Sr. Security Engineer with Security Clearance

Job Description

Metronome LLC has an immediate need for a Senior Security Engineer for a new customer on a highly visible and strategic Cybersecurity Task Order. The Senior Security Engineer will need to be a self-starter with excellent analytical and problem-solving skills, flexibility, good judgment, and the ability to coordinate multiple, concurrent tasks in an effective manner. This individual will work with internal team members to ensure that systems are functional, secure, and scalable. The Security Engineer will support the design and development of cybersecurity tools and technology along with integration of new architectural features into existing infrastructures while maintaining the integrity and security of enterprise-wide systems and networks.

Primary Responsibilities:

1. Manage multiple assignments, changing priorities, and work independently with little oversight.
2. Tackle large security projects, both of a technical and compliance nature.
3. Support all support, guidance and develop processes to evaluate and improve all operating systems, hardware support, software, firmware solutions and provide advisement concerning future purchase of the same.
4. Work closely with senior engineers, other team members and application owners to solve technical problems at the network, system and application levels.
5. Conduct periodic architectural reviews of installed sensors to assess effectiveness and propose optimal installation alternatives as required.
6. Documentation, Visio Diagrams and reporting along with presentation, teamwork and DHS wide collaboration are among the expected duties and mission of the task order.
7. Resolve Linux system errors and crashes, disk space problems, huge file system and full disk errors.
8. Experience in backend solution, day to day system admin and monitoring, file system management and disk management and creation of shell scripts for the automation of tasks and the extraction of logs.
9. Hardware and software installations, upgrades, maintenance, security analysis and network performance and tuning of Windows and Linux servers in a virtual infrastructure.
10. Define system security & design requirements to meet FISMA and FedRAMP compliance standards.
11. Maintain a current working knowledge of IT development methodology, architecture design, security best practices, and technical standards.
12. Communicate with other technical leads, IT groups, and customer reps so they understand all aspects of proposed changes/solutions.
13. Provide follow-up reports (technical findings, feedback, resolution steps taken) for Root Cause analysis, engineering technical assessment and process improvement initiatives.
14. Communicate security vulnerability reports and trends to ensure appropriate corrective action is taken.
15. Develop, implement, communicate, and enforce security policies and/or processes for data, software applications, and cloud infrastructure.
16. Superior attention to detail with excellent written and verbal communication, problem solving, researching and follow-up skills.
17. Understanding network security (firewalls and IDS) design and implementation.

Required Skills:

1. BS degree in Science, Technology, Engineering or related field and 8–10 years of prior relevant experience with a focus on cybersecurity OR Masters with 10 years of prior relevant experience.
2. Experience installing, configuring, securing, and troubleshooting Microsoft Windows Server and Red Hat Enterprise Linux or similar Linux distributions.
3. Extensive automation experience with PowerShell and Shell Scripting for automating repeatable tasks and installations.
4. Extensive knowledge of server operations and maintenance.
5. Experience managing Active Directory (AD) and Azure Active Directory.
6. Experience managing Active Directory Federation Services (AD FS) and single sign-on using SAML and PIV/CAC.
7. Experience with Active Directory Group Policy management.
8. Knowledge and experience supporting public key infrastructure (PKI).
9. Knowledge and experience implementing and supporting Active Directory Certificate Services (AD CS) and Azure Dedicated HSM.
10. Knowledge and experience managing keys, certificates, certificate requests, and format conversions with OpenSSL.
11. Understanding of cloud terminology, architecture, and tools to include installing, provisioning and monitoring.
12. Experience installing, configuring, and maintaining tools such as Tanium, Nessus, Axonius, CrowdStrike, and CyberArk in a hybrid-cloud environment.
13. Extensive knowledge of Ansible and Red Hat Satellite.
14. Perform analysis of security posture by reviewing vulnerability and compliance scans and making recommendations for remediations and managing POA&Ms.
15. Excellent problem solving, research, and follow-up skills.
16. Ability to obtain an Entry of Duty (EOD) Public Trust.
17. Candidate must, at a minimum, meet one of these certifications: CISSP, CCSP, CCNP, CCIE Security, CEH, RHCSA, RHCA, RHCE, MCSE, COMPTIA Security+, GCIH, GPEN, OSCP, OSCE, Azure Solutions Architect Expert.

Desired Skills:

1. Experience managing Palo Alto Networks VM-Series firewalls, AWS Network Firewall, AWS Network ACLs, AWS security groups, Azure Firewall, Azure network security groups, and related network resources.
2. Experience managing Azure Virtual Desktop service.
3. Solid understanding of developing and leveraging CI/CD pipelines (Continuous Integration/Continuous Deployment).

About Metronome, LLC:

Metronome is a spark that ignites passion for our customers and each other. We offer professional services to Government customers that keep projects pulsing. We believe in taking care of people so they can put their best foot forward to support the mission.

Background Screening/Check/Investigation:

Successful Completion of a Background Check will be required as a condition of hire.

Benefits:

Metronome offers a comprehensive benefits package that reflects our commitment to creating a diverse and supportive workplace. Benefit eligibility is determined on the type of position (full-time, part-time, temporary). Metronome's range of benefits include, but are not limited to, Medical, Vision & Dental Insurance, Life Insurance, Paid Time-Off & Company Paid Holidays, Personal Development & Learning Opportunities.

Application Process:

Please follow all instructions carefully. Errors or omissions may affect your consideration for employment. Select Create Profile and Apply to Requirement Complete your Profile and Answer the Questionnaire Upload a current resume Complete the Online Application and Submit.

Evaluation Process:

Metronome will evaluate applicants based on how well they meet the qualifications of the position above. Your completed application (including questionnaire, resume, and online application) will be used to determine your eligibility and how well you meet the qualifications for this position. Your responses to the questionnaire may be compared to your resume and application; if either your resume or application contradicts or does not support your responses, you will disqualify yourself and not receive further consideration for this job.

Equal Employment Opportunity Policy:

Metronome does not discriminate in employment on the basis of race, color, religion, sex (including pregnancy and gender identity), national origin, political affiliation, sexual orientation, marital status, disability, genetic information, age, membership in an employee organization, retaliation, parental status, military service, or other non-merit factor.

Reasonable Accommodation Policy:

Metronome is committed to providing reasonable accommodations to applicants with disabilities where appropriate. A reasonable accommodation is any change to a job, the work environment, or the way things are usually done that enables an individual with a disability to apply for a job, perform job duties or receive equal access to job benefits. Applicants requiring reasonable accommodation for any part of the application process or hiring process should contact Metronome Human Resources. Determinations on requests for reasonable accommodation will be made on a case-by-case basis.