Network Security Engineer

Minimum Requirements:

• Associate degree in an Information Technology (IT) related field.
• Active certification: Palo Alto Networks Certified Network Security Engineer (PCNSE) Certification.
• Active certification: Cisco Certified Network Professional (CCNP) Enterprise or (CCNP) Security Certification.

Preferred Requirements:

• Ten (10) years of CONUS technical experience in IT networking and network security.
• Bachelor’s degree in an Information Technology (IT) related field.
• Active certification: Prisma Certified Cloud Security Engineer (PCCSE) Certification from Palo Alto Networks.
• Active certification: Cisco Certified Internetwork Expert (CCIE) in Enterprise Infrastructure or Security Certification.

Position Skills, Experience, & Capabilities:

• Five (5) years of experience with:
• Palo Alto Networks’ next-generation firewall services.
• Intrusion Detection and Prevention with Palo Alto Networks.
• Content Filtering Palo Alto Networks.
• Virtual Private Networks using Palo Alto network systems.
• Data Loss Prevention.
• TLS/SSL Inspection.
• Four (4) years of experience in Complex switching, routing, and wireless with Cisco Systems.
• Three (3) years of experience in Reverse Proxies, Load Balancing with A10 networks.
• Two (2) years of experience in Network Access Control – Cisco Identity Services Engine (ISE), Free Radius, and Access Control Lists (ACLs).
• General experience with the following:
• Implementing multifactor authentication solutions with Microsoft.
• Cloud-based virtual networking and security services.
• Authentication standards – (802.1x) in wired and wireless applications.
• Scalable routing protocols: Enhance Interior Gateway Routing Protocol (EIGRP), Open Shortest Path First (OSPF), and Border Gateway Protocol (BGP).
• Enterprise Data Center is implementing micro-segmentation.
• Certificate Management, Public Key Infrastructure (PKI).
• Vulnerability management using Nessus, NMAP, Windows, Unix, and Linux OS.
• Packet/Protocol Analysis using Opnet, Riverbed, Wireshark, and taps.
• Centralized Management using Panorama, SolarWinds.
• Major server and desktop operating systems and utilities.
• Ability to work independently, troubleshoot, and provide mentoring to junior associates.
• Communicate effectively when providing presentations.
• Produce technical documents (diagrams, design documents, project plans and schedules, and user instructions) as required.

Work Arrangement:

• Work shall be performed in a hybrid setting each week, Monday through Friday, as follows: Two (2) days remote at a suitable off-site location. The client reserves the right to determine that an off-site location is unsuitable (e.g., crowded public space with distracting background noise during meetings).
• Three (3) days on site in Annapolis, MD 21401.
• Perform during normal operating hours, Monday through Friday, 8:00 AM to 4:30 PM Eastern Standard Time (EDT).
• The candidate shall be flexible in extending coverage hours or scheduling to meet deadlines, project requirements, and/or on-call operational support, including evenings, nights, weekends, and holidays.