The job duties of the Tier III Boundary Protection Engineer are as follows: • Maintain the security and networking of enterprise boundary enclaves and devices
• Responsible for installing software, applying patches, managing file systems, and monitoring performance of firewall systems
• Provide support for Palo Alto, Cisco Adaptive Security Appliance (ASA), and Forcepoint firewall equipment and applications
• Generate, determine impact of, and implement custom proxy policies and/or policy exceptions in response to ongoing technology implementation activities on the program
• Proxy Subject Matter Expert (SME) for integration of other technologies within the program (function as an SME on ongoing technology projects)
• Support the troubleshooting of web connectivity problems to determine root cause
• Perform Proxy solution component upgrades, testing and configuration
• Research and develop evidence collection, protection, and analysis techniques for customer owned and maintained hardware and/or software
• Provide real-time monitoring and alerting of security incident investigations on perimeter/internal infrastructure
• Provide day-to-day Operations and Maintenance (O&M) support for all incident management events and outages
• Collaborate with IT staff on projects and initiatives
• Provide input for monthly progress and status reporting of Service Level Agreements (SLAs)
• Work with all corresponding technical support teams as required to resolve network traffic concerns
• Utilize monitoring tools and log collectors to provide in-depth analysis on traffic anomalies and issues
REQUIREMENTS
TS SCI CI Poly
Candidate must have 16 years of experience that can be a combination of work history and education. This equates to a Doctorate and 8 years, master’s and 10 years, bachelor’s and 12 years, associates and 14 years or HS diploma and 16 years. Additional required qualifications include: • Candidate must have 7 years of relevant boundary protection experience delivering fault tolerant data network infrastructure solutions and incident response
• Must comply with DoD 8570 Information Assurance Technical (IAT) Level 2.
• Experience in configuring and troubleshooting boundary protection technologies such as Palo Alto, Cisco ASA, and Forcepoint appliances
• Experience with proxy technologies such as Bluecoat proxies or equivalent applications
• Working knowledge or Routing and Networking fundamentals
• Working knowledge of boundary protection best practices
• Understanding of routing, switching, Internet Protocol (IP) subnet, Network Address Translation (NAT) and security technologies
• Demonstrated ability to engineer and modify rulesets to allow connectivity for new customer requirements
• Demonstrated ability to read, understand, and develop schematic diagrams, technical manuals, and documentation such that the supported equipment and software can be maintained with minimal training
• Working knowledge of Service Now or similar IT Service Management (ITSM) products
• Superior verbal and written communication skills
• Intermediate-level knowledge of MS Office products Word, Excel, PowerPoint, and Visio