JCS Solutions LLC
Fort George G Meade, Maryland
Job Description Job Description Grow, innovate, and generate progress: Harness your expertise to solve challenges and celebrate success! Job Summary JCS Solutions is seeking a Principal Network Engineer specializing in Routing and Switching to serve as the senior technical authority for a large-scale enterprise network supporting a Department of Defense environment. This role is responsible for advancing network innovation through strategic design, modernization, and implementation efforts that improve network security, scalability, resiliency, and performance. The successful candidate will provide architectural leadership across core, distribution, access, WAN, and data center environments while defining enterprise standards for routing, switching, segmentation, resiliency, and network modernization initiatives. This individual will serve as the final technical escalation point for complex networking challenges and will provide oversight and direction to engineering teams executing enterprise network initiatives. This role requires deep technical expertise, strong leadership skills, and the ability to communicate complex architectural decisions and implementation strategies to government stakeholders, technical leadership, and approval boards. Location: Ft. Meade, MD Clearance: Secret Salary: $104,000.00 - $149,000.00 Certification: Active DoD 8140/8570 IAT Level II certification. What's in it for you: Join a premier technology firm specializing in innovative solutions. Be part of a collaborative, inclusive, and innovative work culture. Enjoy tremendous growth potential in a high-performing team environment. A robust benefits package: Health, dental, and vision insurance Life insurance Short-and-long term disability Paid time off (PTO) 401k retirement plan with employer match Annual Professional Development Reimbursement Program And more! What you will do: Architecture and Design Authority Own the enterprise routing and switching architecture, including core, distribution, access, WAN edge, and data center interconnect designs. Define routing architecture and policy standards across BGP, OSPF, EIGRP, and static routing environments. Develop addressing strategies, route filtering and summarization standards, redistribution boundaries, convergence targets, and path-selection policies. Define Layer 2 and high-availability architectures, including VLAN strategy, spanning-tree design, link aggregation, VRFs, multicast, segmentation, redundancy models, and QoS policies. Evaluate current network architectures and identify opportunities to improve performance, scalability, resiliency, and operational efficiency. Establish and enforce network design standards, configuration baselines, and architectural patterns. Project Execution Lead network engineering projects from planning through implementation. Perform architecture reviews, requirements analysis, dependency identification, implementation planning, execution oversight, validation, and operational transition activities. Develop implementation plans, schedules, cutover procedures, rollback plans, contingency procedures, and validation methodologies. Lead network modernization initiatives involving segmentation, IPv4/IPv6 transition, network optimization, lifecycle replacement, connectivity consolidation, automation, and software-defined networking adoption. Coordinate maintenance windows, testing events, deployment activities, and rollback execution for mission-critical network changes. Collaborate with network architects, cybersecurity teams, operations personnel, project managers, and technical subject matter experts to deliver complex infrastructure initiatives. Technical Leadership Serve as the final escalation point for complex routing, switching, transport, convergence, and network performance issues. Provide technical direction, mentoring, and day-to-day guidance to network engineers, administrators, and analysts. Review engineering designs and implementation activities to ensure technical quality and architectural compliance. Manage competing priorities and concurrent engineering efforts while maintaining accountability for successful delivery. Improve engineering processes, implementation playbooks, runbooks, technical standards, documentation practices, and operational transition procedures. Documentation Develop and maintain logical and physical network architecture diagrams. Create routing standards, policy documentation, address plans, and configuration baselines. Develop implementation plans, testing procedures, validation criteria, and rollback documentation. Maintain risk assessments, decision registers, dependency tracking documents, technical standards, and runbooks. Produce as-built documentation and operational transition