Job Description Job Description Description We are seeking a Network Security Engineer to provide technical support in design and deployment of Network Transformation and Network Operations. In this role, you will assess and deploy the relevant technology solutions according to customers' business, security policy and application requirements and work directly with the Senior Network Engineer. Key Responsibilities Participate in daily network, firewall, and operational support. Ability to troubleshoot network issues and failures and follow best practices and troubleshooting methodology to quickly assess current situations, find solutions, and implement changes to correct and/or update network topologies to ensure stability and functionality. Provide technical analysis of operational issues and remediations during troubleshooting efforts to ensure documentations and procedures are followed and updated during active events. This includes the ability to report to management. Stay up to date on emerging technologies and products, including attaining certifications and participation in industry events as appropriate. Work with various stake holders to lead problem solving, evolve system roadmap and take critical decisions. Provide clear communication with regular updates/reports to the management team. Skills, Knowledge & Expertise Minimum of 5 years' experience in deployment and configuration and architectural design of networking technologies specific to routing, switching and general network security best practices, in which 3 years must be in customer-facing positions. Minimum of CCNA or comparable level of knowledge. Ability to work on call rotation as needed. B.S./B.A./M.S. degree or equivalent technical training. Fortinet NSE 6 and NSE 7 Knowledge of Azure and AWS Experience with Aruba ClearPass, Aruba switches and wireless Experience with Cisco Firepower Services and Palo Alto security services. Understanding of encryption and SSL/TLS technologies and best practices. Experience working for or with local government, service providers, and/or enterprises customers. Experience in large Data Center or Enterprise/campus designs, architecture, deployment and configuration with physical and virtual appliances. Familiarity with applications driving modern infrastructure design in private and public cloud. Experience in networking technologies such as STP, Nexus vPC, IPSEC / SSLVPN, Routing: VRF, MPLS, OSPF, BGP and Multi-Homed environments. Datacenter Network services including Security, Load Balancing, DNS, etc. at the virtual and physical level. Experience with Cisco, Juniper, Fortinet, HP, Aruba and CATO products (Firewall, Routing / switching, SASE, wireless and security) Wireless networking technologies including access-control platforms such as Cisco ISE or Aruba Clear Pass Policy Manager IPS/IDS, as well as other NGFW (Next Gen Firewall) features and capabilities. Ability to write incident and problem record documentation to support daily efforts. Strong analytical thinking and decision-making skills & highly organized. Strong ability to influence others and build consensus via excellent verbal and written communication skills. We consider all qualified applicants for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or protected veteran status. Reasonable accommodations will be made to enable employees with disabilities to perform the essential functions of the job. This job description is intended to describe the general nature of work being performed by employees in this job. It is not intended to be a complete list of all responsibilities, duties, and skills required. Agencies/3 Parties may not solicit to any employee of Blue Mantis. Any candidate information received from any Agency/3 Party will be considered a gift and property of Blue Mantis, unless the Agency/3 Party is an Authorized Vendor of Blue Mantis with an up-to-date Blue Mantis Contract in hand signed by Blue Mantis Talent Acquisition. No payment will be made to any Agency/3 Party who is not an Authorized Vendor, nor has specific approval in writing from Blue Mantis Talent Acquisition to engage in recruitment efforts for Blue Mantis. At this time, we have no interest in onboarding any new staffing partners.
10/23/2026
Full time
Job Description Job Description Description We are seeking a Network Security Engineer to provide technical support in design and deployment of Network Transformation and Network Operations. In this role, you will assess and deploy the relevant technology solutions according to customers' business, security policy and application requirements and work directly with the Senior Network Engineer. Key Responsibilities Participate in daily network, firewall, and operational support. Ability to troubleshoot network issues and failures and follow best practices and troubleshooting methodology to quickly assess current situations, find solutions, and implement changes to correct and/or update network topologies to ensure stability and functionality. Provide technical analysis of operational issues and remediations during troubleshooting efforts to ensure documentations and procedures are followed and updated during active events. This includes the ability to report to management. Stay up to date on emerging technologies and products, including attaining certifications and participation in industry events as appropriate. Work with various stake holders to lead problem solving, evolve system roadmap and take critical decisions. Provide clear communication with regular updates/reports to the management team. Skills, Knowledge & Expertise Minimum of 5 years' experience in deployment and configuration and architectural design of networking technologies specific to routing, switching and general network security best practices, in which 3 years must be in customer-facing positions. Minimum of CCNA or comparable level of knowledge. Ability to work on call rotation as needed. B.S./B.A./M.S. degree or equivalent technical training. Fortinet NSE 6 and NSE 7 Knowledge of Azure and AWS Experience with Aruba ClearPass, Aruba switches and wireless Experience with Cisco Firepower Services and Palo Alto security services. Understanding of encryption and SSL/TLS technologies and best practices. Experience working for or with local government, service providers, and/or enterprises customers. Experience in large Data Center or Enterprise/campus designs, architecture, deployment and configuration with physical and virtual appliances. Familiarity with applications driving modern infrastructure design in private and public cloud. Experience in networking technologies such as STP, Nexus vPC, IPSEC / SSLVPN, Routing: VRF, MPLS, OSPF, BGP and Multi-Homed environments. Datacenter Network services including Security, Load Balancing, DNS, etc. at the virtual and physical level. Experience with Cisco, Juniper, Fortinet, HP, Aruba and CATO products (Firewall, Routing / switching, SASE, wireless and security) Wireless networking technologies including access-control platforms such as Cisco ISE or Aruba Clear Pass Policy Manager IPS/IDS, as well as other NGFW (Next Gen Firewall) features and capabilities. Ability to write incident and problem record documentation to support daily efforts. Strong analytical thinking and decision-making skills & highly organized. Strong ability to influence others and build consensus via excellent verbal and written communication skills. We consider all qualified applicants for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or protected veteran status. Reasonable accommodations will be made to enable employees with disabilities to perform the essential functions of the job. This job description is intended to describe the general nature of work being performed by employees in this job. It is not intended to be a complete list of all responsibilities, duties, and skills required. Agencies/3 Parties may not solicit to any employee of Blue Mantis. Any candidate information received from any Agency/3 Party will be considered a gift and property of Blue Mantis, unless the Agency/3 Party is an Authorized Vendor of Blue Mantis with an up-to-date Blue Mantis Contract in hand signed by Blue Mantis Talent Acquisition. No payment will be made to any Agency/3 Party who is not an Authorized Vendor, nor has specific approval in writing from Blue Mantis Talent Acquisition to engage in recruitment efforts for Blue Mantis. At this time, we have no interest in onboarding any new staffing partners.
Pay Range: $58.70hr - $63.70hr Job Overview: The candidate will perform security incident response, threat detection, and continuous monitoring across enterprise security tools. On-site work may be required as needed. DAILY DUTIES / RESPONSIBILITIES: Continuously review and correlate security event data across SIEM, EDR, IDS/IPS, and threat intelligence sources to identify complex attack patterns, emerging threats, and security incidents. Perform deep-dive analysis of suspicious activity, validate incidents, determine root cause and impact, and escalate critical incidents with detailed context to Tier 3 as required. Create detailed incident reports, timelines, and post-incident summaries; contribute to lessons-learned documentation and recommendations for remediation and preventative measures. Investigate user-reported phishing, malware infections, and potential policy violations; advise users and internal/external teams on containment and recovery actions. Recommend updates to SOC playbooks and workflows based on real-world investigations, fine-tuning detection rules, alert thresholds, and correlation logic to reduce false positives and improve threat coverage. Collaborate with engineering teams to ensure monitoring tools are properly configured and tuned. Integrate new threat intelligence feeds into workflows and proactively hunt for threats using up-to-date tactics, techniques, and procedures (TTPs). Serve as a customer-facing subject matter expert, demonstrating capabilities and resolving issues. Document processes, runbooks, and troubleshooting steps related to SOC operations. Coordinate with engineering, SOC, and organizational staff as needed to meet goals. Perform other duties as needed. REQUIRED SKILLS: 2+ years of experience with Security Monitoring and Incident Response. 2+ years of experience with the MITRE ATT&CK framework. 2+ years of experience with dashboard creation and reporting. PREFERRED SKILLS: Experience with the Palo Alto Cortex XSIAM/XDR platform. Knowledge of Linux, network administration, and network design. Experience in the administration of firewalls, VPN technology, Active Directory, and Intrusion Detection/Prevention systems. Local presence near the organization's location or surrounding area. REQUIRED EDUCATION/CERTIFICATIONS: Associate's degree in an information technology or information security related field (four years of relevant work experience may be substituted in lieu of education). Two years of experience supporting large SOC operations. PREFERRED EDUCATION/CERTIFICATIONS: CISSP, CISA, CISO, or equivalent advanced security certification. Additional relevant certifications (e.g., CEH, OSCP, GPEN). Vendor certifications related to information security. Benefits: Our Benefits Include: Medical, Dental, and Vision Insurance 401(k) Retirement Plan Health Savings Account (HSA) Disability Insurance (Short-Term and Long-Term) Life and AD&D Insurance Paid Sick Leave (where required by applicable state or local law) Supplemental Insurance Plans Identity Theft Protection Pet Insurance Employee Wellness Programs Employee Assistance Program (EAP) Career Growth and Professional Development Opportunities Disclaimer: Benefits eligibility, accrual rates, and usage limits may vary based on employment status, length of service, and work location. Paid Sick Leave is provided in strict accordance with applicable state and municipal mandates. Cynet Systems Inc. reserves the right to modify, amend, or terminate any benefit plans at any time in accordance with applicable laws. About Cynet Systems Founded in 2010 and headquartered in the Washington, DC metro area, Cynet Systems Inc. is a leading technology staffing and workforce solutions company serving Fortune 500 companies, government agencies, and enterprise organizations across the United States and Canada. We deliver agile, scalable talent solutions across IT, engineering, life sciences, clinical, and professional staffing, powered by a high-performing recruitment engine operating across North America and Asia. As a nationally and locally certified Minority Business Enterprise (MBE), Cynet Systems is committed to helping organizations build high-performing teams while empowering professionals to grow rewarding careers. Our organization is certified to ISO 9001, ISO 14001, ISO 27001, and SOC 2 Type II standards, reflecting our commitment to quality, security, operational excellence, and customer success.
