Network Vulnerability Remediation Engineer – Mid

This is a fully remote position, open to applicants in United States.

📋 Description

• Analyze and address security vulnerabilities impacting enterprise network devices and infrastructure.

• Assess vulnerability reports, vendor security updates, patches, and suggested mitigation strategies.

• Create, test, and deploy security patches, configuration modifications, and solutions for vulnerability remediation.

• Implement authorized network configuration changes and vendor updates through established ASI and change-management protocols.

• Aid in fulfilling DoD security requirements, which include STIG implementation and network hardening.

• Work collaboratively with Information Assurance teams and the AGUN Cybersecurity Service Provider (CSSP) to mitigate security risks and ensure compliance.

• Resolve network connectivity, performance, and security issues following remediation efforts.

• Conduct upgrades, patching, configuration management, and lifecycle maintenance of network devices.

• Prepare vulnerability assessments, patch/upgrade analyses, mitigation configurations, testing outcomes, and production release strategies.

• Record remediation activities, implementation outcomes, and evidence of ticket closure.

• Keep network configuration records, technical documentation, and operational procedures up to date.

• Operate independently on designated engineering tasks while collaborating with senior engineers on more intricate issues.

⛳️ Requirements

• Active DoD Secret security clearance and U.S. citizenship are required.

• A bachelor's degree in a relevant technical discipline with 4–8 years of pertinent experience, or around 8–12 years of relevant experience without a degree.

• DoD 8570/8140 IAT Level II certification, such as Security+.

• An approved Computing Environment (CE) certification is necessary.

• Practical experience with network device patching, firmware upgrades, configuration management, and vulnerability remediation.

• Comprehensive knowledge of enterprise networking, including LAN/WAN, BGP, TCP/UDP, IPSec, VPNs, Layer 2/Layer 3 routing, MPLS, and firewalls.

• Experience with at least one network management platform: Palo Alto Panorama, Cisco Prime, Cisco DNA, or Junos Space.

• Hands-on experience with at least two of the following: Cisco, Juniper, Palo Alto, Dell Networking, Remote Access VPN (RAVPN), GlobalProtect, or AppGate.

• Experience in implementing DoD STIGs and securing network hardening.

• Familiarity with SFTP, SSH, SCP, SNMP, and NTP.

• Capability to troubleshoot and resolve moderately complex network challenges.

• Excellent communication, documentation, and customer interaction skills.

• Ability to work independently and collaborate with technical teams dispersed across different locations.

• Willingness to work nonstandard shifts when necessary.

• Readiness to travel up to 10% of the time.

• Preferred: experience supporting U.S. Army, DISA, or other DoD enterprise networks.

• Preferred: CCNA, CCNP, or equivalent networking certification.

• Preferred: experience in network modernization, migration, or infrastructure transformation.

• Preferred: hands-on expertise with Cisco SD-WAN.

• Preferred: experience configuring or supporting Palo Alto Next-Generation Firewalls.

• Preferred: familiarity with virtualized network infrastructure.

• Preferred: knowledge of Git, GitLab CI/CD, Ansible, Terraform, or Puppet.

• Preferred: basic Python scripting skills for network automation.

• Preferred: experience supporting extensive, geographically dispersed enterprise networks.

• Preferred: familiarity with DoD cybersecurity policies and compliance standards.

• Preferred: experience creating network diagrams, configuration records, and technical documentation.

🏝️ Benefits

• Remote work arrangement available.

• Up to 10% travel required.

• Opportunity to contribute to the U.S. Army's global operations.

• Collaborate with seasoned network engineers and cybersecurity experts.