Network Security Engineer

Peraton is seeking qualified individuals to join our team to provide Network Security Engineering Support to Naval Surface Warfare Center Dahlgren Division, Dam Neck who supports the Program Executive Office Unmanned and Small Combatants (PEO) providing cybersecurity engineering support, cybersecurity requirements Software Support Activity support for the Littoral Combat Ship (LCS) class Environment (TSCE) networks, LCS Afloat Sites for PMS 501 (New Construction), Service), and IWS80 Littoral Combat Ships( LCS).  

Are you interested to serve as a Littoral Combat Ships (LCS) Network Security Engineer at NSWCDD DNA?  Here are some details for your consideration, you will provide:

• Network-engineering support to pre-delivery and in-service LCS ships.
• Serve within a team of engineers for the LCS Total Ships Computing Environment (TSCE) core business network and provide support for the LCS Software Support Agent (SSA).
• Perform network engineering, integration, evaluation and testing within the LCS TSCE core business network.
• Perform networks security updates upgrades to ensure the security and integrity of the TSCE network.
• Analyze, troubleshoot and resolve issues with the LCS TSCE infrastructure including devices such as routers, switches, and firewalls.

In addition:

As our Network Security Engineer you will have the opportunity to perform the following duties associated for support, maintenance, performance and uptime of the LCS TSCE core infrastructure:

• Provide network security engineering support to PMS 501/505 and IWS80 for implementation of Cybersecurity Ships Change Documents (SCDs) and Engineering Change Proposal (ECPs).
• Provide engineering and network architecture expertise for pre-delivery/in-service ships for integration and modernization efforts.
• Perform security/vulnerability assessments using DoD provided tools; reporting results to the lead cybersecurity system engineer.
• Provide oversight for the day to day management and maintenance of the LCS core network infrastructure.
• Perform firewall and network device support for the TSCE core infrastructure.
• Oversee in the deployment of switches, routers, firewalls, and storage devices from multiple vendors.
• Support and interact with the network cybersecurity engineers, system administrators, and system engineers to ensure the confidentiality, integrity, and availability of systems, networks, and data.
• Assist with network engineering executing activities such as the design, implementation, installation, configuration, maintenance, integration, and analysis.
• Assist in the management and maintenance of lab facilities.
        o Apply software patches and patch sets during maintenance windows
        o Includes operating system (OS) patches released from DISA’s patch       repository website.
• Upgrade software.
• Conduct regression testing

Required Qualifications

• 5 years or more with BS/BA or 0 to 2 years with MS/MA/MBA or 8 to 10 years with no degree.
•  Minimum certification as 461 at the Intermediate level per DoDD 8140.01, or successor
   IAT Level II certification
•  Minimum of 5 years’ experience in Network Engineering
•  Demonstrated experience with Windows OS and Linux OS
•  Demonstrated experience with performing STIG implementation
•  Demonstrated experience performing vulnerability assessments with the Assured Compliance Assessment Solution tool
•  Must have hands-on technical experience in the following areas:
•  Network Routing Protocols
•  Cisco Adaptive Security Appliance (ASA) Firewalls
•  Extensive experience with Access Control Lists (ACLs)
•  Experience with Cisco security devices focusing on Identity Services Engine (ISE), Web Security Appliance (WSA) and Email Security Appliance (ESA)
•  Demonstrated experience troubleshooting network connectivity issues
•  Must have experience in Network Security to include the design, implementation, configuration, and enforcement of security controls on network, hardware, and software components and devices
•  Experience with the implementation of cybersecurity and Information Assurance (IA) boundary defense techniques and various IA-enabled appliances (firewalls, Intrusion Detection Systems (IDS), Intrusion Prevention System (IPS), switches/routers
•  Knowledge of computing and networking vulnerabilities, attack methods and latest detection methods
•  Excellent ability to communicate effectively orally and in writing
•  Must possess an active Secret clearance

Travel and work location:
• 50% Travel potential
• On-site Dam Neck, Va. No Remote

Preferred Qualifications:

• TS/SCI eligible security clearance
• Served on a LCS platform
• Windows Server upgrade experience
• HBSS knowledge is a plus
• Experience utilizing packet analyzer tools such as Wireshark and tcpdump
• Hyper-V or VMware experience is a plus
• Alcatel operating system experience is a plus

#EJ-SHJ1

Peraton drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world’s leading mission capability integrator and transformative enterprise IT provider, we deliver trusted and highly differentiated national security solutions and technologies that keep people safe and secure. Peraton serves as a valued partner to essential government agencies across the intelligence, space, cyber, defense, civilian, health, and state and local markets. Every day, our employees do the can’t be done, solving the most daunting challenges facing our customers.