10/22/2026
Full time
Pay Range: $58.70hr - $63.70hr Job Overview: The candidate will perform security incident response, threat detection, and continuous monitoring across enterprise security tools. On-site work may be required as needed. DAILY DUTIES / RESPONSIBILITIES: Continuously review and correlate security event data across SIEM, EDR, IDS/IPS, and threat intelligence sources to identify complex attack patterns, emerging threats, and security incidents. Perform deep-dive analysis of suspicious activity, validate incidents, determine root cause and impact, and escalate critical incidents with detailed context to Tier 3 as required. Create detailed incident reports, timelines, and post-incident summaries; contribute to lessons-learned documentation and recommendations for remediation and preventative measures. Investigate user-reported phishing, malware infections, and potential policy violations; advise users and internal/external teams on containment and recovery actions. Recommend updates to SOC playbooks and workflows based on real-world investigations, fine-tuning detection rules, alert thresholds, and correlation logic to reduce false positives and improve threat coverage. Collaborate with engineering teams to ensure monitoring tools are properly configured and tuned. Integrate new threat intelligence feeds into workflows and proactively hunt for threats using up-to-date tactics, techniques, and procedures (TTPs). Serve as a customer-facing subject matter expert, demonstrating capabilities and resolving issues. Document processes, runbooks, and troubleshooting steps related to SOC operations. Coordinate with engineering, SOC, and organizational staff as needed to meet goals. Perform other duties as needed. REQUIRED SKILLS: 2+ years of experience with Security Monitoring and Incident Response. 2+ years of experience with the MITRE ATT&CK framework. 2+ years of experience with dashboard creation and reporting. PREFERRED SKILLS: Experience with the Palo Alto Cortex XSIAM/XDR platform. Knowledge of Linux, network administration, and network design. Experience in the administration of firewalls, VPN technology, Active Directory, and Intrusion Detection/Prevention systems. Local presence near the organization's location or surrounding area. REQUIRED EDUCATION/CERTIFICATIONS: Associate's degree in an information technology or information security related field (four years of relevant work experience may be substituted in lieu of education). Two years of experience supporting large SOC operations. PREFERRED EDUCATION/CERTIFICATIONS: CISSP, CISA, CISO, or equivalent advanced security certification. Additional relevant certifications (e.g., CEH, OSCP, GPEN). Vendor certifications related to information security. Benefits: Our Benefits Include: Medical, Dental, and Vision Insurance 401(k) Retirement Plan Health Savings Account (HSA) Disability Insurance (Short-Term and Long-Term) Life and AD&D Insurance Paid Sick Leave (where required by applicable state or local law) Supplemental Insurance Plans Identity Theft Protection Pet Insurance Employee Wellness Programs Employee Assistance Program (EAP) Career Growth and Professional Development Opportunities Disclaimer: Benefits eligibility, accrual rates, and usage limits may vary based on employment status, length of service, and work location. Paid Sick Leave is provided in strict accordance with applicable state and municipal mandates. Cynet Systems Inc. reserves the right to modify, amend, or terminate any benefit plans at any time in accordance with applicable laws. About Cynet Systems Founded in 2010 and headquartered in the Washington, DC metro area, Cynet Systems Inc. is a leading technology staffing and workforce solutions company serving Fortune 500 companies, government agencies, and enterprise organizations across the United States and Canada. We deliver agile, scalable talent solutions across IT, engineering, life sciences, clinical, and professional staffing, powered by a high-performing recruitment engine operating across North America and Asia. As a nationally and locally certified Minority Business Enterprise (MBE), Cynet Systems is committed to helping organizations build high-performing teams while empowering professionals to grow rewarding careers. Our organization is certified to ISO 9001, ISO 14001, ISO 27001, and SOC 2 Type II standards, reflecting our commitment to quality, security, operational excellence, and customer success.
Job Description Job Description Seeking a Process Manager to design, standardize, and govern IT operational processes spanning the organization's core infrastructure and security technology stack including ServiceNow (ITSM/ITAM/ITOM), Dell hardware and endpoint lifecycle management, Cisco networking infrastructure, and Palo Alto Networks security operations. This role sits at the intersection of process governance and vendor technology, working closely with infrastructure engineering, network operations, security, and service desk teams to ensure that incident, change, request, asset, and problem management processes are consistently defined, documented, and enforced across all supported platforms. The Process Manager will be the connective tissue between ServiceNow as the system of record and the underlying Dell, Cisco, and Palo Alto technology teams executing day-to-day operations. Key Responsibilities Own and continuously improve core ITSM process areas (Incident, Problem, Change, Request, and Asset Management) within ServiceNow, ensuring alignment with ITIL best practices. Partner with infrastructure and network engineering teams to define and document processes governing Dell hardware/endpoint lifecycle (procurement, deployment, refresh, retirement) within ServiceNow ITAM. Establish and maintain change and configuration management processes for Cisco networking infrastructure, ensuring CMDB accuracy and proper change governance for network changes. Design and enforce security-related operational processes in coordination with the security team for Palo Alto Networks firewall, security policy, and incident response workflows. Serve as process owner/SME across cross-functional teams, facilitating process workshops, gap analyses, and continuous improvement initiatives. Develop and maintain process documentation, workflow diagrams, RACI matrices, and SOPs for all governed processes. Monitor process KPIs/SLAs (e.g., ticket resolution times, change success rates, CMDB accuracy) and drive corrective action where performance gaps exist. Support ServiceNow platform governance, including workflow configuration requests, module rollouts, and integration with vendor tools (Dell, Cisco, Palo Alto) where applicable. Lead or support audits and compliance reviews related to IT process adherence (e.g., NERC/CIP, internal controls) as applicable to the energy/utility environment. Provide training and process guidance to technical teams and service desk staff to ensure consistent adoption. Required Qualifications 5+ years of experience in IT process management, ITSM, or IT service delivery, ideally within a large enterprise or utility/regulated environment. Hands-on experience with ServiceNow, including ITSM modules (Incident, Problem, Change, Request) and familiarity with ITAM/CMDB. Working knowledge of infrastructure and security technologies from Dell (hardware/endpoint), Cisco (networking), and Palo Alto Networks (security/firewall) - deep engineering expertise not required, but strong operational/process fluency across these platforms is essential. Strong understanding of ITIL framework and process governance principles; ITIL Foundation certification preferred. Proven experience facilitating cross-functional process design and improvement initiatives with technical and non-technical stakeholders. Excellent documentation, communication, and stakeholder management skills. Bachelor's degree in Information Technology, Business, or related field (or equivalent experience). Preferred Qualifications Experience in a utility, energy, or NERC/CIP-regulated environment. ServiceNow certification(s) (e.g., CSA, ITSM Implementation Specialist) a plus. Experience with vendor/asset lifecycle management programs spanning hardware refresh cycles, network infrastructure changes, and security policy governance. Familiarity with change advisory board (CAB) processes and enterprise change management at scale. Location & Work Arrangement This role is based out of the AOB office in FT Lauderdale Florida on a hybrid schedule. Occasional travel to the Juno Beach Head Quarters and Miami office may be required to support cross-site process alignment, stakeholder workshops, or infrastructure/security team engagements. Candidates should be based within a commutable distance of the Palm Beach / Broward / Miami-Dade corridor. Powered by JazzHR u5IDxR61T6
10/21/2026
Full time
Job Description Job Description Seeking a Process Manager to design, standardize, and govern IT operational processes spanning the organization's core infrastructure and security technology stack including ServiceNow (ITSM/ITAM/ITOM), Dell hardware and endpoint lifecycle management, Cisco networking infrastructure, and Palo Alto Networks security operations. This role sits at the intersection of process governance and vendor technology, working closely with infrastructure engineering, network operations, security, and service desk teams to ensure that incident, change, request, asset, and problem management processes are consistently defined, documented, and enforced across all supported platforms. The Process Manager will be the connective tissue between ServiceNow as the system of record and the underlying Dell, Cisco, and Palo Alto technology teams executing day-to-day operations. Key Responsibilities Own and continuously improve core ITSM process areas (Incident, Problem, Change, Request, and Asset Management) within ServiceNow, ensuring alignment with ITIL best practices. Partner with infrastructure and network engineering teams to define and document processes governing Dell hardware/endpoint lifecycle (procurement, deployment, refresh, retirement) within ServiceNow ITAM. Establish and maintain change and configuration management processes for Cisco networking infrastructure, ensuring CMDB accuracy and proper change governance for network changes. Design and enforce security-related operational processes in coordination with the security team for Palo Alto Networks firewall, security policy, and incident response workflows. Serve as process owner/SME across cross-functional teams, facilitating process workshops, gap analyses, and continuous improvement initiatives. Develop and maintain process documentation, workflow diagrams, RACI matrices, and SOPs for all governed processes. Monitor process KPIs/SLAs (e.g., ticket resolution times, change success rates, CMDB accuracy) and drive corrective action where performance gaps exist. Support ServiceNow platform governance, including workflow configuration requests, module rollouts, and integration with vendor tools (Dell, Cisco, Palo Alto) where applicable. Lead or support audits and compliance reviews related to IT process adherence (e.g., NERC/CIP, internal controls) as applicable to the energy/utility environment. Provide training and process guidance to technical teams and service desk staff to ensure consistent adoption. Required Qualifications 5+ years of experience in IT process management, ITSM, or IT service delivery, ideally within a large enterprise or utility/regulated environment. Hands-on experience with ServiceNow, including ITSM modules (Incident, Problem, Change, Request) and familiarity with ITAM/CMDB. Working knowledge of infrastructure and security technologies from Dell (hardware/endpoint), Cisco (networking), and Palo Alto Networks (security/firewall) - deep engineering expertise not required, but strong operational/process fluency across these platforms is essential. Strong understanding of ITIL framework and process governance principles; ITIL Foundation certification preferred. Proven experience facilitating cross-functional process design and improvement initiatives with technical and non-technical stakeholders. Excellent documentation, communication, and stakeholder management skills. Bachelor's degree in Information Technology, Business, or related field (or equivalent experience). Preferred Qualifications Experience in a utility, energy, or NERC/CIP-regulated environment. ServiceNow certification(s) (e.g., CSA, ITSM Implementation Specialist) a plus. Experience with vendor/asset lifecycle management programs spanning hardware refresh cycles, network infrastructure changes, and security policy governance. Familiarity with change advisory board (CAB) processes and enterprise change management at scale. Location & Work Arrangement This role is based out of the AOB office in FT Lauderdale Florida on a hybrid schedule. Occasional travel to the Juno Beach Head Quarters and Miami office may be required to support cross-site process alignment, stakeholder workshops, or infrastructure/security team engagements. Candidates should be based within a commutable distance of the Palm Beach / Broward / Miami-Dade corridor. Powered by JazzHR u5IDxR61T6
