Network Security Engineer SME

Job Description
BAE Systems is seeking a Network Security Engineer (SME) who will be responsible for the design, implementation, and management of security solutions for a globally distributed MPLS infrastructure, ensuring the security and integrity of our network systems. This effort will be in support of a Federal Law Enforcement contract in the Clarksburg, WV area although, the position is Remote.
Successful Network Security Engineers will have experience coordinating, developing, and evaluating security programs for an organization. They will also be able to recommend enterprise information assurance/security solutions to support customers' requirements and subsequently develop and implement standards and procedures to support those solutions. They should be capable of supporting customers at the highest levels in the development and implementation of doctrine and policies.
The ideal Network Security Engineer will also have experience trouble shooting complex LAN/WAN infrastructures that include routing protocols BGP, EIGRP and Open Shortest Path First (OSPF), VPNs, web proxy, and XML gateway for enterprise web services.
Responsibilities include:

• Adding and managing nodes in Splunk and Riverbed to ensure successful continuous monitoring for optimal system health.
• Updating monitoring tools using Ansible.
• Coordinating and liaising with both program leads and DOJ partners ensuring objectives are completed according to schedule.
• Managing information technology security, including backups, firewalls, and routers.
• Providing insight and guidance for design and management of information systems security policy, implementation, and management for a globally distributed MPLS infrastructure.
• Providing network security management and support windows servers.
• Resolving routing and Network Address Translation (NAT) issues of all complexity levels utilizing network diagnostic tools, such as tcpdump
• Following agency guidance and policy to perform system upgrades and implement any new security policies.
• Working with various networking concepts and routing protocols such as BGP, EIGRP, dynamic multipoint virtual private network (DMVPN) and other LAN/WAN technologies.
• Identifying, reporting, and resolving security violations effectively and efficiently.
• Successfully establishing and satisfying information assurance and security requirements based upon the analysis of user, policy, regulatory, and resource demands.
• Performing a variety of system engineering tasks and activities. These activities may be broad in nature and concerned with major systems design, integration, and implementation; to include personnel, hardware, software, budgetary, support facilities and/or equipment.
• Analyzing, designing, and developing security features for system architectures as well as design, develop, engineer, and implement solutions that meet security requirements for computer systems including mainframes, workstations, and personal computers.
• Analyzing complex information assurance-related technical problems and providing multifaceted engineering and technical support in solving these problems.
• Performing vulnerability/risk analyses of computer systems and applications during all phases of the system development life cycle.
• Ensuring that all information systems are functional and secure by designing and executing security system tests and support all systems/services certification and Accreditation activities.
• Performing system security tuning, security monitoring, general and privileged user account management, and reviewing all COTS software products upgrades and patches, including operating systems.
• Monitoring and performing script writing, storage management interfaces, network interfaces, external peripheral interfaces, and others systems interfacing.

Required Education, Experience, & Skills

• A minimum of five years' experience; least two years of which must be in supporting and troubleshooting computing devices and operating systems
• Proficiency in both networking and cybersecurity technologies and protocols
• Extensive experience managing and troubleshooting Linux or Unix-based operating systems
• In-depth understanding of Application Layer Gateway (ALG), including protocols like RTP, RTSP, FTP, DNS, and HTTP, as well as Dynamic Host Configuration Protocol (DHCP)
• Strong technical background with CompTIA Security+ certification required
• Experience working in an Agile environment; proficient in Scrum, XP, Kanban, and SAFe methodologies

Preferred Education, Experience, & Skills

• Bachelor's degree in Computer Science, Information Systems, Engineering, or a related field
• CompTIA Advanced Security Practitioner (CASP+) or
• Cisco Certified Cybersecurity Professional (CCCP) certification
• Knowledge of and experience with advanced security systems integration and implementation
• Familiar with cloud-based security systems and solutions
• Ability to communicate effectively with both technical and non-technical personnel and ability to work with a non-co-located team
• Strong attention to detail with adept problem-solving and analytical skills

Pay Information
Full-Time Salary Range: $120000 - $204000
Please note: This range is based on our market pay structures. However, individual salaries are determined by a variety of factors including, but not limited to: business considerations, local market conditions, and internal equity, as well as candidate qualifications, such as skills, education, and experience.
Employee Benefits: At BAE Systems, we support our employees in all aspects of their life, including their health and financial well-being. Regular employees scheduled to work 20+ hours per week are offered: health, dental, and vision insurance; health savings accounts; a 401(k) savings plan; disability coverage; and life and accident insurance. We also have an employee assistance program, a legal plan, and other perks including discounts on things like home, auto, and pet insurance. Our leave programs include paid time off, paid holidays, as well as other types of leave, including paid parental, military, bereavement, and any applicable federal and state sick leave. Employees may participate in the company recognition program to receive monetary or non-monetary recognition awards. Other incentives may be available based on position level and/or job specifics.
About BAE Systems Intelligence & Security
BAE Systems, Inc. is the U.S. subsidiary of BAE Systems plc, an international defense, aerospace and security company which delivers a full range of products and services for air, land and naval forces, as well as advanced electronics, security, information technology solutions and customer support services. Improving the future and protecting lives is an ambitious mission, but it's what we do at BAE Systems. Working here means using your passion and ingenuity where it counts - defending national security with breakthrough technology, superior products, and intelligence solutions. As you develop the latest technology and defend national security, you will continually hone your skills on a team-making a big impact on a global scale. At BAE Systems, you'll find a rewarding career that truly makes a difference.
Intelligence & Security (I&S), based in McLean, Virginia, designs and delivers advanced defense, intelligence, and security solutions that support the important missions of our customers. Our pride and dedication shows in everything we do-from intelligence analysis, cyber operations and IT expertise to systems development, systems integration, and operations and maintenance services. Knowing that our work enables the U.S. military and government to recognize, manage and defeat threats inspires us to push ourselves and our technologies to new levels.