Senior Network & Virtual Security Engineer

POSITION OVERVIEW

The Senior Network & Virtual Security Engineer implements and sustains the DoD-compliant Secure Computing Architecture (SCA) protecting NAVSUP's cloud hosting environments in support of the Department of the Navy. This role is responsible for architectural review, design, installation, and configuration of SCA VDSS and VDMS stacks on NAVSUP virtual hardware using Juniper SRX, Palo Alto, Cisco, and F5 BIG-IP platforms; evaluating and implementing new Cloud Service Provider services; monitoring and auditing NAVSUP cloud service usage; onboarding customer and mission partner applications onto SCA VDSS software; and resolving complex network and traffic-flow faults including SSL handshake and termination issues. Work is performed remotely from within the United States. This position requires an active Top Secret clearance, privileged system access, and an IT-I security designation.

DUTIES AND RESPONSIBILITIES

• Evaluate, design, perform architectural reviews of, and implement new Cloud Service Provider (CSP) services as they become available to NAVSUP BSC or are identified as Mission Owner requirements


• Monitor and audit NAVSUP cloud service usage, including usage monitoring, performance monitoring, user activity auditing, alert management, and issue tracking


• Execute the architectural reviews, design, installation, and configuration required to implement and sustain NAVSUP BSC cloud environment tools — including Juniper SRX, Palo Alto firewalls, Cisco software, and F5 BIG-IP — to provide a DoD-compliant Secure Computing Architecture (SCA) VDSS stack


• Perform analysis, design, architectural reviews, installation, and configuration to implement DoD-compliant SCA VDSS and VDMS stacks on NAVSUP virtual hardware


• Execute installations including Cisco, Juniper, Palo Alto, and F5 BIG-IP platforms, including required add-on modules


• License, configure, manage, and sustain SCA software operations


• Execute onboarding of customer and mission partner applications and services leveraging SCA VDSS software


• Resolve SCA issues including SSL handshake and termination, traffic flow, network and server performance, and unique configurations


• Sustain BIG-IP and BIG-IQ across multiple NAVSUP enterprise-approved hosting environments


• Deliver test plans and execute testing of installations and configurations to verify compliance with operational specifications


• Execute required interoperability testing and draft interoperability waiver requests as required by the Government


• Deliver internal testing results for all NAVSUP BSC Brokerage NTA-provided services and tools


• Execute monthly knowledge transfer and mentoring to NAVSUP BSC Government personnel, and document each event in the Monthly Knowledge Transfer Log

QUALIFICATIONS

• Active Top Secret clearance


• IT-I security designation and privileged system access


• DoD 8570.01-M IAT Level II baseline certification: CompTIA Security+ CE, or an approved substitute — CCNA Security with CEs, CCNA Cybersecurity, CySA+, GICSP, GSEC, CND, or SSCP. Certification must be current at the contract period start date; there is no grace period


• Active enrollment and participation in the certification maintenance program


• Information Assurance Technical Level I training and certification, with certification on the operating system or computing environment maintained


• Computing environment certification, current no later than six (6) months after start: AWS Certified Solutions Architect, AWS Certified Cloud Practitioner, AWS Certified Developer, AWS Certified Advanced Networking, Cisco Certified Network Associate, a Juniper Networks certification, F5 Certified Technical Professional, or equivalent


• Five (5) years of experience with network and virtual security engineering, including Infrastructure as Code (IaC) 


• Hands-on experience installing, configuring, and sustaining F5 BIG-IP/BIG-IQ, Palo Alto firewalls, Cisco Firepower, and Juniper SRX in a DoD or Federal environment


• Demonstrated experience implementing DoD-compliant VDSS and/or VDMS architectures


• Ability to work remotely from a U.S. location and to complete DoD onboarding, security, and mandatory annual training requirements on schedule


• Preferred: prior NAVSUP or Department of the Navy experience; experience drafting DoD interoperability waiver requests