Network Engineer/Architect - SME

Overview of position:

We are looking for a Network Engineer/Architect, SME to provide senior-level network architecture, security infrastructure support, and technical expertise for DFAS environments. This role focuses on maintaining secure network configurations, troubleshooting connectivity issues, implementing Zero Trust technologies, and ensuring compliance with DoD cybersecurity standards.

An active Top-Secret clearance and United States Citizenship are required to be considered for this position.

Responsibilities

• Provide senior-level network architecture and security infrastructure expertise for all DFAS enclaves
• Maintain current network architecture and configuration design documentation achieving 95% compliance
• Support Security Infrastructure Operations for entire CCE (Firewalls, IPS/IDS, DNSSEC, Reverse Proxies, Web Proxies, Zero Trust Network Architecture Technologies)
• Provide security infrastructure technical expertise and network analysis for troubleshooting access issues
• Establish and maintain secure configuration through NSA and DISA STIGs and security patches
• Follow directions from DoD CERT for security operations
• Periodically verify secure configuration using SRRs and security scans (ACAS, MECM)
• Report non-compliance and vulnerabilities via POA&M, AOR, or SOL
• Configure all hardware, software, services, and devices for DoD and DFAS compliance

Experience/Skills:

• 10+ years network engineering and security infrastructure experience
• Security X (formerly CASP+) certification demonstrating advanced security expertise
• Expert knowledge of network security technologies (Firewalls, IPS/IDS, DNS/DNSSEC)
• Experience with Zero Trust Network Architecture implementation
• Proficiency with web proxies, reverse proxies, and content filtering
• Knowledge of NSA and DISA STIG compliance and implementation
• Experience with ACAS vulnerability scanning
• Understanding of DoD ports, protocols, and services requirements
• Network traffic analysis and troubleshooting expertise

Preferred Qualifications:

• CISSP or CISM certification
• Cisco CCNP Security or equivalent
• Palo Alto PCNSE certification
• Experience with DFAS network infrastructure
• Prior DoD CERT coordination experience
• Splunk or SIEM administration experience
• Experience with classified network architectures 

Education:

• Bachelor’s degree in Computer Science, Engineering, Information Technology, or a related field

Certifications:

• CompTIA SecurityX (CASP) or equivalent

 Clearance:

• Active Top-Secret clearance is required.
• Must be a United States Citizen and pass a background check.
• Maintain applicable security clearance(s) at the level required by the client and/or applicable certification(s) as requested by FEDITC and/or required by FEDITC’S Client(s)/Customer(s)/Prime contractor(s).