3 jobs found

Job Description Job Description We are seeking a Senior Network Security Engineer for an operations-first role supporting enterprise network security infrastructure across on-premises, remote-access, hybrid-cloud, and cloud-connected environments. This is not primarily an architecture/design role. The priority is a hands-on engineer who can administer, configure, maintain, troubleshoot, patch, upgrade, back up, validate, document, and operate production security platforms with minimal ramp-up. Firewall operations: hands-on Cisco and Palo Alto firewall administration, rule changes, NAT, troubleshooting, policy cleanup, upgrades, backups, logging, and production support. VPN / remote access: support for remote-access VPN, site-to-site VPN, user connectivity issues, certificates, authentication flows, and after-hours troubleshooting. RSA / MFA administration: RSA SecurID or equivalent MFA operations, token support, server administration, user troubleshooting, VPN integration, certificates, patching, backups, logs, and monitoring. Day-to-day operations: ticket resolution, monitoring alerts, health checks, change requests, incident support, maintenance windows, operational reporting, and customer support. Configuration and administration: installing, configuring, maintaining, patching, upgrading, backing up, validating, and troubleshooting assigned security platforms. Production troubleshooting: strong TCP/IP, DNS, routing, firewall logs, packet captures, VPN authentication, certificate, and connectivity troubleshooting. Documentation and process discipline: SOPs, runbooks, diagrams, change records, rollback plans, evidence collection, knowledge transfer, and formal change management. Federal/customer environment maturity: Public Trust eligibility, regulated-environment documentation, customer support, cross-team coordination, and comfort working with government stakeholders. The best candidate can credibly say: "I have operated enterprise Cisco and Palo Alto firewalls in production, handled firewall rule changes and troubleshooting, supported VPN users and site-to-site tunnels, administered or supported RSA/MFA tied to VPN access, followed formal change-management processes, maintained documentation and backups, and can step into daily operational support with minimal ramp-up." Scope and Role Boundaries Primary platforms include Cisco ASA/Firepower/FTD/FMC, Palo Alto NGFW/Panorama/GlobalProtect, remote-access and site-to-site VPN, RSA SecurID Authentication Manager or comparable MFA, monitoring/logging/SIEM integrations, and related network security controls. Coordinate with SOC/NOC, cloud, identity/directory, wireless/LAN, server, endpoint, system owner, application, governance, and vendor teams during changes, incidents, troubleshooting, compliance, and audit support. Cloudflare, Cisco ISE/NAC, secure web/email gateways, packet visibility tools, SD-WAN/SASE/ZTNA, AWS/Azure security, and F5/application-delivery awareness are useful where they intersect with assigned operational support, but the core need is firewall, VPN, RSA/MFA, and production operations. Key Responsibilities Provide daily, weekly, monthly, and annual operational support for assigned security systems, including tickets, alerts, health checks, email/phone support, metrics, status reporting, and operational validation. Administer and troubleshoot enterprise firewalls, including rule bases, NAT, segmentation, high availability, threat prevention, VPN integration, logging, secure baselines, rule reviews, recertification, cleanup, and decommissioning. Install, configure, maintain, patch, upgrade, back up, and validate firewall, VPN, MFA, and related network security systems in production environments. Support remote-access VPN, site-to-site VPN, partner connectivity, cloud connectivity, mobile/remote users, certificates, authentication policies, availability, utilization, and user access issues. Maintain and troubleshoot RSA SecurID Authentication Manager or equivalent MFA services, including servers/appliances, agents, certificates, HA, backups, logs, monitoring, directory integration, VPN authentication, and token lifecycle support. Respond to incidents, vulnerability notices, urgent requests, vendor advisories, PSIRT notices, system alerts, and emergency troubleshooting while minimizing service disruption. Use firewall logs, VPN logs, packet captures, SIEM data, monitoring tools, DNS/routing checks, and standard diagnostics to resolve complex connectivity, authentication, TLS/certificate, and application-flow issues. Create and maintain topology diagrams, equipment inventories, configurations, SOPs, runbooks, implementation plans, rollback plans, build/upgrade procedures, troubleshooting notes, and knowledge articles. Follow approved change, release, incident, problem, and configuration-management processes; prepare change records, peer-review materials, validation evidence, root-cause analysis, metrics, and audit artifacts. Support vulnerability remediation, POA&M tracking, continuous monitoring, compliance reviews, audit evidence collection, and coordination with ISSO, system owner, and security governance teams. Requirements 7+ years of experience in network security engineering, network infrastructure, cybersecurity infrastructure, or a closely related role. 5+ years of hands-on experience administering, maintaining, and troubleshooting enterprise firewall platforms in production environments. Hands-on experience with Cisco security technologies such as Cisco ASA, Firepower, FTD, FMC, AnyConnect/Secure Client, or equivalent Cisco firewall/VPN platforms. Hands-on experience with Palo Alto Networks technologies such as NGFW, Panorama, GlobalProtect, security profiles, App-ID/User-ID, logging, and policy