Mandatory Qualifications:

A minimum of seven (7) years of network and security engineering and architecture experience, in the following areas:

1) Network protocols configuration and troubleshooting - including: Ethernet, Virtual Local Area Network (VLAN), Layer Two Tunneling Protocol (L2TP), Continuous Data Protection (CDP), (Multi-protocol Label Switching (MPLS), Routing Information Protocol Version 2 (RIPv2), Border Gateway Protocol v4(BGP), Internet Protocol v4, Internet Protocol v6, Internet Protocol Security, Secure File Transfer Protocol (SFTP), Transmission Control Protocol(TCP), Transport Layer Security, Network Time Protocol (NTP), Domain Name System (DNS).

2) Network hardware and software configuration and troubleshooting - including Cisco, Juniper, Palo Alto, F5, Ciena (routers, switches, firewalls, load balancers).

3) VMWare NSX used in the data center context.

4) Knowledge of Security Appliances and features - Cisco Adaptive Security Appliance (ASA), Juniper Secure Routing and Switching Firewall (SRX), Palo Alto Firewall, F5.

5) Application Security Manager/Web Application Firewall (ASM/WAF), Trend TippingPoint, Distributed Denial of Service (DDoS) technologies and services.

6) Knowledge and experience in Virtual Private Network (VPN) Technologies and Deployments - Internet Protocol Security (IPsec), Triple Data Encryption Algorithm, (3DES), Advanced Encryption Standard (AES), Internet Key Exchange (IKE), Dynamic Multipoint Virtual Private Network (DMVPN), AnyConnect, Full Tunnel/Split Tunnel Client Virtual Private Network Solutions, Site to Site VPN Solutions and Software Defined Wide Area Network (SDWAN).

7) TippingPoint Intrusion Protection System Expert Certification.

Desirable Qualifications

 1) Additional experience of mandatory qualifications with a minimum of five (5) years’ experience.

2) Experience with Amazon Web Services (AWS), and/or Azure networking services.

3) Experience with complex documentation of network designs, network modifications/changes, and troubleshooting process changes.

4) Experience configuring and troubleshooting Intrusion Protection Systems/Intrusion Detection Systems (IPS/IDS).

5) Experience in sniffer packet capture and protocol analysis.

6) Scripting experience (i.e., Perl, Python, Java, PowerShell, etc.).

7) Experience in analysis and design of network security alternatives.

8) Experience using Security Information and Event Management (SIEM) tools.

9) Familiarity with security controls as defined in the NIST 800-53 v4 publication.

10) Experience in evaluation, deployment, and management of vendor managed services.