Applications Engineer- Onsite (US Citizens w/ Top Secret Clearance)
Washington, DC
About Swingtech
Swingtech Consulting, Inc. provides technology and management consulting services for the federal, state, and local government. Our team is comprised of skilled, certified consultants that help clients achieve success with effective, created, and rapidly executed solutions. We are rapidly growing, and we are always looking for intelligent and motivated people to join our team.
Location: Primary – DOJ Facilities (2CON/RFK/CEF-DC); Secondary – Equinix Data Centers (Ashburn, VA/Dallas, TX)
Clearance Required: Top Secret
POSITION TYPE: Full Time-W2-40
Swingtech is currently looking to fill a Applications Engineer role.
The Applications Engineer (Senior) is a Key Personnel role responsible for managing, optimizing, and securing the Department of Justice’s (DOJ) critical enterprise applications, including Bluecoat Proxy, Proofpoint Email Security, Infoblox DNS, and cloud-integrated services (AWS/Azure). This position ensures high availability, compliance with TIC 3.0, Zero Trust, and FedRAMP requirements, and seamless integration with DOJ’s JCOTS (Justice Cloud Optimized Trusted Internet Connection Services).
Responsibilities & other details are listed below:
RESPONSIBILITIES:
- Deploy, configure, and maintain Bluecoat Proxy SG infrastructure with SSL inspection capabilities.
- Implement and optimize Zscaler Internet Access (ZIA) policies for secure web traffic.
- Troubleshoot proxy authentication, SSL decryption, and traffic routing issues.
- Administer Proofpoint Email Protection infrastructure including SMTP relay configurations, advanced threat detection (malware, phishing, spam), and email encryption and DLP policies.
- Enforce DMARC, DKIM, and SPF authentication protocols.
- Manage Infoblox DNS infrastructure for enterprise name resolution.
- Administer BlueCat IPAM for IP address management.
- Troubleshoot DNS-related outages and performance issues.
- Implement Zscaler Private Access (ZPA) for secure application access.
- Configure AWS/Azure security controls for cloud-hosted applications.
- Ensure TIC 3.0 compliance for all application traffic flows.
- Maintain FISMA/NIST SP 800-53 controls for assigned applications.
- Support annual security assessments and FedRAMP audits.
- Ensure proper archival logging of all application traffic.
- Serve as Tier 3 escalation point for application-related incidents.
- Perform log analysis to diagnose mail delivery, proxy, and DNS issues.
- Lead Root Cause Analysis (RCA) for major application outages.
- Develop Python/Ansible scripts to automate application deployments.
- Optimize reverse proxy performance for high-traffic applications.
- Recommend application modernization strategies.
ELIGIBILITY & QUALIFICATIONS:
- Bachelor’s degree in computer science, Cybersecurity, or related technical field.
- Mandatory Certifications:
- Proofpoint Certified Administrator.
- Bluecoat Proxy SG Professional.
- CompTIA Security+ (or equivalent IAT Level II certification).
- Preferred Certifications:
- Zscaler Certified Professional (ZCP).
- AWS/Azure Security Engineer.
- CISSP.
- 15+ years hands-on experience with:
- Proofpoint Email Security platforms.
- Bluecoat Proxy SG/SSL decryption.
- Infoblox DNS/BlueCat IPAM.
- 5+ years implementing Zero Trust/TIC 3.0 solutions.
- DoD/DoJ experience highly preferred.
- On-Site Presence: Minimum 3 days per week at DOJ facilities.
- On-Call Duty: Participation in 24/7 escalation rotation.
- Emergency Response: Ability to respond within 2 hours for critical incidents.
- Travel: Occasional visits to Equinix data centers.
- Active Top Secret clearance must be maintained.
- All certifications must remain current.
- Emergency on-call availability is mandatory.
Technical Skills Matrix:
Technology Category
Required Skills
Email Security
Proofpoint Enterprise Protection, SMTP relay, DMARC/DKIM/SPF
Web Proxy
Bluecoat Proxy SG, SSL inspection, Zscaler ZIA
DNS/IPAM
Infoblox, BlueCat, BIND
Cloud Security
AWS/Azure application security, Zscaler ZPA
Monitoring
Splunk, Xymon, ScienceLogic
Automation
Python, Ansible, Terraform
Summary of Benefits
- 15 PTO days
- 11 paid holidays
- Medical Insurance with – 3 options (HSA with $600 Employer Contribution).
- Dental Insurance with no age limit orthodonture.
- Vision Insurance through EyeMed in and out of network coverage.
- Short Term and Long-Term Disability coverage with 100% premium support,
- Life insurance and AD&D with 100% premium support
- Supplemental Life Insurance
- Critical Care and Accident Insurance availability
- Pet Insurance through Nationwide
- Employee Assistance Program
- 401k with enrollment from day one. 4% deferral by company.
- $1500 Annual Training Budget
- $1500 Referral bonus
- Eligibility for annual merit and discretionary bonus
- Flexible work arrangements
Equal Employment Opportunity (EEO) Minority/Female/Veterans/Disabled
Swingtech may require successful completion of a background check and/or drug screening as a condition of employment.
* Salary range is an estimate based on our InfoSec / Cybersecurity Salary Index 💰
Tags: Ansible Application security Audits Automation AWS Azure CISSP Clearance Clearance Required Cloud Compliance CompTIA Computer Science DNS DoD Encryption FedRAMP FISMA Log analysis Malware Monitoring NIST NIST 800-53 Python Security assessment SMTP Splunk Terraform Threat detection Top Secret Top Secret Clearance Zero Trust
Perks/benefits: 401(k) matching Career development Flex hours Flex vacation Health care Insurance Salary bonus Travel
More jobs like this
Explore more career opportunities
Find even more open roles below ordered by popularity of job title or skills/products/technologies used.