Network Security Engineer III

Imagine One is currently seeking qualified Network Security Engineer III individuals to join our team to provide Network Security Engineering Support to Naval Surface Warfare Center Dahlgren Division, Dam Neck who supports the Program Executive Office Unmanned and Small Combatants (PEO) providing cybersecurity engineering support, cybersecurity requirements Software Support Activity support for the Littoral Combat Ship (LCS) class Environment (TSCE) networks, LCS Afloat Sites for PMS 501 (New Construction), Service), and IWS80 Littoral Combat Ships( LCS). Work will be on-site at Naval Air Station Oceana Dam Neck, Virginia Beach, Virginia with 25 percent travel potential.

The Network Security Engineer III will provide ongoing network support, addresses availability issues, overcome performance problems, and provide overall level 2 support. Designs, installs, maintains and coordinates the use of network systems. Evaluates hardware and software and peripheral equipment for large, complex networks to include the following responsibilities :

Responsibilities for Network Security Engineer III :

The Network Security Engineer III would serve as a Littoral Combat Ships (LCS) Network Security Engineer at NSWCDD DNA. The Network Security Engineer III will provide network-engineering support to pre-delivery and in-service LCS ships. The selectee will serve within a team of engineers for the LCS Total Ships Computing Environment (TSCE) core business network and provide support for the LCS Software Support Agent (SSA). He / she will perform network engineering, integration, evaluation and testing within the LCS TSCE core business network. He / she will perform networks security updates upgrades to ensure the security and integrity of the TSCE network. Network Security Engineer III will analyze, troubleshoot and resolve issues with the LCS TSCE infrastructure including devices such as routers, switches, and firewalls. The Network Security Engineer III will perform all duties associated for support, maintenance, performance and uptime of the LCS TSCE core infrastructure to include as follows :

Provide network security engineering support to PMS 501 / 505 and IWS80 for implementation of Cybersecurity Ships Change Documents (SCDs) and Engineering Change Proposal (ECPs)

Provide engineering and network architecture expertise for pre-delivery / in-service ships for integration and modernization efforts

Perform security / vulnerability assessments using DoD provided tools, reporting results to the lead cybersecurity system engineer

Provide oversight for the day-to-day management and maintenance of the LCS core network infrastructure

Perform firewall and network device support for the TSCE core infrastructure

Oversee in the deployment of switches, routers, firewalls, and storage devices from multiple vendors

Support and interact with the network cybersecurity engineers, system administrators, and system engineers to ensure the confidentiality, integrity, and availability of systems, networks, and data

Assist with network engineering executing activities such as the design, implementation, installation, configuration, maintenance, integration, and analysis

Assist in the management and maintenance of lab facilities

Apply software patches and patch sets during maintenance windows

Includes operating system (OS) patches released from DISA’s patch repository website

Upgrade software

Conduct regression testing

Required Qualifications :

Requires five (5) years with BS / BA or minimum zero (0) to two (2) years with MS / MA / MBA or eight to ten (8 to 10) years with no degree

Minimum certification as 461 at the Intermediate level per DoDD 8140.01, or successor

Information Assurance Technical (IAT) Level II certification

Minimum of five (5) years’ experience in Network Engineering

Demonstrated experience with Windows OS and Linux OS

Demonstrated experience with performing STIG implementation

Demonstrated experience performing vulnerability assessments with the Assured Compliance Assessment Solution tool

Must have hands-on technical experience in the following areas :

Network Routing Protocols

Cisco Adaptive Security Appliance (ASA) Firewalls

Extensive experience with Access Control Lists (ACLs)

Experience with Cisco security devices focusing on Identity Services Engine (ISE), Web Security Appliance (WSA) and Email Security Appliance (ESA)

Demonstrated experience troubleshooting network connectivity issues

Must have experience in Network Security to include the design, implementation, configuration, and enforcement of security controls on network, hardware, and software components and devices

Experience with the implementation of cybersecurity and Information Assurance (IA) boundary defense techniques and various IA-enabled appliances (firewalls, Intrusion Detection Systems (IDS), Intrusion Prevention System (IPS), switches / routers

Knowledge of computing and networking vulnerabilities, attack methods and latest detection methods

Excellent ability to communicate effectively orally and in writing

Preferred Qualifications :

Served on a LCS platform

Windows Server upgrade experience

HBSS knowledge is a plus

Experience utilizing packet analyzer tools such as Wireshark and tcpdump

Hyper-V or VMware experience is a plus

Alcatel operating system experience is a plus

Security Requirements :

U.S. Citizenship required

Candidate must have an ACTIVE SECRET clearance (with TS / SCI eligibility)

Imagine One offers a full package of benefits and competitive salary, excellent group medical, vision and dental programs. 401K savings plan; $4K annual tuition reimbursement ($5K if pursuing Master’s degree); employee training, development and education programs; profit sharing; advancement opportunities; and much more!

Imagine One is an Employee-Owned Business

ISO 9001 : 2015, ISO 20000-1 : 2018, ISO 27001 : 2013

CMMI Development and Services – Maturity Level 3

Imagine One Technology & Management, Ltd., is an Equal Opportunity / Affirmative Action Employer. Additionally, we abide by the requirements of 41 CFR §§ 60-1.4(a), 60-300.5(a) and 60-741.5(a). These regulations prohibit discrimination against qualified individuals based on their status as protected veterans or individuals with disabilities and prohibit discrimination against all individuals based on their race, color, religion, sex, or national origin. Moreover, these regulations require that covered prime contractors and subcontractors take affirmative action to employ and advance in employment individuals without regard to race, color, religion, sex, national origin, protected veteran status or disability.

• Imagine One “Contingent” offers for employment may stipulate that one or more requirements be satisfied before final commitment between candidate and Imagine One is established; namely, award of contract to the Imagine One Team. Contingent requirements vary and may also include, but not be limited to additional factors (i.e., the position still being available after negotiations with the Government; final approval of your qualifications by the Government; or ability to successfully acquire and / or transfer a DoD security clearance).

Salary : $4,000