Network Engineer - Top Secret Clearance

Riptide Technology is hiring a Network Engineer for onsite work in Suitland, Maryland. The role provides IT support services to ONI OIC to include administering the local DoD classified network including: routers, firewalls, switches and other network devices in accordance with the authoritative USG requirements documents including (but not limited to: DISA STIGS, DD254, SCGs, CND Directives, OPORDS, etc.
Further support includes migration of MDA capabilities to the cloud, and the application of artificial intelligence/machine learning (AI/ML) tools to existing MDA data sets.
Responsibilities:

• Administer all network devices (routers, switches, firewall, IDS/IPS)
• Complete STIG checklists for all network devices: Boundary (Premise router, Firewall, Network Infrastructure), Internal Network (Layer 2 Switches) and additional required STIGS (IDS/IPS, Network Devices, Multifunction/Network Printer, etc.)
• Provide network engineering expertise for configuration changes (e.g. management subnet, etc.)
• Patch all network devices
• Review scan results from ACAS scans that pertain to network devices
• Remediate CAT I/ CAT II/ CAT III findings associated with scans of network devices
• Coordinate with ISSO/ISSM to update POA&M and reflect open vulnerabilities associated with network devices, develop remediation plans to include milestone completion dates and status updates, and include mitigation process for closed vulnerabilities
• Bring configuration changes before the CCB for approval, maintain up-to-date configuration diagrams for the architecture (physical and logical), and notify ISSM of changes to diagram
• Participate in CCB
• Immediately notify ISSM/ISSO of any irregularities in network operations and/or attacks/compromises (Incident response participant)
• Obtain any DoD 8570.01 IAT Level 2 required Computing Environment certifications within 6 months of employment.

Required Education and Certifications:

• DoD IAT Level II Certification - Level two certifications typically require one of these additional certifications as prerequisites:
• CCNA Security, or Cisco Certified Network Associate certification OR
• CySA+ **, or Cybersecurity Analyst Plus certification OR
• GICSP, or Global Industrial Cybersecurity Professional OR
• GSEC, or Global Information Security Essentials Certification OR
• Security+ CE, or Security Plus Continuing Education OR
• CND, or Certified Network Defender OR
• SSCP, or Systems Security Certified Professional OR one of the preceding

Required Qualifications:

• Security Clearance: Active DoD - Top Secret / SCI
• Experience:
• US Citizen with an active TS/SCI
• 5+ years relevant and recent experience with configuration, administration and operation of Wide-Area and Local Area Networks (WAN/LAN), to include Cisco-based routers, switches, and firewalls
• Experience with classified network device assessment and hardening using various information system security assessment/hardening tools - DISA STIGs, SCAP, ACAS, HBSS, Retina, Nessus, etc.
• Experience successfully and effectively interacting with internal and external customers (DSS, ISSPs, ISRs, DAOs, Program Managers, etc.)
• Working knowledge of operating systems security features and settings (e.g. Windows, UNIX, and Linux)
• Professional demeanor, good interpersonal skills, and ability to excel in a high-paced multi-tasked environment
• Ability to act independently, prioritize tasks, and manage to schedule
• Strong communication skills with the ability to communicate effectively in both oral and written modes, and be able to author and present subject specific presentations. Comfortable with public speaking.
• Must be willing and able to travel to other locations as required on occasion
• DoD 8570.01 IAT Level 2 (requires one or more of the following Professional Certifications: CCNA Security, GICSP, GSEC, Security+ CE, SSCP)

Desired Skills:

• Computing Environment certifications for CISCO devices
• In-depth knowledge of NIST special publications, CNSS policies and instructions, and other requirements documents associated with the Risk Management Framework (RMF)
• Experience with Assessment & Authorization (A&A) under the RMF
• Experience with preparing for SIPRNet CCRI inspections
• DoD 8570.01 IAT Level 3 (requires one or more of the following Professional Certifications: CASP CE, CCNP Security, CISA, CISSP (or Associate), GCED, GCIH)
• Network monitoring & logging tools such as Splunk

Working Conditions:

• Environmental Conditions
• Possible off-hours work to support releases and outages. General office environment with a fast-pace ops tempo. Work is generally sedentary in nature, but may require standing and walking for up to 10% of the time. The working environment is generally favorable. Lighting and temperature are adequate, and there are not hazardous or unpleasant conditions caused by noise, dust, etc. Work is generally performed within an office environment, with standard office equipment available.
• Strength Demands
• Sedentary - 10 lbs. Maximum lifting, occasional lift/carry of small articles. Some occasional walking or standing may be required. Jobs are sedentary if walking and standing are required only occasionally, and all other sedentary criteria are met.
• Physical Requirements
• Stand or Sit; Walk; Use Hands / Fingers to Handle or Feel; See; Push or Pull

$175,000 - $200,000 a year
401(k) company contribution equivalent to 10% of employee's salary, immediately 100% vested, no matching required. 100% company paid dental, vision, life, AD&D, and disability insurance. Employer-provider health insurance, employee and family coverage, 85% company paid. 6 weeks annual paid time off for holidays, vacation, and sick leave. 12 weeks paid family leave, 2-5 days bereavement leave, and 2 weeks Military Reserve Duty differential pay provided for qualifying events. Opportunities for annual performance-based bonuses.
Riptide Technology, Inc. is an equal opportunity employer ensuring no employee or prospective employee will be discriminated against based on race, color, national origin, age, religion, disability status, gender, sexual orientation, gender identity, genetic information or marital status with regards to recruitment, hiring, upgrading, promotion or rehiring.