Network Security Engineer

MKS2 Technologies, LLC, an award-winning high growth small business, creates innovative and customer-centric technology solutions in the areas of Cyber Security, Instructional Design and Training, Software Engineering and IT Support Services to improve the security and well-being of our clients. Our commitment to excellence and our “Mission First” orientation has resulted in steady growth and an expanding client base across government agencies. We have employees nationwide and for the past three consecutive years were named one of the fastest growing Veteran-owned companies in the nation. Please take a moment to browse through our website and learn more about what it means to serve with MKS2.

JOB SUMMARY:

SUMMARY OF ESSENTIAL JOB FUNCTIONS:

• Assess compliance of information systems with DoD RMF standards, including review, verification, and validation of required documentation and artifacts in accordance with DoDI 8510.01.
• Develop cyber-secure configurations for network devices, including firewalls, switches, and routers.
• Serve as a primary Network Security Engineer supporting the program.
• Plan, deploy, integrate, and test network upgrades at operational sites.
• Conduct independent research on networking and security topics and produce reports on findings.
• Ensure systems and devices are properly STIGed and hardened.
• Execute required cyber protocols to maintain compliance and security standards.
• Support real-world events, including work during nights and weekends when required.

REQUIRED SKILLS AND EXPERIENCE:

• Must be a U.S. Citizen and maintain a valid U.S. passport.
• Ability to travel to alternate work locations (e.g., Schriever Space Force Base) to support deployments.
• Understanding of OSI Model, TCP/IP, VLANs, and UDP Multicast.
• Experience with firewall configuration (e.g., Juniper, Cisco, Palo Alto).
• Knowledge of ACL design and function.
• Hands-on experience with multi-vendor switching and routing (Juniper, Cisco).
• Strong communication skills, including writing and presentation using Microsoft PowerPoint and Visio.
• Ability to design security configurations and testing procedures.
• Familiarity with NIST CVE framework.
• Experience with virtualization technologies.
• Ability to work collaboratively in a team environment.
• Intermediate knowledge of security design, development, and testing methodologies.
• Experience applying DoD security practices, including STIG compliance and system accreditation.
• Ability to document project design and development efforts.
• Ability to communicate network security requirements and compliance to other departments.
• Ability to learn and apply security hardening techniques across various products and applications.
• Ability to summarize findings and recommend solutions to leadership.
• Understanding of VMware and ESXi STIGing/hardening basics.

EDUCATION: Bachelors with  3+ or Master with  1+ Years of Experience

LOCATION: Full Time/ On-Site in Colorado Springs, CO

CLEARANCE REQUIRMENT:  Top Secret, prefer T/S SCI

DOD 8570 REQUIREMENT: IAT - Level II

SALARY RANGE: $105,000 to $122,400

PHYSICAL DEMANDS:

The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this position. Reasonable accommodations may be made to enable individuals with disabilities to perform these functions.

While performing the duties of this job, the employee is regularly required to:

• Remain in a stationary position for extended periods of time.
• Operate a computer, keyboard, and other office equipment using hands and fingers.
• Communicate effectively in person, over the phone, and through electronic means.
• Occasionally move about the office to access files, office equipment, and meeting spaces.
• Lift and/or move up to 15 pounds as needed.
• Maintain specific vision abilities, including close vision and the ability to adjust focus.

WORK ENVIRONMENT:

This position is performed within a secure, classified workspace. Employees must comply with all applicable security protocols and access control procedures, including restrictions on personal electronic devices and the handling of sensitive information.