Security Specialist--T2

Caci International Inc. Forest Heights , MD 20745

Posted 2 months ago

Job Description:

Team CACI has an exciting and challenging opportunity available for a Security Specialist supporting a DHS customer's wide-area (WAN), local-area (LAN) and campus-area (CAN) networks across multiple security domains. The contractor is responsible for the overall Security of the Network Infrastructure. The contractor will be supporting USCIS Network Infrastructure which will include routers, switches, Load Balancers, Riverbeds Firewalls, Wireless Access Points, ISE and Wireless concentrators and IDS/IPS devices. Working closely with the USCIS Networking Engineer, Networking Operations and Architect team, the contractor is expected to assist in security design and implementation to scale network automation and manage complex deployment via automation and increase the productivity using the Continuous Integration, Continuous Delivery and Continuous Testing (CI/CD/CT) workflow. The contractor will work cooperatively, collaboratively and transparently with all associated organizations to support the Security for all the Network Deployments. This role necessarily deals with highly confidential and sensitive information, and the role is expected to confirm to best handling practices.

What You'll Get to Do:

Ensure the overall health and strong security posture of complex network architectures. The Security Specialist will be actively involved with all phases of security design, implementation, proactive monitoring, troubleshooting and analysis of firewalls, IDSs, VPNs, security controls and policies. Develops system specifications, architecture designs, integration and test plans, and all relevant documentation. Develops security assessment and mitigation strategies. Maintain compliance with DOD Information Assurance requirements as well as ensuring service performance indicators are met or exceeded.

More About the Role:

  • Work with both corporate and customer leadership to research, analyze, and implement enterprise-wide network security solutions/capabilities/enhancements to support customer business/mission goals and objectives.

  • Provides security guidance for directing and monitoring information systems operations and cloud platforms.

  • Responsible for maintaining, supporting, and optimizing key functional areas, particularly network infrastructure, server infrastructure, network security, telecommunications systems and service desk.

  • Experience as an enterprise cloud security and data loss prevention

  • Assisting with security across all cloud platforms

  • Oversee security infrastructure sustainment, maintenance, and advanced configuration. (firewalls, web gateways, mail gateways, IDS, intrusion detection systems, and management tools.)

  • General support for ICAM authentication, User Management, Roles Management

  • General support for security scanning and logging

  • Oversee the reporting, documentation and investigation of all security related incidents; lead the development and implementation of corrective measures.

  • Responsible for the Security piece for Cloud routers and other network equipment in Equinix, AWS and Azure to include but not limited to CSR, ASR, Security Groups, VPCs and VPGs.

  • Manage WAN, LAN, CAN, and remote network security as well as incident and problem management.

  • Evaluate and report on new network Security technologies to enhance capabilities of the network.

  • Knowledge of network infrastructure and networking technology; including TCP/IP, DNS, DHCP, Proxies, Load balancing, ACE, F5, VPN, IPS/IDS, Linux/Unix, Windows, MAC addressing, Firewalls, routing, switching, network design, wireless networks, IP communications, netflow, and packet capture/analysis

  • Understanding of FISMA, RMF and NIST to meet with agency compliance.

  • Ensures the effective monitoring and response to hardware, software, infrastructure and network problems.

You'll Bring These Qualifications:

  • US Citizenship required

  • An active Entrance on Duty (EOD) is required to begin employment and must be maintained as a requirement of continued employment

  • A minimum of five (5) years of experience in enterprise Security with network infrastructure, software, and cloud.

  • Experience on COTS tools including but not limited to Fortify, Solar Winds, Splunk, New Relic APM/Synthetics/Insight, Riverbed (Steelheads, SteelCentral, Profiler, Mobile, NetCollector, AppInternals), Cisco Prime, SCOM, Linux, Oracle OEM, ARX, Cisco UCS, Cisco ISE, and InfoBlox.

  • Experience with major cloud providers AWS, Azure, and Google Cloud is preferred

  • Possess superior technical aptitude and effective written and verbal communications skills.

Proven experience with managing and using Agile and DevOps concepts.

