Network Security Engineer at Oneida Innovations Group in West Point, NY, USA

Job description

• We are seeking qualified Network Engineers to join our team serving the United States Military Academy (USMA) at West Point, NY. The role is onsite at USMA.
• The selected candidate will support the USMA Networking Service Branch's mission and strategic direction by providing knowledge, techniques, and expertise in configuring and administering a Cisco Networking environment across the USMA campus.
• Target Salary Range: $105,000 - $120,000
• Overview: Under general supervision, the Network Security Engineer will be responsible for the acquisition, installation, maintenance, and operation of USMA's local area network (LAN). This is a critical role tasked with managing network performance and ensuring the security of network infrastructure.

Responsibilities

• Acquire, install, and maintain all network hardware and software components, ensuring optimal performance and security.
• Manage network performance by monitoring and analyzing traffic, identifying issues, and implementing solutions.
• Ensure that security procedures are implemented, enforced, and regularly updated to align with industry standards.
• Evaluate, develop, and maintain telecommunications systems to support organizational operations.
• Troubleshoot and resolve network problems, ensuring minimal disruption to services.
• Establish and implement network policies, procedures, and standards that conform to information systems and organizational objectives.
• Train users on network operations and security best practices to enhance overall network security awareness.
• Report frequently to the assigned Support Manager and/or Senior Network Administrator on network performance and security status.
• Evaluate DoD and NIST security controls, determining their applicability to the environment while assessing potential impacts.
• Implement security controls as directed by the customer's Cybersecurity branch to enhance the security posture of the organization.
• Investigate and recommend new and emerging security paradigms to continuously improve network security.
• Collaboration with other USMA and OTS functions (Cyber, IT support, Enterprise Services, etc.) to resolve network related issues. The nature of the position involves actively participating in multiple working groups and disseminating information across all levels of the organization.
• Installation/Replacement/Management of Uninterruptible Power Supply (UPS) devices.

Requirements

• Cisco Certified Network Associate (CCNA) certification.
• Expertise in Internet Protocol version 6 (IPv6) design, implementation, management, and monitoring.
• Strong understanding of Zero Trust Architectures (ZTA) including enterprise implementation, configuration, management, monitoring, troubleshooting, and technology integration.
• Must meet minimum standards for DoD8140 certification for advanced-level work roles.
• Must be fluent in the principles and requirements of the CCIE Security and Cisco Certified Design Expert (CCDE) material, however certifications to CCIE and CCDE are not required.
• Proficient in network security concepts and technologies.
• Excellent problem-solving skills and attention to detail.
• Strong communication skills for effective user training and reporting.
• Ability to work collaboratively in a team-oriented environment.
• Advanced Certifications: Possession of advanced networking and security certifications such as Cisco Certified Network Professional (CCNP) or Cisco Certified Internetwork Expert (CCIE) is highly preferred, demonstrating a deeper level of expertise in network security and infrastructure.
• Experience with Network Security Frameworks: Proven experience with security frameworks and standards such as NIST Cybersecurity Framework, ISO 27001, and DoD RMF (Risk Management Framework) to ensure compliance and best practices in network security management.
• Proficiency in Network Management Tools: Familiarity with advanced network monitoring and management tools (e.g., SolarWinds, Wireshark, Nagios) for traffic analysis and performance optimization.
• Hands-on Experience with Firewall and IDS/IPS Technologies: Demonstrated experience in configuring and managing firewalls, intrusion detection systems (IDS), and intrusion prevention systems (IPS) to enhance network security.
• Knowledge of Cloud Security: Understanding of security protocols and practices related to cloud services and architectures (e.g., AWS, Azure) that support organizational operations.
• Scripting and Automation Skills: Proficiency in scripting languages (e.g., Python, PowerShell) to automate network tasks and enhance operational efficiency.
• Strong Analytical Skills: Ability to analyze complex network issues and provide clear, actionable recommendations to improve network performance and security.

Skills

Required

• Cisco networking
• IPv6
• Zero Trust Architectures (ZTA)
• Network security
• NIST Cybersecurity Framework
• ISO 27001
• DoD RMF
• SolarWinds
• Wireshark
• Nagios
• Firewalls
• IDS/IPS