Host Defense Design Engineer (Sr)

Quantico, VA Job Type Full-time, Contract Description **Responsibilities:**

* Assists the Government Lead in the daily engineering duties on systems.

* Operate and manage all aspects of Information Systems, data availability, integrity, authentication, confidentiality, and non-repudiation.

* Implement and monitor security measures for communication systems and networks while ensuring that systems and personnel adhere to established Government security requirements.

* Design, develop and execute security policies, plans, and procedures.

* Design and implement data network security measures.

* Operate Network Intrusion Detection and Forensics. Conduct performance analysis of Information Systems security incidents.

* Develop Continuity of Operations Plan (COOP) and Disaster Recovery (DR) plans and support certification of Information Systems and Networks.

* Operate and design Host Based Security System (HBSS), Intrusion Prevention Systems, Intrusion Detection Systems, other point of presence security tools, and related security operations.

* Perform integration with Public Key Infrastructure (PKI) certificates and network accounts to support two-factor authentication for all Active Directory (AD) domain account categories and eliminate the need for password-based authentication.

* Monitor and optimize the replication speed of directory services.

* Design and implement the Enterprise Services portion of the Sensor Grid within the security infrastructure that collects intrusion, incident, and audit data from a collection of sources including but not limited to Content Monitoring products, Content Filtering products, HBSS for servers and hosts with the capability for packet capture, deep inspection, and customized signature capability.

* Design an automated logging aggregation system that compresses, correlates and provides 30 days of log data for analysis and audit from all sources.

* Design and integrate Computer Network Defense (CND) mechanisms, HBSS, and HBSS Device Control Modules at enterprise locations.

* Design Government provided components of HBSS to develop and maintain baseline.

* Conduct routine vulnerability scans.

* Design and implement anti-virus, scans, automation, and updates of servers/hosts. Assist with the development and integration of identity and access management requirements.

* Provide security updates in accordance with Government procedures for directory services.

* Use automated tools for data collection.

* Design and Operate configuration and integration and ePolicy Orchestrator (ePO) Servers.

* Execute antivirus product integration, configuration and Intrusion prevention, Endpoint encryption, and Data Loss Prevention (DLP).

* Oversee Rights Management Services for administrators, users and groups.

* Design tasks associated with application networking ports and protocols, Information Assurance (IA), routing and Local Area Network (LAN).

* Perform standard Active Directory services plus the availability to use Windows Light Directory Access Portal (LDAP) services for network devices and appliances.

* Experience with Navy/Marine Corps, Defense Information System Agency (DISA) and Joint interoperability of network design, integration and implementation.

Requirements **Education:**

* Bachelors Degree in Computer Science, MIS, Business, or related field

**Experience/skills:**

* Minimum of 10 years experience in general IT

**Certifications:**

* Information Technology Infrastructure Library (ITIL) version 3 Foundation certification.

* IAT Level III

**Clearance/Citizenship:**

* Secret

* Must be a U.S Citizen