Job Description Job Description Benefits: Onsite Competitive salary Opportunity for advancement Network Architect Houston, Texas Duration: 12+ Months Start Date: June 15, 2026 Openings: 2 We are looking for an experienced Network Architect to lead the design, implementation, and support of large-scale enterprise network infrastructure. The ideal candidate will have deep expertise across datacenter networking, routing and switching, wireless technologies, security, SDN/SD-WAN, and Aruba networking solutions. This role requires strong hands-on architectural experience supporting complex enterprise and global network environments. Key Responsibilities Design, implement, and support enterprise network infrastructure Architect and manage routing, switching, and Spine-Leaf datacenter environments Support enterprise WAN, SD-WAN, SDN, and global network operations Configure and troubleshoot complex Layer 2 and Layer 3 networking environments Manage network security infrastructure including firewalls, IPSec, SIEM integration, and vulnerability remediation Implement and support Aruba wireless and network management solutions Monitor and optimize network performance, QoS, NetFlow, IDS/IPS, and traffic management Support IPv4 and IPv6 enterprise environments Collaborate with infrastructure, security, and operations teams for enterprise network initiatives Ensure network scalability, redundancy, availability, and security best practices Required Skills & Experience Networking & Protocols Strong expertise in: TCP/IP BGP OSPF MPLS Multicast RIP DNS DHCP IPAM Enterprise Networking Routing & Switching Spine-Leaf Datacenter Architecture WAN Infrastructure SDN / SD-WAN Virtual Networking NAT & ACLs Structured Cabling Global Network Operations Security & Network Services F5 GTM/LTM VPN SSH Proxy IDS/IPS NetFlow QoS Web Security Device Hardening Vulnerability Management IPSec SIEM Wireless Technologies 802.11 a/b/g/n/ac/ax Wireless LAN Design & Support Aruba / HP Technologies Aruba Controllers Aruba AirWave Aruba Central Aruba ClearPass Aruba Access Points (APs) Additional Requirements Strong experience with both IPv4 and IPv6 environments Excellent troubleshooting and architectural design skills Ability to support enterprise-scale production environments Strong communication and stakeholder management skills Required Overall Experience 12+ years of overall IT Infrastructure and Networking experience 8+ years of hands-on enterprise network architecture and engineering experience Strong experience supporting large-scale datacenter and global enterprise environments Proven expertise in designing and implementing complex routing, switching, wireless, WAN, and security solutions Preferred Qualifications Enterprise or datacenter architecture experience Certifications such as: CCNP / CCIE Aruba Certified Professional/Expert Palo Alto / Fortinet Certifications Experience supporting large global enterprise environments
10/21/2026
Full time
Job Description Job Description Benefits: Onsite Competitive salary Opportunity for advancement Network Architect Houston, Texas Duration: 12+ Months Start Date: June 15, 2026 Openings: 2 We are looking for an experienced Network Architect to lead the design, implementation, and support of large-scale enterprise network infrastructure. The ideal candidate will have deep expertise across datacenter networking, routing and switching, wireless technologies, security, SDN/SD-WAN, and Aruba networking solutions. This role requires strong hands-on architectural experience supporting complex enterprise and global network environments. Key Responsibilities Design, implement, and support enterprise network infrastructure Architect and manage routing, switching, and Spine-Leaf datacenter environments Support enterprise WAN, SD-WAN, SDN, and global network operations Configure and troubleshoot complex Layer 2 and Layer 3 networking environments Manage network security infrastructure including firewalls, IPSec, SIEM integration, and vulnerability remediation Implement and support Aruba wireless and network management solutions Monitor and optimize network performance, QoS, NetFlow, IDS/IPS, and traffic management Support IPv4 and IPv6 enterprise environments Collaborate with infrastructure, security, and operations teams for enterprise network initiatives Ensure network scalability, redundancy, availability, and security best practices Required Skills & Experience Networking & Protocols Strong expertise in: TCP/IP BGP OSPF MPLS Multicast RIP DNS DHCP IPAM Enterprise Networking Routing & Switching Spine-Leaf Datacenter Architecture WAN Infrastructure SDN / SD-WAN Virtual Networking NAT & ACLs Structured Cabling Global Network Operations Security & Network Services F5 GTM/LTM VPN SSH Proxy IDS/IPS NetFlow QoS Web Security Device Hardening Vulnerability Management IPSec SIEM Wireless Technologies 802.11 a/b/g/n/ac/ax Wireless LAN Design & Support Aruba / HP Technologies Aruba Controllers Aruba AirWave Aruba Central Aruba ClearPass Aruba Access Points (APs) Additional Requirements Strong experience with both IPv4 and IPv6 environments Excellent troubleshooting and architectural design skills Ability to support enterprise-scale production environments Strong communication and stakeholder management skills Required Overall Experience 12+ years of overall IT Infrastructure and Networking experience 8+ years of hands-on enterprise network architecture and engineering experience Strong experience supporting large-scale datacenter and global enterprise environments Proven expertise in designing and implementing complex routing, switching, wireless, WAN, and security solutions Preferred Qualifications Enterprise or datacenter architecture experience Certifications such as: CCNP / CCIE Aruba Certified Professional/Expert Palo Alto / Fortinet Certifications Experience supporting large global enterprise environments
Job Description Job Description Overview Intermediate Firewall Engineer Oakton, VA Are you ready to enhance your skills and build your career in a rapidly evolving business climate? Are you looking for a career where professional development is embedded in your employer's core culture? If so, Chenega Military, Intelligence & Operations Support (MIOS) could be the place for you! Join our team of professionals who support large-scale government operations by leveraging cutting-edge technology and take your career to the next level! SecuriGence deliver essential technology services to our customer in support of their missions to sustain the national security and economic interest of our nation. SecuriGence is seeking a talented Intermediate Firewall Engineer to help contribute to our success. The talented Intermediate Firewall Engineer will be responsible for the core engineering, day-to-day administration, and operational maintenance of enterprise boundary defense platforms and network security appliances. The Intermediate Firewall Engineer serves as the Tier 2/3 escalation and implementation lead, translating architectural designs into active, secure firewall configurations across on-premises and classified mission enclaves (DMSS, Secret/SAP, TS/SCI/SAP). Key responsibilities include managing Palo Alto Networks firewalls via Panorama, troubleshooting Site-to-Site IPsec VPN tunnels, administering dynamic routing protocols (BGP/OSPF), coordinating scheduled PAN-OS software updates, and enforcing continuous compliance with DISA STIGs and DoD change-management standards. This role bridges strategic engineering initiatives with routine operational support, providing escalation resolution for junior staff and operational support to the Senior Firewall Engineer. Come help us solve problems with Innovation through Intelligence. Responsibilities Administer, configure, and maintain Palo Alto Networks Next-Generation Firewalls (NGFW) via enterprise Panorama and direct management interfaces in strict alignment with change control protocols. Provision and deploy security policies, App-ID rules, TLS/SSL decryption policies, dynamic NAT/PAT schemes, and standardized security objects across multi-tenant environments. Serve as the Tier 2/3 operational escalation point, investigating and resolving complex network connectivity failures, IPsec VPN tunnel drops, routing anomalies, and application performance bottlenecks. Implement dynamic routing protocols (BGP, OSPF), VLAN segmentation, and perimeter access controls to maintain resilient edge connectivity and segmentation across mission partner enclaves. Lead remote site management for performers and external stakeholders across classified networks, including establishing, monitoring, and maintaining IPsec tunnels, VPN gateways, and operational telemetry. Plan, coordinate, and execute scheduled PAN-OS maintenance updates, dynamic threat content releases, antivirus definitions, and security patches under the direction of senior engineering leads. Maintain rigorous Authority to Operate (ATO) and security posture baselines by executing DISA STIG checklists, remediating vulnerability scan findings, and updating PO&AM documentation. Provide incident isolation support to the Security Operations Center (SOC), validating security telemetry log-forwarding pipelines and isolating traffic anomalies during cyber events. Maintain comprehensive technical configuration records, network topology diagrams, change audit logs, and operational standard operating procedures (SOPs) within ticketing and project systems (e.g., Redmine, Jira). Provide operational mentorship and technical guidance to Junior Firewall Engineers, reviewing routine change requests and assisting in complex troubleshooting workflows. Other duties as assigned. Qualifications Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field with 4+ years of hands-on network security/firewall engineering experience; OR High school diploma or GED equivalent with 8+ years of demonstrable operational experience in lieu of a degree. Must meet DoD 8140 / 8570.01-M IAT Level II baseline certification requirements (e.g., CompTIA Security+ CE, CCNA Security, CySA+). Vendor technical certification: Palo Alto Networks Certified Network Security Administrator (PCNSA) required; Palo Alto Networks Certified Network Security Engineer (PCNSE) preferred. Active Secret security clearance with eligibility to obtain TS/SCI/SAP Knowledge, Skills and Abilities: Strong operational knowledge of Palo Alto Networks NGFW administration, Panorama centralized management, and PAN-OS feature sets (App-ID, Content-ID, User-ID). Proven experience building, troubleshooting, and tuning Site-to-Site IPsec VPN tunnels, Global Protect remote access gateways, and dynamic NAT/PAT policies. Solid working knowledge of dynamic routing protocols (BGP, OSPF), static routing, sub-netting, and Layer 2/3 switching fabrics. Practical understanding of DoD RMF, DISA STIG validation, and boundary protection compliance checklists. Experience integrating firewall telemetry and syslog forwarding with SIEM/SOAR platforms (Splunk, Cribl, XSOAR) and