Network Security Engineer III

Job description

Imagine One is currently seeking qualified **Network Security Engineer III** individuals to join our team to provide Network Security Engineering Support to Naval Surface Warfare Center Dahlgren Division, Dam Neck who supports the Program Executive Office Unmanned and Small Combatants (PEO) providing cybersecurity engineering support, cybersecurity requirements Software Support Activity support for the Littoral Combat Ship (LCS) class Environment (TSCE) networks, LCS Afloat Sites for PMS 501 (New Construction), Service), and IWS80 Littoral Combat Ships( LCS).

Work will be on-site at Naval Air Station Oceana Dam Neck, Virginia Beach, Virginia with 25 percent travel potential.
The **Network Security Engineer III** will provide ongoing network support, addresses availability issues, overcome performance problems, and provide overall level 2 support.

Designs, installs, maintains and coordinates the use of network systems.

Evaluates hardware and software and peripheral equipment for large, complex networks to include the following responsibilities:

**Responsibilities for Network Security Engineer** **III:**

The **Network Security Engineer III** would serve as a Littoral Combat Ships (LCS) Network Security Engineer at NSWCDD DNA.

The **Network Security Engineer III** will provide network-engineering support to pre-delivery and in-service LCS ships.

The selectee will serve within a team of engineers for the LCS Total Ships Computing Environment (TSCE) core business network and provide support for the LCS Software Support Agent (SSA).

He/she will perform network engineering, integration, evaluation and testing within the LCS TSCE core business network.

He/she will perform networks security updates upgrades to ensure the security and integrity of the TSCE network.

**Network Security Engineer III** will analyze, troubleshoot and resolve issues with the LCS TSCE infrastructure including devices such as routers, switches, and firewalls.

The **Network Security Engineer III** will perform all duties associated for support, maintenance, performance and uptime of the LCS TSCE core infrastructure to include as follows:

+ Provide network security engineering support to PMS 501/505 and IWS80 for implementation of Cybersecurity Ships Change Documents (SCDs) and Engineering Change Proposal (ECPs)
+ Provide engineering and network architecture expertise for pre-delivery/in-service ships for integration and modernization efforts
+ Perform security/vulnerability assessments using DoD provided tools, reporting results to the lead cybersecurity system engineer
+ Provide oversight for the day-to-day management and maintenance of the LCS core network infrastructure
+ Perform firewall and network device support for the TSCE core infrastructure
+ Oversee in the deployment of switches, routers, firewalls, and storage devices from multiple vendors
+ Support and interact with the network cybersecurity engineers, system administrators, and system engineers to ensure the confidentiality, integrity, and availability of systems, networks, and data
+ Assist with network engineering executing activities such as the design, implementation, installation, configuration, maintenance, integration, and analysis
+ Assist in the management and maintenance of lab facilities
+ Apply software patches and patch sets during maintenance windows
+ Includes operating system (OS) patches released from DISA’s patch repository website
+ Upgrade software
+ Conduct regression testing

**Required Qualifications** :

+ Requires five (5) years with BS/BA or minimum zero (0) to two (2) years with MS/MA/MBA or eight to ten (8 to 10) years with no degree
+ **Minimum certification as 461 at the Intermediate level per DoDD 8140.01, or successor**
+ **Information Assurance Technical (IAT) Level II certification**
+ Minimum of five (5) years’ experience in Network Engineering
+ Demonstrated experience with Windows OS and Linux OS
+ Demonstrated experience **with performing STIG implementation**
+ Demonstrated experience performing vulnerability assessments with the Assured Compliance Assessment Solution tool
+ Must have hands-on technical experience in the following areas:
+ Network Routing Protocols
+ Cisco Adaptive Security Appliance (ASA) Firewalls
+ Extensive experience with Access Control Lists (ACLs)
+ Experience with Cisco security devices focusing on Identity Services Engine (ISE), Web Security Appliance (WSA) and Email Security Appliance (ESA)
+ Demonstrated experience troubleshooting network connectivity issues
+ Must have experience in Network Security to include the design, implementation, configuration, and enforcement of security controls on network, hardware, and software components and devices
+ Experience with the implementation of cybersecurity and Information Assurance (IA) boundary defense techniques and various IA-enabled appliances (firewalls, Intrusion Detection Systems (IDS), Intrusion Prevention System (IPS), switches/routers
+ Knowledge of computing and networking vulnerabilities, attack methods and latest detection methods
+ Excellent ability to communicate effectively orally and in writing

**Preferred Qualifications:**

+ Served on a LCS platform
+ Windows Server upgrade experience
+ HBSS knowledge is a plus
+ Experience utilizing packet analyzer tools such as Wireshark and tcpdump
+ Hyper-V or VMware experience is a plus
+ Alcatel operating system experience is a plus

**Security Requirements:**

+ U.S. Citizenship required
+ Candidate must have an ACTIVE SECRET clearance (with TS/SCI eligibility)

**Imagine One Technology & Management, Ltd., offers a full package of benefits and competitive salary, excellent group medical, vision, and dental programs.

401K savings plan; $4K annual tuition reimbursement ($5K if pursuing master’s degree); employee training, development, and education programs; profit sharing; advancement opportunities; and much more!**

**_ISO 9001:2015, ISO 20000-1:2018, ISO 27001:2013_**
**_CMMI Development and Services - Maturity Level 3_**
**_An Employee-Owned Business_**

**_EEO/Veterans/Disabled_**

Required Skill Profession

Other General