Description

MINIMUM QUALIFICATIONS
• Associate degree. 
• Active certifications as follows: 
o (1) Palo Alto Networks Certified Network Security Administrator (PCNSA) Certification or Palo Alto Networks Network Security Professional Certification. 
o (2) Cisco Certified Network Associate (CCNA) Enterprise or (CCNA) Security Certification. 
PREFERRED QUALIFICATIONS

• Ten (10) years of CONUS technical experience in IT networking and network security. 
• Associate’s degree in an Information Technology (IT) related field, as determined by the AOC. 
• Certifications that are currently active or expired within three (3) years of proposal submission as follows:
o (1) Palo Alto Networks Certified Network Security Engineer (PCNSE) Certification or Palo Alto Networks Next-Generation Firewall Engineer Certification or Palo Alto Networks Network Security Analyst Certification. 
o (2) Cisco Certified Network Professional (CCNP) Enterprise or (CCNP) Security Certification.
SKILLS, EXPERIENCE, AND CAPABILITIES 
• Five (5) years of experience with: 
o (1) Palo Alto Networks next generation firewall services. 
o (2) Intrusion Detection and Prevention with Palo Alto networks. 
o (3) Content Filtering Palo Alto networks. 
o (4) Virtual Private Networks using Palo Alto network systems. 
o (5) Data Loss Prevention 
o (6) TLS/SSL Inspection 
• Four (4) years of experience in Complex switching, routing, wireless with Cisco Systems. 
• Three (3) years of experience in Reverse Proxies, Load Balancing with A10 networks. 
• Two (2) years of experience in Network Access Control - Cisco Identity Services Engine (ISE), Free Radius, and Access Control Lists (ACLs). 
• General experience with the following: 
o (1) Implementing multifactor authentication solutions with Microsoft. 
o (2) Cloud based virtual networking and security services 
o (3) Authentication standards - (802.1x) in wired and wireless applications. 
o (4) Scalable routing protocols Enhance Interior Gateway Routing Protocol (EIGRP), Open Shortest Path Fist (OSPF), and Border Gateway Protocol (BGP). 
o (5) Enterprise Data Center implementing Micro segmentation. 
o (6) Certificate Management, Public Key Infrastructure (PKI). 
o (7) Vulnerability management using Nessus, NMAP, Windows, Unix, and Linux OS 
o (8) Packet/Protocol Analysis using Opnet, Riverbed, Wireshark, and taps. 
o (9) Centralized Management using Panorama, SolarWinds 
o (10) Major server and desktop operating systems and utilities
• Ability to: 
o (1) To work independently, troubleshoot and provide mentoring to junior associates. 
o (2) Communicate effectively when providing presentations. 
o (3) Produce technical documents (diagrams, design documents, project plans and schedules, and user instructions) as required

Key Skills

Education

Any Graduate