22nd Century Technologies, Inc. logo

Senior Network Security Engineer

22nd Century Technologies, Inc.

  • Mechanicsville, VA
  • 1 day ago
    Want to know if you’re a fit?
    Upload your resume and let our AI show you.

    Skills

    • 802.1unmatched
    • Access Controlunmatched
    • Analysis Skillsunmatched
    • Cisco Network Systemsunmatched
    • Cloud Computingunmatched
    • Communication Skillsunmatched
    • Computer Networksunmatched
    • Computer Securityunmatched
    • Diagnostics Solutions/Softwareunmatched
    • Documentationunmatched
    • Establish Prioritiesunmatched
    • F5 BIG-IPunmatched
    • F5 Network Softwareunmatched
    • Firewallsunmatched
    • Huntingunmatched
    • IP (Internet Protocol)unmatched
    • Identify Issuesunmatched
    • Incident Responseunmatched
    • Information/Data Security (InfoSec)unmatched
    • Maintain Complianceunmatched
    • Mentoringunmatched
    • Microsoft Active Directoryunmatched
    • Microsoft Product Familyunmatched
    • Microsoft Windows Azureunmatched
    • Nessusunmatched
    • Network Administration/Managementunmatched
    • Network Architecture/Engineeringunmatched
    • Network Connectivityunmatched
    • Network Performance/Analysisunmatched
    • Network Securityunmatched
    • Network Topologyunmatched
    • On Callunmatched
    • Operations Security (OPSEC)unmatched
    • Penetration Testingunmatched
    • RADIUS (Remote Authentication Dial-In User Service)unmatched
    • Regulatory Complianceunmatched
    • Security Analysisunmatched
    • Security Architectureunmatched
    • Security Attacksunmatched
    • Security Complianceunmatched
    • Security Information and Event Management (SIEM)unmatched
    • Security Monitoringunmatched
    • Software Engineeringunmatched
    • Software Testingunmatched
    • Splunkunmatched
    • TACACS (Terminal Access Controller Access Control System)unmatched
    • Technical Leadershipunmatched
    • Test Equipmentunmatched
    • Testingunmatched
    • VPN (Virtual Private Network)unmatched
    • Vulnerability Scannersunmatched
    • Wide Area Network (WAN)unmatched

    Description

    Client is seeking an experienced Sr Network Security Engineer (Sr NSE) to implement and support the agency's IT network, cloud, and computing infrastructure. The Sr NSE performs day-to-day activities related to securing Client infrastructure.The Sr NSE performs day-to-day activities related to securing, documenting, performing research, analysis, design, and implementation of Client network and computing related infrastructure.
    The Sr NSE will support a hybrid enterprise environment consisting of approximately 300 statewide locations, Palo Alto firewalls, Azure networking, ExpressRoute connectivity, WAF technologies, Splunk SIEM, SD-WAN, and mission-critical public-facing applications. The role partners closely with Infrastructure, Cloud Engineering, and the Information Security Office to maintain the confidentiality, integrity, and availability of Client network infrastructure.
    Key Responsibilities:
    • Ensures network security architecture aligns with operational security standards prior to and after deployment.
    • Lead investigation and containment of network security incidents.
    • Review firewall rule requests and ensure compliance with security standards.
    • Design and maintain secure hybrid network architecture across on-premises and Azure environments.
    • Monitor security events using SIEM technologies and coordinate incident response activities.
    • Perform network security assessments and recommend remediation strategies.
    • Develop and maintain network security standards, diagrams, and operational documentation.
    • Support penetration testing and remediation efforts.
    • Participate in on-call support during critical security incidents.
    • Responsible for conducting proactive threat hunting and anomaly detection.
    • Validates WAF and firewall placement and integration exposure/connectivity. Also leads implementation, review, and management of agency WAF(s).
    • Identifies and diagnoses system problems and threats by using system logs, line monitors, SIEM, diagnostic software, and test equipment.
    • Identifies, prioritizes, and remediates network security vulnerabilities.
    • Must have the ability to provide documentation, network architecture topology diagrams, IP schemes, firewall rules, and access controls when required.
    • Must have the ability to work independently on assigned projects.
    SkillsRequiredRequired ExperienceCandidate ExperienceLast Used
    Enterprise NetworkingRequired8 Years
    Enterprise SecurityRequired5 Years
    Azure NetworkingRequired3 Years
    WAF/NGFWRequired3 Years
    Supporting environments with 300+ Network DevicesDesired3 Years
    Candidate must have experience in the following areas: Incident response, Security investigations, Log analysis, Threat intelligence, Security monitorRequired   
    Candidate must have experience with the SIEM products (e.g. Splunk, Microsoft Sentinel)Required   
    Candidate must have experience in vulnerability management and remediation tracking as well as vulnerability scanning tools (e.g. Nessus, Tenable, DefRequired   
    Candidate must have experience in the following areas: Active Directory, MFA, Conditional Access, CertificatesRequired   
    Candidate must have experience with; SEC530, CIS Benchmarks, NIST CSF, NIST 800-53, Zero Trust principlesRequired   
    Candidate must have experience with the following: Cisco Client, NAC, 802.1X, RADIUS, TACACSRequired   
    Candidate must have experience with the following products: Palo Alto, F5 Distributed Cloud, Azure WAF, Cisco VPN, Global Protect, F5 BIG-IPRequired   
    Candidate must have experience working in highly regulated environments and leading technical troubleshooting during outagesRequired   
    Candidate must have ability to communicate technical issues to technical and executive audiences and an ability to mentor junior engineers.Required   
    Candidate should have achieved or ability to achieve the following certifications: Azure Security Engineer (AZ-500), Azure Network Engineer (AZ-700),Required   
    DescriptionQuestionsAnswers
    Question 1Commonwealth of security policies prohibit the use of offshore IT contractors. Do you attest to the fact that your candidate will physically reside within the US for the duration of the assignment? 
    Question 2What is your candidate's email address? 

    Numbers & Facts

    LocationMechanicsville, VA
    IndustryComputer/IT Services
    Company Size100 to 499 employees
    Year Founded1997
    Websitehttps://www.tscti.com/careers-0

    About Company

    22nd Century Technologies, Inc., is one of the fastest growing IT Service Integrator and Workforce Solution companies in the United States. Founded in 1997, 22nd Century Technologies is a Certified National Minority Business Enterprise with 6,000+ people including 600+ Cyber SMEs nationwide supporting our customers in all 50 states, Canada, and Mexico. With HQs in Somerset, NJ and Mclean, VA, 22nd Century has 14 offices throughout the United States. As part of our unrelenting focus on quality and compliance, 22nd Century Technologies’ delivery is based on Certified Matured Processes including CMMI L3 Dev & SVC, ISO 20000, ISO 27001, and ISO 9001 quality processes. With a strong focus on the public sector, 22nd Century currently holds government contracts with 14 out of 15 Federal Executive agencies including DoD, 37 other Federal agencies, 50 States, 115+ Local agencies, and 37 School Districts. In the last three years, we have expanded our services to Fortune 500 and other commercial clients and currently support 80+ commercial clients.

    Recognized among “Best Company to Work For” by Forbes, 22nd Century Technologies, Inc., consistently exceeds our clients’ expectations by focusing on their absolute satisfaction with jobs while keeping our employees motivated.

    All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or protected veteran status.

    Similar Jobs

    See more jobs