Cyber Security Engineer Senior

<p><b><u>Type of Requisition:</u></b></p>Regular<p></p><p></p><p><u><b>Clearance Level Must Currently Possess:</b></u></p>None<p></p><p></p><p><u><span><span><span><b>Clearance Level Must Be Able to Obtain:</b></span></span></span></u></p>None<p></p><p></p><p><b><u>Public Trust/Other Required:</u></b></p>Other<p></p><p></p><p><u><b>Job Family:</b></u></p>Cyber and IT Risk Management<p></p><p></p><p><b><u>Job Qualifications:</u></b></p><p><b>Skills:</b></p>Cisco FirePOWER, Firewalls, McAfee Web Gateway, Network Firewalls<p><b>Certifications:</b></p>None<p><b>Experience:</b></p>5 + years of related experience<p><b>US Citizenship Required:</b></p>No<p></p><p></p><p><u><b>Job Description:</b></u></p><p>Advance your career while impacting our national security in cyber as a Cybersecurity Engineer Senior at GDIT. Here, technologists have many paths to grow a meaningful career supporting cyber missions and operations across the federal government.<br/><br/>As a <b>Cybersecurity Engineer Senior</b>, the work you’ll do at GDIT will be impactful to the mission supporting security infrastructure for the<i> CMS Center for Clinical Standards and Quality (CCSQ)</i>. You will play a crucial role in joining our team as a subject matter expert for all activities related to implementing, configuring, and maintaining security tools including SkyHigh Web Gateway, CISCO FirePower, CrowdStrike Falcon, and Palo Alto NGFW, and responding to potential and confirmed security incidents in the CCSQ Cloud Environment. They work with an existing team of Cyber Security Engineers, who in turn support privacy and security of the cloud program and advise application development teams hosted in the cloud environment in addressing findings from the security tools managed by this team of professionals, patching said tools for optimal security posture, and responding to application block requests and troubleshooting inquiries.</p><p></p><p><b>HOW YOU WILL MAKE AN IMPACT:</b></p><ul><li>The candidate will be responsible for administering, configuring, deploying, and maintaining Cisco FirePower Threat Defense (FTD) and SkyHigh Web Gateway appliances across the authorization boundary and enterprise-level environments.</li><li>Implement advanced intrusion prevention systems (IPS) using CISCO FirePower to identify and block malicious traffic.</li><li>Implement CISCO routers (CSRs) to do Policy Based Routing (PBR) on all network traffic from the Virtual Private Clouds (VPC).</li><li>Design and <span>optimize Security</span> Rule Sets (SRUs) and tailor policies to meet organizational and mission-critical security requirements.</li><li>Perform threat analysis, event correlation, and deep packet inspection to mitigate emerging cyber threats.</li><li>Configure and manage Cisco FireSight/FirePower Management Center (FMC) for centralized policy management, event monitoring, and system reporting.</li><li>Integrate FirePower NGIPS with other security solutions such as SIEM or SOAR platforms to enable automated threat response capabilities.</li><li>Perform system upgrades, signature/engine updates, and antivirus pattern maintenance to ensure continued protection.</li><li>Conduct regular audits and vulnerability assessments within FirePower systems to identify gaps in coverage.</li><li>Troubleshoot Cisco FirePower appliances for performance issues, ensuring high availability and resilience across the network.</li><li>Collaborate with cross-functional IT and security teams to optimize firewall configurations and enforce Zero Trust principles.</li><li>Collaborate with CCSQ Security Operations Center (SOC), Cloud Solutions Engineers, and Application Development Organizations on blocking notifications and proactive optimization of the tools.</li><li>Create and maintain detailed documentation for system configurations, policies, procedures, and operational tasks.</li><li>Provide technical expertise, guidance, and training to internal teams on Cisco FirePower operations and best practices.</li><li>Strong background with AWS security concepts, tools, and services.</li><li>Ability to work in fast paced environment, Self-motivated with a strong ability to work in a multi-tasking and changing environment.</li><li>Experience working in an Agile environment.</li><li>Support Security audits as needed and to advise ADO from a Tier2 or 3 perspective and to support security events of interest.</li><li>Demonstrated experience with and exposure to the above stated security appliances.</li></ul><p></p><p><b>WHAT YOU’LL NEED TO SUCCEED:</b></p><ul><li><b>Education:</b> Bachelor's Degree in Computer Science or related technical discipline, or the equivalent combination of education, technical certifications or training, or work experience</li><li><b>Required Experience:</b> 5+ years of related experience in maintaining security systems in cloud environments</li><li><b>Required Technical skills:</b> Experience in Amazon Web Services (AWS) Cloud Environments and the CMS CCSQ/QNET a