Senior Network Security Engineer

Job Summary:

The Senior Network Security Engineer (NSE) is responsible for the design, implementation, operation, and security of the OCFO network and its supporting security infrastructure. This role involves monitoring network traffic, enhancing security measures, configuring network devices, and resolving complex technical issues to maintain a secure and efficient network environment. The position requires a local candidate in the DMV area to support hybrid work with regular onsite presence based on project needs. Responsibilities:

• Monitor and analyze data traffic patterns within the OCFO network infrastructure to identify problems and recommend improvements.
• Enhance security posture by staying current on the latest security threats, worms, and malware, and advising on mitigation strategies.
• Configure routers, switches, firewalls, and other appliances according to OCFO security standards.
• Monitor network perimeter security measures to prevent breaches and protect information from unauthorized access.
• Proactively resolve complex technical issues escalated beyond Network Engineer level with appropriate urgency.
• Coordinate with personnel to determine solutions that increase end-user satisfaction and escalate service-impacting issues to management.
• Monitor incident trends and implement actions to prevent future occurrences, improving customer service levels.
• Provide network design services and collaborate with the Infrastructure Services Group on network changes' scope, timing, and technical approach.
• Ensure adherence to network policies and procedures; manage production and disaster recovery networks and security.
• Perform forensic and packet analysis; configure and operate security-focused monitoring and logging systems.

Required Skills & Certifications:

• Minimum 4 years' experience developing, configuring, installing, and maintaining networked systems (LANs, WANs, Telephony Systems).
• Minimum 4 years' experience with network standards, protocols, and procedures.
• Minimum 4 years' experience in network architecture and topology, including transmission protocols, broadcasting, switching, control, and management.
• Minimum 4 years' experience performing routing and network configuration management functions.
• Minimum 4 years' experience with network systems management methods, including end-to-end performance monitoring.
• Certifications in network or system administration highly desired (e.g., CCNA, CCNP, CCIE, CISSP, MCSE, MCSA).
• Experience building large-scale, multi-site network architectures.
• Experience with secure remote access and WAN technologies such as IPsec and VPN.
• Knowledge of network-based and system-level attacks and mitigation methods.
• Experience with firewalls, including Cisco Firepower NGFW or Cisco ASA, and security routing protocols.

Preferred Skills & Certifications:

• Technical proficiency with Cisco Firepower (NGFW), Cisco ASA Firewalls, Cisco ISE (Identity Services Engine), and Cisco AMP (Advanced Malware Protection).

Special Considerations:

• Local candidates only, based in the DMV area.
• Hybrid work model requiring regular onsite reporting based on project needs.

Scheduling:

• Work location: Washington, DC 20020.
• Hybrid schedule with a combination of onsite and remote work.