Network Security Engineer IV

Location: Virginia Beach, VA
Job Type: Full-Time
Clearance Level: Secret

AERMOR is seeking a dynamic and highly skilled Network Security Engineer IV to join our cybersecurity team and take the lead in securing complex enterprise networks.

Key Responsibilities:

• Lead the design, implementation, configuration, and enforcement of network security controls across hardware, software, and network components.
• Implement Security Technical Implementation Guides (STIGs) to ensure compliance and system hardening for secure network environments.
• Manage enterprise-level Active Directory deployments, ensuring robust identity and access controls.
• Perform vulnerability assessments using the Assured Compliance Assessment Solution (ACAS) tool and lead remediation initiatives.
• Configure and maintain Cisco networking devices, optimizing performance while securing network traffic.
• Utilize packet analyzer tools such as Wireshark and tcpdump to monitor, analyze, and troubleshoot network traffic and connectivity issues.
• Detect, investigate, and resolve network connectivity issues, ensuring minimal downtime and optimal performance.
• Implement and manage firewalls and Intrusion Detection/Prevention Systems (IDS/IPS) to protect network perimeters and sensitive data.

Required Qualifications:

• Bachelor of Science (B.S.) degree in one of the following fields:
  • Information Systems
  • Information Technology
  • Computer Science
  • Computer Engineering

• Cisco Certified Network Professional (CCNP) certification (required).

• A combined total of ten (10) years of full-time professional experience in the following disciplines:
  • Network Security: design, implementation, configuration, and enforcement of security controls across network, hardware, and software systems.
  • STIG implementation for securing network environments.
  • Enterprise-level Active Directory deployment and management.
  • Performing vulnerability assessments using ACAS and applying remediation strategies.
  • Configuring Cisco networking devices in enterprise environments.
  • Packet analysis with tools like Wireshark and tcpdump.
  • Troubleshooting network connectivity issues in complex environments.
  • Implementing and managing firewalls and IDS/IPS solutions for robust perimeter defense.