packages. What you will bring: Bachelor's degree or equivalent experience with 12+ years of relevant experience, or Master's degree with 10+ years of experience. Specific experience, education, and training may be considered in lieu of a degree. Active DoD Secret security clearance. Current DoD 8140/8570 IAT Level II certification or higher. Significant experience designing and implementing network security architecture in complex, large-scale enterprise environments. Experience serving as a senior technical lead directing network and security engineers, administrators, analysts, or implementation teams. Experience leading security engineering projects from planning through implementation. Hands-on engineering experience with: Next-generation firewalls Intrusion detection and prevention systems Proxies and TLS inspection solutions VPN and encryption services Network access control platforms Experience with network segmentation and secure connectivity initiatives. Experience with data-flow analysis, firewall policy reviews, ACL management, security-zone design, stakeholder coordination, and implementation planning. Strong knowledge of: TCP/IP Routing protocols Switching VLANs DNS/DHCP/IPAM NAT QoS Software-defined networking Cloud-connected environments Hands-on experience with two or more of the following technologies: Palo Alto Cisco Aruba Dell Infoblox Brocade Working knowledge of: NIST FedRAMP FISMA RMF DISA STIGs DoD cybersecurity requirements Demonstrated ability to manage competing priorities and deliver complex technical initiatives. Experience documenting network and security architectures using Visio, PowerPoint, Cameo, or similar tools. Excellent written and verbal communication skills. Experience briefing senior leadership, cybersecurity authorities, stakeholders, and approval boards. Experience with wireless security and authentication, including WPA2/WPA3, 802.1X, RADIUS, and enterprise NAC platforms. Experience integrating wireless infrastructure with enterprise networking services, including DNS, DHCP, NTP, routing, and monitoring platforms. Experience developing and executing engineering designs, implementation plans, migration procedures, test plans, and production deployments. Strong troubleshooting and analytical skills with the ability to resolve complex wireless connectivity, authentication, and network performance issues. Strong written and verbal communication skills.
Job Description Job Description Grow, innovate, and generate progress: Harness your expertise to solve challenges and celebrate success! Job Summary JCS Solutions is seeking a Principal Network Engineer specializing in Routing and Switching to serve as the senior technical authority for a large-scale enterprise network supporting a Department of Defense environment. This role is responsible for advancing network innovation through strategic design, modernization, and implementation efforts that improve network security, scalability, resiliency, and performance. The successful candidate will provide architectural leadership across core, distribution, access, WAN, and data center environments while defining enterprise standards for routing, switching, segmentation, resiliency, and network modernization initiatives. This individual will serve as the final technical escalation point for complex networking challenges and will provide oversight and direction to engineering teams executing enterprise network initiatives. This role requires deep technical expertise, strong leadership skills, and the ability to communicate complex architectural decisions and implementation strategies to government stakeholders, technical leadership, and approval boards. Location: Ft. Meade, MD Clearance: Secret Salary: $104,000.00 - $149,000.00 Certification: Active DoD 8140/8570 IAT Level II certification. What's in it for you: Join a premier technology firm specializing in innovative solutions. Be part of a collaborative, inclusive, and innovative work culture. Enjoy tremendous growth potential in a high-performing team environment. A robust benefits package: Health, dental, and vision insurance Life insurance Short-and-long term disability Paid time off (PTO) 401k retirement plan with employer match Annual Professional Development Reimbursement Program And more! What you will do: Architecture and Design Authority Own the enterprise routing and switching architecture, including core, distribution, access, WAN edge, and data center interconnect designs. Define routing architecture and policy standards across BGP, OSPF, EIGRP, and static routing environments. Develop addressing strategies, route filtering and summarization standards, redistribution boundaries, convergence targets, and path-selection policies. Define Layer 2 and high-availability architectures, including