4/12/2017 District of ColumbiaDetailsOCTO - Cyber Security FirewallEngineer498071District of ColumbiaEARCV1 : 4-MasterOCTO - Cyber Security FirewallEngineerOpenDistrict of Columbia104/24/201704/17/20172200 I Street SE, Washington, DCEither Webcam or In PersonNoNo0ContractThe Cyber Security Firewall Admin/Engineer will provide onsite and remote support toDistrict Enterprise Network Security Devices; focus on Firewall operation andmaintenance (Check Point, Cisco ASA and Palo Alto Networks)The Cyber Security Firewall Admin/Engineer will provide onsite and remote support toDistrict Enterprise Network Security Devices; this will position will be focused on Firewalloperation and maintenance (Check Point, Cisco ASA and Palo Alto Networks). This rolewill include new Firewall roll-out and will be expected that all candidates have the abilityand past experience in doing so. The Cyber Security Firewall Admin/Engineer willprovide support services to define security requirements, identify the appropriateconfiguration for each unique District environment, and perform tasks associated with theTitle:Req ID:Region:Requisition DetailsReq. Class:Title:Req. Status:Region:No. of Openings:Start Date:No New SubmittalsAfter:Max Submittals byVendor per Opening:Worksite Address:Agency InterviewType:Advanced TechnicalScreening Required?:Existing IncumbentResource?:No. Filled:Requisition DescriptionEngagement Type:Short Description:Complete Description:4/12/2017 District of ColumbiaRequired/Desired Skillsday-to-day operations and maintenance on installed Enclave Boundary Defense systemsand applications, for District Distribution operation locations. The ideal candidate willhave one or more of the following secondary competencies: Network Access Controls(ForeScout), Proxy Systems (BlueCoat), Intrusion Detection Systems (SourceFire), WebApplication Firewalls (Imperva), DDoS protection (Arbor Networks Prevail APS). RequiredSkills Demonstrated experience with Check Point firewalls, deployment and operation Demonstrated experience with Cisco ASA firewalls, deployment and operations Demonstrated experience with Palo Alto appliances, deployment and operations Network and Application Firewall Packet Filtering technologies Virtual PrivateNetworking (VPNs) Technologies Expert knowledge in Information Security bestpractices Troubleshooting, Scanning & Analysis tools Qualifications Bachelor ofScience in Electrical Engineering, Computer Science, Information Technology, orequivalent data security and networking experience required Background check andcredit check will be required Specific Tasks Provide Tier-3 support for NOC personneltroubleshooting network issues. Analysis, design, configuration, implementation,documentation and operation of firewalls and other security controls. Manage systemdeployments, upgrades, ongoing maintenance and operations. Configuration andoperation of security device authentication, management & logging platforms Assist inrequirement gathering related to implementation of security infrastructure technologysolutions across enterprise and service provider networks. Provide advanced technicalsupport on network firewall management projects and related security infrastructure.Provide technical support to agencies and other IT personnel relating to securityimplementation, standards compliance, vulnerability reduction, and strategic securityplanning. Identify, troubleshoot, and resolve complex network connectivity issues as wellas advise on network security related issues. Provide occasional off-hours support forplanned maintenance work and unplanned support issues. May require on-site work at adata center during off-hours from time to time. Travel Requirements: No travelanticipated --------------------------------------------- CONTRACT JOB DESCRIPTIONResponsibilities: 1. Provides high-level architectural expertise to managers and technicalstaff. 2. Develops architectural products and deliverables for the enterprise andoperational business lines. 3. Develops strategy of system and the design infrastructurenecessary to support that strategy. 4. Advises on selection of technological purchaseswith regards to processing, data storage, data access, and applications development.Sets standards for the client/server relational database structure for the organization(Structured Query Language (SQL), Oracle, Sybase). 5. Advises of feasibility of potentialfuture projects to management. Minimum Education/Certification Requirements :Bachelors degree in Information Technology or related field or equivalent experienceOCTO - 200 I Street, SE;Washington DC 20003OCTO - Office of the ChiefTechnology OfficerExperience providing enterpriselevel Firewall operations andmaintenance support.Required 5 YearsNetwork and Application FirewallPacket Filtering technologiesRequired 5 YearsDemonstrated experience withCisco ASA firewalls, deploymentand operationsRequired 5 YearsPrior experience personally rollingout and implementing new firewallsRequired 2 YearsDemonstrated experience withPalo Alto appliances, deploymentand operationsHighly desired 5 YearsDemonstrated experience withCheck Point firewalls, deploymentHighly desired 5 YearsSkill Required /Desired Amount of ExperienceClient InformationWork Location: Cost Center:Required /Desired4/12/2017 District of Columbiaand operationExperience with Gigamon NetworkVisibility solutionsHighly desired 1 YearsTroubleshooting, Scanning &Analysis toolsHighly desired 5 YearsVirtual Private Networking (VPNs)TechnologiesNice to have 4 YearsBachelor of Science in ElectricalEngineering, Computer Science,Information Technology, orequivalent data security andnetworking experience requireRequired 4 Years16+ yrs as an Enterprise Architect Not Required 16+ yrs building an IT systemroadmapNot Required 16+ yrs systemdiagramming/modeling usingstructured modeling language likeUMLNot Required Question 1 Absences greater than two weeks MUST be approved by CAI management in advance, and contactinformation must be provided to CAI so that the resource can be reached during his or her absence. TheClient has the right to dismiss the resource if he or she does not return to work by the agreed upon date.Do you accept this requirement?Question 2 Please list candidate's email address that will be used when submitting E-RTR.Question 3DescriptionQuestionsThere are no reimbursable expenses. Do you accept this requirement?