Provide architectural design and coordinate the implementation of security products to integrate into existing network environment. Identify significant actual and potential cyber security problems, trends, and weaknesses and recommend specific modifications and solutions to reduce information systems security risks. Develop strategies for responding to future security challenges. Review proposed new systems, networks, and software designs for potential security risks, and resolve integration security issues. Define the scope and level of detail for applicable security plans and policies.

Establish technical or procedural enforcement for pertinent policies within the organization. Facilitate organizational-wide communications and institute measures to ensure information security awareness and compliance. Implement the requirements of policy directives. Develop and implement policies and guidelines required for infrastructure protection, and tools for monitoring program effectiveness. Establish requirements and make recommendations on the appropriate infrastructure protection tools, methods, and technologies.

Perform as key member of the Incident Response Team and participate in the investigation of serious information systems security violations that potentially affect the integrity of organization's infrastructure. Recommend action for containment and remediation based on findings and following up to ensure the implementation of corrective actions. May serve as an expert witness at trials and hearings.

Assist in operational security functions handling Cisco, Juniper, and Palo Alto Networks firewalls, and in building, monitoring, and troubleshooting SSL VPN tunnels. Manage the organization's firewalls and review network firewall rule exception requests to ensure the request meets the organization's policy and perimeter protection standard. Implement or adjust pertinent network firewall rules.
Requires bachelor's degree in computer science, cyber security, engineering, or a related technical field plus 10 years of related network security experience. Additional experience can be substituted for a degree.

Must have experience managing and leading a team.

Experience working with Cisco, Juniper, Fortinet, and Palo Alto Networks networking and security solutions including routers, switches, and firewalls.

Experience using common networking tools to aid in troubleshooting, including nmap, Wireshark, tcpdump, etc.

Understanding of proxy and URL filtering services for end users.

Understanding of SIEM operation.

Expertise in common networking concepts and protocols including, but not limited to:

TCP/UDP ports and protocols.

OSI Model.

Layer 2 switching concepts (spanning tree, VLAN trunking, etc.).

Layer 3 routing concepts (routing protocols, route summarization, redistribution, etc.).

Demonstrated ability to effectively communicate orally and in writing.

Experience supporting a nationwide mid to large Federal agency enterprise is a plus.

CISSP certification is required.

Must be able to obtain Level 2 Secret (ANACI) clearance.