WAN Security Engineer (Secret Clearance)

About the role

V2X builds smart solutions that integrate physical and digital infrastructure, from base to battlefield, and its WAN Security Engineers support enterprise-class network security technologies such as firewalls, web proxy appliances, VPN appliances, Comply to Connect (C2C) and Network Access Control solutions. The engineers are responsible for design, troubleshooting, optimization, administration, change management and technical documentation. The position belongs to the OMDAC-SWACA program and is open to candidates who can legally work in the host country.

Key responsibilities

• Provide enterprise-level customer support for requests to modify firewall access-lists and manage access control on network devices in the theater
• Troubleshoot and resolve web browsing issues and support services hosted in DMZs
• Provide network security policy recommendations, project planning, change control, firewall management and ACL management, and enforce enterprise security policies
• Assist in identifying and investigating malicious network activity and ensure managed technologies comply with DISA STIGs
• Perform regular system maintenance for IAVA vulnerabilities and CCRI compliance, and create and maintain proxy web filtering policies
• Analyze logs for irregularities and miscategorized sites, and support AAA and auditing for network devices in Cisco ISE
• Support the Comply to Connect (C2C) infrastructure and the Zero Trust architecture, monitor device health with network monitoring tools, and maintain network diagrams
• Create and track network issues and requests in the ServiceNow ticketing system

Required profile

• Active Secret Clearance
• Bachelor's degree or equivalent experience, preferably in Computer Science, MIS, IS, Engineering or a related field; one year of experience may substitute one year of education
• Minimum of 10 years of experience with network and firewall technologies, including VPN technologies
• Candidates must follow DoD 8570.01M and hold at least one baseline certification and one computing environment certification (e.g., CCNP Security, CASP+, CISSP, CISA)

Required skills

• Cisco Firepower Next-Gen Firewall, Cisco FMC, Menlo CBII, Forescout Enterprise Manager and Cisco ISE
• Solid TCP/IP knowledge and troubleshooting of supported network protocols
• Ability to configure systems according to STIG policies, manage asset documentation and work in a fast-paced, deadline-oriented environment

What we offer

• Company-paid housing and transportation
• Completion bonus
• Tuition reimbursement program