Firewall Administrator

Overview

FIREWALL ADMINISTRATOR/ENGINEER (RDTE)

Bowhead has an immediate opening for a Cisco FTD/Firepower (FMC) Firewall Administrator/Engineer to provide Design and Engineering Operation and Maintenance support for Firewall systems on the classified and unclassified Research, Development, Test and Evaluation (RDT&E) networks at Dahlgren, VA. As the Firewall Administrator, you will design, implement and maintain support of the network and security infrastructure, use best practices and knowledge of current technologies and their potential application to the RDT&E Environment, and will assist in assessing the security risk of proposed Firewall modifications.

Responsibilities

Essential functions will include: 

• Manage firewall and network security systems by establishing and enforcing approved policies
• Analyze network security requirements and implement perimeter security changes
• Utilizing industry best practices for security, disaster recovery, business continuity, change control, the engineer will design, configure, manage and troubleshoot a variety of network firewall technologies
• Serve as a subject matter expert in coordinating and troubleshooting with customers, other infrastructure support activities and business units
• Develop network documentation of security infrastructure
• Monitor network performance and implement performance tuning as necessary
• Responsible for installing software, applying patches, managing file systems, and monitoring performance of Firewall systems
• Performs data backups and restoration of managed systems
• Assist in the certification and accreditation process for managed systems and networks
• Install and deploy of new Firewall hardware and software
• Suport IDS/IPS functionality
• Review daily logs for managed systems and report on unusual activity
• Participate in the development and maintenance of Standard Operating Procedures (SOPs) associated with managed systems and applications
• Collaborate with IT staff on projects and initiatives
• Provide input for a monthly progress and status report

Qualifications

• Prefer a minimum of six (6) years of relevant experience or equivalent combination of education and experience
• High School Diploma required. Bachelors Degree prefered. 
• Must currently hold a DoD 8570 Information Assurance Technical Level II certification
• Position requires a strong understanding of Firewall functions and operations (proxy, proxy-arp, NAT, stateful packet inspection, circuit layer gateways, and application layer gateway)
• Experience with Next Generation and web application firewalls
• Requires shell scripting experience and basic knowledge of various types of Operating Systems including Microsoft Windows, Linux and Unix and their network inter-communications
• Ideal candidate will have experience with TCP/IP protocols and the OSI model and how they apply to production systems and networks
• Intermediate to advanced level skills in Microsoft Office software suite - Word, Excel, Outlook, PowerPoint
• Ability to communicate effectively with all levels of employees and outside contacts
• Strong interpersonal skills and good judgment with the ability to work alone or as part of a team

Desired Skills:

• Firewall engineering background with Cisco FTD or McAfee firewalls
• Use of F5 Web Application Firewalls (WAF), Configure SSL offloading, secure remote access, High Availability / Redundancy configurations and network analysis tools
• IPv6 network and application implementations
• Familiarity with Department of Defense security guidelines and policies, highly desired

Physical Demands:

• Must be able to lift 25 or more pounds
• Must be able to stand and walk for prolonged amounts of time
• Must be able to twist, bend and squat periodically

 SECURITY CLEARANCE REQUIREMENTS: Must currently hold a security clearance at the Top Secret level.  US Citizenship is a requirement for Top Secret clearance at this location.

#LI-JR1