Network Security Engineer

SUMMARY The Client is seeking proposals from prospective Offerors to provide one (1) Network Security Engineer. The Network Security Engineer will actively participate in planning and coordinating the design, installation, and connectivity of computer and network systems to ensure stable, scalable, redundant, and secure 24x7 network operations. Offeror may propose no more than one (1) resource(s). Offeror shall propose resource(s) for which they have the right to represent. If multiple Offerors propose the same resource(s), the Client reserves the right to make such investigations, as it deems necessary, to confirm the representation of any proposed resource(s), and reject any Offeror's proposed resource(s). After any investigations, if the Client is unable to confirm the representation of any proposed resource(s), including a proposed resource who signed multiple Attachment O - Resource Acknowledgments, the Client reserves the right to reject the proposed resource(s) from all applicable Offerors. OFFEROR RESOURCE QUALIFICATIONS 1. The Offeror shall propose resource(s) that meet the following minimum qualifications: . Associate degree in an Information Technology (IT) related field, as determined by the Client. b. Active certifications as follows: (1) Palo Alto Networks Certified Network Security Engineer (PCNSE) Certification. (2) Cisco Certified Network Professional (CCNP) Enterprise or (CCNP) Security Certification. 2. The Client prefers Offeror proposed resource(s) to have the following qualifications: . Ten (10) years of CONUS technical experience in IT networking and network security. b. Bachelor's degree in an Information Technology (IT) related field, as determined by the Client. c. Current Certifications as follows: (1) Prisma Certified Cloud Security Engineer (PCCSE) Certification from Palo Alto Networks (2) Cisco Certified Internetwork Expert (CCIE) in Enterprise Infrastructure or Security Certification SCOPE OF WORK Offeror proposed resource(s) shall be responsible for the following: 1. Pro-actively identifying organization requirements, and helping to design, and engineer implementations that best serve the needs. 2. Performing project-based engineering, design, installation and troubleshooting of data security networks. 3. Providing assessment, design and implementation services of data and secure networking environments. 4. Developing comprehensive graphical and text-based design documentation and effectively managing the implementation process from design to acceptance. 5. Assisting internal groups through capacity planning, maintaining, monitoring and review of secure data communications networks. 6. Leading migrations or assisting a team of engineers who will migrate traditional/legacy network security platforms to current/next generation technologies and expose customers to the full life cycle of defense in depth solutions. 7. Assisting network engineers in troubleshooting critical problems or threat remediation relating to network security products. 8. Working with the engineering team to successfully implement configuration guidelines, change management, and standard operating procedures for secure network solutions. 9. Leading, scheduling, providing guidance and coordinating the activities with other team members to resolve end user problems in a timely and accurate fashion. 10. Generating weekly status reports including project progress, key milestones, and tasks accomplished. 11. Hosting weekly status meetings/calls with team or on as needed basis. 1. Offeror shall propose resource(s) possessing the following preferred skills, experience, and capabilities: . Five (5) years of experience with: (1) Palo Alto Networks next generation firewall services. (2) Intrusion Detection and Prevention with Palo Alto networks. (3) Content Filtering Palo Alto networks. (4) Virtual Private Networks using Palo Alto network systems. (5) Data Loss Prevention (6) TLS/SSL Inspection b. Four (4) years of experience in Complex switching, routing, wireless with Cisco Systems. c. Three (3) years of experience in Reverse Proxies, Load Balancing with A10 networks. d. Two (2) years of experience in Network Access Control - Cisco Identity Services Engine (Client), Free Radius, and Access Control Lists (ACLs). e. General experience with the following: (1) Implementing multifactor authentication solutions with Microsoft. (2) Cloud based virtual networking and security services (3) Authentication standards - (802.1x) in wired and wireless applications. (4) Scalable routing protocols Enhance Interior Gateway Routing Protocol (EIGRP), Open Shortest Path Fist (OSPF), and Border Gateway Protocol (BGP). (5) Enterprise Data Center implementing Micro segmentation. (6) Certificate Management, Public Key Infrastructure (PKI). (7) Vulnerability management using Nessus, NMAP, Windows, Unix, and Linux OS (8) Packet/Protocol Analysis using Opnet, Riverbed, Wireshark, and taps. (9) Centralized Management using Panorama, SolarWinds (10) Major server and desktop operating systems and utilities f. Ability to: (1) To work independently, troubleshoot and provide mentoring to junior associates. (2) Communicate effectively when providing presentations. (3) Produce technical documents (diagrams, design documents, project plans and schedules, and user instructions) as required. PLACE OF PERFORMANCE 1. Work shall be performed in a hybrid setting each week, Monday through Friday, as follows: . Two (2) days remote at a suitable off-site location selected by the Offeror/Offeror Resource(s). The Client reserves the right to determine an off-site location is not suitable (e.g., crowded public space with distracting background noise during meetings). b. Three (3) days on site at the Maryland Judiciary Information Systems, 189 Harry S Truman Parkway, Annapolis, MD 21401. 2. The proposed resource will be required to perform in accordance with Section III.E.1. of this PORFP during an initial six (6) month performance period. If performance is satisfactory, as determined by the Client Contract Manager, the proposed resource may seek approval from the Client Contract Manager to perform in an expanded hybrid role, Monday through Friday, as follows: . Three (3) days remote at a suitable off-site location selected by the Offeror/Offeror Resource(s). (1) The Client reserves the right to determine an off-site location is not suitable (e.g., crowded public space with distracting background noise during meetings). b. Two (2) days on site at the Maryland Judiciary Information Systems, 189 Harry S. Truman Parkway, Annapolis, MD 21401. 3. On-site support may be required. As designated by the Judiciary's Chief Technology Officer, the proposed resource(s) must be able to report on-site within four (4) hours after notification. . If required to report, the Offeror Resource shall report to Maryland Judiciary Information Systems, 189 Harry S Truman Parkway, Annapolis, MD 21401. b. The Client does not have a limit on the number of times the proposed resource(s) may be required to be onsite. 4. The Client reserves the right to regularly evaluate performance and withdraw remote privileges in the event of a decline in Purchase Order performance. 5. The Client reserves the right to modify the allocation of onsite and remote work effort throughout the life of the Purchase Order. In the event of a modification, the Contract Manager will coordinate with the Successful Offeror on a mutually agreeable allocation of work effort. 6. If the Offeror proposed resource has a work allocation that includes remote work at any time during the life of the Purchase Order, the Offeror proposed resource may not perform remote work from a country other than the United States of America without prior approval from the Contract Manager. Unless there are extenuating circumstances, Offerors shall not anticipate receiving approval for remote work from a country other than the United States of America. EEO: "Mindlance is an Equal Opportunity Employer and does not discriminate in employment on the basis of - Minority/Gender/Disability/Religion/LGBTQI/Age/Veterans."