Network Engineer (Senior) with Security Clearance

---

Job description

Network Engineer (Senior) Huntsville AL Marathon TS is seeking a Senior Network Engineer to support a client in the Huntsville, AL area. The ideal candidate will have a cyber security background. Working as part of the overall IT team, the ideal candidate will be responsible for supporting and maintaining the IT infrastructure with special attention to information security and networking along with some general IT support. The position requires in-depth knowledge of networking devices and cyber security disciplines. The ideal candidate will also provide research, design, and implementation of security improvements and security controls and provide firewall and network management. Required Qualifications: United States citizenship. Minimum 5-7 years of experience in direct support of enterprise networking. Highly skilled with hardware, operating systems, and networking in both general office and data center environments. Network switch installation/deployment, stacking, configuration, and management. LACP/LAG switch-to-switch and switch-to-host management. Copper and Fiber cable management. Experience with management of Palo Alto firewalls, including Panorama, High Availability setup, FIPS operating mode, GlobalProtect client VPN, SSL Decryption, App-ID updates, User-ID deployment. Strong experience in building site-to-site IPsec tunnels, routing protocols, VLANs, threat prevention and intrusion detection/protection. Firewall management including upgrades, security policies, routing, client/server VPN, and disciplines with configuration change control within a team environment. Wireless network management, access point configuration and management. Thorough knowledge of OSI model and TCP/IP protocol stack at all network layers, network topologies, static and dynamic routing protocols. Solid experience with NAT, SSL/TLS, LDAP, RADIUS, SNMP, DHCP, DNS, NTP, protocols and implementations. Experience with network monitoring and log management software tools such as WhatsUpGold, Nagios, Grafana, Cacti, NetFlow, etc. Create installation and configuration documents including visual network diagrams using tools such as MS Visio. Preferred Qualifications: Experience with IEEE 802.1X port-based network access control. Familiarity with support technologies such as VMware, Linux, MacOS, Windows AD, Group Policy configuration, Azure AD, two factor authorization methods, dynamic routing protocols (BGP), and cyber-IT security tools. Knowledge and familiarity with security standards and federal compliance regulations (e.g., NIST, DFARS, CMMC, FedRAMP). Detail oriented with attention to scientific problem solving, critical thinking, strong organization skills, and forensic approach to security investigation. Good communication skills - written and verbal. Any experience with Ivanti Pulse Secure Connect, ArubaOS-CX, Ubiquiti, Cisco, Dell, Client hardware. Relevant professional industry certifications in networking and IT security. Bachelor's Degree in Computer Science, Computer Engineering, Information Security, or an equivalent combination of education and experience from which knowledge and skills may be acquired. Thorough knowledge of network technologies, protocols, and standards. Ability to automate common/essential tasks via preferred scripting language. Experience with source revision control tools (SVN/GIT) and configuration management tools such as Ansible. Ability to harness packet sniffers tools such as Wireshark for advance network troubleshooting and resolution. Some domestic travel may be required up to about 10%. Marathon TS is committed to the development of a creative, diverse and inclusive work environment. In order to provide equal employment and advancement opportunities to all individuals, employment decisions at Marathon TS will be based on merit, qualifications, and abilities. Marathon TS does not discriminate against any person because of race, color, creed, religion, sex, national origin, disability, age or any other characteristic protected by law (referred to as "protected status ").

<!– job description page –>