About ITnova:  

ITnova is an engineering and information technology (IT) consulting firm. ITnova specializes in the System Development Life Cycle (SDLC), in particular, project management, business analysis, business re-engineering, quality assurance, testing and IT integration for the U.S. local, state and federal government. ITnova’s approach of using proven methodologies, techniques and metrics allows ITnova to ensure project quality for key activities and milestones. ITnova is an Equal Opportunity Employer (EOE).  

Benefits:  

• Medical benefits  
• 401k  
• Paid-time-off and   
• Training reimbursement.  

ITnova is seeking a Network Security Engineer to successfully complete the migration from two (2) pair of Cisco (high availability) ASA firewalls to Cisco Firepower Threat Defense (FTD) image, combining Cisco ASA and Firepower features into one hardware and software inclusive system.  In addition, the candidate will perform an assessment of an existing Cisco Identity Services Engine (ISE) deployment.  

Duties and Responsibilities: 

Provide an assessment of an existing Cisco Identity Services Engine (ISE). Cisco ISE is currently deployed. During this assessment the candidate will review: 

Deployment Topology of ISE Servers 

• Deployment Mode 

• Best Practices 
• Network Architecture 
• High Availability 
• GA Recommended Code Levels 

Review current Configuration. 

Review Logs 

Review Integration of Infrastructure Devices 

Review Golden Configs 

Review enhanced Authentication. 

In addition: 

• Enable TACACS for (3) admin use cases and create up to 3 AAA device templates. 
• Provide remediation from the information collected during the Assessment Phase of this project.  
• Knowledge Transfer Sessions. 

Wireless Health Check, Primary WLC/Dashboard: Gather assessment services of the production Wireless LAN (WLAN) environment including optimization and remediation recommendations as necessary. Assessment will be based on manufacturer recommended best Practices for WLAN Design and Deployment. A closure meeting with the Client will be scheduled to review the assessment findings. 

Education and Years of Experience:   

This position requires a Bachelor’s degree from an accredited college or university with a major in computer science, information systems, engineering, business, or a related scientific or technical discipline.  

A Master’s Degree in one of the above disciplines is equal to one (1) year of specialized and two (2) years of general experience. An additional year of specialized experience may be substituted for the required education. 

General Experience: The proposed candidate must have at least twelve (12) years of computer-related experience. 

Specialized Experience: The proposed candidate must have at least ten (10) years of specialized experience in defining computer security requirements for high-level applications, evaluation of approved security product capabilities, and security management. 

Required and Desired Skills/Certifications:  

Cisco Identity Service Engine (ISE) Expertise.  Experience migrating Cisco ASA Firewall to Cisco Firepower Threat Defense (FTD). 

Location: Hybrid work environment with on-premise location at 1201 Reisterstown Road, Pikesville, MD 21208