Nakupuna Consulting is seeking to hire a Network Firewall Engineer to work as a member of the Defense Advanced Research Projects Agency (DARPA) Information Technology Directorate (ITD) Software-Defined Wide Area Network (SD-WAN) Tech Refresh Technical Implementation Team. The ideal candidate will be an integral part of our team, demonstrating responsiveness, excellent communication skills (verbal, written, and listening), teamwork, a consensus-building approach, a passion for learning, and outstanding problem-solving abilities.

The following reflects management’s definition of essential functions for this job but does not restrict the tasks that may be assigned. Management may assign additional duties and responsibilities to this job at any time due to reasonable accommodation or other reasons. TheNetwork Firewall Engineer will perform a wide-range of network-related duties, including the design, implementation, and maintenance of complex networks. The Firewall Engineer will take a lead role in the following areas: 

• Technical Leadership: Provide technical leadership in the support of complex network and server operating system environments. Lead network and voice design, disaster recovery planning, capacity planning, and complex server and network configurations.
• Network Security and Maintenance: Design, implement, and maintain secure and complex networks. Ensure robust network security, perform administration and monitoring of network and voice services, and manage upgrades, troubleshooting, and maintenance for network-related projects.
• Infrastructure Support: Apply in-depth knowledge to support network infrastructure including but not limited to email, storage management, file and print services, routers, wireless access points, switches, firewalls, network-related software, network management systems, and backup and disaster recovery services.
• Advanced Configuration and Troubleshooting: Configures, manages, maintains, and troubleshoots Cisco ASA and FirePower firewalls, including experience with ACLs, S2S VPNs, BGP, IPSec, routing, optimizing/tuning, and troubleshooting in multi-context mode.

Education and Experience: Possession of a bachelor’s degree in an IT-related or Engineering field, or a closely related field is preferred. A minimum of 4 years of professional experience within the DoD and an Information Assurance Technical (IAT) Level I Certification.  Minimum of four (4) years of broad, extensive, and increasingly responsible full-time experience in planning, designing, installing, and maintaining complete network infrastructure within a centralized IT organization in a high-availability environment. At least one (1) year of this experience must be in a lead capacity.

Clearance Requirements: This position requires an active TOP SECRET security clearance, with the ability to obtain “Sensitive Compartmented Information” within DARPA. Must be a U.S. citizen.

Skills Required:

• Advanced skills in network monitoring tools and comprehensive knowledge of protocols, emerging network technologies, network security, and network infrastructure components.
• Proficiency in designing and implementing solutions over Internet Protocol (IP), including audio, video, telephony, and data services.

Skills Preferred:

• Experience with Cisco ASA Firewalls in multi-context mode, Cisco FirePower Firewalls, Palo Alto Firewalls, SonicWall Firewall, Cisco CLI, Cisco ACL, and Cisco S2S VPNs.

Experience Preferred:

• Extensive firewall engineering and operations experience, primarily with Cisco FWs.
• Proficiency in configuring, managing, maintaining, and troubleshooting Cisco ASA and FirePower firewalls, Cisco FirePower IPSs, and working closely with Datacenter Engineers and Security teams on network configurations and troubleshooting.

Work Location: Core work hours are 8:00 AM to 4:30 PM, arriving no earlier than 6:30 AM and departing no later than 6:30 PM Monday thru Friday except Federal holidays or when the Government facility is closed.

Physical Requirements: 

• Frequently lift and/or move parts up to 40lbs, and occasionally lift and/or move parts up to 50lbs 
• Stand, walk, stoop, kneel, crouch, or crawl for many continuous working hours 
• Frequently use arms, hands, and fingers to grasp and move network equipment 
• Frequently bend, stretch, twist, or reach overhead when moving network equipment