network visibility fabrics (IXIA Packet Brokers). Strong analytical and packet-level troubleshooting skills utilizing tools such as Wireshark, TCPdump, and Panorama traffic/threat inspection logs. Familiarity with IT Service Management (ITSM) workflows, strict configuration change management boards (CCB), and tracking platforms (Jira, ServiceNow, Redmine). How you'll grow At Chenega MIOS, our professional development plan focuses on helping our team members at every level of their careers to identify and use their strengths to do their best work every day. From entry-level employees to senior leaders, we believe there's always room to learn. We offer opportunities to help sharpen skills in addition to hands-on experience in the global, fast-changing business world. From on-the-job learning experiences to formal development programs, our professionals have a variety of opportunities to continue to grow throughout their careers. Benefits At Chenega MIOS, we know that great people make a great organization. We value our team members and offer them a broad range of benefits. Learn more about what working at Chenega MIOS can mean for you. Chenega MIOS's culture Our positive and supportive culture encourages our team members to do their best work every day. We celebrate individuals by recognizing their uniqueness and offering them the flexibility to make daily choices that can help them be healthy, centered, confident, and aware. We offer well-being programs and continuously look for new ways to maintain a culture where we excel and lead healthy, happy lives. Corporate citizenship Chenega MIOS is led by a purpose to make an impact that matters. This purpose defines who we are and extends to relationships with our clients, our team members, and our communities. We believe that business has the power to inspire and transform. We focus on education, giving, skill-based volunteerism, and leadership to help drive positive social impact in our communities. Learn more about Chenega's impact on the world. Chenega MIOS News- Tips from your Talent Acquisition Team We want job seekers exploring opportunities at Chenega MIOS to feel prepared and confident. To help you with your research, we suggest you review the following links: Chenega MIOS web site - Glassdoor at-Chenega-MIOS- EI_IE369514.11,23.htm LinkedIn - Facebook -
10/21/2026
Full time
Job Description Job Description Overview Intermediate Firewall Engineer Oakton, VA Are you ready to enhance your skills and build your career in a rapidly evolving business climate? Are you looking for a career where professional development is embedded in your employer's core culture? If so, Chenega Military, Intelligence & Operations Support (MIOS) could be the place for you! Join our team of professionals who support large-scale government operations by leveraging cutting-edge technology and take your career to the next level! SecuriGence deliver essential technology services to our customer in support of their missions to sustain the national security and economic interest of our nation. SecuriGence is seeking a talented Intermediate Firewall Engineer to help contribute to our success. The talented Intermediate Firewall Engineer will be responsible for the core engineering, day-to-day administration, and operational maintenance of enterprise boundary defense platforms and network security appliances. The Intermediate Firewall Engineer serves as the Tier 2/3 escalation and implementation lead, translating architectural designs into active, secure firewall configurations across on-premises and classified mission enclaves (DMSS, Secret/SAP, TS/SCI/SAP). Key responsibilities include managing Palo Alto Networks firewalls via Panorama, troubleshooting Site-to-Site IPsec VPN tunnels, administering dynamic routing protocols (BGP/OSPF), coordinating scheduled PAN-OS software updates, and enforcing continuous compliance with DISA STIGs and DoD change-management standards. This role bridges strategic engineering initiatives with routine operational support, providing escalation resolution for junior staff and operational support to the Senior Firewall Engineer. Come help us solve problems with Innovation through Intelligence. Responsibilities Administer, configure, and maintain Palo Alto Networks Next-Generation Firewalls (NGFW) via enterprise Panorama and direct management interfaces in strict alignment with change control protocols. Provision and deploy security policies, App-ID rules, TLS/SSL decryption policies, dynamic NAT/PAT schemes, and standardized security objects across multi-tenant environments. Serve as the Tier 2/3 operational escalation point, investigating and resolving complex network connectivity failures, IPsec VPN tunnel drops, routing anomalies, and application performance bottlenecks. Implement dynamic routing protocols (BGP, OSPF), VLAN segmentation, and perimeter access controls to maintain resilient edge connectivity and segmentation across mission partner enclaves. Lead remote site management for performers and external stakeholders across classified networks, including establishing, monitoring, and maintaining IPsec tunnels, VPN gateways, and operational telemetry. Plan, coordinate, and execute scheduled PAN-OS maintenance updates, dynamic threat content releases, antivirus definitions, and security patches under the direction of senior engineering leads. Maintain rigorous Authority to Operate (ATO) and security posture baselines by executing DISA STIG checklists, remediating vulnerability scan findings, and updating PO&AM documentation. Provide incident isolation support to the Security Operations Center (SOC), validating security telemetry log-forwarding pipelines and isolating traffic anomalies during cyber events. Maintain comprehensive technical configuration records, network topology diagrams, change audit logs, and operational standard operating procedures (SOPs) within ticketing and project systems (e.g., Redmine, Jira). Provide operational mentorship and technical guidance to Junior Firewall Engineers, reviewing routine change requests and assisting in complex troubleshooting workflows. Other duties as assigned. Qualifications Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field with 4+ years of hands-on network security/firewall engineering experience; OR High school diploma or GED equivalent with 8+ years of demonstrable operational experience in lieu of a degree. Must meet DoD 8140 / 8570.01-M IAT Level II baseline certification requirements (e.g., CompTIA Security+ CE, CCNA Security, CySA+). Vendor technical certification: Palo Alto Networks Certified Network Security Administrator (PCNSA) required; Palo Alto Networks Certified Network Security Engineer (PCNSE) preferred. Active Secret security clearance with eligibility to obtain TS/SCI/SAP Knowledge, Skills and Abilities: Strong operational knowledge of Palo Alto Networks NGFW administration, Panorama centralized management, and PAN-OS feature sets (App-ID, Content-ID, User-ID). Proven experience building, troubleshooting, and tuning Site-to-Site IPsec VPN tunnels, Global Protect remote access gateways, and dynamic NAT/PAT policies. Solid working knowledge of dynamic routing protocols (BGP, OSPF), static routing, sub-netting, and Layer 2/3 switching fabrics. Practical understanding of DoD RMF, DISA STIG validation, and boundary protection compliance checklists. Experience integrating firewall telemetry and syslog forwarding with SIEM/SOAR platforms (Splunk, Cribl, XSOAR) and network visibility fabrics (IXIA Packet Brokers). Strong analytical and packet-level troubleshooting skills utilizing tools such as Wireshark, TCPdump, and Panorama traffic/threat inspection logs. Familiarity with IT Service Management (ITSM) workflows, strict configuration change management boards (CCB), and tracking platforms (Jira, ServiceNow, Redmine). How you'll grow At Chenega MIOS, our professional development plan focuses on helping our team members at every level of their careers to identify and use their strengths to do their best work every day. From entry-level employees to senior leaders, we believe there's always room to learn. We offer opportunities to help sharpen skills in addition to hands-on experience in the global, fast-changing business world. From on-the-job learning experiences to formal development programs, our professionals have a variety of opportunities to continue to grow throughout their careers. Benefits At Chenega MIOS, we know that great people make a great organization. We value our team members and offer them a broad range of benefits. Learn more about what working at Chenega MIOS can mean for you. Chenega MIOS's culture Our positive and supportive culture encourages our team members to do their best work every day. We celebrate individuals by recognizing their uniqueness and offering them the flexibility to make daily choices that can help them be healthy, centered, confident, and aware. We offer well-being programs and continuously look for new ways to maintain a culture where we excel and lead healthy, happy lives. Corporate citizenship Chenega MIOS is led by a purpose to make an impact that matters. This purpose defines who we are and extends to relationships with our clients, our team members, and our communities. We believe that business has the power to inspire and transform. We focus on education, giving, skill-based volunteerism, and leadership to help drive positive social impact in our communities. Learn more about Chenega's impact on the world. Chenega MIOS News- Tips from your Talent Acquisition Team We want job seekers exploring opportunities at Chenega MIOS to feel prepared and confident. To help you with your research, we suggest you review the following links: Chenega MIOS web site - Glassdoor at-Chenega-MIOS- EI_IE369514.11,23.htm LinkedIn - Facebook -
Job Description Job Description Work Location: Hybrid (3 days remote, 2 days in office) Candidate location - Candidates local to South Carolina are required. Candidates local to Georgia or North Carolina will be considered if they are willing to relocate to South Carolina at their own expense. Employment Type: W2 only, no subcontractors Our direct client is seeking an experienced Network Engineer - Consultant 8502 for a 12-month contract, located in Columbia, SC. -5+ years of experience with FIREWALLS IN AWS AND AZURE. -5+ years of experience with PALO ALTO FIREWALLS Both of these skills are now required for resources. Preferred Prisma Cloud Forescout Cisco Umbrella F5 load balancing/firewall CISSP - Certified Information Systems Security Professional SC100 Microsoft Cybersecurity Architect AWS Certified Cloud Solutions Architect Prisma Certified Cloud Security Engineer, PCNSA, PCNSE
10/20/2026
Full time
Job Description Job Description Work Location: Hybrid (3 days remote, 2 days in office) Candidate location - Candidates local to South Carolina are required. Candidates local to Georgia or North Carolina will be considered if they are willing to relocate to South Carolina at their own expense. Employment Type: W2 only, no subcontractors Our direct client is seeking an experienced Network Engineer - Consultant 8502 for a 12-month contract, located in Columbia, SC. -5+ years of experience with FIREWALLS IN AWS AND AZURE. -5+ years of experience with PALO ALTO FIREWALLS Both of these skills are now required for resources. Preferred Prisma Cloud Forescout Cisco Umbrella F5 load balancing/firewall CISSP - Certified Information Systems Security Professional SC100 Microsoft Cybersecurity Architect AWS Certified Cloud Solutions Architect Prisma Certified Cloud Security Engineer, PCNSA, PCNSE
