Cloud Network Security Engineer

Bethesda, MD

Must be a US Citizen, able to obtain Public Trust Clearance

@Orchard LLC is searching for a driven and dynamic Security Engineer to join our growing team. This position is based in Bethesda, MD. This role provides support to our client in cloud architecture, data interoperability, and security engineering support for the SCHARE platform and related data environments. This includes secure cloud configuration, metadata architecture, system integration across platforms, API enablement, and compliance with agency and federal government cybersecurity and information management regulations and requirements. The role also supports ATO-related activities in coordination with the agency CIO organization, including preparation of technical artifacts and remediation support, implementation and maintenance of technical controls, vulnerability remediation, and securing data environments to ensure ongoing compliance.

Responsibilities

• Create network traffic rules in Azure
• Create network routing maps
• Maintain documentation of subnets (13+), VLANs, and VoIP
• Manage SSL certificate requests
• Run PowerShell reports on Active Directory objects
• Stand-up cloud networking resources
• Process DNS requests for public websites and IT resources (IPAM, Infoblox)
• Interface with external IT service providers regarding networking change requests from lab staff
• Test data transfer rates and channel bandwidth between buildings
• Gather data storage requirements from lab staff for implementation into the existing IT data storage architecture
• Perform analysis, diagnosis, and troubleshooting of complex system security issues
• Recommend, design, develop, test, configure, and implement a broad array of system security solutions
• Inform and escalate security risk problems, such as high/critical vulnerabilities and risk acceptance methods
• Support a federal healthcare enterprise environment by collaborating with and providing support to other IT Operational Service Areas (Server/Storage, Network, Service Desk, Application Development) in the design, development, and testing of solutions, as well as diagnosing, troubleshooting, and remediation of issues
• Draft and maintain technical design and Standard Operating Procedure (SOP) documents
• Document work performed in the issue tracking system
• Provide recommendations for mitigations or corrective actions to resolve identified vulnerabilities or security concerns, and take corrective actions at the direction of the customer

Qualifications

• Bachelor’s degree in computer science, engineering, or a related field or an equivalent combination of education and experience and appropriate technical certifications, with at least twelve (12) years of experience in information technology and (4) years leading or performing systems engineering or related functions.
• This position requires strong written and verbal technical communication skills, excellent organization and time management skills, and the ability to handle multiple competing priorities.
• Experience managing private networks within Azure
• Comprehensive RBAC and EntraID knowledge
• Able to work with vendors to evaluate, procure, implement, and maintain SaaS tools
• Able to work within a ticketing system (SNow) to process various engineering-related requests
• Basic understanding of SQL, database, and web-app resources
• Exposure to and experience managing resources within Azure and AWS
• Experience managing SaaS/PaaS tiered storage tools
• Experience with Kubernetes, Docker, or other containerization tools
• Experience with endpoint management tools such as Intune/Ivanti/PDQ/Jamf
• Experience with Cisco ISE (NAC), Infoblox (IPAM), and AWS (archival storage)
• Passion and skill for quickly learning new tools and approaches
• Ability to adapt to rapidly changing requirements with a flexible and creative engineering-focused approach to brainstorming, troubleshooting, and problem-solving
• Must be able to obtain a Public Trust clearance 

Preferred Certifications

One or more of the following certifications from (ISC)², CompTIA, SANS, or other well-recognized certifying body:

• (ISC)² Certified Information Systems Security Professional (CISSP)
• CompTIA Advanced Security Practitioner (CASP+)
• MSCE: Microsoft Certified Solutions Expert (current or current version-1)

Compensation: Compensation ranges are determined by several factors, including skill set, experience, licensure, certifications, and location. The anticipated range for the base salary for this role is $75K to $80K. There may be some flexibility for exceptionally qualified individuals.

Established in 2010, @Orchard LLC has an exceptional reputation, providing staffing solutions to time-sensitive, talent-scarcity issues to deliver better talent management ROI.  Our specialty lies in the critical area of program talent acquisition and resource management, not in one narrow skillset, but across many areas of technical and functional delivery. To learn more about our other exciting opportunities, visit our Jobs Page at www.atOrchard.com.