VLAN strategy, spanning-tree design, link aggregation, VRFs, multicast, segmentation, redundancy models, and QoS policies. Evaluate current network architectures and identify opportunities to improve performance, scalability, resiliency, and operational efficiency. Establish and enforce network design standards, configuration baselines, and architectural patterns. Project Execution Lead network engineering projects from planning through implementation. Perform architecture reviews, requirements analysis, dependency identification, implementation planning, execution oversight, validation, and operational transition activities. Develop implementation plans, schedules, cutover procedures, rollback plans, contingency procedures, and validation methodologies. Lead network modernization initiatives involving segmentation, IPv4/IPv6 transition, network optimization, lifecycle replacement, connectivity consolidation, automation, and software-defined networking adoption. Coordinate maintenance windows, testing events, deployment activities, and rollback execution for mission-critical network changes. Collaborate with network architects, cybersecurity teams, operations personnel, project managers, and technical subject matter experts to deliver complex infrastructure initiatives. Technical Leadership Serve as the final escalation point for complex routing, switching, transport, convergence, and network performance issues. Provide technical direction, mentoring, and day-to-day guidance to network engineers, administrators, and analysts. Review engineering designs and implementation activities to ensure technical quality and architectural compliance. Manage competing priorities and concurrent engineering efforts while maintaining accountability for successful delivery. Improve engineering processes, implementation playbooks, runbooks, technical standards, documentation practices, and operational transition procedures. Documentation Develop and maintain logical and physical network architecture diagrams. Create routing standards, policy documentation, address plans, and configuration baselines. Develop implementation plans, testing procedures, validation criteria, and rollback documentation. Maintain risk assessments, decision registers, dependency tracking documents, technical standards, and runbooks. Produce as-built documentation and operational transition packages. What you will bring: Bachelor's degree or equivalent experience with 12+ years of relevant experience, or Master's degree with 10+ years of experience. Specific experience, education, and training may be considered in lieu of a degree. Active DoD Secret security clearance. Current DoD 8140/8570 IAT Level II certification or higher. Significant experience designing and implementing network security architecture in complex, large-scale enterprise environments. Experience serving as a senior technical lead directing network and security engineers, administrators, analysts, or implementation teams. Experience leading security engineering projects from planning through implementation. Hands-on engineering experience with: Next-generation firewalls Intrusion detection and prevention systems Proxies and TLS inspection solutions VPN and encryption services Network access control platforms Experience with network segmentation and secure connectivity initiatives. Experience with data-flow analysis, firewall policy reviews, ACL management, security-zone design, stakeholder coordination, and implementation planning. Strong knowledge of: TCP/IP Routing protocols Switching VLANs DNS/DHCP/IPAM NAT QoS Software-defined networking Cloud-connected environments Hands-on experience with two or more of the following technologies: Palo Alto Cisco Aruba Dell Infoblox Brocade Working knowledge of: NIST FedRAMP FISMA RMF DISA STIGs DoD cybersecurity requirements Demonstrated ability to manage competing priorities and deliver complex technical initiatives. Experience documenting network and security architectures using Visio, PowerPoint, Cameo, or similar tools. Excellent written and verbal communication skills. Experience briefing senior leadership, cybersecurity authorities, stakeholders, and approval boards. Experience with wireless security and authentication, including WPA2/WPA3, 802.1X, RADIUS, and enterprise NAC platforms. Experience integrating wireless infrastructure with enterprise networking services, including DNS, DHCP, NTP, routing, and monitoring platforms. Experience developing and executing engineering designs, implementation plans, migration procedures, test plans, and production deployments. Strong troubleshooting and analytical skills with the ability to resolve complex wireless connectivity, authentication, and network performance issues. Strong written and verbal communication skills.