Job Description Job Description Tetrad Digital Integrity (TDI) is a leading-edge cybersecurity firm with a mission to safeguard and protect our customers from increasing threats and vulnerabilities in this digital age. TDI is seeking a Firewall Engineer to support the Compartmented Enterprise Services Office (CESO) Task Order for the GIG Service Management - Operations II (GSM-O II) contract. We are looking for a professional with hands-on engineering and testing experience in virtualized and cloud environments. A skilled engineer knowledgeable and experienced in developing and implementing Firewall/Networking Security Solutions. With the CESO program, the Defense Information System Agency (DISA) is looking to transform the existing Secure Web Services (SWS) environment, used to provide secure information sharing to the community, into a more mature service offering to meet the DoD and IC community. The goal will be to manage the commercial cloud migration and fully automate the continuous development & continuous integration environment, fourth estate consolidation, professionalize services - ITIL/DevSecOps based processes, improve the customer experience 1st call resolution, and achieve development of a service catalog for Defense Working Capital Fund (DWCF) Model. This position is onsite 5 days/week in Arlington, VA and requires an active TS/SCI clearance. RESPONSIBILITIES: Identify and remediate misconfigurations, conflicting rules, security gaps, firewall and load balancer security issues, optimize rule-sets, and enhance the overall security posture and performance of Firewalls and Load Balancers Provide Tier 3 support to members of the operations network administrations. Maintain all HW and SW components at vendor supported levels. Support mission-critical Continuity of Operations (COOP). Conduct a minimum of two (2) assessment of firewall each month on CESO and customer devices and generate assessment reports and provide recommendations for improvements. Support the creation of network device performance and traffic utilization monthly reports. Develop and/or participate in After Action Reports (AARs) Provide expert advice and direction regarding the management and operation of all Palo Alto devices in the DISA CESO enterprise architecture. Interact with the customer point of contact to set objectives/goals based on Palo Alto Networks technologies and available technology roadmap for architecture and design discussions. Evaluate current technologies and processes associated with DISA CESO to identify gaps. Provide requirements and strategies for future cybersecurity operations. Active participant in meetings with DISA CESO and mission partner working groups. Adhere to applicable DOD STIGs, DISA applicable orders, and JSIG policy, guidelines, and regulations. QUALIFICATIONS: Bachelor's degree and 8+ years of directly relevant experience. Additionall experience may be considered in lieu of degree. 5+ years of hands-on Cisco / Palo Alto Firewall experience in both engineering and Operations and maintenance roles. Strong knowledge of Palo Alto concepts and best practices: Panorama Installation, HA Config, Template and Template Stacks Panorama Policy creation and push to group of Firewalls and Verify Push Palo Alto Route configuration, IPSec Site to Site VPN Config and Troubleshooting Palo Alto VM in AWS, IPS Configuration, Virtual Router / Systems and Firewall HA Experience working in a high op-temp, Top Secret environment. 8570 IAT Level II Baseline Certification (e.g. CCNA Security, CySA+, GICSP, GSEC, Security+ CE, CND, SSCP) PAY RANGE: The anticipated salary range for this position is $115,000 - $125,000. This range is a good-faith estimate and not a guarantee of compensation. Final compensation will be based on factors including experience, education, skills, geographic location, internal equity, market data and applicable contract requirements, and may fall outside the posted range. TDI does business with the federal government, which restricts employment to individuals who are either US citizens or lawful permanent residents of the United States. "TDI is an Equal Opportunity Employer. Employment decisions are made based on individual qualifications, merit, and business needs. We do not discriminate in employment opportunities or practices based on race, color, religion, sex, or national origin, in accordance with applicable federal laws." Powered by JazzHR K1XH2D1aKL
10/20/2026
Full time
Job Description Job Description Tetrad Digital Integrity (TDI) is a leading-edge cybersecurity firm with a mission to safeguard and protect our customers from increasing threats and vulnerabilities in this digital age. TDI is seeking a Firewall Engineer to support the Compartmented Enterprise Services Office (CESO) Task Order for the GIG Service Management - Operations II (GSM-O II) contract. We are looking for a professional with hands-on engineering and testing experience in virtualized and cloud environments. A skilled engineer knowledgeable and experienced in developing and implementing Firewall/Networking Security Solutions. With the CESO program, the Defense Information System Agency (DISA) is looking to transform the existing Secure Web Services (SWS) environment, used to provide secure information sharing to the community, into a more mature service offering to meet the DoD and IC community. The goal will be to manage the commercial cloud migration and fully automate the continuous development & continuous integration environment, fourth estate consolidation, professionalize services - ITIL/DevSecOps based processes, improve the customer experience 1st call resolution, and achieve development of a service catalog for Defense Working Capital Fund (DWCF) Model. This position is onsite 5 days/week in Arlington, VA and requires an active TS/SCI clearance. RESPONSIBILITIES: Identify and remediate misconfigurations, conflicting rules, security gaps, firewall and load balancer security issues, optimize rule-sets, and enhance the overall security posture and performance of Firewalls and Load Balancers Provide Tier 3 support to members of the operations network administrations. Maintain all HW and SW components at vendor supported levels. Support mission-critical Continuity of Operations (COOP). Conduct a minimum of two (2) assessment of firewall each month on CESO and customer devices and generate assessment reports and provide recommendations for improvements. Support the creation of network device performance and traffic utilization monthly reports. Develop and/or participate in After Action Reports (AARs) Provide expert advice and direction regarding the management and operation of all Palo Alto devices in the DISA CESO enterprise architecture. Interact with the customer point of contact to set objectives/goals based on Palo Alto Networks technologies and available technology roadmap for architecture and design discussions. Evaluate current technologies and processes associated with DISA CESO to identify gaps. Provide requirements and strategies for future cybersecurity operations. Active participant in meetings with DISA CESO and mission partner working groups. Adhere to applicable DOD STIGs, DISA applicable orders, and JSIG policy, guidelines, and regulations. QUALIFICATIONS: Bachelor's degree and 8+ years of directly relevant experience. Additionall experience may be considered in lieu of degree. 5+ years of hands-on Cisco / Palo Alto Firewall experience in both engineering and Operations and maintenance roles. Strong knowledge of Palo Alto concepts and best practices: Panorama Installation, HA Config, Template and Template Stacks Panorama Policy creation and push to group of Firewalls and Verify Push Palo Alto Route configuration, IPSec Site to Site VPN Config and Troubleshooting Palo Alto VM in AWS, IPS Configuration, Virtual Router / Systems and Firewall HA Experience working in a high op-temp, Top Secret environment. 8570 IAT Level II Baseline Certification (e.g. CCNA Security, CySA+, GICSP, GSEC, Security+ CE, CND, SSCP) PAY RANGE: The anticipated salary range for this position is $115,000 - $125,000. This range is a good-faith estimate and not a guarantee of compensation. Final compensation will be based on factors including experience, education, skills, geographic location, internal equity, market data and applicable contract requirements, and may fall outside the posted range. TDI does business with the federal government, which restricts employment to individuals who are either US citizens or lawful permanent residents of the United States. "TDI is an Equal Opportunity Employer. Employment decisions are made based on individual qualifications, merit, and business needs. We do not discriminate in employment opportunities or practices based on race, color, religion, sex, or national origin, in accordance with applicable federal laws." Powered by JazzHR K1XH2D1aKL
Job Description Job Description Palo Alto Firewall Engineer / SME (PCNSE) Cyber Security Engineering Specialist III - Firewall Services Location: Springfield, VA - on site Time Type: Full time, Exempt Clearance Required to Start: Active TS/SCI (U.S. citizenship required) Additional Requirement: Must be able to obtain and maintain a U.S. Government polygraph Travel: Up to 15%, local and CONUS Salary Range: $117,000 - $128,000 Own the Palo Alto estate - legacy iron through Prisma and Panorama. RISA is hiring a Palo Alto SME to be the focal point for every Palo Alto task, operation, and project on the Network Security Services team supporting an Intelligence Community customer. The work spans both ends of the estate: PA-3000 and PA-5000 hardware refreshes and legacy CLI on one side, Prisma Access, VM-Series, and Cortex on the other. You will talk to the owner here, not a recruiting queue. What You Will Do Serve as the lead technical authority for administering, configuring, and troubleshooting Palo Alto NGFWs across a hybrid enterprise. Lead the design, analysis, testing, and implementation of secure network architectures on the Palo Alto stack. Manage the full hardware and software lifecycle, including complex refreshes and PAN-OS upgrades on legacy platforms. Run Panorama for centralized policy management across a fleet of physical and virtual firewalls. Configure master-level security profiles - App-ID, User-ID, Content-ID, SSL Decryption, and WildFire. Own configuration management processes and SOPs for all Palo Alto platforms. Mentor junior engineers and act as the escalation point for complex troubleshooting. Liaise with contract, customer, and government DAA on network security status, policies, and procedures. What You'll Bring S. citizenship and an active TS/SCI. Ability to successfully obtain and maintain a U.S. Government polygraph. Education and experience, per the contract labor category criteria: Bachelor's degree in a field applicable to the position plus 6 years of relevant experience. Equivalents accepted - Master's plus 4, Associate's plus 8, or High School diploma/GED plus 10. 7+ years hands-on administering, configuring, and troubleshooting Palo Alto NGFWs in large-scale enterprise or global environments. Active PCNSE certification. DoD 8140.01 and 8570.01-M IAT Level II (e.g. Security+ CE), and CSSP Infrastructure Support within 120 days of start. Deep practical knowledge of legacy Gen 2/Gen 3 hardware - PA-3000 and PA-5000 series, legacy CLI, physical troubleshooting, line-card replacement. Prisma Access (SASE), Prisma SD-WAN, and VM-Series in AWS, Azure, or GCP. Panorama template and device-group inheritance across a hybrid fleet. Advanced BGP, OSPF, IPSec VPN, and NAT. Nice to Have PCNSC or Prisma Certified SASE Professional (PCSAE). Python, plus firewall automation with Ansible, Terraform, or the Palo Alto XML/REST APIs. Cortex XDR or XSOAR; Expedition for legacy rule migration to App-ID policy. Zero Trust Network Access architecture; F5 (APM, AFM), Juniper SRX, or Cisco FTD/ASA. About RISA Rolston Information Systems Assurance (RISA) is a Service-Disabled Veteran-Owned Small Business that has supported federal defense and intelligence cybersecurity missions for more than seventeen years. We are small on purpose: direct access to leadership, a real say in how the work gets done, and none of the layers that slow large primes down. Benefits Medical, dental, and vision insurance; 401(k) and Roth; Paid Time Off; and 11 paid Federal Holidays. RISA is an Equal Opportunity Employer. Upon receiving an offer of employment, all applicants will be required to do a background check, including a criminal record check and employment/education verification.
