NSE (Senior Network Security Engineer)

Job Summary:

Seeking a NSE to support the ongoing design, implementation, operation, and security of the OCFO network and supporting security infrastructure. Candidates must be local to the DMV area, as this hybrid role requires regular onsite reporting based on project needs.

Key Responsibilities:

• Monitor and analyze data traffic patterns within the OCFO network infrastructure; identify problems and recommend improvements
• Enhance security posture and stay current on latest security threats, worms, and malware, advising on mitigation strategies
• Configure routers, switches, firewalls, and other appliances in compliance with OCFO security standards
• Monitor network perimeter security measures to prevent breaches and safeguard information from unauthorized access
• Proactively resolve complex technical issues escalated to Network Engineer level with appropriate urgency
• Coordinate with personnel to determine solutions increasing end-user satisfaction; escalate service-impacting issues to management
• Monitor incident trends and determine actions to eliminate future occurrences, improving customer service levels
• Provide network design services and coordinate with Infrastructure Services Group on scope, timing, and technical approach for network changes
• Ensure adherence to network policies and procedures; manage production and disaster recovery networks/security
• Perform forensic and packet analysis; configure and operate security-focused monitoring and logging systems

Required Skills & Certifications:

• 4+ years' experience developing, configuring, installing, and maintaining networked systems (LANs, WANs, Telephony Systems)
• 4+ years' experience with network standards, protocols, and procedures
• 4+ years' experience in network architecture/topology, including transmission protocols, broadcasting, switching, control, and management
• 4+ years' experience performing routing/network configuration management functions
• 4+ years' experience with network systems management methods, including end-to-end performance monitoring
• Certification in network or system administration highly desired (CCNA, CCNP, CCIE, CISSP, MCSE, MCSA)
• Experience building large-scale, multi-site network architectures
• Experience with secure remote access/WAN technologies (IPsec, VPN, etc.)
• Knowledge of network-based and system-level attacks and mitigation methods
• Experience with firewalls (Cisco Firepower NGFW or Cisco ASA) and security routing protocols

Preferred Skills & Certifications:

• Technical proficiency with Cisco Firepower (NGFW), Cisco ASA Firewalls, Cisco ISE (Identity Services Engine), Cisco AMP (Advanced Malware Protection)

Scheduling:

• Location: Washington, DC 20020 (Hybrid)