Network Engineer

BT-339 – Network EngineerLocation: Chantilly, VA (fully on-site, no remote option)Please do NOT apply if you do not have an active Poly clearance. Those without a Poly will not be considered.**Work RequirementsThe Candidate shall manage security and performance of virtual desktop infrastructure (VDI), to include networking components, administering firewall policies, VPNs, network segmentation, and endpoint policy enforcement.The Candidate shall ensure network and endpoint systems are secure, efficient, and compliant. The Candidate shall manage Palo Alto PA-3430, Cisco Firepower 2130s, and Nexus switches and administer and optimize firewall and network switch configurations.The Candidate shall configure OpenVPN/IPsec-based VPNs for secure remote access in a VDI environment.The Candidate shall segment networks using VLANs and Access Control Lists in a Zero Trust model. The Candidate shall implement network segmentation strategies to enhance security and minimize the attack surface.The Candidate shall oversee endpoint provisioning, patching, and hardening via ManageEngine; to include managing the lifecycle of endpoint devices, provisioning, patching, and hardening to ensure they are secure and up-to-date.The Candidate shall administer Windows 11, Linux, and BlueStacks.The Candidate shall manage and support endpoint operating systems and Android emulators to ensure they meet performance and security standards.The Candidate shall enforce GPOs and AD-integrated access controls.The Candidate shall implement and manage Group Policy Objects and Active Directory integrated access controls to enforce security policies and user permissions.The Candidate shall develop and deploy automation scripts to streamline policy enforcement and system management tasks.Required Skills And Demonstrated ExperienceDemonstrated hands on experience with firewall administration.Demonstrated experience with Network Access Control.Demonstrated experience with Access Controls.Demonstrated experience with VPN tunneling.Demonstrated experience with endpoint security and mobile emulation environments.Demonstrated experience in securing and managing endpoint devices, including mobile emulation environments such as BlueStacks.Highly Desired Skills And Demonstrated ExperienceDemonstrated experience collaborating with cybersecurity and VDI teams or otherwise.Demonstrated experience providing training and support.Demonstrated experience developing and maintaining network and endpoint security policies and proceduresDemonstrated experience conducting regular security assessments.Demonstrated experience implementing Zero Trust security model.Demonstrated experience engaging in continuous improvement related to identifying opportunities for enhancing network and endpoint security measures and implement innovative solutions to improve overall security postureCertifications: CCNP Security, PCNSE, ITIL v4, Microsoft MCP, or CompTIA Linux+