SR Information Security Engineer

The Sr. Information Security Engineer role is a Tier II day-two support. This role will be providing network security support to a large dedicated federal agency. They will be responsible to support the network security architecture to include support of BGP Routing, Fortigates, Cisco Identity Services Engine (ISE), Cisco Firepower NGFW firewalls, Cisco RAS AnyConnect, Cisco Secure Firewall Management Center, AAA, 802.1x, various VPN deployments, STIG implementation and verification, other security requirements as needed.
The Security Engineer may be required to assist with additional network/security engineering tasks, development of architectural and technical briefs or documents on the design, capabilities, and functional operation of security technologies and projects.

• Strong Customer facing experience in a large multi-team setting.
• Strong experience in monitoring, maintaining, troubleshooting, and configuring BGP Routing, Cisco ASA and/or FirePOWER NGFW firewalls, Cisco Secure Firewall Management Center, and access control lists.
• Strong experience with Cisco Identity Services Engine (ISE).
• Strong understanding of AAA concepts.
• Strong experience with client-based VPN as well as various site-to-site VPN technologies.
• Strong Experience with Cisco RAS and integration with Active Directory (AD)
• Strong ability to troubleshoot network issues at the protocol/packet level using sniffers, protocol analyzers, netflow, logging, etc.
• Strong technical network troubleshooting and critical thinking skills with the ability to troubleshoot technical issues within multiple systems.
• Knowledge of Cisco Internetworking including IP addressing (subnets, CIDR), switching (VLANs, 802.1q, IGMP, etc..) and routing (OSPF, EIGRP, BGP, PIM, multicast, etc.) and Cisco IOS.

• Strong knowledge of IP networking fundamentals including OSI model, frame and packet structure, (OSI, frames, packets etc.).
• Experience with network and performance monitoring tools (Cisco IP SLA, SolarWinds, HP NA, NetFlow & Splunk).
• Experience in network security, tools, and technologies including firewalls, VRF, VDOM, 802,1x, and port-security.
• Proven ability to work in a dynamic team environment with changing requirements and competing priorities.
• Must be able to participate in an on-call rotation and occasionally work off hours for network maintenance and changes.
• Must be able to pass Government Security Suitability.

Additional Nice to have:

• Experience expert level with Fortigates, Experience Expert level with Palo Alto,
• Experience Expert level with Juniper SRX.
• Education: BS, MS, Computer Science
• Certification: CCSP, CCIE
  

"This information reflects the anticipated base salary range for this position based on current national data. Minimums and maximums may vary based on location. Individual pay is based on skills, experience and other relevant factors.

Location Based Pay Ranges

$82,969 - $110,625 in these states: AL AR AZ FL GA IA ID IN KS KY LA ME MO MS MT ND NE NM OH OK PA SC SD TN UT VT WI WV WY
$87,117 - $116,156 in these states: CO HI MI MN NC NH NV OR RI
$91,266 - $121,688 in these states: AK CA CT DC DE IL MA MD NJ NY TX VA WA

Lumen offers a comprehensive package featuring a broad range of Health, Life, Voluntary Lifestyle benefits and other perks that enhance your physical, mental, emotional and financial wellbeing. We're able to answer any additional questions you may have about our bonus structure (short-term incentives, long-term incentives and/or sales compensation) as you move through the selection process."