Kranze Technology Solutions, Inc
Des Plaines, Illinois
Kranze Technology Solutions, Inc., a defense engineering leader in avionics, electronic warfare, and tactical communications, seeks an Information Systems Security Manager to own and mature our cyber and information security program. In a highly collaborative, engineering-driven culture, you'll secure mission-critical manufacturing and defense systems, lead risk assessments, vulnerability management, and incident response, and drive NIST/RMF and DFARS/CMMC compliance. Partner with expert engineers to implement technical controls, harden networks, and protect sensitive data in support of U.S. warfighters. Responsibilities Lead the information security program for manufacturing and defense systems, ensuring compliance with Do D and industry standards Develop, implement, and maintain security policies, procedures, and technical controls for networks, applications, and endpoints Manage vulnerability assessments, penetration testing, and remediation across avionics, EW, and communications environments Oversee incident response, investigation, containment, and reporting for cyber and information security events Administer and improve access control, identity management, encryption, and monitoring solutions Coordinate security requirements with engineering, IT, program management, and defense customers Conduct risk assessments, security audits, and continuous monitoring for classified and sensitive systems Train and mentor staff on cybersecurity best practices, secure development, and data protection Support accreditation, ATO, and compliance activities for defense programs (NIST, RMF, DFARS/CMMC) Evaluate and implement new security tools, architectures, and processes to protect mission-critical systems Required Skills Information security management NIST cybersecurity framework NIST RMFDFARS/CMMC compliance Network security architecture Vulnerability assessment and remediation Incident response and forensics Identity and access management (IAM) SIEM and security monitoring Risk assessment and management
Kranze Technology Solutions, Inc., a defense engineering leader in avionics, electronic warfare, and tactical communications, seeks an Information Systems Security Manager to own and mature our cyber and information security program. In a highly collaborative, engineering-driven culture, you'll secure mission-critical manufacturing and defense systems, lead risk assessments, vulnerability management, and incident response, and drive NIST/RMF and DFARS/CMMC compliance. Partner with expert engineers to implement technical controls, harden networks, and protect sensitive data in support of U.S. warfighters. Responsibilities Lead the information security program for manufacturing and defense systems, ensuring compliance with Do D and industry standards Develop, implement, and maintain security policies, procedures, and technical controls for networks, applications, and endpoints Manage vulnerability assessments, penetration testing, and remediation across avionics, EW, and communications environments Oversee incident response, investigation, containment, and reporting for cyber and information security events Administer and improve access control, identity management, encryption, and monitoring solutions Coordinate security requirements with engineering, IT, program management, and defense customers Conduct risk assessments, security audits, and continuous monitoring for classified and sensitive systems Train and mentor staff on cybersecurity best practices, secure development, and data protection Support accreditation, ATO, and compliance activities for defense programs (NIST, RMF, DFARS/CMMC) Evaluate and implement new security tools, architectures, and processes to protect mission-critical systems Required Skills Information security management NIST cybersecurity framework NIST RMFDFARS/CMMC compliance Network security architecture Vulnerability assessment and remediation Incident response and forensics Identity and access management (IAM) SIEM and security monitoring Risk assessment and management
Career Listings
Fort Belvoir, Virginia
