Firewall Engineer

Cybersecurity Network Engineer/FirewallAre you looking for a challenge? Looking for an innovative organization and the opportunity to learn and grow professionally? We can help! We are seeking a Cybersecurity Network Engineer/Firewall for the Facilities Related Control Systems (FRCS) Support Services contract. This project will provide knowledge, training, and support to assist the U.S. Marine Corps Public Works Department in the areas of FRCS, Cybersecurity, Assessment and Authorization (A&A), Authority To Operate/Authority to Connect (ATO/ATC) package upkeep and maintenance, USMC Cloud and Cloud-Based A&A support, and data center support/administration for the FRCS virtualized environment, servers, and associated applications. This is a full-time, on-site position at Marine Corps Base (MCB) Camp Lejeune, Marine Corps Air Station (MCAS) New River, and satellite locations near Camp Lejeune, working 40 hours per week, Monday through Friday, within normal business hours (7:00 am to 5:00 pm).At Terrestris, we leverage technology to create better mission outcomes through better human performance. We form strong client and team relationships through transparency and strive to create an environment where our team can let their excellence shine through. By finding, developing, and incorporating new ideas, we provide memorable services. Rooted in the USMC values of honor, courage, and commitment, Terrestris seeks to deliver extraordinary value to the American people by helping the Government become more efficient and effective.The Cybersecurity Network Engineer/Firewall will be a key billet for the Facilities Related Control Systems (FRCS) Support Services contract. This position secures, configures, and manages firewalls, VPNs, and ICS/OT networks ensuring compliant, resilient, mission-ready FRCS communications infrastructure. This position is contingent upon contract award.You will:Configure, administer, and maintain Palo Alto firewalls, IPSec VPNs, and secure network communications supporting FRCS and ICS/OT environments across enterprise and remote facilities.Implement, harden, and validate Linux (CentOS), Raspberry Pi, and networked devices by applying DISA STIGs, SRGs, FIPS 140-2 requirements, and approved cybersecurity baselines.Design, deploy, and manage Public Key Infrastructure (PKI), digital certificates, encryption keys, and Hub-and-Spoke IPSec VPN tunnels to ensure secure authentication and encrypted communications.Monitor firewall operations, network traffic, security events, and system vulnerabilities; investigate incidents, implement corrective actions, and maintain continuous compliance with DoD, DoN, USMC, and RMF security requirements.Develop and maintain secure configuration guides, firewall rulesets, standard operating procedures, and technical documentation supporting ICS/OT Authority to Operate (ATO/ATC) accreditation and lifecycle management.Collaborate with systems administrators, cybersecurity architects, and control systems engineers to integrate secure network solutions, automate security tasks through scripting, support enterprise databases and reporting tools, and troubleshoot complex FRCS network infrastructure.You might be the professional we're looking for if you have:A current Secret clearance is required.Authorization to permanently work in the United States without sponsorship.Oral and written English fluency.State's Driver's License.Demonstrated knowledge in securing multiple operating systems and other networked devices using appropriate DISA STIGs and Structured Requirements Guide (SRG).Experience with creating and maintaining PKI (Public Key Infrastructure) to be used for secure IPSec Virtual Private Network (VPN) connections.Experience with Palo Alto firewalls in an ICS/OT environment.Expert in Raspberry Pi security and configuration.Knowledgeable of FIPS 140-2 IPSec configurations including encryption types, key generation/storage, and configuring tunnels in a Hub-and-Spoke architecture.Experience with building, securing, and accrediting Linux servers and devices running CENTOS.Expertise writing policies and procedures for the secure configuration, installation, and management of firewalls and Encrypt/Decrypt devices on the MCEN in support of the ICS/OT ATO/ATC.Professional Certifications: CompTIA Security+ or CompTIA CASP or Certified Information System Security Professional (CISSP) ICS-Virtual Learning Portal (VLP) Certificate 100W.We will be extra impressed if you have:SEL certificates or training.Experience programming/scripting - Python, SQL, Bash, Java.Databases - SQL Server, PostgreSQL, NoSQL, MongoDB.Power BI expertise.Advanced Microsoft Excel expertise.AutoCAD expertise.Sec+ expertise.Net+ expertise.We offer outstanding benefits including health, financial, and retirement benefits, as well as paid leave, professional development, tuition assistance, and work-life programs. Our award programs acknowledge employees for exceptional performance and superior demonstration of our service standards. Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible to participate in our benefit programs. Other offerings may be provided for employees not within this category.Terrestris is an Equal Opportunity Employer (EOE). Qualified applicants are considered for employment without regard to age, race, color, religion, sex, national origin, sexual orientation, disability, or veteran status. Applicants must be authorized to work in the U.S.DILBERT © 2018 Scott Adams. Used By permission of ANDREWS MCMEEL SYNDICATION. All rights reserved.