Senior Host Defense Design Engineer with Security Clearance
o Assists the Government Lead in the daily engineering duties on systems.
o Operate and manage all aspects of Information Systems, data availability, integrity, authentication, confidentiality, and non-repudiation.
o Implement and monitor security measures for communication systems and networks while ensuring that systems and personnel adhere to established Government security requirements.
Design, develop, and execute security policies, plans, and procedures.
o Design and implement data network security measures.
Operate Network Intrusion Detection and Forensics.
Conduct performance analysis of Information Systems security incidents.
Develop Continuity of Operations Plan (COOP) and Disaster Recovery (DR) plans and support certification of Information Systems and Networks.
o Operate and design Host Based Security Systems (HBSS), Intrusion Prevention Systems, Intrusiono Detection Systems, other point of presence security tools, and related security operations.
Perform integration with Public Key Infrastructure (PKI) certificates and network accounts to support two-factor authentication for all Active Directory (AD) domain account categories and eliminate the need for password-based authentication.
o Monitor and optimize the replication speed of directory services.
Design and implement the Enterprise Services portion of the Sensor Grid within the security infrastructure that collects intrusion, incident, and audit data from a collection of sources including but not limited to Content Monitoring products, Content Filtering products, HBSS for servers and hosts with the capability for packet capture, deep inspection, and customized signature capability.
Design an automated logging aggregation system that compresses, correlates, and provides 30 days of log data for analysis and audit from all sources.
o Design and integrate Computer Network Defense (CND) mechanisms, HBSS, and HBSS Device Control Modules at enterprise locations.
Design Government-provided components of HBSS to develop and maintain a baseline.
Conduct routine vulnerability scans.
Design and implement anti-virus, scans, automation, and updates of servers/hosts.
Assist with the development and integration of identity and access management requirements.
Provide security updates in accordance with Government procedures for directory services.
Use automated tools for data collection.
o Design and Operate configuration and integration and ePolicy Orchestrator (ePO) Servers.
Execute antivirus product integration, configuration and Intrusion Prevention, Endpoint encryption, and Data Loss Prevention (DLP).
Oversee Rights Management Services for administrators, users, and groups.
Design tasks associated with application networking ports and protocols, Information Assurance (IA), routing, and Local Area Network (LAN).
Perform standard Active Directory services plus the availability to use Windows Light Directory Access Portal (LDAP) services for network devices and appliances.
Experience with the Military, Defense Information System Agency (DISA), and Joint interoperability of network design, integration, and implementation.
Must possess Information Technology Infrastructure Library (ITIL) version 3 Foundation certification.
Recommended Skills Auditing Automation Confidentiality Cryptography Data Collection Disaster Recovery Estimated Salary: $20 to $28 per hour based on qualifications.
o Operate and manage all aspects of Information Systems, data availability, integrity, authentication, confidentiality, and non-repudiation.
o Implement and monitor security measures for communication systems and networks while ensuring that systems and personnel adhere to established Government security requirements.
Design, develop, and execute security policies, plans, and procedures.
o Design and implement data network security measures.
Operate Network Intrusion Detection and Forensics.
Conduct performance analysis of Information Systems security incidents.
Develop Continuity of Operations Plan (COOP) and Disaster Recovery (DR) plans and support certification of Information Systems and Networks.
o Operate and design Host Based Security Systems (HBSS), Intrusion Prevention Systems, Intrusiono Detection Systems, other point of presence security tools, and related security operations.
Perform integration with Public Key Infrastructure (PKI) certificates and network accounts to support two-factor authentication for all Active Directory (AD) domain account categories and eliminate the need for password-based authentication.
o Monitor and optimize the replication speed of directory services.
Design and implement the Enterprise Services portion of the Sensor Grid within the security infrastructure that collects intrusion, incident, and audit data from a collection of sources including but not limited to Content Monitoring products, Content Filtering products, HBSS for servers and hosts with the capability for packet capture, deep inspection, and customized signature capability.
Design an automated logging aggregation system that compresses, correlates, and provides 30 days of log data for analysis and audit from all sources.
o Design and integrate Computer Network Defense (CND) mechanisms, HBSS, and HBSS Device Control Modules at enterprise locations.
Design Government-provided components of HBSS to develop and maintain a baseline.
Conduct routine vulnerability scans.
Design and implement anti-virus, scans, automation, and updates of servers/hosts.
Assist with the development and integration of identity and access management requirements.
Provide security updates in accordance with Government procedures for directory services.
Use automated tools for data collection.
o Design and Operate configuration and integration and ePolicy Orchestrator (ePO) Servers.
Execute antivirus product integration, configuration and Intrusion Prevention, Endpoint encryption, and Data Loss Prevention (DLP).
Oversee Rights Management Services for administrators, users, and groups.
Design tasks associated with application networking ports and protocols, Information Assurance (IA), routing, and Local Area Network (LAN).
Perform standard Active Directory services plus the availability to use Windows Light Directory Access Portal (LDAP) services for network devices and appliances.
Experience with the Military, Defense Information System Agency (DISA), and Joint interoperability of network design, integration, and implementation.
Must possess Information Technology Infrastructure Library (ITIL) version 3 Foundation certification.
Recommended Skills Auditing Automation Confidentiality Cryptography Data Collection Disaster Recovery Estimated Salary: $20 to $28 per hour based on qualifications.
|
|
 | |