10/20/2026
Full time
Job Description Job Description Palo Alto Firewall Engineer / SME (PCNSE) Cyber Security Engineering Specialist III - Firewall Services Location: Springfield, VA - on site Time Type: Full time, Exempt Clearance Required to Start: Active TS/SCI (U.S. citizenship required) Additional Requirement: Must be able to obtain and maintain a U.S. Government polygraph Travel: Up to 15%, local and CONUS Salary Range: $117,000 - $128,000 Own the Palo Alto estate - legacy iron through Prisma and Panorama. RISA is hiring a Palo Alto SME to be the focal point for every Palo Alto task, operation, and project on the Network Security Services team supporting an Intelligence Community customer. The work spans both ends of the estate: PA-3000 and PA-5000 hardware refreshes and legacy CLI on one side, Prisma Access, VM-Series, and Cortex on the other. You will talk to the owner here, not a recruiting queue. What You Will Do Serve as the lead technical authority for administering, configuring, and troubleshooting Palo Alto NGFWs across a hybrid enterprise. Lead the design, analysis, testing, and implementation of secure network architectures on the Palo Alto stack. Manage the full hardware and software lifecycle, including complex refreshes and PAN-OS upgrades on legacy platforms. Run Panorama for centralized policy management across a fleet of physical and virtual firewalls. Configure master-level security profiles - App-ID, User-ID, Content-ID, SSL Decryption, and WildFire. Own configuration management processes and SOPs for all Palo Alto platforms. Mentor junior engineers and act as the escalation point for complex troubleshooting. Liaise with contract, customer, and government DAA on network security status, policies, and procedures. What You'll Bring S. citizenship and an active TS/SCI. Ability to successfully obtain and maintain a U.S. Government polygraph. Education and experience, per the contract labor category criteria: Bachelor's degree in a field applicable to the position plus 6 years of relevant experience. Equivalents accepted - Master's plus 4, Associate's plus 8, or High School diploma/GED plus 10. 7+ years hands-on administering, configuring, and troubleshooting Palo Alto NGFWs in large-scale enterprise or global environments. Active PCNSE certification. DoD 8140.01 and 8570.01-M IAT Level II (e.g. Security+ CE), and CSSP Infrastructure Support within 120 days of start. Deep practical knowledge of legacy Gen 2/Gen 3 hardware - PA-3000 and PA-5000 series, legacy CLI, physical troubleshooting, line-card replacement. Prisma Access (SASE), Prisma SD-WAN, and VM-Series in AWS, Azure, or GCP. Panorama template and device-group inheritance across a hybrid fleet. Advanced BGP, OSPF, IPSec VPN, and NAT. Nice to Have PCNSC or Prisma Certified SASE Professional (PCSAE). Python, plus firewall automation with Ansible, Terraform, or the Palo Alto XML/REST APIs. Cortex XDR or XSOAR; Expedition for legacy rule migration to App-ID policy. Zero Trust Network Access architecture; F5 (APM, AFM), Juniper SRX, or Cisco FTD/ASA. About RISA Rolston Information Systems Assurance (RISA) is a Service-Disabled Veteran-Owned Small Business that has supported federal defense and intelligence cybersecurity missions for more than seventeen years. We are small on purpose: direct access to leadership, a real say in how the work gets done, and none of the layers that slow large primes down. Benefits Medical, dental, and vision insurance; 401(k) and Roth; Paid Time Off; and 11 paid Federal Holidays. RISA is an Equal Opportunity Employer. Upon receiving an offer of employment, all applicants will be required to do a background check, including a criminal record check and employment/education verification.
Job Description Job Description About Us: NPO Torino is a specialized Digital Transformation company, recently acquired by the Fondo Italiano d'Investimento (Italian Investment Fund). With our headquarters in Turin and an operational presence in the United States and Brazil, we support companies in their technological evolution journey by combining consulting expertise with advanced IT solutions. We offer services in cloud computing, cybersecurity, AI for business, FinOps, system integration, and IT governance, featuring a customized and results-driven approach. Our mission is to simplify digital complexity and transform it into strategic value for enterprises. Backed by the Fondo Italiano d'Investimento , NPO Torino is accelerating its growth as a partner of choice for companies looking to tackle innovation challenges with vision, pragmatism, and sustainability. Salary range $80K to $92K. Work is partially remote with occasional travel to USA, and in Canada. Role Description: We are looking for a highly qualified Senior Network Security Engineer to join our Network & Security Business Unit. The professional will be responsible for the design, implementation, maintenance, and troubleshooting of complex network security infrastructures. The ideal candidate has deep, vertical expertise with leading security vendors (Fortinet, Palo Alto Networks, Cisco, F5) and a proven track record of managing modern architectures, including SASE solutions. Key Responsibilities: Design and manage security architectures based on Next-Generation Firewalls (NGFW). Implement and manage SASE (Secure Access Service Edge) solutions for distributed environments. Perform configuration , policy management, and advanced troubleshooting on multi-vendor equipment. Manage perimeter and internal security within Enterprise environments. Conduct log analysis, incident management, and system hardening. Provide technical mentoring for junior team members (optional, if required). Fundamental Technical Requirements (Must-Have) The candidate must demonstrate practical, in-depth, hands-on experience with the following technologies: Palo Alto Networks: Advanced configuration and management of NGFW (PA Series). Solid experience with Panorama for centralized management. Proven experience with SASE solutions (Prisma Access) and GlobalProtect. Fortinet: Advanced management of FortiGate (including VDOM, SD-WAN, SSL Inspection). Experience with the wider Fortinet ecosystem (FortiManager, FortiAnalyzer). Cisco Security: Experience with Cisco Security solutions (Firepower/FTD, ASA). Knowledge of Cisco ISE (Identity Services Engine) and TrustSec architectures is a strong plus. F5 Networks: Implementation and management of F5 BIG-IP solutions. Strong configuration and troubleshooting skills on LTM (Local Traffic Manager) and/or APM (Access Policy Manager) / AWAF modules. Soft Skills & Additional Requirements: Minimum of 5+ years of experience in Network Security Engineering roles. Excellent troubleshooting and problem-solving skills under pressure. Preferred Certifications (Nice-to-Have): Palo Alto: PCNSE (Palo Alto Networks Certified Network Security Engineer). Fortinet: NSE 4 / NSE 7. Cisco: CCNP Security or CCIE Security. F5: F5 Certified Administrator (F5-CA) or Technology Specialist (F5-CTS). Introduce Yourself (Screening Questions): "Do you have direct implementation experience with Prisma Access? Can you briefly describe a SASE architecture you have managed?" "Have you ever managed migrations between these vendors (e.g., from Cisco to Fortinet or vice versa)?" What We Offer: Salary commensurate with experience. Structured training and certification plans. Corporate benefits: Welfare Plan, Smart Working.
10/20/2026
Full time
Job Description Job Description About Us: NPO Torino is a specialized Digital Transformation company, recently acquired by the Fondo Italiano d'Investimento (Italian Investment Fund). With our headquarters in Turin and an operational presence in the United States and Brazil, we support companies in their technological evolution journey by combining consulting expertise with advanced IT solutions. We offer services in cloud computing, cybersecurity, AI for business, FinOps, system integration, and IT governance, featuring a customized and results-driven approach. Our mission is to simplify digital complexity and transform it into strategic value for enterprises. Backed by the Fondo Italiano d'Investimento , NPO Torino is accelerating its growth as a partner of choice for companies looking to tackle innovation challenges with vision, pragmatism, and sustainability. Salary range $80K to $92K. Work is partially remote with occasional travel to USA, and in Canada. Role Description: We are looking for a highly qualified Senior Network Security Engineer to join our Network & Security Business Unit. The professional will be responsible for the design, implementation, maintenance, and troubleshooting of complex network security infrastructures. The ideal candidate has deep, vertical expertise with leading security vendors (Fortinet, Palo Alto Networks, Cisco, F5) and a proven track record of managing modern architectures, including SASE solutions. Key Responsibilities: Design and manage security architectures based on Next-Generation Firewalls (NGFW). Implement and manage SASE (Secure Access Service Edge) solutions for distributed environments. Perform configuration , policy management, and advanced troubleshooting on multi-vendor equipment. Manage perimeter and internal security within Enterprise environments. Conduct log analysis, incident management, and system hardening. Provide technical mentoring for junior team members (optional, if required). Fundamental Technical Requirements (Must-Have) The candidate must demonstrate practical, in-depth, hands-on experience with the following technologies: Palo Alto Networks: Advanced configuration and management of NGFW (PA Series). Solid experience with Panorama for centralized management. Proven experience with SASE solutions (Prisma Access) and GlobalProtect. Fortinet: Advanced management of FortiGate (including VDOM, SD-WAN, SSL Inspection). Experience with the wider Fortinet ecosystem (FortiManager, FortiAnalyzer). Cisco Security: Experience with Cisco Security solutions (Firepower/FTD, ASA). Knowledge of Cisco ISE (Identity Services Engine) and TrustSec architectures is a strong plus. F5 Networks: Implementation and management of F5 BIG-IP solutions. Strong configuration and troubleshooting skills on LTM (Local Traffic Manager) and/or APM (Access Policy Manager) / AWAF modules. Soft Skills & Additional Requirements: Minimum of 5+ years of experience in Network Security Engineering roles. Excellent troubleshooting and problem-solving skills under pressure. Preferred Certifications (Nice-to-Have): Palo Alto: PCNSE (Palo Alto Networks Certified Network Security Engineer). Fortinet: NSE 4 / NSE 7. Cisco: CCNP Security or CCIE Security. F5: F5 Certified Administrator (F5-CA) or Technology Specialist (F5-CTS). Introduce Yourself (Screening Questions): "Do you have direct implementation experience with Prisma Access? Can you briefly describe a SASE architecture you have managed?" "Have you ever managed migrations between these vendors (e.g., from Cisco to Fortinet or vice versa)?" What We Offer: Salary commensurate with experience. Structured training and certification plans. Corporate benefits: Welfare Plan, Smart Working.
