Firewall / Network Engineer Jobs

Work Location: Denver, CO / Remote

Applied Future Technologies is actively seeking an Firewall/Network Engineer (NE) to join our Denver-based team and support the network engineering efforts for a government client in a 10,000+ seat, 1,000 servers wired and wireless network with 200 sites and a public DMZ, all of which much meet NIST standards. Preference is that the selected candidate would have access to the Denver Office, but we will consider virtual staff.

AFT is a growing small business concern providing Systems Engineering and Technical Assistance to our government and commercial customers. Our services include custom-engineered solutions that integrate with the latest technology, resulting in advanced information technology systems; business and management consulting services to assess client business practices; and strategic and tactical program expertise to support continuity and provide comprehensive oversight for mission-critical initiatives.

We partner with government and commercial agencies that require the development of systems, such as communication systems, asset management, network deployment and engineering services, power and energy management solutions, portal applications, command and control, and GIS (Geospatial Information Systems) to operate more efficiently and profitably.

As a growing IT consulting and strategic outsourcing provider, we are always looking for exceptionally bright and motivated people to join our team. AFT offers competitive salaries and a comprehensive employee benefits package. If you are looking for an opportunity to use your skills in innovative ways, in an environment that promotes freethinking, presents positive challenges, and makes a real impact – AFT is the place for you!

Responsibilities:

The selected candidate will be responsible for the network administration of a distributed enterprise network, field sites, data centers, and Disaster Recovery site. Understanding of TCP/IP and dynamic routing protocols, Web application firewalls, DNS/Linux, Network Security skills, load balancing, multi-site architecture, datacenter design, and network security would be beneficial.

Key Tasks:

• Perform risk assessments of Firewalls, Wireless Networks, Routers, Switches, and the traffic that flows through them.
• Design Security IP networks and participate as part of high-level design teams ensuring the networks and services will confirm to an acceptable risk posture.
• Evaluate the effectiveness of security logging for network devices and the systems on the network.
• Dissect network traffic at the application, segment, packet, and frame levels to determine what is occurring or has occurred on the network.

Key Technologies:

• Firewalls (Cisco & Palo Alto)
• JSON Data Structures
• Web Application Firewalls (Imperva & Barracuda)
• Cisco ASDM with experience with Cisco Security Manager system.
• HTTP/2 & Websocket Protocol
• Load balancers (Kemp)
• Bind v9
• Proficient in Cisco Network hardware (ex. switches, routers, firewalls)
• OpenSSL
• Splunk
• Linux & CUPS
• Riverbed application and network monitoring suite
• Owasp 10

Education and Experience:

• A four-year technical degree such as Computer Science, Business Information Systems, or Engineering is required; or 5+ years of experience will be considered in lieu of a degree.
• 5+ years of experience as a network engineer, or network architect is required.

Required Skills and Competencies:

• Deliver high-quality technical deliverable focusing on documentation.
• 2+ years of experience with Imperva WAFs
• CCNA (Cisco Certified Network Associate) or Network+
• Conduct root cause analysis of network device, system, and service related incidents
• Proactively monitor, manage, and respond to facility hardware, software, and infrastructure problems in the support of network systems across the enterprise while ensuring compliance with change and governance processes.
• Engage, interact with, and drive vendor and peer support team resolution of Network related incidents
• Engineer completely innovative solutions and/or incremental features to existing products.
• Possess an understand of relevant NIST standards regarding security controls for networks and systems.
• Deploy, configure, upgrade, and troubleshoot firewall, Web application firewall, switches, and routers.
• Perform network analyzes utilizing logs and packet captures.
• Facilitate deployment of application into a DMZ utilizing firewalls, web application firewalls, and DNS.
• 2+ years of experience with Palo Alto Next Gen firewalls

Desired Skills:

• CCNP (Cisco Certified Network Professional)
• Experience working in an ITIL environment; (ITIL v3 certification highly desired)
• TIC 3.0
• Riverbed network suite (Steelcentral & Steelheads)
• Cisco CSM 4.x
• BIND 9
• Tacacs 5.x
• SuSe Linux

The successful candidate is subject to a U.S. Federal Government background investigation and must be able to meet the requirements to hold a position of public trust or higher. Candidate must reside in the United States.

As a federal contracting company expected to fall under the Safer Federal Workforce Task Force (https://www.saferfederalworkforce.gov/faq/contractors/).