Network Security Engineer 25-123

Empower your career with Trace3 Gov, where passion meets innovation and inclusion! Embrace the future of IT while being a part of Trace3 Gov's pioneering tech community. Trace3 Gov isn’t just about technology—it’s about people. We thrive on the energy, talent, and dedication of our workforce. From our culture to professional development, we prioritize our team. We live by our core values every day and hope you will as well!  Come join a Top Workplaces organization!
Role Description:
In this role the candidate will serve as the Network Security Engineering SME who will lead the development, implementation, and management of the Enterprise infrastructure's cyber security posture. As a key member of our Network and Enterprise Services (NES) team, you'll leverage your expertise to design, develop, and deploy solutions utilizing automation tools, ensuring the highest level of security and compliance. Excellent communication skills are essential, as you'll collaborate with agile teams, stakeholders, and customers to track cyber compliance, generate reports, and develop plans to enhance the system's cyber posture. Based in Colorado Springs, CO, with occasional travel to alternate work locations, this role offers a unique opportunity to make a significant impact on the security and integrity of our systems.
Responsibilities:
Candidate will be the Network Security Engineering SME supporting the Program. 
Candidate will be responsible for planning, deploying, integrating, and testing cyber security upgrades to the network to operational sites. Candidate will be main POC for all external communication relating to the infrastructure cyber security, including other Agile teams, Key stakeholders, and the customer.
Candidate will advise and help plan security design with department Chief Engineer and Architect.
Expected to develop and implement Department level security procedures.
Expected to write, brief, and document POAM/Risk acceptance documents.
Develop and train other engineers.
Collaborate with Cyber department leadership and requirements team to ensure cross department security design compliance.
Review releases for cyber compliance
Create standards for the teams to develop to in order to maintain the highest standard of excellence for cyber security.
Generate KPIs with targets and identify metrics in which to properly measure progress towards these goals.
Automate as much as possible
Work to address all CTOs, IAVAs, BODs, or directives issued that apply to the infrastructure. 

Experience Required

• Preferred Qualifications
• IAT Level III (8570) Compliant certification i.e. CISSP, CISM, etc.
• Top Secret Clearance with SCI eligibility
• Developing SPIs and tracking other metrics and creating reports
• Experience with containers, binary, & artifact management and RHEL
• Experience in a DoD Environment
• Prior C2BMC experience 

Technical Skills Required

• Key Words
• NIST
• Cyber Security
• Ansible
• Python
• STIG
Basic Qualifications:
• Emerging authority typically with an advanced degree and 7+ years' experience or bachelor's with 9+ years' experience or equivalent. Degrees must be in a relevant field of study.
• Must have an IAT Level II (8570) Compliant Certification such as Security+CE, CASP+CE, GSEC, SSCP, CND, GICSP, etc.
• Must have an active Secret Clearance
• Must be able to travel to alternate work locations, such as Schriever Space Force Base, to execute job duties such as deployments.
• Must understand the networking theory and technologies such as OSI Model, TCP/IP, VLANs, switches, routers, firewalls, etc.
• Must be an effective communicator with excellent writing and presentation skills using Microsoft PowerPoint and Visio drawing tools.
• Must be familiar with and be able to apply industry standard security guidance. (NIST, IEEE, etc.)
• Must be able to work collaboratively in a team environment with other highly motivated network and system engineers. 
• Expert knowledge of security design, development, and testing methodologies.
• Expert in application of standard DOD security practices such as, STIG compliance and system accreditation implementation efforts.
• Experience with coding languages and automation tools such as Python, Ansible, Java, etc.
• Experience with VMware NSX, SDWAN, Juniper JUNOS and software defined networking 

Education Required

• Emerging authority typically with an advanced degree and 7+ years' experience or bachelor's with 9+ years' experience or equivalent. Degrees must be in a relevant field of study.
• Must have an IAT Level II