Job Description Job Description Overview Join a team where innovation meets mission. Our AI, cloud, cyber, and modernization solutions save agencies thousands of hours, safeguard national security, and strengthen health and humanitarian missions worldwide. With more than 1,700+ team members, 1,500+ AI & data experts, and 100+ prime contracts, we deliver at scale and with purpose. We've been recognized as a Top Workplace by The Washington Post for six consecutive years and named to the Inc. 5000 list of Fastest-Growing Private Companies in 13 of the past 14 years. Credence is a welcoming environment for those looking to grow and make a meaningful impact. We encourage employees to push boundaries and help solve critical, world-changing federal challenges. Position Summary Credence has an immediate opening for a Network Security Engineer to join our internal IT team. This individual will own enterprise network and security infrastructure across physical and cloud-hosted environments, administer multi-vendor firewalls, and maintain compliance-aligned controls within a CMMC Level 2 and SOC 2 audit environment. The role carries meaningful responsibility for SSP accuracy, ISSO support functions, and GCP organization-level governance. The ideal candidate combines deep network security expertise with documentation discipline and a proactive, compliance-first mindset Responsibilities:Network Infrastructure & Operations Provide technical ownership of the corporate WAN, LAN, and wireless infrastructure, including planning, implementation, expansion, and lifecycle management. Monitor and maintain network performance and reliability, ensuring a minimum of 99% uptime for corporate systems, phone systems, and connectivity. Configure and manage routing, switching, firewalls, and VPNs across Palo Alto NGFW (HQ and branch), Palo Alto VM-Series (AWS Commercial), and FortiGate VM (Azure Government). Serve as primary administrator across all firewall platforms, including policy management, rule additions and modifications, allow-list maintenance, and configuration backups; maintain privileged access under a documented change-controlled process. Oversee network configuration management and backups to ensure recoverability and business continuity. Analyze and resolve escalated Tier 2+ network support tickets. Administer enterprise wireless infrastructure across multiple vendor platforms including Cisco, Aruba, and Ubiquiti; manage access point provisioning Security & Compliance Identify, assess, and mitigate network vulnerabilities through proactive monitoring and remediation. Implement and manage network security controls including firewalls, intrusion detection/prevention systems, antivirus, and secure access solutions. Collaborate with Systems Administrators on vulnerability scanning, patch management, and remediation efforts (e.g., Nessus scan results, OS hardening). Support audit readiness and compliance for CMMC Level 2 and SOC 2, including maintaining network-layer controls in the System Security Plan (SSP), providing firewall and network evidence for assessments, and contributing to ISSO functions as needed. Coordinate firewall rule changes and network modifications through a documented change management process, maintaining an audit-ready record of all changes for SOC 2 and CMMC assessment cycles. Collaboration & Support Work in coordination with Systems and Security administrators to ensure smooth systems and network integration across on-prem and cloud environments. Provide training, documentation, and knowledge sharing to IT staff on new network technologies and processes. Assist in disaster recovery planning and implementation of secure, redundant connectivity solutions. Write and maintain technical documentation, including network diagrams, cabling layouts, and internal knowledge base articles. Contribute to internal IT automation and tooling initiatives, including scripting, infrastructure-as-code, and network-layer input on expanding internal platforms and dashboards. Cloud Infrastructure & GCP Governance Serve as the GCP organization owner, maintaining folder hierarchy, org policies, IAM governance, and network configurations across all projects and access boundaries. Administer cloud-hosted network infrastructure including Palo Alto VM-Series in AWS Commercial and FortiGate VM in Azure Government; design and maintain hybrid connectivity patterns across cloud environments. Support GCP cloud networking operations including Cloud NCC hub-and-spoke architecture, HA-VPN with BGP over IKEv2, Cloud Router, and Cloud NAT. Requirements Must be a U.S. Citizenship Bachelor's degree in Computer Science, Information Technology, or a related field (or equivalent experience). Must have a minimum of 5+ years of hands-on working experience in network engineering, IT administration, or a related technical role. Must have a strong knowledge of Windows operating systems and enterprise networking fundamentals. Hands-on experience with enterprise firewall administration; Palo Alto NGFW experience and Cisco or equivalent routing and switching experience required. Must be proficient in managing network security tools (firewalls, IDS/IPS, VPNs, antivirus). Must be familiar with configuration management, monitoring, and documentation tools. Must have 5+years of demonstrated ability to maintain and update network security documentation including firewall rule baselines, network diagrams, and SSP network control contributions. Must have the ability to troubleshoot complex issues and communicate effectively with both technical and non-technical staff. Preferred Qualifications Certifications such as Palo Alto PCNSE, FortiGate NSE 4 or higher, CCNA, CCNP, Security+, or equivalent. FortiGate experience, including FortiGate VM in Azure Government, preferred; candidates with strong enterprise firewall experience may ramp up on FortiGate with internal support. Experience supporting Microsoft 365, Azure Government (GCC High), AWS Commercial, and GCP environments; familiarity with compliance boundaries specific to Azure Gov and GCC High preferred. Familiarity with VoIP, secure mail flow, and endpoint management integration. Experience contributing to IT/security-related project initiatives. Prior experience in an ISSO or ISSO support role, or familiarity with SSP documentation and NIST 800-171 network control mapping. Experience administering cloud-hosted firewall VMs (Palo Alto VM-Series or FortiGate VM) in AWS or Azure environments. Experience with network monitoring and management platforms such as PRTG Network Monitor, network documentation tools such as NetBox, and network automation and configuration management tools such as Ansible. Experience with Workload Identity Federation (WIF) and OIDC-based service account authentication in GCP; ability to audit and migrate from key-based service accounts. GCP Professional Cloud Network Engineer certification or equivalent demonstrated experience. Familiar with GCP organization-level governance including IAM, org policies, and folder hierarchy. Experience in a federal contractor environment or familiarity with government compliance frameworks (CMMC, FedRAMP) preferred. Comfort with scripting languages (Python, Bash) or infrastructure automation tools for network configuration and operational tasks. Salary Range: $130,000.00 to $155,000.00 annually. Actual compensation will be determined based on the selected candidate's experience, education, skills, and overall qualifications. Please join us, as together we build a better world one mission at a time powered by Technology and its People! Benefits Health Care Plan (Medical, Dental & Vision) Retirement Plan (401k, IRA) Life Insurance (Basic, Voluntary & AD&D) Paid Time Off (Vacation, Sick & Public Holidays) Family Leave (Maternity, Paternity) Short Term & Long Term Disability Training & Development Wellness Resources
10/20/2026
Full time
Job Description Job Description Overview Join a team where innovation meets mission. Our AI, cloud, cyber, and modernization solutions save agencies thousands of hours, safeguard national security, and strengthen health and humanitarian missions worldwide. With more than 1,700+ team members, 1,500+ AI & data experts, and 100+ prime contracts, we deliver at scale and with purpose. We've been recognized as a Top Workplace by The Washington Post for six consecutive years and named to the Inc. 5000 list of Fastest-Growing Private Companies in 13 of the past 14 years. Credence is a welcoming environment for those looking to grow and make a meaningful impact. We encourage employees to push boundaries and help solve critical, world-changing federal challenges. Position Summary Credence has an immediate opening for a Network Security Engineer to join our internal IT team. This individual will own enterprise network and security infrastructure across physical and cloud-hosted environments, administer multi-vendor firewalls, and maintain compliance-aligned controls within a CMMC Level 2 and SOC 2 audit environment. The role carries meaningful responsibility for SSP accuracy, ISSO support functions, and GCP organization-level governance. The ideal candidate combines deep network security expertise with documentation discipline and a proactive, compliance-first mindset Responsibilities:Network Infrastructure & Operations Provide technical ownership of the corporate WAN, LAN, and wireless infrastructure, including planning, implementation, expansion, and lifecycle management. Monitor and maintain network performance and reliability, ensuring a minimum of 99% uptime for corporate systems, phone systems, and connectivity. Configure and manage routing, switching, firewalls, and VPNs across Palo Alto NGFW (HQ and branch), Palo Alto VM-Series (AWS Commercial), and FortiGate VM (Azure Government). Serve as primary administrator across all firewall platforms, including policy management, rule additions and modifications, allow-list maintenance, and configuration backups; maintain privileged access under a documented change-controlled process. Oversee network configuration management and backups to ensure recoverability and business continuity. Analyze and resolve escalated Tier 2+ network support tickets. Administer enterprise wireless infrastructure across multiple vendor platforms including Cisco, Aruba, and Ubiquiti; manage access point provisioning Security & Compliance Identify, assess, and mitigate network vulnerabilities through proactive monitoring and remediation. Implement and manage network security controls including firewalls, intrusion detection/prevention systems, antivirus, and secure access solutions. Collaborate with Systems Administrators on vulnerability scanning, patch management, and remediation efforts (e.g., Nessus scan results, OS hardening). Support audit readiness and compliance for CMMC Level 2 and SOC 2, including maintaining network-layer controls in the System Security Plan (SSP), providing firewall and network evidence for assessments, and contributing to ISSO functions as needed. Coordinate firewall rule changes and network modifications through a documented change management process, maintaining an audit-ready record of all changes for SOC 2 and CMMC assessment cycles. Collaboration & Support Work in coordination with Systems and Security administrators to ensure smooth systems and network integration across on-prem and cloud environments. Provide training, documentation, and knowledge sharing to IT staff on new network technologies and processes. Assist in disaster recovery planning and implementation of secure, redundant connectivity solutions. Write and maintain technical documentation, including network diagrams, cabling layouts, and internal knowledge base articles. Contribute to internal IT automation and tooling initiatives, including scripting, infrastructure-as-code, and network-layer input on expanding internal platforms and dashboards. Cloud Infrastructure & GCP Governance Serve as the GCP organization owner, maintaining folder hierarchy, org policies, IAM governance, and network configurations across all projects and access boundaries. Administer cloud-hosted network infrastructure including Palo Alto VM-Series in AWS Commercial and FortiGate VM in Azure Government; design and maintain hybrid connectivity patterns across cloud environments. Support GCP cloud networking operations including Cloud NCC hub-and-spoke architecture, HA-VPN with BGP over IKEv2, Cloud Router, and Cloud NAT. Requirements Must be a U.S. Citizenship Bachelor's degree in Computer Science, Information Technology, or a related field (or equivalent experience). Must have a minimum of 5+ years of hands-on working experience in network engineering, IT administration, or a related technical role. Must have a strong knowledge of Windows operating systems and enterprise networking fundamentals. Hands-on experience with enterprise firewall administration; Palo Alto NGFW experience and Cisco or equivalent routing and switching experience required. Must be proficient in managing network security tools (firewalls, IDS/IPS, VPNs, antivirus). Must be familiar with configuration management, monitoring, and documentation tools. Must have 5+years of demonstrated ability to maintain and update network security documentation including firewall rule baselines, network diagrams, and SSP network control contributions. Must have the ability to troubleshoot complex issues and communicate effectively with both technical and non-technical staff. Preferred Qualifications Certifications such as Palo Alto PCNSE, FortiGate NSE 4 or higher, CCNA, CCNP, Security+, or equivalent. FortiGate experience, including FortiGate VM in Azure Government, preferred; candidates with strong enterprise firewall experience may ramp up on FortiGate with internal support. Experience supporting Microsoft 365, Azure Government (GCC High), AWS Commercial, and GCP environments; familiarity with compliance boundaries specific to Azure Gov and GCC High preferred. Familiarity with VoIP, secure mail flow, and endpoint management integration. Experience contributing to IT/security-related project initiatives. Prior experience in an ISSO or ISSO support role, or familiarity with SSP documentation and NIST 800-171 network control mapping. Experience administering cloud-hosted firewall VMs (Palo Alto VM-Series or FortiGate VM) in AWS or Azure environments. Experience with network monitoring and management platforms such as PRTG Network Monitor, network documentation tools such as NetBox, and network automation and configuration management tools such as Ansible. Experience with Workload Identity Federation (WIF) and OIDC-based service account authentication in GCP; ability to audit and migrate from key-based service accounts. GCP Professional Cloud Network Engineer certification or equivalent demonstrated experience. Familiar with GCP organization-level governance including IAM, org policies, and folder hierarchy. Experience in a federal contractor environment or familiarity with government compliance frameworks (CMMC, FedRAMP) preferred. Comfort with scripting languages (Python, Bash) or infrastructure automation tools for network configuration and operational tasks. Salary Range: $130,000.00 to $155,000.00 annually. Actual compensation will be determined based on the selected candidate's experience, education, skills, and overall qualifications. Please join us, as together we build a better world one mission at a time powered by Technology and its People! Benefits Health Care Plan (Medical, Dental & Vision) Retirement Plan (401k, IRA) Life Insurance (Basic, Voluntary & AD&D) Paid Time Off (Vacation, Sick & Public Holidays) Family Leave (Maternity, Paternity) Short Term & Long Term Disability Training & Development Wellness Resources
