Mahalo for your interest in this role! Please see the full position description below and click Start Your Application when ready. For more information about DAWSON, please visit dawsonohana.com
- Salary range - $180,000 to $210,000
- Location - Doha Qatar, Signal Corps campus - On-Site
- Provided - Housing, vehicle, $165/day for "Meals and Incidental Expenses" and 20% extra OCONUS pay
SUMMARY:
DAWSON has an opportunity for a Senior Network Systems Engineer in Qatar. The Sr. Network Systems Engineer will perform various network engineering and security tasks involving LAN/CAN/WAN physical and virtual network, implementation, testing and evaluation, and will work with the foreign military client to ensure successful operations and maintenance.
- This position also performs engineering, implementation and support activities for the system firewalls, and Voice over IP (VoIP) capability.
- The network engineer will work alongside the project Systems Engineer to integrate with Windows capabilities such as Active Directory, DNS, PKI, and work with our Virtualization Engineer to assure successful implementation, operations, and maintenance of the Hyper-Converged Infrastructure (HCI) systems, VMWare, thin clients, and VDI.
- This position is integral to engineering and deploying a secure computing environment for a foreign ally customer that introduces new capabilities and incorporates existing capabilities across multiple enclaves.
Additionally, this position is a blend of creating documentation and conducting technical capabilities. DAWSON is interested in hiring an individual that not only understands the Risk Management Framework but also has the technical acumen to implement network hardening, network management, and network monitoring and apply that knowledge across other IT Service technologies such as HCI, VMWare within a Windows Server enterprise (AD, DNS, SQL, etc.).
This challenging large-scale opportunity supports the foreign military operations in a small to medium size Enterprise. The Sr. Network Engineer will be responsible for integrating information assurance disciplines into the network and will serve as a mentor to the foreign military’s network team.
DUTIES AND RESPONSIBILITIES:
- Experience in Network Engineering to include network requirements derivation and analysis, network design, network visibility and analytics, network implementation, and network evaluation
- Identifies Information Protection needs and designs and maintains Network Security Architecture.
- Experience in evaluating proposed network architecture changes assuring information security principles
- Experience in identifying, researching, and mitigating against security weaknesses related to various network hardware and software
- Experience in providing subject matter expertise to share knowledge of network, VoIP, firewalls and security policies and procedures and operations and maintenance to new and mid-level network team members appointed by the foreign nation.
- Develops and maintains network security plans for employing enterprise-wide security architecture
- Performs network security analysis, network auditing, network monitoring, and network security testing
- Experience with network technologies and components such as NGFW, NIPS/NIDS, routers, call managers, and Active Directory integration.
- Expertise in maintaining DoD STIG compliance, apply software and firmware updates, and ability to provide inputs to US Government RMF processes in accordance with their and foreign nation-specific customer requirements
REQUIREMENTS AND QUALIFICATIONS:
- Required Clearance: Active DoD Secret or above
- Bachelor of Science degree or higher from an accredited university in Computer Science, Information Systems, Information Technology, or related field
- Minimum of ten (10) years experience as a Sr. Network Engineer
- JNCIP-ENT, JCNIP-SEC, or equivalent certification
- Ability to work independently or on a global team in a dynamic, fast-paced environment
- Advance knowledge of Federal, Intelligence Community and DoD Information Security regulations, publications, and policies
- Ability to apply security risk assessment methodology to system development, including threat model development, vulnerability assessments, and resulting security risk analysis
- Advanced knowledge of firewalls, security designs, and maintenance/expansion of secure network environment
- Experience in Juniper switches & firewalls and Dell data center switching technologies.
- Advanced investigative, analytical, and problem-solving skills
- Applied knowledge of troubleshooting tools (such as WireShark, SolarWinds, etc)
- Advanced knowledge of network aggregation and filtering tools (such as Network Packet Broker and TAPs)
- Knowledge of vulnerability scanning tools (such as DISA’s Security Content Automation Protocol (SCAP), Tenable Security Center & Nessus).
- Assists in assessment and maintenance of system security vulnerabilities and reporting.
- Possess solid understanding of provisioning network and system hardware, storage, TCP/IP networking, application layer protocols, load balancing/high availability design, and system architecture principles.
- Ability to work well within a small team environment
- Ability to work with foreign nationals
- Additional Preferred Technical Competencies
- Software defined networking (NSX-T)
- NIDS / NIPS analysis
- PKI
- Active Directory, DNS, DHCP, and other Windows Server
- Virtualization (VMware vSphere) and Dell Hyper-Converged Infrastructure (HCI)
- Security Control Testing (NIST 800-53/CNSS1253)
- Vulnerability Management
- Backup and recovery procedures for the server, storage, networking, and virtualization infrastructure
- Ability to assist Windows team with WSUS, apply OS patches, and upgrades using administrative tools and utilities. Configure/add new services as necessary.
- Business continuity activities and exercises
- Security Status Reporting
- Risk Management Framework
- Remediation Actions (Plan of Actions and Milestones (POA&M)
- Malware protection, prevention, and remediation
- Access Management
- Network and client / server technologies and standards
- Security Incident Management
- Remote access solutions and technologies
- Voice over IP technologies and architectures
- Experience applying DISA STIGs and other benchmarks for network and systems hardening
- Experience working with technical network administrators for hardening and remediation
- Experience executing vulnerability assessments with commercially available tools
- Experience with continuous monitoring toolsets
- Experience and exposure with Security Operations Center (SOC) tool sets (e.g. SIEM, EDR, packet capture, etc.)
- Additional remarks regarding work environment:
- Candidate must be a US Citizen with a valid US Passport and valid State driver’s license
- Must have an active US Secret or Higher DoD security clearance
- Candidate must be able to live in Qatar in housing provided by DAWSON
- Candidate must be in good health with no pre-existing health issues impeding overseas work requirements/environment.
- Candidates must successfully pass overseas medical and dental health assessments
- Candidate must be able to obtain foreign country clearance(s) for Visa entries
DAWSON is an Equal Opportunity/VEVRAA federal contractor. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, national origin, disability status, protected veteran status, or any other characteristic protected by law.
DAWSON offers a best-in-class benefits program including medical, dental, and vision insurance; a 401(k) program with employer match; paid vacation and sick leave; employer-paid basic life and AD&D insurance; an Employee Assistance Program; and a flexible work environment. Additionally, employees can choose from several voluntary benefits including critical illness coverage; accident insurance; identity theft coverage; pet insurance, and more.
DAWSON gives preference to internal candidates. If no internal candidate meets our qualifications, external candidates will be given consideration.