Job Description Job Description Benefits: 401(k) 401(k) matching Dental insurance Health insurance Paid time off Profit sharing Training & development Tuition assistance Vision insurance Job Description SarelaTech is seeking an experienced Network Engineer (SME) to join our Integrated Information Technology Support Services (I3TS) team, who will support an extensive digital modernization program critical to Defense Threat Reduction Agency (DTRA) in Fort Belvoir, VA. The Network Engineer will work closely with the Leidos and Government technical leadership team to help drive innovation, growth, and efficiencies within the I3TS portfolio. Primary Responsibilities: The Commercial Solutions for Classified (CSfC) Network & Security Engineer will architect and operate secure, dual-layer cryptographic boundaries utilizing Cisco and Aruba IPsec/SSL VPNs and dynamic routing (BGP/OSPF) in strict compliance with NSA Capability Packages. In this role, you will author and tune Palo Alto NGFW security policies and IDS/IPS threat prevention signatures, implement enterprise network access control and 802.1X policies via Cisco ISE and Aruba ClearPass, integrate enterprise PKI/OCSP services and hardened NTP, and generate key engineering artifacts required for NSA CSfC PMO registration and compliance auditing. Architect, deploy, and maintain CSfC infrastructure operating within Black/Gray/Red networks. Design, configure, and maintain multi-layered Commercial Solutions for Classified (CSfC) architectures in alignment with NSA Mobile Access (MA), Multi-Sight (MSC) Capability Packages, with Campus Wireless LAN (WLAN) experience a bonus. Ensure strict compliance with vendor diversity and dual-tunnel encryption mandates. Understanding of NIAP approved list and monitors for changes Design, configure, and maintain multi-layered Commercial Solutions for Classified (CSfC) architectures in alignment with NSA Capability Packages (MSC, MA, and CWLAN). Ensure strict compliance with vendor diversity and dual-tunnel encryption mandates. Implement enterprise routing protocols (BGP, OSPF) alongside redundant outer and inner IPsec VPN tunnels across Cisco and Aruba appliances. Configure remote access SSL VPNs and ensure end-to-end traffic separation. Author, optimize, and audit Palo Alto Next-Generation Firewall (NGFW) security policies, App-ID, User-ID, and URL filtering. Configure and tune Palo Alto IDS/IPS threat signatures, anti-spyware, and vulnerability protection. Architect and manage Cisco Identity Services Engine (ISE) and Aruba ClearPass policy managers for 802.1X network access control, RADIUS/TACACS+ administration, posture assessment, and endpoint profiling. Integrate enterprise Public Key Infrastructure (PKI) components, managing X.509 certificate lifecycles, Certificate Authorities (CAs), CRL/OCSP validation, and hardened, authenticated Network Time Protocol (NTP) infrastructure. Prepare CSfC compliance artifacts, Key Management Plans (KMPs), Continuous Monitoring Plans (CMPs), and registration packages for NSA CSfC PMO submission. Required Qualifications: Bachelor's degree or higher in Computer Science, Information Technology, Engineering, Engineering Management, Management Information Systems, or related STEM degree program, and 12-15 years of relevant experience. Specific experience, education and training may be considered in lieu of degree. 12+ years of progressive network engineering experience within DoD/DoW, federal, or defense contractor enterprise environments Active TS/SCI Clearance Active DoD 8570.01-M / DoD 8140 IAT Level II or III baseline certification (e.g., Security+ CE, CySA+, CASP+, or CISSP). Active Computing Environment certification, including one or more of: Cisco CCNA, CCNP, Aruba ACSA or ACSP Proven expertise configuring Cisco (IOS-XE/ASR) and Aruba (Mobility Controllers/Gateways) IPsec and SSL VPNs, including IKEv2, Suite B/CNSA cryptography, and dynamic routing (BGP, OSPF). Demonstrated engineering experience with Palo Alto Networks firewalls (PAN-OS), Panorama central management, and advanced IDS/IPS inspection profiles. Hands-on deployment experience with both Cisco ISE and/or Aruba ClearPass implementing 802.1X, EAP-TLS authentication, and role-based access policies. Strong working knowledge of X.509 certificates, CA hierarchy integration, certificate revocation lists (CRLs), OCSP, and secure NTP stratum synchronization. Direct prior experience preparing and successfully registering NSA CSfC Capability Package solutions (Mobile Access, Multi-Site Connectivity, or Campus WLAN). Deep understanding of Commercial National Security Algorithm (CNSA) Suite requirements, post-quantum readiness considerations, and hardware security modules (HSMs). Familiarity with Ansible, for automating network device configuration backups, policy compliance checks, and certificate rotations. Certified in any of the following - Cisco CCNP/CCIE (Security or Enterprise), Palo Alto PCNSE, Aruba Certified ClearPass Expert (ACCX), or Aruba Certified Mobility Expert (ACMX).
