Network Security Engineer

• Company: Northrop Grumman
• Location: 9975 Federal Drive, 80921
• Duration: long term, ongoing contract – we are a direct sub to the C2BMC program
• Clearance: Top Secret
• Program – C2BMC

"In this role, the candidate will be responsible for providing technical support for assessing the compliance of information systems with DoD RMF standards by reviewing, verifying, and validating required DoD IA RMF documentation and artifacts in accordance with DoDI 8510.01/DoD Risk Management Framework.

Essential Functions:
• Must have proven experience developing cyber-secure network device configurations (firewalls, switches, routers)
• Will be responsible for planning, deploying, integrating, and testing upgrades to the C2BMC network at operational sites
• Will be required to conduct independent research on various networking and security-related topics and produce reports on findings
• Will be required to ensure that the team’s devices are STIG-compliant and hardened appropriately
• Along with running all Cyber protocols needed
• Must be willing and able to assist with real-world events, including nights and weekends

Basic Qualifications:
• A Bachelor’s Degree in STEM Computer Engineering, Software Engineering, Electrical Engineering, Aerospace Engineering, Computer Science, Mathematics, Physics, or a related field from an accredited university, along with 5 years of experience; or a Master’s degree in a STEM-related field with 3 years of relevant work experience; or 9 years of relevant work experience may be considered as an alternative to a degree
• Applicants must have a current, active DoD 8140 certification at IAT Level II or higher (such as Security+ CE, GSEC, SCNP, SSCP, CISSP, CISA, GSE, SCNA, etc.) at the time of application, which is required to start. The candidate is responsible for maintaining their DoD 8140 certification throughout the entire contract period
• Applicants must have a current, active in-scope DoD-issued Top Secret security clearance at the time of application, which is required to start
• Willingness to travel 10% of the time to alternate work locations, such as Schriever Space Force Base, to perform job duties, including deployments
• Must understand the OSI Model, TCP/IP, VLANs, and UDP Multicast
• Must have firewall configuration knowledge, such as Juniper, Cisco, and Palo Alto
• Must know about ACL design and function
• Must have hands-on experience with multi-vendor switching and routing (Juniper, Cisco)
• Must be an effective communicator with excellent writing and presentation skills, proficient with Microsoft PowerPoint and Visio drawing tools
• Must be able to design security configurations and testing procedures
• Must be familiar with the NIST CVE framework
• Must have virtualization experience
• Must be able to work collaboratively in a team environment with other highly motivated network and systems engineers
• Basic understanding of security design, development, and testing methods
• Experienced in the application of standard DOD security practices, such as STIG compliance and system accreditation implementation
• Able to thoroughly document project design and development
• Able to collaborate with other departments to explain network security requirements and compliance obligations
• Able to learn security hardening basics for a wide range of niche products, software, and applications
• Able to summarize, brief, and recommend solutions to security issues for leadership
• Understand the basics of VMware and ESXi STIGing/Hardening

Preferred Qualifications:
• Knowledge of scripting languages such as Python, Ansible, and PowerShell (desired)
• Strong familiarity with JUNOS (desired)
• Previous C2BMC experience (Preferred)"