|
With The Eye Of A Hawk, We Understand The Need And Tailor The Solution |
Join The BLACKHAWK TeamSENIOR NETWORK DEFENSE FIREWALL ENGINEER BLACKHAWK Management Corporation is seeking a senior Net Defense Firewall Engineer responsible for Theater compliance with DoDI 8551.1, Ports, Protocols, and Services Management instructions using DoD approved Firewalls or filtering devices. Responsible for developing and maintaining a theater-level filtering strategy in coordination with DISA, COCOM Service Components, and other organizations. Delegates security controls and responsible for Defense in Depth approach with oversight of execution at all tiers in theater using Cisco ASA, Cisco PIX, Juniper Netscreen, or any other approved system. Network Defense Firewall Engineer Duties: Configuring and administering firewall and Intrusion Detection Systems (IDS). Implement network hardware technologies, especially Cisco PIX, Cisco ASA, Cisco Routers and Juniper Netscreen. Provide SecureWorks clients with security architecture recommendations and assist with planning and implementation of long term projects. Troubleshoot complex multi-vendor network service provider issues in the WAN while working with multiple geographically dispersed client and vendor teams to identify and eliminate network configuration issues. Review technical specifications from clients and vendors to confirm adequacy, accuracy and functionality of proposed solutions. In addition, write RFI and RFP documents with the end goal of designing, building and maintaining firewalls for client networks. Deployment and maintenance of enterprise network routing architectures using protocols such as OSPF, BGP, EIGRP, and RIP. Develop and write recommendations for theater policies, procedures, technical standards and guidelines. Develop and write infrastructure system documentation standards for deployment and ongoing maintenance. Manage, monitor enterprise encryption products and processes. Manage, monitor web, email, and network filtering product(s). Coordinate with DISA to ensure PKI compliance and assist with technical implantation of encryption technologies across multiple systems (Active Directory, Cisco Networking devices, VTC equipment, Web Servers, or any other system as appropriate. Systems or major changes to existing systems or networks are contemplated. Perform network and host vulnerability assessments and work with IT to remediate vulnerabilities. Provide user training in security awareness and in conveying information security policies. Perform security related and other projects as requested. Manage, monitor communication and encryption technology options (VPN, SSL, Whole Disk, PKI, User and File-based, etc.). Education: Bachelor's Degree or equivalent in Computer/Electrical Engineering or Computer Science. Specialized Certification: Certified in any two DoD approved Firewall Platforms, (Cisco PIX/ASA, Juniper Netscreen, Checkpoint NGX, McAfee Sidewinder, SANS Institute GCFW). [ISC2 Certified Information Systems Security Professional (CISSP) Any SANS Institute GIAC certification, or any Cisco Professional Level certification is preferred]. Specialized Experience: Experience with VPN, SSL, other encryption methodology / technology. Three to five years experience with one or more of the preferred firewall platforms, Check Point CCSE, Juniper Networks JNCIS-FWV or Cisco CCSP or GIAC GCFW preferred. Experience / Knowledge of Cisco NIDS devices; Experience / Knowledge of Cisco; Security Agents; Experience / Knowledge of Cisco Pix; Experience / Knowledge of SourceFire NIDS or Snort IDS. Knowledge of Linux, TCP/IP, UNIX, NT, IP Routing. Location: Anticipated Start Date: BLACKHAWK Management Corporation is an Equal Opportunity Employer. We offer competitive salaries, advancement opportunities and a full range of benefits including an education assistance program. To apply for this position send your Resume and Cover Letter to:
Chrissy Harden |