  • Follow DoD STIGS, FISMA, FEDRAMP, and RMF security best practices and agency configuration guidance

  • Implement network security controls in the cloud

  • Experience with hardening, securing, and creating new rules for network infrastructure

  • Address and remediate security vulnerabilities

  • Domain expertise with IT operations, security or compliance is desirable

  • Strong troubleshooting and analytical skills

  • Strong critical thinking, complex problem solving, appropriate judgment and decision-making skills

  • Experience designing, engineering and designing solutions with a security mindset.

  • Ability and readiness to work in a fast-paced, rapidly changing, collaborative environment.

These Qualifications Would be Nice to Have:

  • Relevant DHS focused experience

  • Bachelor's degree, with preference in the computer related field

  • Security for RHEL experience is preferred

  • Cisco Certified Network Professional (CCNP) in Security is a plus

  • Security certifications in CISSP, CASP, and/or Security+ are a plus

  • Previous data loss prevention cloud security experience

What We Can Offer You:

  • We've been named a Best Place to Work by the Washington Post.

  • Our employees value the flexibility at CACI that allows them to balance quality work and their personal lives.

  • We offer competitive benefits and learning and development opportunities.

  • We are mission-oriented and ever vigilant in aligning our solutions with the nation's highest priorities.

  • For over 55 years, the principles of CACI's unique, character-based culture have been the driving force behind our success.

Job Location

US-National Harbor-MD-MARYLAND SUBURBAN

CACI employs a diverse range of talent to create an environment that fuels innovation and fosters continuous improvement and success. At CACI, you will have the opportunity to make an immediate impact by providing information solutions and services in support of national security missions and government transformation for Intelligence, Defense, and Federal Civilian customers. CACI is proud to provide dynamic careers for employees worldwide. CACI is an Equal Opportunity Employer - Females/Minorities/Protected Veterans/Individuals with Disabilities.


icon no score

See how you match
to the job

Find your dream job anywhere
with the LiveCareer app.
Mobile App Icon
Download the
LiveCareer app and find
your dream job anywhere
App Store Icon Google Play Icon
lc_ad

Boost your job search productivity with our
free Chrome Extension!

lc_apply_tool GET EXTENSION

Similar Jobs

Want to see jobs matched to your resume? Upload One Now! Remove
Network Infrastructure Engineer T2

Caci International Inc.

