Sr. Network Security Engineer - Doral, FL

Type of Requisition:

Regular

Clearance Level Must Currently Possess:

Secret

Clearance Level Must Be Able to Obtain:

Top Secret/SCI

Suitability:

Public Trust/Other Required:

Job Family:

Network Engineering

Job Qualifications:

Skills:

Cisco Identity Services Engine (ISE), Firewalls, Network Security, Virtual Private Networks (VPNs)

Certifications:

Cisco Certified Network Professional (CCNP) Security - Cisco

Experience:

5 + years of related experience

US Citizenship Required:

Yes

Job Description:

Job Description:

To design, implement, and manage networks using Cisco’s Identity Service Engine (ISE). The engineer will be responsible for defining network access policies, managing network access security, and ensuring the smooth operation of the network.

Key Responsibilities:

Scalability Management: The engineer should ensure that the ISE solution can support hundreds of thousands of simultaneous connecting users along with millions of wired and wireless devices.

Access Control: The engineer should manage access control lists for further evaluation of unmanaged or illegal devices.

Integration: The engineer should be able to integrate ISE with other systems like Microsoft Active Directory for user validation and with certificate authorities for device access validation.

Compliance Checks: The engineer should be able to perform automated compliance checks with software technology providers.

Visibility: The engineer should be able to provide visibility into user devices, receiving a detailed overview of users’ devices and overall security status.

Risk Assessment: The engineer should be able to rapidly and without the use of scanners or agents provide a holistic view of every asset connected to the network.

Training: The engineer should be able to train others on the use of Cisco ISE, including its architecture, deployment, policy enforcement, and other functions.

Profiling: The engineer should be able to configure and customize Cisco ISE Profiling and create profiling reports.

Endpoint Compliance: The engineer should be able to configure Cisco ISE Compliance Services, Client Posture Services, and Provisioning.

VPN Integration: The engineer should be able to integrate ASA and ISE for VPN users, including configuring ASA and Cisco ISE for VPN Authentication, Authorization, and Posture

DESIRED QUALIFICATIONS:

Deep understanding of Cisco ISE and DNA Center.

Experience with defining network access policies and managing network access security.

Ability to design networks and define network policies.

Experience in infrastructure provisioning.

Completed Cisco ISE and DNA Training

BA/BS (or equivalent experience)

5+ years of experience

Must be 8570 Compliant:

IAT Level II Certification (Security+ or SSCP, or CySA+ or

AND Operating System Computing Environment Certification (CCNP Security Specialty ISE 300-715 SISE: Implementing and Configuring Cisco Identity Services Engine.

The likely salary range for this position is $110,500 - $149,500. This is not, however, a guarantee of compensation or salary. Rather, salary will be set based on experience, geographic location and possibly contractual requirements and could fall outside of this range.

Scheduled Weekly Hours:

40

Travel Required:

None

Telecommuting Options:

Onsite

Work Location:

USA FL Doral

Additional Work Locations:

Total Rewards at GDIT:

Our benefits package for all US-based employees includes a variety of medical plan options, some with Health Savings Accounts, dental plan options, a vision plan, and a 401(k) plan offering the ability to contribute both pre and post-tax dollars up to the IRS annual limits and receive a company match. To encourage work/life balance, GDIT offers employees full flex work weeks where possible and a variety of paid time off plans, including vacation, sick and personal time, holidays, paid parental, military, bereavement and jury duty leave. To ensure our employees are able to protect their income, other offerings such as short and long-term disability benefits, life, accidental death and dismemberment, personal accident, critical illness and