Primary Responsibilities:

We are seeking a skilled and motivated Network Engineer with a strong background in both traditional and cloud-based networking environments. The ideal candidate will bring deep technical expertise in AWS cloud, network firewalls, and endpoint security tools, along with experience working in Linux and Windows environments. This role will be instrumental in ensuring the resilience, security, and performance of our global network infrastructure.

Below are some tools/skills the candidate should have knowledge or experience on:

· 5+ years’ experience in designing, implementing, and maintaining secure and scalable network solutions across on-premises and AWS cloud environments.

· Experience on reviewing AWS firewall/security group requests from a security-first perspective.

· Experience on troubleshooting and resolving networking issues in AWS environments.

· Support and maintain large-scale AWS network architecture, including VPCs, DNS, subnets, routing, remote access technologies, and security constructs.

· Experience on maintaining AWS Architecture using Terraform.

· Experience using CloudFormation templates.

· Build and manage solutions using Linux and Ansible for configuration in support of network and security operations.

· Assist with network automation and scripting to streamline operations.

· Collaborate with cross-functional teams to ensure network and security policies are consistently applied.

Basic Qualifications

o Bachelor’s degree in computer science, Engineering, Software Development, Information Technology, Cyber Security, or related field and 6 years of related experience. Additional years of experience and cyber certifications may be considered in lieu of degree.

o Familiar with the management, operational, and technical aspects of IT Security in a complex enterprise environment. Additional experience in cyber risk management and assessments will be considered.

o Knowledge and familiarity with in-depth analysis of Zero Trust and AWS Capabilities, Infrastructures and Architecture.

o Solid understanding of network security, routing, subnetting, and troubleshooting.

o Proficient with Linux systems and automation using Ansible.

Clearance:

o All Department of Homeland Security CBP SOC employees are required to pass a 5-year (BI) Background Investigation.

Preferred Qualifications:

o Ability to learn and support new systems and applications.

o Redhat, Cisco or Microsoft, Security+, Linux+, or Network+ certifications

o Cisco Hardware and Storage

o Expertise in Networking, Linux and Windows

o Sourcefire (snort) or RSA Security Analytics (network) experience a plus

o Ability to script in one more of the following computer languages Python, Bash, Visual Basic or Powershell