Network Engineer III (TS SCI with Poly)

** MUST HAVE TS SCI WITH POLY TO BE CONSIDERED **

Aperio Global is seeking a motivated Network Engineer with the right knowledge, skills, and abilities to support a new initiative.

Your Main Objective: Provide network and systems administrator support to the Defensive Network Operations (DNO) program for the development an maintenance of the Innovation and Training Center for mission customers. The DNO program provides trained and equipped remote and deployed teams and operations mangers to conduct cybersecurity assessments in support of intelligence customers, the Defense Industrial Base and Critical Networks and Systems sectors. As well as conducts the following types of assessments in support the mission customer: Strategic Vulnerability Assessment (Blue Team), Adversary Emulation (Red Team), Target Hunt, Incident Response, Joint COMSEC Monitoring and Operations Management. We are looking for a network engineer to support Cyber Security Defensive Operations with configuration of Cyber Range consisting of 10s to 100s of VMs, physical and virtual network devices, and firewalls utilizing Infrastructure as Code (IaC), Terraform, Ansible, VMWare and other automation technologies. You will work closely with Hunt, Red and Blue Team operators to understand their desired configurations for the Cyber Security Range to support training, force on force exercises, and mimicking of customer infrastructures. You will work with a team of other Software Engineers, System Administrators, Network Engineers and Systems Engineers supporting the Cyber Range and develop innovative solutions to complex problems.

You will be part of a larger development team supporting the Cyber Security Directorate's Defensive Network Operations organization with direct mission support activities when not working on the Cyber Range.

Additional expected tasks include:

Providing Tier 1/2/3 technical services to perform daily monitoring and troubleshooting of the Innovation and Training Center componentsProvide maintenance and support for active usage of the Innovation and Training Center, this includes building physical and virtual instances for lab, exercise, training, and other use, tearing down the instances after use is completed, and preparing Innovation and Training Center for the next use;End user support and troubleshooting during all uses of the Innovation and Training Center;Provide installation, upgrade, maintenance and support, patching, troubleshooting and removal of Innovation and Training Center hardware including servers, switches, routers, and firewalls;Configure and administer next generation firewalls (e.g. Palo Alto, McAfee) and suggest new rules, routines, and indicators of compromise.Lead network engineering efforts through subject matte expertise and understanding of the system;Build and maintain complex Linux systems hardened to meet operational standards;Provide installation, upgrade, maintenance and support, patching, troubleshooting and removal of all Innovation and Training Center software;Enable orchestration and automation of the Innovation and Training Center utilizing automation systems such as Puppet, Kickstart, Packer, Terraform, Ansible and Bash/Python scripts;Implement a health and status monitoring solution and,Setup and assist with Microsoft Environments (e.g. Group Policy, Active Directory, etc.), container technologies like Docker and Gluster/libvirt Linux knowledge/abilities and similar technologies.

What You'll Need;

TS SCI WITH POLYBachelor's degree plus 8-years of relevant experience, or Master's degree plus 6-years of relevant experience or an Associate's degree plus 10-years of relevant experience or high school diploma/GED plus 12-years of relevant experience may be considered.Degree must be in Network Engineering, Systems Engineering, Information Technology, or related field.Relevant experience must be in computer or information systems design/development, programming, information/cyber/network security, vulnerability analysis, penetration testing, computer forensics, information assurance and/or systems engineering. Additionally, must have experience in network or system administration.

TS/SCI clearance with polygraphCurrent experience with management of virtualized infrastructure, to include multi-node and multi-site networksExperience with networking and virtualizationExperience with building and maintaining networks consisting of physical and virtual equipmentExperience with standard network services – DNS, DHCP, NTP, Syslog, etc.Experience configuring and administering next-generation firewalls (e.g. Palo Alto, McAfee)Experience with Infrastructure as Code (IaC)Experience with scripting languages such as Bash, PowerShell, Batch, and PythonExperience with Terraform and AnsibleExperience with Puppet, Kickstart, PackerExperience with cybersecurity tools, network configurations, and operational toolsKnowledge of operating systems, including Windows and Linux, application behaviors, and network traffic analysisExperience in a fast-paced environment and working with flexible customer requirements

Desired Skills:

Experience operating in an agile development environment and DevOpsExperience with container technologies such as Kubernetes and DockerKnowledge of penetration testing or red team operationsExperience utilizing and development with SplunkExperience with NutanixDefensive Cyber Security Operations​

164-184K