Job Description Job Description Benefits: 401(k) 401(k) matching Dental insurance Health insurance Paid time off Profit sharing Training & development Tuition assistance Vision insurance Job Description SarelaTech is seeking an experienced Network Engineer (SME) to join our Integrated Information Technology Support Services (I3TS) team, who will support an extensive digital modernization program critical to Defense Threat Reduction Agency (DTRA) in Fort Belvoir, VA. The Network Engineer will work closely with the Leidos and Government technical leadership team to help drive innovation, growth, and efficiencies within the I3TS portfolio. Primary Responsibilities: The Commercial Solutions for Classified (CSfC) Network & Security Engineer will architect and operate secure, dual-layer cryptographic boundaries utilizing Cisco and Aruba IPsec/SSL VPNs and dynamic routing (BGP/OSPF) in strict compliance with NSA Capability Packages. In this role, you will author and tune Palo Alto NGFW security policies and IDS/IPS threat prevention signatures, implement enterprise network access control and 802.1X policies via Cisco ISE and Aruba ClearPass, integrate enterprise PKI/OCSP services and hardened NTP, and generate key engineering artifacts required for NSA CSfC PMO registration and compliance auditing. Architect, deploy, and maintain CSfC infrastructure operating within Black/Gray/Red networks. Design, configure, and maintain multi-layered Commercial Solutions for Classified (CSfC) architectures in alignment with NSA Mobile Access (MA), Multi-Sight (MSC) Capability Packages, with Campus Wireless LAN (WLAN) experience a bonus. Ensure strict compliance with vendor diversity and dual-tunnel encryption mandates. Understanding of NIAP approved list and monitors for changes Design, configure, and maintain multi-layered Commercial Solutions for Classified (CSfC) architectures in alignment with NSA Capability Packages (MSC, MA, and CWLAN). Ensure strict compliance with vendor diversity and dual-tunnel encryption mandates. Implement enterprise routing protocols (BGP, OSPF) alongside redundant outer and inner IPsec VPN tunnels across Cisco and Aruba appliances. Configure remote access SSL VPNs and ensure end-to-end traffic separation. Author, optimize, and audit Palo Alto Next-Generation Firewall (NGFW) security policies, App-ID, User-ID, and URL filtering. Configure and tune Palo Alto IDS/IPS threat signatures, anti-spyware, and vulnerability protection. Architect and manage Cisco Identity Services Engine (ISE) and Aruba ClearPass policy managers for 802.1X network access control, RADIUS/TACACS+ administration, posture assessment, and endpoint profiling. Integrate enterprise Public Key Infrastructure (PKI) components, managing X.509 certificate lifecycles, Certificate Authorities (CAs), CRL/OCSP validation, and hardened, authenticated Network Time Protocol (NTP) infrastructure. Prepare CSfC compliance artifacts, Key Management Plans (KMPs), Continuous Monitoring Plans (CMPs), and registration packages for NSA CSfC PMO submission. Required Qualifications: Bachelor's degree or higher in Computer Science, Information Technology, Engineering, Engineering Management, Management Information Systems, or related STEM degree program, and 12-15 years of relevant experience. Specific experience, education and training may be considered in lieu of degree. 12+ years of progressive network engineering experience within DoD/DoW, federal, or defense contractor enterprise environments Active TS/SCI Clearance Active DoD 8570.01-M / DoD 8140 IAT Level II or III baseline certification (e.g., Security+ CE, CySA+, CASP+, or CISSP). Active Computing Environment certification, including one or more of: Cisco CCNA, CCNP, Aruba ACSA or ACSP Proven expertise configuring Cisco (IOS-XE/ASR) and Aruba (Mobility Controllers/Gateways) IPsec and SSL VPNs, including IKEv2, Suite B/CNSA cryptography, and dynamic routing (BGP, OSPF). Demonstrated engineering experience with Palo Alto Networks firewalls (PAN-OS), Panorama central management, and advanced IDS/IPS inspection profiles. Hands-on deployment experience with both Cisco ISE and/or Aruba ClearPass implementing 802.1X, EAP-TLS authentication, and role-based access policies. Strong working knowledge of X.509 certificates, CA hierarchy integration, certificate revocation lists (CRLs), OCSP, and secure NTP stratum synchronization. Direct prior experience preparing and successfully registering NSA CSfC Capability Package solutions (Mobile Access, Multi-Site Connectivity, or Campus WLAN). Deep understanding of Commercial National Security Algorithm (CNSA) Suite requirements, post-quantum readiness considerations, and hardware security modules (HSMs). Familiarity with Ansible, for automating network device configuration backups, policy compliance checks, and certificate rotations. Certified in any of the following - Cisco CCNP/CCIE (Security or Enterprise), Palo Alto PCNSE, Aruba Certified ClearPass Expert (ACCX), or Aruba Certified Mobility Expert (ACMX).