Job Description
TITLE: Infrastructure Engineer 3
SPECIALTY: Firewall
Application Deadline: 8/5/2020
LOCATION: Portland, OR
JOB LENGTH: Multi-year opportunity with a full benefits package
POSITION OVERVIEW:
This contract Infrastructure Engineer position is located in the Network Services (JNDN) within the IT department (JN) of our Client. This position supports implementation of Demilitarized Zone (DMZ) security in an Internet/intranet environment. Firewalls are the primary protection devices on Client’s outward-facing computer environments and are integrated with IPS (Intrusion Prevention Systems) to ensure highly secured web, mail and data activities.
POSITION RESPONSIBILITIES:
· Administer firewall processes to verify data security.
· Install, test, and configure Firewalls and other DMZ Systems.
· Provide support for Network security operations, performance, and planning.
· Review configuration and life cycle management concepts of current Client network services and provide recommendations to the Client Manager for the acquisition of new or upgraded services.
· Monitor system performance and execute approved preventative maintenance.
· Participate in planning, installing and maintaining network services, such as:
o Forward Proxy Servers (e.g. Websense / Palo Alto)
o Web Connectivity (HTTP/HTTPS)
o Reverse Proxy Servers / Application Delivery Controllers (e.g. Citrix NetScalers/ F5 BIG-IP)
o Encrypted Remote Access and Site-to-Site (VPN)
o Domain Name Server (DNS) – including DNSSec
o Intrusion Prevention Systems (IPS)
o Firewall services (Check Point / Palo Alto / Cisco)
· Provide support in monitoring, troubleshooting and sniffing the DMZ using the firewall and IPS systems.
· Provide network administration by supporting:
· Installations
· Configurations
· Troubleshooting LAN and WAN components such as routers, hubs, switches, and monitors
· Create network maps and topologies.
· Troubleshoot and monitor network problems; e.g., connectivity failures.
· Assist with the development and implementation of Client Manager approved configuration management plans for secure, complex environment.
· Identify the need to upgrade or enhance network component capabilities in response to network problems and deficiencies; e.g., degradation of service.
· Configure Cisco ASA 5500X series appliances.
· Install and Configure Checkpoint / Palo Alto firewalls.
· Install, patch and monitor RHEL 6 or above.
· Using IT and security best practices and established processes, analyze risk of existing and proposed system architectures and their security policies.
· Using IT and security best practices and established processes, document risks and propose risk treatment plans for information systems. Alert Client Manager of any risks to Client Systems.
· Review operating practices and documentation to verify if controls and security measures are adequate. Recommend necessary changes and alert the Client manager of any concerns.
· Propose updates to technical control standards supporting the various platforms, systems, and environments.
· Conduct vulnerability testing in all environments (development, test, and production). Notify the Client manager if vulnerabilities are detected.
· Review system logs and monitoring tools for potential incidents. Alert the Client Manager of any concerns.
REQUIREMENTS EDUCATION & CORRESPONDING EXPERIENCE:
• A Bachelor’s degree in Computer Science or Information Technology is preferred.
o With an applicable Bachelor’s degree, 6 years of experience is required.
o Without an applicable Bachelor’s degree, 10 years of experience is required.
• Experience should be directly related to IT Infrastructure Engineering and include work in hands-on technical implementation of networks and systems.
REQUIRED TECHNICAL SKILLS & EXPERIENCE:
· 5 years of Network Firewall Administration experience in an enterprise environment (Combined experience with Check Point or Palo Alto Firewalls and Cisco ASAs.).
· Network, firewall, and IPS design, principles and concepts as implemented in a fault tolerant, centrally managed infrastructure.
· Network topology concepts in a routing schema.
· Firewall configuration, rule installation & troubleshooting, and access reporting concepts and practices.
· Intrusion Prevention System concepts, and practices.
· Network operation and maintenance concepts and methods.
· Network architecture principles and concepts and Network management tools.
· LAN and WAN development principles and methods.
· Cisco ASA 5500X series appliances.
· Unix/Linux command line experience (BASH).
· Ability to perform analysis of in-place technical and non-technical security controls protecting information and information systems.
· Ability to clearly communicate results of discussion, artifacts and recommendations.
· Knowledge of security incident handling, response and follow-up.
PREFERRED SKILLS & EXPERIENCE:
· Familiarity with the System Development Life Cycle and the 800 series of National Institute of Standards & Technology (NIST) Special Publications (in particular 800-37, 800-39, 800-53, 800-53A, 800-94 and 800-115).
· Knowledge of the Federal Information Security Management Act (FISMA) and its implementation through NIST 800-53.
· Experience with RHEL 6 (installation, patching, monitoring) or above.
· Experience with Compliance Audits.
PRE-EMPLOYMENT REQUIREMENT:
All employment offers are contingent upon successful completion of our pre-employment screening that may include drug testing, background/criminal check, and if applicable, must meet eligibility requirements for access to classified information.
ABOUT APR STAFFING:
APR Staffing was born from the merger of two well-respected technical staffing firms in Portland. ieSolutions, founded in 2002, enjoyed an impressive reputation as one of the largest locally-owned and most respected technical staffing companies. Professional Resource Group, aka Data Resource Group, founded in 2009, also earned regional acclaim for being a fast-growing and highly-motivated professional staffing agency. Both companies have been recent award winners for the Portland Business Journal's Fastest-Growing Private Companies. The two firms, now as APR Staffing, make for one of the fastest-growing and most-respected professional and technical staffing companies in Oregon and Southwest Washington.
Collaborating with our customers, we augment their workforce with technical and administrative professionals. We provide only high-caliber, professional-grade resources throughout the Pacific Northwest.
APR Staffing is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, age, sexual orientation, gender identity, national origin, disability, protected veteran status, or any other characteristic protected by law.
Company Description
APR Staffing was born from the merging of two well-respected staffing firms in Portland. ieSolutions, founded in 2002, has a long history as one of the largest locally owned technical staffing companies. Professional Resource Group, aka Data Resource Group, founded in 2009, also earned wide-spread acclaim for being a fast-growing and highly motivated professional staffing agency. Both companies have been recent award winners for the Portland Business Journal's Fastest Growing Private Companies. The two firms, now as APR Staffing, make for one of the fastest growing and most respected professional staffing companies in Oregon and Southwest Washington. Collaborating with our customers, we augment their workforce with technical and administrative talent. We provide information technology, engineering, operation, technician, analyst, project management and administrative talent to our clients through out the Pacific Northwest. APR Staffing is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, age, sexual orientation, gender identity, national origin, disability, protected veteran status, or any other characteristic protected by law.