DESCRIPTION

Department of Homeland Security (DHS), Customs and Border Protection (CBP) Security Operations Center (SOC) is a US Government program responsible to prevent, identify, contain and eradicate cyber threats to CBP networks through monitoring, intrusion detection and protective security services to CBP information systems including local area networks/wide area networks (LAN/WAN), commercial Internet connection, public facing websites, wireless, mobile/cellular, various cloud environments, security devices, servers and workstations. The CBP SOC is responsible for the overall security of CBP Enterprise-wide information systems, and collects, investigates, and reports any suspected and confirmed security violations.

BELOW ARE SOME TOOLS/SKILLS THE CANDIDATE SHOULD HAVE KNOWLEDGE OR EXPERIENCE ON:

• 
  5+ years’ experience in designing, implementing, and maintaining secure and scalable network solutions across on-premises and AWS cloud environments.
• 
  Experience on reviewing AWS firewall/security group requests from a security-first perspective.
• 
  Experience on troubleshooting and resolving networking issues in AWS environments.
• 
  Support and maintain large-scale AWS network architecture, including VPCs, DNS, subnets, routing, remote access technologies, and security constructs.
• 
  Experience on maintaining AWS Architecture using Terraform.
• 
  Experience using CloudFormation templates.
• 
  Build and manage solutions using Linux and Ansible for configuration in support of network and security operations.
• 
  Assist with network automation and scripting to streamline operations.
• 
  Collaborate with cross-functional teams to ensure network and security policies are consistently applied.

BASIC QUALIFICATIONS

• 
  Bachelor’s degree in computer science, Engineering, Software Development, Information Technology, Cyber Security, or related field and 6 years of related experience. Additional years of experience and cyber certifications may be considered in lieu of degree.
• 
  Familiar with the management, operational, and technical aspects of IT Security in a complex enterprise environment. Additional experience in cyber risk management and assessments will be considered.
• 
  Knowledge and familiarity with in-depth analysis of Zero Trust and AWS Capabilities, Infrastructures and Architecture.
• 
  Solid understanding of network security, routing, subnetting, and troubleshooting.

Proficient with Linux systems and automation using Ansible.

• Must be a US citizen.

PREFERRED QUALIFICATIONS:

• 
  Ability to learn and support new systems and applications.
• 
  Redhat, Cisco or Microsoft, Security+, Linux+, or Network+ certifications .
• 
  Cisco Hardware and Storage .
• 
  Expertise in Networking, Linux and Windows.
• 
  Sourcefire (snort) or RSA Security Analytics (network) experience a plus .
• 
  Ability to script in one more of the following computer languages Python, Bash, Visual Basic or Powershell.
  Come break things (in a good way). Then build them smarter.
  We’re the tech company everyone calls when things get weird. We don’t wear capes (they’re a safety hazard), but we do solve high-stakes problems with code, caffeine, and a healthy disregard for “how it’s always been done.”

We are seeking a skilled and motivated Network Engineer with a strong background in both traditional and cloud-based networking environments. The ideal candidate will bring deep technical expertise in AWS cloud, network firewalls, and endpoint security tools, along with experience working in Linux and Windows environments. This role will be instrumental in ensuring the resilience, security, and performance of our global network infrastructure.