Domain Boundary Compliance (DBCP) Engineer

Posted yesterday

ampcusMcLean (VA)
Network and Computer Systems AdministratorsComputer Systems Design Services

SENIORITY

Senior

Apply

About the role

Job-ID31238353Reference25-29982Ampcus Inc. is a certified global provider of a broad range of Technology and Business consulting services. We are in search of a highly motivated candidate to join our talented Team.Job Title: Domain Boundary Compliance (DBCP) EngineerLocation: Mclean, VAPosition Overview:The Domain Boundary Compliance Program exists to manage the risk associated with business applications that need to establish network connectivity between dissimilar network segment types by:Providing a set of allowable connectivity patternsOwning and operating the process for evaluating new connection requests between these dissimilar network segment typesProcessing exception requests for network connection requests that don't fall into the allowable connectivity patterns listResponsibilitiesEnsure policy and configuration changes to network security platforms (initially internet proxy and firewalls) are aligned with enterprise standards, have adequate business justification, and don't cause unmitigated risks or vulnerabilities before being deployedWork with internet proxy platforms. Identify risk categories and threat level for internet access being requested. Maintain proxy policies such as incorporating updates as new categories or threat levels are identified, extend policies as requests are implemented, and performing periodic reviews to ensure policies are not exposing bank to unmitigated risk such as data lossWork with IP address management, exception management, document repository, intranet sites, Microsoft Excel, Google Sheets, and other tools fluidly and efficientlyVerify connection request details against systems of record to ensure they are accurately populated, work with the customer to correct if necessaryRespond to customer requests for information or help in a timely manner, meet customer response time SLAsWork with customers as needed to resolve technical issues and provide guidance for how to proceed with a connection requestWork with proxy, network, and firewall engineering teams to resolve technical issues and develop solutions for new use cases or connection patternsSupport exception remediation activitiesFollow documented processes and procedures for processing requests and interacting with customersPreferred Skills2 years working with networking concepts including HTTPS, TLS, CIDR notation, RFC 1918 address space2 years of experience with internet proxy platforms such as Broadcom / Symantec and Sophos2 years of experience with firewall platforms such as Checkpoint and Palo Alto1 year of experience with cloud-based network security services such as AWS Security Groups, AWS VPC, Azure Network Security Groups, Azure VNET1 year of experience with firewall audit and compliance tools such as TufinProfessional certifications (AWS Certified Solutions Architect and Certified Information Systems Security Professional (CISSP), CompTIA Security , ISACA CISM)Ampcus is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, protected veterans or individuals with disabilities.

Before you apply

Applying takes about a minute. These four things decide how fast it moves after that.

Your profile is current

It's what we read first. Occupations, seniority and locations matter more than a long history.

Two examples you can talk through

Not a portfolio — just two pieces of work where you can explain the decisions and what you'd change.

A number in mind

What you're on now and what would make you move. We negotiate better when we know both.

Your notice period

Employers plan around it, and it's the question that stalls offers most often.

Once you apply, someone reads it and calls you before anything reaches the employer — usually within two working days.

More like this