Network Security Engineer

Job Description:Short Description: Q009 - NSE**Candidates local to the DMV area only**
Complete Description:Senior Network Security Engineer II supports the ongoing design, implementation, operation and security of the OCFO network and the supporting security infrastructure. Duties & Responsibilities: Ability to monitor and analyze data traffic patterns within the OCFO network infrastructure; Identify network problems and recommend improvements to ensure optimal performance; Ability to improve network quality regarding any degradation; Ability to enhance security and knowledge of the latest security threats, worms and malware and advise on how to deter them; Ability to ensure reliability and stability of the work through the above actions; Configure routers, switches, firewalls and other appliances in compliance with OCFO security standards Monitor security measures in place within network perimeter, ensuring breaches do not occur and information is safeguarded from unauthorized access; Proactively oversee the activities involved in quality resolution of complex technical issues, responding with an appropriate sense or urgency to problems escalated to Network Engineer’s level; Coordinate with appropriate personnel to determine positive solutions that increase end user satisfaction, following through to completion, and communicating resolution results; escalate to management any situation that could adversely impact the service provided to the end user; Monitor trends in documented incidents and determine appropriate actions necessary to eliminate future occurrences and improve customer service levels in an appropriate timeframe; Provide network design services Coordinate with the Infrastructure Services Group staff to establish the scope, timing and technical approach to be used for proposed network changes; Ensure adherence to network policies and procedures; Manage production and disaster recovery networks and security Ability to perform forensic and packet analysis; Ability to configure and operate network security-focused monitoring and logging systems 
Qualifications:Experience building large scale, multi-site network architectures Experience with secure remote access/WAN technologies (IPsec, VPN, etc.) Knowledge of network-based and system-level attacks and mitigation methods Experience with firewalls: Cisco Firepower (NGFW) or Cisco ASA Firewalls; Experience with security routing protocols.

Technical Skills: Security: Cisco Firepower (Next generation firewall), Cisco ASA Firewalls, Cisco ISE 2.0 and above (Identity Services Engine), Cisco NGFW (Next Generation Firewall), Cisco AMP (Advanced Malware Protection), Cisco Firepower.