Network Engineer

Summary Chenega Security has an exciting opportunity for a Network Engineer to join our team at DARPA. In this role you'll support the physical security team. Responsibilities The Network Engineer shall ensure the S2N is properly operating and in compliance at all times. To accomplish this, the Engineer support shall analyze customer and user requirements; design physical or logical security systems and interface with other cognizant organizational security professionals for system network certification and network accreditation. Have oversight of the installation of approved physical or logical security system hardware, to include access control devices, intrusion detection devices, and other components of the physical security systems. Implement and maintain malicious code countermeasures, including malicious code scanning to detect and quarantine or eradicate malicious code that may be present on any removable media. Complete routine, urgent, and emergency network maintenance as required ensuring continued network functionality and compliance. Perform vulnerability/risk assessment analysis to support certification and accreditation. Review the Network Intrusion Detection System and other Log and Events for various issues; conducts necessary audits; and log dispositions. Manage Group Policies and User accounts. Verify and manage the S2N access control lists and network port configurations. Frequently monitor system performance; provide on-going maintenance, backups, firmware/Operating System software upgrades, auditing, and patching for S2N. Create and maintain records on workstations, servers, routers, firewalls, intelligent hubs, and network switches to include inventorying network components on a quarterly basis. Must be able to establish and maintain a test bed to ensure upgrades are tested prior to implementation on the network. Create and maintain Certification and Accreditation (C&A) packages, System Requirements Traceability Matrices, System Security Plan (SSP), Document Configuration Plan, Maintenance Logs, Risk Assessment Reports, S2N Standard Operating Procedures, and any other documents for all the components for the security network. Support security authorization activities in compliance with Information System Certification and Accreditation Process (NISCAP). Ensure full disk encryption and end-point encryption in accordance with the Federal Information Processing Standard 140-2 and ensure encryption keys replaced when required. Ensure the security network meets DISA STIGS and NIST 800-53 (Latest Version) RMF, and other applicable Government Information Assurance Regulations and Standards required for the protection of information systems and accreditation. Qualifications Active TS/SCI clearance. Must have thorough knowledge (knowledge means to understand and to have the ability to apply the requirements) managing networks, conducting maintenance, backups, firmware/Operating System software upgrades, auditing, and patching of networks. Must have thorough knowledge of applying Defense Information System Agency (DISA) Security Technical Implementation Guides (STIGS) and National Institute of Standards and Technology (NIST) 800-53 Risk Management Framework (RMF) requirements and/or mitigation strategies. Required to adhere to all government agency guidelines as it applies to COVID vaccine Attestation/Restrictions. Must have five (5) years of providing the work required by this contract in a classified environment, preferably DoD OR two (2) years of experience with a Bachelor’s degree in Computer Science, Information Systems or a related field. Must have DoD approved 8570 IAT Level II Certification. Experience with virtual environments is preferred.