Network Engineer

ECS is looking for a Network Engineer - SME to work in its Mechanicsburg, PA office. 

Job duties include, but are not limited to:

• Installation, Sustainment processes, operations and analysis related to load balancing and Web Application Firewall (WAF) communications traffic via virtual F5 BIG IP and related technologies.
• Installation, Sustainment processes, operations and analysis related to providing firewall capabilities securing communications traffic via virtual F5 BIG IP, virtual Palo Alto firewalls and related technologies.
• Installation, Sustainment processes, operations and analysis related to maintaining virtual private network capabilities provided by tools such as virtual Juniper SRX.
• Configuration, operations and analysis related to networking, firewall, load balancing via Amazon Web Services (AWS) tool/services.
• Analysis and support services related to securing, ensuring high performance of and maintaining a secure computing architecture.
• Mentoring and knowledge transfer including educating the government workforce and supporting Information Assurance (IA) accreditation efforts.
• Provide participation in Scaled Agile Framework (SAFe) principles in the development of workflows, task accomplishment and implementation/management of Cloud services.
• Promote an environment of continuous process improvement, learning and team collaboration
• Customer engagement to include new requirements/solutions or troubleshooting via meetings, trouble tickets, and online teams/chat.

5+ years of experience in the following areas:

• LTM (Local Traffic Manager) with a wide range of virtual server types, using unique SSL profiles, iRules, access policies, and specific poolm ember (what is this) selection based on criteria such as traffic type, URI pathing, or other unique identifiers.
• AFM (Advanced Firewall Manager) with protection of applications, network, and environment against threats. Also sort/separate traffic to satisfy required protection level for specific types of traffic.
• ASM (Application Security Manager) with Advanced Web Application Firewall (AWAF) to inspect/block traffic as required to ensure a secure and uncompromised application/environment.
• APM (Access Policy Manager) with complex profiles/polices to address all security needs, including Authorization and Authentication of administrators/users. Solutions will include smart card credentials (Common Access Card, CAC), SAML tokens, and custom REST/API integrating with a variety of products such as Active Directory and Oracle IDM
• iRule - including creating highly skilled solutions for complex requirements/issues
• PUA (Privileged User Access) - integrate all required modules and configurations for a complete PUA architecture to support admin login and separation of traffic requirements. PUA will support logins to Windows, LINUX, and Cloud Service Provider (CSP) consoles
• Big-IQ with central management of all Big-IPs in the environment to include syncing configurations, apply patches, upgrades, and security requirements. Also supports license gathering/reporting as needed
• Packet capture, flowlog, device logging and analysis of network traffic to troubleshoot issues anywhere in the internal network or external communications.

Certifications:

• Scaled Agile Framework (SAFe) Certification
• CCNA or F5 Certified Admin Cert
• IAT Lv II – Sec+ or equivalent
• DoD Secret