASA’s corporate network agency-wide.

Job Description:

A successful candidate will serve as an Enterprise Security Infrastructure Engineer for firewalls, web content filtering, VPN, IPS and proxy services on the NASA AEGIS contract   This engineer will design enterprise security infrastructure solutions supporting NASA as well as providing guidance and support to LAN and WAN engineers throughout the Agency.

Responsibilities will include developing detailed designs and deployment packages for security infrastructure supporting the entire Agency as well as individual NASA centers.   Candidate will support the Agency VPN and Trusted Internet Connection (TIC) infrastructure as well firewalls across the Agency. The candidate will develop design packages to upgrade or refresh security infrastructure at NASA centers and enforce target architectures to guide the evolution of NASA’s networks and ensure compliance with Federal security requirements. Candidate will be responsible for reviewing and submitting firewall policy requests to be implemented by an enterprise firewall operations team.

The Enterprise Engineer will also engage in lab testing and coordinate requirements with other service lead engineers and share results of testing with all centers.

Required Skills:

Hands-on technical experience with security infrastructure such as firewalls, VPN, content filters and web application firewalls.  

Experienced in documenting detailed technical designs.

Excellent oral and written skills to present technical information in presentations to either internal or external customers.

Comfortable working closely with customers and senior management. 

Able to multi-task and effectively balance competing priorities while producing quality deliverables.  

Experience with Remote Access and IPsec VPNs is required.    

Desired Skills:              

Specific experience with Fortinet firewalls, Pulse Security Appliance (PSA) and Cisco ASA is preferred.  

Additional experience with IPS/IDS, AWS cloud computing, WAF, campus LANs, WANs and diversity/redundancy required to meet customer requirements is desired. 

Network and/or security certification desired.

Original Posting Date:

While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above.

Pay Range:

The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.