IT Security Engineer II with Security Clearance

---

Job description

Overview: We are seeking an experienced Enterprise Security Infrastructure Engineer to design and implement security infrastructure solutions. This role involves providing guidance and support to LAN and WAN engineers across multiple locations. The successful candidate will contribute to the development of secure network architectures and ensure compliance with federal security requirements. Responsibilities: Design and Deployment: Develop detailed designs and deployment packages for security infrastructure supporting various centers. Create design packages for upgrading or refreshing security infrastructure components. Infrastructure Support: Support agency-wide VPNs, Trusted Internet Connection (TIC) infrastructure, and firewalls. Enforce target architectures to guide the evolution of networks and ensure compliance with federal security mandates. Policy Management: Review and submit firewall policy requests to be implemented by the enterprise firewall operations team. Ensure that firewall policies align with organizational security requirements. Collaboration and Testing: Engage in lab testing of security solutions. Coordinate requirements with other service lead engineers. Share test results and best practices across all centers. Required Skills: Technical Expertise: Hands-on experience with security infrastructure, including firewalls, VPNs, content filters, and web application firewalls. Proficiency with remote access technologies and IPsec VPNs. Documentation and Communication: Ability to document detailed technical designs clearly and accurately. Excellent oral and written communication skills for presenting technical information to internal and external stakeholders. Comfortable working closely with customers and senior management. Project Management: Ability to multitask and balance competing priorities effectively. Strong organizational skills to produce quality deliverables within set timelines. Desired Skills: Specific Technologies: Experience with technologies such as Fortinet firewalls, Pulse Security Appliances (PSA), and Cisco ASA. Familiarity with intrusion prevention/detection systems (IPS/IDS), AWS cloud computing, web application firewalls (WAF), campus LANs, WANs, and redundancy solutions. Certifications: Relevant network and security certifications are a plus. Additional Information: Work Environment: This position may be performed remotely. Quarterly travel is required for 2-4 days to the designated area. Employment Requirements: This is a full-time role. U.S. citizenship is required. Candidates must be able to obtain a Public Trust Clearance (PTC). Employment is contingent upon successful completion of a background investigation.

<!– job description page –>