Network Security Engineer

Armison Tech is a minority owned small business, established in 2012, located in the Northern Virginia area.  We're a company predominantly focused on cyber security for our government customers yet our expertise in other areas include big data analytics, instructional design, information management, and computer network infrastructure.  We invest in our employees careers by participating in cutting edge cyber security training and attending industry leading conferences. As a small business we offer flexibility and powerful benefits supporting our most important assets, our employees and their families.Armison Tech is constantly searching for exceptionally qualified technology professionals who would make a great addition to our team. Our staff, just like our clients and the work we do, is what makes Armison Tech a truly effective partner. As we help each of our new employees make adjustments to our operational methods, we make sure every professional is able to handle the workload of each project by resolving any relevant concerns or issues they may have relating to this recent career shift.Our hiring process seeks to accentuate the raw talent and skill-set of our team members. Along with the importance of experience and education, Armison Tech looks for the superior analytical and communication ability that separates our employees from what we’ve seen while working with some similar companies. Individuals we employ must have a demonstrated ability to excel in high-pressure situations which have a real impact on the modern world so we can continue to keep pace with the competition and the evolving fields of technology.Currently we have an immediate need to add an experienced:Network Security EngineerLocation: Chantilly, VA (on-site client environment)Clearance: TS/SCI with PolygraphCompensation: Competitive, Excellent BenefitsOnly applicants with the active required security clearance and are U.S. Citizens will be reviewed.You will lead and manage data security strategies, ensuring the implementation of robust Zero Trust principles within government data environments. You will apply sound engineering practices, good judgement and technical skills to achieve both short and long-term goals as established by client management. You will provide support for the internal systems and networks used by the client to support their mission. You will focus on designing, engineering, and the implementation of complex data protection beyond data encryption; and provide expert guidance on Identity and Access Management (IAM) principles and methodologies.Qualifications:

• Must maintain active/current TS/SCI with a polygraph clearance
• Bachelor's degree in computer science, engineering, information technology, or equivalent experience.
• 15+ years of demonstrated experience as a System Engineer/Data Security focusing on Zero Trust technology.
• Demonstrated experience with security monitoring and log event triage using Splunk SPL
• Demonstrated extensive experience with utilizing security products such as Network monitoring devices to detect attacks
• Knowledge of strong authentication methods such as multi-factor authentication (MFA), biometric authentication, and smart card authentication for robust identity verification.
• Experience performing network packet inspection, traffic analysis, performance characterization (e.g. Wireshark, TCPdump, etc.)
• Experience working in a Linux and network data 
• Hands on experience interpreting Linux and network data, and familiarity with automation tools such as Linux scripting, Python, and PowerShell.
• Strong understanding of incident response to include: research and identification of attack vector, malware mitigation and removal, and documentation of event
• Experience and ability to research the latest security developments in the relevant operating systems to identify organizational impact
• Experience implementing security standards in a fast paced operational environment
• Ability to manage and use secrets management tools such as Ansible secrets vault, Hashicorp Vault, or equivalent.
• Experience implementing and documenting security processes and policies
• Demonstrated expertise in managing network segmentation and redirection utilizing iptables, nftables, Illumio, or equivalent solutions.