
Description
Description
Senior Network Security Engineer
SAIC currently has an opening for an 802.1x/Forescout/Comply to Connect (C2C) Engineer to support the US Army Corps of Engineers.
This is a remote position.
JOB DESCRIPTION:
The 802.1x/Forescout/Comply to Connect Engineer will be responsible for designing, implementing, and managing robust network access control (NAC) solutions utilizing 802.1x, Forescout, and Comply to Connect technologies. This role requires a deep understanding of network security principles and hands-on experience in deploying and maintaining NAC systems in a Department of Defense (DoD) environment.
RESPONSIBILITIES:
- Assess system compliance against NIST and DoD security requirements to include the NIST 800-53 controls and DISA Security Technical Implementation Guides (STIGs) and Security Requirements Guides (SRGs)
- Lead the design and implementation of 802.1x, Forescout, and Comply to Connect solutions to ensure secure and compliant network access control.
- Configuration and Management: Configure, manage, and maintain NAC systems, ensuring optimal performance and security of the network infrastructure.
- Policy Development: Develop and enforce NAC policies and procedures in accordance with DoD standards and best practices.
- Troubleshooting and Support: Provide advanced troubleshooting and technical support for NAC-related issues, working closely with network and security teams to resolve incidents.
- Design and deploy the 802.1x and comply to connect network architecture in accordance with industry best practices, Army and USACE policies.
- Conduct thorough analysis of current network infrastructure and recommend enhancements.
- Implement security controls and policies to regulate access to sensitive data and systems, ensuring least-privilege access is maintained.
- Serve as a subject matter expert, advising on best practices, emerging threats, and strategic security developments.
- Work collaboratively with IT, network, and security teams to create a seamless and secure user experience across all company platforms.
- Stay current with emerging security trends, threats, and best practices, and integrate this knowledge into the organization's security strategy.
Qualifications
Required Education and Experience:
- Bachelor's degree and nine (9) years of experience; four (4) years of experience are accepted in lieu of a degree.
Required Skills:
- Strong experience in creating, performing, and documenting technology evaluations.
- Experience with integrating industry best practices for security into the engineering of complex systems.
- Collaborate openly and frankly with all internal and external partners, such as Government Engineers, Contractor Engineers, Contractor Operations staff, Management, and third-party vendors.
- Ability to handle high-pressure situations and prioritize tasks in a fast-paced environment.
- Proven expertise in Forescout platform configuration, management, and integration.
Required Clearance:
- Must be able to obtain an Interim Secret Clearance prior to employment; must be able to obtain a Secret Security Clearance to maintain employment.
Required Certification:
- IAT III certification in cybersecurity (CASP+ CE or CISSP).
Desired Skills:
- Extensive experience with 802.1x authentication protocols and deployment.
- In-depth understanding of cybersecurity frameworks and compliance standards relevant to the Army and the Department of Defense (DoD).
- Strong oral and written communication skills with experience with formal writing and preparing and presenting briefs.
- Strong organizational skills; ability to manage multiple tasks in a fast-paced environment with competing priorities and quick turnaround deliverables.
- Experience with the following technologies: Check Point, F5 SSLO, Gigamon, Cisco VPN, Trellix/FireEye (network appliances), DNS, NAT/PAT, Corelight, Cisco ISE, Palo Alto Networks.
Target salary range: $120,001 - $160,000. The estimate displayed represents the typical salary range for this position based on experience and other factors.
Apply on company website