optimization. Experience administering or supporting RSA SecurID Authentication Manager or comparable enterprise MFA/two-factor authentication platforms, including token support, server operations, patching/upgrades, backups, certificates, monitoring, and directory/VPN integration. Strong knowledge of firewall policy, NAT, VPNs, routing, DNS, DHCP, BGP, TLS/certificates, packet captures, log analysis, segmentation, high availability, and common network diagnostic tools. Experience with enterprise monitoring, logging, SIEM, alerting, vulnerability management, incident response, formal change management, and regulated-environment documentation. Ability to create clear technical documentation, support customers and stakeholders, prioritize operational work, communicate clearly, and coordinate across technical teams. Ability to obtain and maintain a Public Trust background investigation. Desired Certifications Relevant certifications are helpful but should not replace demonstrated hands-on experience. Examples include CCNP Security, CCIE Security, PCNSE, PCCSE, CISSP, CCSP, AWS Certified Security - Specialty, AWS Advanced Networking - Specialty, Microsoft Certified: Azure Security Engineer Associate, Microsoft Certified: Azure Network Engineer Associate, CompTIA Security+, CompTIA CySA+, GIAC certifications, or equivalent vendor/cloud certifications. Core Competencies Enterprise firewall engineering and policy lifecycle management VPN, remote access, RSA/MFA, and token lifecycle operations Cloudflare, edge security, secure access, and Zero Trust support Content filtering, secure web/email gateway, and NAC operations Hybrid-cloud network security and secure connectivity Monitoring, logging, SIEM integration, and incident response support Security visibility, packet analysis, and advanced troubleshooting Vulnerability remediation, compliance evidence, and POA&M support Change management, documentation, reporting, and operational metrics Technical leadership, customer support, and cross-team collaboration Benefits 401(k) 401(k) matching Dental insurance Flexible schedule Flexible spending account Health insurance Health savings account Life insurance Paid time off Professional development assistance Referral program Retirement plan Tuition reimbursement Vision insurance

Job DescriptionJob DescriptionDescription: SUMMARY/OBJECTIVE OF THE JOB: The Senior Cloud Engineer is the expert implementer, building platforms and systems that are relied upon by our clients and TrekFed itself. DUTIES AND RESPONSIBILITIES: Evaluate libraries, tools, and services for suitability Own the implementation of stories and other engineering of advanced cloud work for clients Perform research and documentation for problems and potential solutions Use various frameworks and methodologies to fully qualify problems, pain points, and potential jeopardies Build on Cloud Native patterns, IoT back-ends, serverless architectures, and highly automated work patterns and delivery methods Be a technical team advocate, ensuring clear direction and efficient execution Augment and design support systems and response procedures and coordinate hand-off to Cloud Operations (CloudOps) Support Engineers Hands-on involvement in the development of projects. Enforces standards, procedures, and methodologies for the software development life cycle. Move easily between big picture thinking and managing relevant detail Participate in cross-functional implementation teams to deliver solutions to clients Prepare work for team members of varying levels of experience, defining stories and task type work Contribute to internal IP and open source development Participate in delivery efforts using Agile or other work methodologies Build relationships with vendors and partners Engage with clients including presentations, technical decisions, and education opportunities Learn, research, and stay up to date on best practices and evolutionary capability in the Amazon Web Services (AWS) cloud Share knowledge and skills with other TrekFed team members and client teams Write cool blog posts, do talks at community events, help us achieve additional certifications in the AWS Partner Community, help our clients solve all sorts of problems Occasional travel may be required to meet stakeholders, kick off new projects, attend conferences, and attend company functions. Other duties as assigned REQUIRED QUALIFICATIONS: Bachelor's degree in Information Technology, Computer Science, or a related field and 2 years of general IT experience (programming, hardware, software) or 4 years of general IT experience (programming, hardware, software) 3+ years of experience with Amazon Web Services 1+ year code-defined infrastructure experience 1+ Continuous Integration and Deliver (CI/CD) experience 3+ years of programming experience utilizing Python, Node.js, Typescript, GoLang, Java, C#, or other similar languages Have worked with Agile Project Management or other project management work methodologies Must be a U.S. Citizen Must be able to obtain and maintain a secret security clearance PREFERRED QUALIFICATIONS: Have an AWS Cloud Architect Associate, Sysops Associate, Developers Associate, DevOps Professional, and/or Solutions Architect Professional Certification Have an AWS Specialty Certification Intermediate experience building scalable, automated infrastructure Intermediate experience with AWS Lambda and "Serverless" systems Intermediate experience in large-scale enterprise IT environments Intermediate experience working in a consultative, client-facing consulting role Intermediate experience with Cloud Native patterns with services like AWS Lambda Able to demonstrate effective verbal and written communication skills Previous or current experience with Federal / Government stakeholders Intermediate experience with newer ATO strategies such as Fast Track or Continuous ATO Intermediate experience with VDI (Virtual Desktop Infrastructure) COMPETENCIES: Communication: The ability to effectively convey information, ideas, and instructions to individuals or groups, both verbally and in writing. Time Management: The ability to effectively plan and organize one's own time in order to meet deadlines, prioritize tasks, and make the most efficient use of time. Self-Management: The ability to manage one's own emotions, thoughts, and behavior in different situations. Building Work Relationships: The ability to establish and maintain positive and productive relationships with colleagues, clients, and other stakeholders. Problem Analysis: The ability to identify, understand, and analyze problems in order to find solutions. Technical expertise: The ability to understand, apply, and stay current with the knowledge, concepts, and practices in a specific field or industry. Planning: The ability to set goals, develop action plans, and effectively allocate resources in order to achieve desired outcomes. Requirements:

Job DescriptionJob DescriptionDescription: SUMMARY/OBJECTIVE OF THE JOB: The Senior Cloud Engineer is the expert implementer, building platforms and systems that are relied upon by our clients and TrekFed itself. DUTIES AND RESPONSIBILITIES: Evaluate libraries, tools, and services for suitability Own the implementation of stories and other engineering of advanced cloud work for clients Perform research and documentation for problems and potential solutions Use various frameworks and methodologies to fully qualify problems, pain points, and potential jeopardies Build on Cloud Native patterns, IoT back-ends, serverless architectures, and highly automated work patterns and delivery methods Be a technical team advocate, ensuring clear direction and efficient execution Augment and design support systems and response procedures and coordinate hand-off to Cloud Operations (CloudOps) Support Engineers Hands-on involvement in the development of projects. Enforces standards, procedures, and methodologies for the software development life cycle. Move easily between big picture thinking and managing relevant detail Participate in cross-functional implementation teams to deliver solutions to clients Prepare work for team members of varying levels of experience, defining stories and task type work Contribute to internal IP and open source development Participate in delivery efforts using Agile or other work methodologies Build relationships with vendors and partners Engage with clients including presentations, technical decisions, and education opportunities Learn, research, and stay up to date on best practices and evolutionary capability in the Amazon Web Services (AWS) cloud Share knowledge and skills with other TrekFed team members and client teams Write cool blog posts, do talks at community events, help us achieve additional certifications in the AWS Partner Community, help our clients solve all sorts of problems Occasional travel may be required to meet stakeholders, kick off new projects, attend conferences, and attend company functions. Other duties as assigned REQUIRED QUALIFICATIONS: Bachelor's degree in Information Technology, Computer Science, or a related field and 2 years of general IT experience (programming, hardware, software) or 4 years of general IT experience (programming, hardware, software) 3+ years of experience with Amazon Web Services 1+ year code-defined infrastructure experience 1+ Continuous Integration and Deliver (CI/CD) experience 3+ years of programming experience utilizing Python, Node.js, Typescript, GoLang, Java, C#, or other similar languages Have worked with Agile Project Management or other project management work methodologies Must be a U.S. Citizen Must be able to obtain and maintain a secret security clearance PREFERRED QUALIFICATIONS: Have an AWS Cloud Architect Associate, Sysops Associate, Developers Associate, DevOps Professional, and/or Solutions Architect Professional Certification Have an AWS Specialty Certification Intermediate experience building scalable, automated infrastructure Intermediate experience with AWS Lambda and "Serverless" systems Intermediate experience in large-scale enterprise IT environments Intermediate experience working in a consultative, client-facing consulting role Intermediate experience with Cloud Native patterns with services like AWS Lambda Able to demonstrate effective verbal and written communication skills Previous or current experience with Federal / Government stakeholders Intermediate experience with newer ATO strategies such as Fast Track or Continuous ATO Intermediate experience with VDI (Virtual Desktop Infrastructure) COMPETENCIES: Communication: The ability to effectively convey information, ideas, and instructions to individuals or groups, both verbally and in writing. Time Management: The ability to effectively plan and organize one's own time in order to meet deadlines, prioritize tasks, and make the most efficient use of time. Self-Management: The ability to manage one's own emotions, thoughts, and behavior in different situations. Building Work Relationships: The ability to establish and maintain positive and productive relationships with colleagues, clients, and other stakeholders. Problem Analysis: The ability to identify, understand, and analyze problems in order to find solutions. Technical expertise: The ability to understand, apply, and stay current with the knowledge, concepts, and practices in a specific field or industry. Planning: The ability to set goals, develop action plans, and effectively allocate resources in order to achieve desired outcomes. Requirements: