Boundary Security Engineer

A well-designed secure network is critical to move data and enable the Department of Defense (DoD) to achieve their mission, but how can an organization make sure their network will fit their evolving needs? Crafting the right network, with the right equipment and software, requires a combination of technical skill and careful planning. That’s why we need you, a Network Security Engineer who knows how to utilize your craft to facilitate the needs of the DoD. As a security engineer on our team, you will work with the DoD to develop a reliable, secure network to support critical missions.

You’ll collaborate with SMEs, customers, vendors, and users to learn the strategic goals and operational needs that shape the network requirements. You’ll then share your expertise during the planning of acquisition, installation, configuration, and maintenance of the network components. From resolving interoperability issues across platforms, to supporting the acquisition of hardware, you’ll put your hardware and software talents to good use. This is your chance to share your experience with backbone networks, cloud technologies, and core networking, while broadening your security and network engineering work. You’ll dive into challenging hands-on problem-solving, and encounter opportunities to learn new tools and skills. We focus on growing as a team to make the best solutions for our customers.

As a Network Security Engineer at Booz Allen, you’ll design and test new boundary security capabilities in a lab environment and implement newly tested boundary security capabilities into production environments. You will need to support implementation teams with remote network firewall and security appliance support. You will also need to be able to identify and support security requirements for switched and routed networks and implement network security best practice configuration and associated hardware and software. You'll discover and assess complex client enterprise network deployments, apply leading-edge security principles, theories, and concepts, and contribute to the development of new principles and concepts. You’ll work on unusually complex problems, provide highly innovative solutions, operate with substantial latitude for unreviewed action or decision, and mentor or supervise employees in both company and technical competencies.

Work with us as we secure and protect DoD enterprise networks for the better. 

Join us. The world can’t wait. 

You Have:   

• 5+ years of experience with network security and the design of IT systems or networks for large commercial enterprises or government agencies

• 5+ years of experience with firewall and enterprise security design, including device hardening, intrusion detection and intrusion prevention systems, SIEM, firewalls, internet protocol security, and vulnerability assessment

• Experience with Palo Alto firewalls and Cisco or Juniper firewalls

• Experience with packet analysis tools, including Wireshark

• Experience with monitoring tools and log collectors to perform analysis of traffic

• Experience with boundary protection

• Secret clearance

• HS diploma or GED

• Ability to obtain a DoD 8570 IAT Level II Certification within 3 months of start date

Nice If You Have:   

• Experience designing and implementing Cloud-native and over the top networking in AWS, Azure, or GCP

• Experience with SD-WAN

• Experience with Ansible or Python

• Knowledge of DoD IT and Cloud security policies, including STIGs and DoD Cloud SRG, and how to apply them to the design and implementation of Cloud solutions

• Possession of excellent verbal and written communication skills, including public speaking, prior publications, and speaking engagements in industry or vendor forums

Clearance:

Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information; Secret clearance is required.