Cybersecurity Infrastructure Engineer (FireMon)
At phia we hire talented and passionate people who are focused on collaborative, meaningful work, providing technical and operational subject matter expertise and support services to our partners and clients.phia is currently seeking a Cybersecurity Infrastructure Engineer (FireMon) to support a large Federal agency enterprise network and cybersecurity infrastructure configuration, management, monitoring, and optimization. While this opportunity is contingent upon a contract award, we welcome the start of a conversation now! Hybrid flexibility within the DMV (DC/MD/VA) Metro area
What You'll Do
- Support the configuration, monitoring, and reporting of network and cybersecurity infrastructure capabilities for a large enterprise (over 80,000 users).
- Consult with infrastructure management to customize and configure FireMon Security Intelligence Platform Monitoring to meet specific Department and DHS requirements.
- Analyze information maintained within the FireMon Security Intelligence Platform and track, analyze, and report on risks in alignment with policy, standards, processes, and controls.
- Review and analyze firewall configurations for enhancements, optimal configurations, and network connectivity.
- Apply configuration parameters on routers, firewalls, and security per NIST 800-53 controls in on-premises and cloud environments, with updates included in quarterly reports to the Information System Security Manager (ISSM).
- Provide ad-hoc configuration of firewall or security appliances and network protection components (e.g., routers, switches, intrusion prevention devices - Cisco, Fortigate, Riverbed, Juniper), with reports detailing the logical implementation architecture and detailed descriptions.
- Make recommendations regarding the configuration of enterprise perimeter UTM devices for security posture and configuration (per NIST 800-53 and industry best practices for Cisco, Juniper, Riverbed, and Fortigate).
- Document configuration and computer protection components (e.g., hardware, firewalls, servers, routers).
- Perform technical writing, create formal documentation (SOPs, reports, training materials, and architecture diagrams), and configure/operate the FireMon Security Intelligence platform to provide quarterly status reports of firewall rules reviewed, errors found, and devices configured and deployed in support of enterprise IT security requirements.
- Provide detailed reporting, as directed, on the implementation, design, and audit of firewalls and advanced configurations that support software-defined networks.
- Produce reporting for enterprise FireMon Security Intelligence Platform infrastructure in support of the Department of Homeland Security (DHS) Continuous Diagnostics and Mitigation (CDM) program and associated Approved Products List (RSA Archer, Splunk, IEM, Fireeye, etc.).
- Maintain proper custody of evidence.
- Support risk analysis and approval processes for deviation/exemption requests to enterprise-wide Web Filtering, SSL Inspection, Data Loss Prevention (DLP), and IT Configuration Management policies.
Education + Requirements
- 5 years of related professional experience, or
- Bachelor's degree + 1 year of related experience
- Excellent written and oral communication skills.
- Able to express technical concepts and operational details in relevant ways to non-technical audiences.
- Knowledge and documented experience with network and cybersecurity infrastructure technology.
Security Clearance
- U.S. citizenship
- Ability to achieve Public Trust or higher