Summary This position is located in the Enterprise Operations Center (EOC) in the Department of Technology Services. The EOC's Infrastructure Operations Division (IOD) is responsible for the operations and support of the Judiciary's enterprise wide data communications network and services including the security infrastructure protecting the Judiciary enterprise-wide data communications networks, Internet gateways and courts. Responsibilities The IOD Security Infrastructure Branch (SIB) ensures that the infrastructure supporting the Judiciary's security needs on the wide area networks is robust and resilient, meeting the federal courts' operational needs while maintaining system integrity and security. The incumbent will work with and assist other engineers and contractors in the SIB, ensuring that the security infrastructure is operational and maintained within approved security policies and guidance, working very closely with the Information Technology Security Office (ITSO). The infrastructure consists of the firewalls, intrusion detection/prevention systems, proxies, web application firewalls, and other systems required for maintaining security posture and integrity. The incumbent is responsible for managing projects and tasks within their area of responsibility, developing and coordinating work plans and schedules dependent upon available resources. The incumbent works with AO program and project managers to assure the Judiciary security systems on the wide area network, internet gateway datacenters, court locations, connections to other Judiciary partners, and emergency network services are available as needed. Duties of the position include, but are not limited to: 1. Work with and provide assistance to other staff in the day-to-day operations, maintenance, management, and administration of the security devices protecting the Judiciary wide area data communications network (DCN) and the public access courts electronic records network (PACER), to include IPS/IDS devices, firewalls, remote access devices, and proxies. The main focus of this position are the IPS/IDS devices. 2. Work with and provide assistance to the support desks, Circuits, Courts, and AO program offices in troubleshooting connectivity issues with relation to all security devices. 3. In close coordination with ITSO-SOD, manage and maintain device signatures and rules on the DCN and PACER firewalls, IPS/IDS devices, proxies, remote access devices, and other security devices, in accordance with governing guidelines and policies, in order to mitigate threats and potential threats to the Judiciary networks. 4. Manage projects and tasks associated with managing and maintaining areas of responsibility. 5. Perform cost analysis and the acquisition of network security equipment, which includes hardware, operating systems, and software appliances; 6. Provide network related briefings to staff associated with specific engagements at all levels across the Federal Judiciary; 7. Develop proposed branch and division administrative controls, procedures, policies, and practices affecting the service and support to Enterprise Operations; 8. Maintain filing systems, electronic and paper within the section, branch and division, as well as provide the production of manuals, guides, articles, and other materials. Requirements Conditions of Employment CONDITIONS OF EMPLOYMENT All information is subject to verification. Applicants are advised that false answers or omissions of information on application materials or inability to meet the following conditions may be grounds for non-selection, withdrawal of an offer of employment, or dismissal after being employed. Selection for this position is contingent upon completion of OF-306, Declaration of Federal Employment during the pre-employment process and proof of U.S. citizenship for competitive status positions or conversion to a competitive status position with the AO. If non-citizens are considered for hire into a temporary or any other position with non-competitive status or when it is confirmed by the AO Human Resources Office there are no qualified U.S. citizens for a competitive status position (unless prohibited by a law or statue), non-citizens must provide proof of authorization to work in the U.S. and proof of entitlement to receive compensation. Additional information on the employment of non-citizens can be found at USAJOBS Help Center | Employment of non-citizens/. For a list of documents that may be used to provide proof of citizenship or authorization to work in the United States, please refer to Form I-9, Employment Eligibility Verification. All new AO employees will be required to complete an FBI fingerprint-based national criminal database and records check and pass a public trust suitability check. New employees to the AO will be required to successfully pass the E-Verify employment verification check. To learn more about E-Verify, including your rights/responsibilities, visit https://www.e-verify.gov/. All new AO employees are required to identify a financial institution for direct deposit of pay before appointment. You will be required to serve a trial period if selected for a first-time appointment to the Federal government, transferring from another Federal agency, or serving as a first-time supervisor. Failure to successfully complete the trial period may result in termination of employment. If appointed to a temporary position, management may have the discretion of converting the position to permanent depending upon funding and staffing allocation. Qualifications Applicants must have demonstrated experience as listed below. This requirement is according to the AO Classification, Compensation, and Recruitment Systems which include interpretive guidance and reference to the OPM Operating Manual for Qualification Standards for General Schedule Positions. Specialized Experience: Applicants must have at least one full year (52 weeks) of specialized experience which is in or directly related to the line of work of this position. Specialized experience must demonstrate ALL areas defined below: Senior Network (Security) Engineer managing and maintaining security devices on both wide and local area networks such as: Intrusion Prevention/Detection Service (IPS/IDS) devices Web Application Firewalls Traditional firewalls Virtual Private Network (VPN) Desired, but Not Required: (Cisco Firepower preferred) (Imperva WAF preferred) (McAfee Web Gateways preferred), (Cisco ASA VPN and Ivanti Secure SSL VPN preferred), (Cisco ISE preferred) Education This position does not require education to qualify. Additional Information The AO is an Equal Opportunity Employer.