Network Security Engineer Lead

Ft. Belvoir, VA

C-CHR-24-042
 

The Network Security Engineer Lead will perform a variety of broad network engineering tasks focused on the design, implementation, testing, and troubleshooting of the RNEC-NCR intricate network infrastructure.



Duties and Responsibilities:

• Use Remedy ticket submissions for all work assignments.
• Respond to critical and VIP tickets via telephone call or by e-mail within two (2) hours upon notification from the appropriate government authority.
• Installation of Campus Area Network (ICAN).
• Install new modified hardware, operating systems, and software applications ensuring integration with Information Assurance (IA) security integrity requirements for the enclave.
• Install the LAN, WAN, SONET/NCS 4200, and related equipment.
• Maintain critical components of the ICAN from the edge router to the Area Distribution Switches (NIPR/layer 2, SIPR/Layer #) on a 24-hour, seven (7)-day-a-week on-call basis.
• Engineer, maintain, and make network infrastructure changes at Fort Belvoir, Fort Walker, Joint Base Myer Henderson Hall, and Fort Meade network system, including the LAN, WAN, SONET/NCS 4200 links and connectivity, switches, hubs, concentrators, routers, firewalls, SONET/NCS 4200 multiplexers, Windows servers, Storage Area Network (SAN), media backup systems, Cisco Digital Network Architecture (DNA), Cisco Identity Service Engine (ISE), Cisco wireless and stealth watch, Cisco Network Convergence System (NCS), GEM One, fiber and Ethernet cabling, and other infrastructure components.
• Configure and support the use of the DoD Common Access Card (CAC) and Public Key
• Infrastructure (PKI) for user authentication into the network, into applications, and for signing and encrypting electronic mail. CAC authentication into the network is mandatory unless an exception is granted by the government.
• Maintain the network ICAN infrastructure, including hubs, routers, switches, concentrators, firewalls, virtual private networks (VPNs), SONET /NCS 4200 multiplexers, servers, storage area nodes (SANs), cable management systems, and other network enhancements down to the Edge Access Switch level.
• Engineer, maintain, and make network infrastructure changes for NIPRNET and SIPRNET Internet and web access.
• Operate and maintain communication links.
• Establish communication links capable of providing required bandwidth to support effective and efficient connectivity and digital communications between Fort Belvoir and offsite government facilities.
• Implement and maintain software and application configuration management and configuration reporting.
• Install and update anti-virus software and anti-virus signature files on all assigned assets.
• Install security patches to protect against information assurance (IA) vulnerabilities.
• Implement and apply procedures to ensure only approved personnel have access to the Fort Belvoir network.
• Install government Public Key Infrastructure (PKI) server-side certificates and implement Secure Sockets Layer (SSL) and other secure methods of data transmission, including support to the VPN and VPN servers, CITRIX, and Structured Query Language (SQL) servers.
• Other duties as assigned.