Posted 2 months ago

VIEW JOBS 4/29/2020 12:00:00 AM 2020-07-28T00:00 Job Description Team CACI has an exciting and challenging opportunity available for a Network Engineer supporting a DHS customer's wide-area (WAN), local-area (LAN) and campus-area (CAN) networks across multiple security domains. CACI will provide a variety of IT services through including cyber security, identity and access management, capacity planning, cloud integration and engineering, field support services, Tier 3/4 support, application deployment and optimization, and operations center support services. CACI will support IT operational environments increasing availability and security for a variety of applications and systems. What You'll Get to Do: Ensure the overall health and strong security posture of complex network architectures. The Network Engineer will be actively involved with all phases of security design, implementation, proactive monitoring, troubleshooting and analysis of firewalls, IDSs, VPNs, security controls and policies. Develops system specifications, architecture designs, integration and test plans, and all relevant documentation. Develops security assessment and mitigation strategies. Maintain compliance with DOD Information Assurance requirements as well as ensuring service performance indicators are met or exceeded. More About the Role: * Work with both corporate and customer leadership to research, analyze, and implement enterprise-wide network security solutions/capabilities/enhancements to support customer business/mission goals and objectives. * Assists with designs, analyses, tests and implementation of state-of-the-art secure network architectures. * Experience working with enterprise vendors such as Infoblox, Equinix, NetApp, AWS, and Cisco * Conducts encryption technology, penetration and vulnerability analysis of various security technologies, and information technology security research * Additional responsibilities include cloud storage management, backup, virtualization, monitoring and management tools, business continuity, high availability solutions, creating and managing billing statements, providing hardware estimates, supporting hardware and related applications. * Analyzes, coordinates, and implements infrastructure projects. Monitors system performance and capacity, and provides periodic system status reports to department management. * Analyzes reports to identify trends and opportunities for process and technology enhancements. * Work with a team of engineers on the strategic planning on AWS cloud design and deployment requirements. * Create AWS cloud functional design specifications and implementation plans. * Design, build, maintain, document, and automate technical processes and operations using AWS cloud services. * Manage live production and dev environments, ensuring system availability and scalability. * Provides cost and trend analysis and resolutions to critical Infrastructure problems. * Assists with software defined networking and ACI Fabric * Assists with WAN, LAN, and remote network security as well as incident and problem management. * Assist network personnel that will be performing an array of information networking tasks for a 24/7 service that revolves around mission requirements. * Responsible for development and execution of standard operating procedures * Creates and follows SOPs * Daily administration of the load balancer environment * Monitors network performance, troubleshoots issues and deploys solutions * In depth knowledge of TCP/IP Protocols * Functional understanding of network Layer 2 /3 switching and routing protocols * Functional understanding of diverse set of networked applications and terms requiring application traffic management solutions, including HTTP, HTTPS, SSH, FTP, DHCP, DNS, NTP, ANYCAST services, NAT and others * DMZ Network infrastructure knowledge including topology, security policies, firewalls and the L2/L3 switch and router infrastructure is required * Experience with security infrastructure sustainment, maintenance, and advanced baseline configurations. (firewalls, web gateways, mail gateways, IDS, intrusion detection systems, and management tools. * Plans and implements upgrades and installs new equipment * Inform management in a clear, concise, and timely manner of any customer or technical issues You'll Bring These Qualifications: * US Citizenship required * An active Entrance on Duty (EOD) is required to begin employment and must be maintained as a requirement of continued employment * A minimum of five (5) years of experience deploying WAN/LAN, Routing, Switching, Optimization and extensive exposure with Cloud Service Providers * Required Certification(s): CCNA or CCNP along with a BA/BS or equivalent experience and minimum 15 years of related work experience * Proven experience with Agile, sprints and DevOps concepts * Experience working with a Scrum Master, Daily Scrum meetings, sprints and written deliverables * Familiarity with the following technologies and guidelines: Cisco 95xx and 6509-E, Cisco C7010/C5596 Nexus Switches, Cisco 55xx ASA Firewalls, DHS Compliance Checks, Software Defined Networking, SD WAN, Network Monitoring Tools * Strong troubleshooting and analytical skills * Strong critical thinking, complex problem solving, appropriate judgment and decision-making skills * Proven communicator and leader. Must be able to work well in an environment facilitating a large group of government and other contractor personnel to achieve a common goal * Evaluates modern technologies to optimize network efficiency * Expertise in using Cisco Prime, Cisco ISE, AWS and Azure * Experience with automation/configuration management using either Puppet, Chef or Ansible * Strong knowledge/experience with SQL/Databases * Excellent written and verbal communication skills * Flexible - The environment is highly dynamic. You will be expected to keep up with the changing environment while ensuring a high-level of operational effectiveness along with sprint work items and deliverables due the end of each sprint. * Detail oriented * Team Player - This role is part of a much larger team These Qualifications Would be Nice to Have: * Relevant DHS focused experience * BS in Engineering or Information Technology * F5 Certified, CCNA/CCNP, or higher CISCO certifications preferred * SolarWinds, Infoblox and Splunk experience preferred What We Can Offer You: * We've been named a Best Place to Work by the Washington Post. * Our employees value the flexibility at CACI that allows them to balance quality work and their personal lives. * We offer competitive benefits and learning and development opportunities. * We are mission-oriented and ever vigilant in aligning our solutions with the nation's highest priorities. * For over 55 years, the principles of CACI's unique, character-based culture have been the driving force behind our success. Job Location US-National Harbor-MD-MARYLAND SUBURBAN CACI employs a diverse range of talent to create an environment that fuels innovation and fosters continuous improvement and success. At CACI, you will have the opportunity to make an immediate impact by providing information solutions and services in support of national security missions and government transformation for Intelligence, Defense, and Federal Civilian customers. CACI is proud to provide dynamic careers for employees worldwide. CACI is an Equal Opportunity Employer - Females/Minorities/Protected Veterans/Individuals with Disabilities. Caci International Inc. Forest Heights MD

Security Specialist--T2

Caci International Inc.