Job Description Job Description Global Software Firm seeks a Sr Network Security Engineer. We're looking for an engineer with strong Palo Alto, F5, and WAF experience. Experience in threat hunting and pen testing would be a plus. This is a permanent direct hire opportunity. Hybrid schedule with potential for fully remote if the hired candidate doesn't live within a reasonable commute of the data center. Compensation is competitive including: base, bonus, equity, 401k, unlimited pto, tuition reimbursement and much more! Role: The Network Security Engineer will help identify, research and evaluate security solutions and emerging technologies that align with the company's strategic direction. This person should have a strong knowledge of security, including HTTP compliance, application level security, and end-point protections. The engineer will be tasked with deploying new security technologies as well as maintaining current security infrastructure. A strong troubleshooting background is needed, as well as knowledge in APIs. Candidates should also have a strong ability to interface with other parts of the business and be able to coordinate work with multiple teams. Skills: Network routing and switching Firewall concepts and functions WAF and IPS F5: ASM, DNS, APM, AFM. Knowledge of iRules. Proxy and user access VPN access, both site-to-site and end user. GSLB, and server load balancing TLS knowledge and experience Knowledge of HTTP protocol Tier 3 operational support Preferred Experience: Routing: BGP, OSPF and EIGRP Firewall: ASA, PaloAlto and Juniper SRX Router and Switch: Cisco CCNP level knowledge Experience in reverse proxy solutions (Kemp/NGINX/HA Proxy) Experience in user proxy technologies Experience with Cloud Based DDoS and WAF solutions. Experience with NAC implementations (ClearPass, ISE) Familiarity with REST APIs and automation Anticipated base salary in the 150-180k range, + bonus
10/20/2026
Full time
Job Description Job Description Global Software Firm seeks a Sr Network Security Engineer. We're looking for an engineer with strong Palo Alto, F5, and WAF experience. Experience in threat hunting and pen testing would be a plus. This is a permanent direct hire opportunity. Hybrid schedule with potential for fully remote if the hired candidate doesn't live within a reasonable commute of the data center. Compensation is competitive including: base, bonus, equity, 401k, unlimited pto, tuition reimbursement and much more! Role: The Network Security Engineer will help identify, research and evaluate security solutions and emerging technologies that align with the company's strategic direction. This person should have a strong knowledge of security, including HTTP compliance, application level security, and end-point protections. The engineer will be tasked with deploying new security technologies as well as maintaining current security infrastructure. A strong troubleshooting background is needed, as well as knowledge in APIs. Candidates should also have a strong ability to interface with other parts of the business and be able to coordinate work with multiple teams. Skills: Network routing and switching Firewall concepts and functions WAF and IPS F5: ASM, DNS, APM, AFM. Knowledge of iRules. Proxy and user access VPN access, both site-to-site and end user. GSLB, and server load balancing TLS knowledge and experience Knowledge of HTTP protocol Tier 3 operational support Preferred Experience: Routing: BGP, OSPF and EIGRP Firewall: ASA, PaloAlto and Juniper SRX Router and Switch: Cisco CCNP level knowledge Experience in reverse proxy solutions (Kemp/NGINX/HA Proxy) Experience in user proxy technologies Experience with Cloud Based DDoS and WAF solutions. Experience with NAC implementations (ClearPass, ISE) Familiarity with REST APIs and automation Anticipated base salary in the 150-180k range, + bonus
Job Description Job Description True Zero Technologies, a veteran-owned small business, was founded on the principle that the purposeful enablement of people and technology in an organization directly ties to the quality of its outcomes. True Zero recognizes that those outcomes begin and end with our people, and that is what we have built a community of like-minded, driven, and passionate individuals and innovators who are aligned in a common goal of delivering top-tier services to our customers. Our culture and commitment have been recognized through numerous accolades, including being named one of the Best Places to Work in 2023 in two categories ("Prosperous and Thriving" ($5MM-$50MM in gross revenue) and "Mid-Atlantic Region" (DC, DE, MD, NC, VA, WV , and again in 2025 as a Best Places to Work honoree. In addition, True Zero earned coveted spots on the Inc. 5000 list of fastest-growing companies in America in 2022, 2023, and 2025 , a testament to our sustained growth driven by our people-first approach and unwavering dedication to excellence. The Network Security Engineer Senior leads complex network security architecture, engineering, tool sustainment, and analysis for CBP. The engineer provides senior review of network and firewall designs, directs resolution of security and performance issues, and develops technology recommendations for Government leadership. Job Responsibilities Lead reviews of network security architectures, designs, firewall requests, trust-zone transfers, and security controls for least privilege and policy compliance. Lead development and maintenance of LAN, WAN, cloud-network, SD-WAN, and ACI security standards, diagrams, designs, and transition documentation. Administer, configure, tune, secure, and sustain network security tools, devices, sensors, IDS/IPS, SIEM feeds, firewalls, proxies, and CDM capabilities. Support security investigations, incident containment and recovery, troubleshooting, and root-cause analysis for network-related issues. Identify network security and performance gaps, recommend corrective action, and conduct alternatives analyses, trade studies, and technology evaluations. Develop network security policies, awareness materials, training, signature-management records, maintenance reports, and performance reports. Job Qualifications Minimum 7 years of relevant network security, network engineering, cybersecurity engineering, or security-tool administration experience. Advanced experience with LAN and WAN security, cloud networking, firewall architecture, IDS and IPS, SIEM integrations, CDM tools, network sensors, and security investigations. PWS minimum certifications: CompTIA Security+ and Network+; Cisco CCST Networking or Cybersecurity or CCENT; Palo Alto PCCSA; Juniper JNCIA-Junos; and AWS Cloud Practitioner. Active higher-level certifications may support a waiver. Preferred certifications include Cisco CCNA or CCNP and AWS Advanced Networking Specialty. Demonstrated ability to lead architecture reviews, alternatives analyses, trade studies, root-cause investigations, technology insertion recommendations, policy development, and technical reporting. We're actively searching for talented security and technology practitioners who are ready to experience the True Zero difference. As a True Zero team member, you'll enjoy: - Competitive salary, paid twice per month - Best in class medical coverage - 100% of medical premiums covered by True Zero - Company wide new business incentive programs - Contribution Incentives (i.e. white papers, blog posts, internal webinars, etc.) - 3 weeks of PTO starting + 11 Paid Holidays Annually - 401k Program with 100% company match on the first 4% - Monthly reimbursement of Cell Phone and Home Internet costs - Paternity/Maternity Leave - Investment in training and certifications to broaden and deepen your technical skills We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.
10/20/2026
Full time
Job Description Job Description True Zero Technologies, a veteran-owned small business, was founded on the principle that the purposeful enablement of people and technology in an organization directly ties to the quality of its outcomes. True Zero recognizes that those outcomes begin and end with our people, and that is what we have built a community of like-minded, driven, and passionate individuals and innovators who are aligned in a common goal of delivering top-tier services to our customers. Our culture and commitment have been recognized through numerous accolades, including being named one of the Best Places to Work in 2023 in two categories ("Prosperous and Thriving" ($5MM-$50MM in gross revenue) and "Mid-Atlantic Region" (DC, DE, MD, NC, VA, WV , and again in 2025 as a Best Places to Work honoree. In addition, True Zero earned coveted spots on the Inc. 5000 list of fastest-growing companies in America in 2022, 2023, and 2025 , a testament to our sustained growth driven by our people-first approach and unwavering dedication to excellence. The Network Security Engineer Senior leads complex network security architecture, engineering, tool sustainment, and analysis for CBP. The engineer provides senior review of network and firewall designs, directs resolution of security and performance issues, and develops technology recommendations for Government leadership. Job Responsibilities Lead reviews of network security architectures, designs, firewall requests, trust-zone transfers, and security controls for least privilege and policy compliance. Lead development and maintenance of LAN, WAN, cloud-network, SD-WAN, and ACI security standards, diagrams, designs, and transition documentation. Administer, configure, tune, secure, and sustain network security tools, devices, sensors, IDS/IPS, SIEM feeds, firewalls, proxies, and CDM capabilities. Support security investigations, incident containment and recovery, troubleshooting, and root-cause analysis for network-related issues. Identify network security and performance gaps, recommend corrective action, and conduct alternatives analyses, trade studies, and technology evaluations. Develop network security policies, awareness materials, training, signature-management records, maintenance reports, and performance reports. Job Qualifications Minimum 7 years of relevant network security, network engineering, cybersecurity engineering, or security-tool administration experience. Advanced experience with LAN and WAN security, cloud networking, firewall architecture, IDS and IPS, SIEM integrations, CDM tools, network sensors, and security investigations. PWS minimum certifications: CompTIA Security+ and Network+; Cisco CCST Networking or Cybersecurity or CCENT; Palo Alto PCCSA; Juniper JNCIA-Junos; and AWS Cloud Practitioner. Active higher-level certifications may support a waiver. Preferred certifications include Cisco CCNA or CCNP and AWS Advanced Networking Specialty. Demonstrated ability to lead architecture reviews, alternatives analyses, trade studies, root-cause investigations, technology insertion recommendations, policy development, and technical reporting. We're actively searching for talented security and technology practitioners who are ready to experience the True Zero difference. As a True Zero team member, you'll enjoy: - Competitive salary, paid twice per month - Best in class medical coverage - 100% of medical premiums covered by True Zero - Company wide new business incentive programs - Contribution Incentives (i.e. white papers, blog posts, internal webinars, etc.) - 3 weeks of PTO starting + 11 Paid Holidays Annually - 401k Program with 100% company match on the first 4% - Monthly reimbursement of Cell Phone and Home Internet costs - Paternity/Maternity Leave - Investment in training and certifications to broaden and deepen your technical skills We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.
Job Description Job Description We are seeking a Senior Network Security Engineer for an operations-first role supporting enterprise network security infrastructure across on-premises, remote-access, hybrid-cloud, and cloud-connected environments. This is not primarily an architecture/design role. The priority is a hands-on engineer who can administer, configure, maintain, troubleshoot, patch, upgrade, back up, validate, document, and operate production security platforms with minimal ramp-up. Firewall operations: hands-on Cisco and Palo Alto firewall administration, rule changes, NAT, troubleshooting, policy cleanup, upgrades, backups, logging, and production support. VPN / remote access: support for remote-access VPN, site-to-site VPN, user connectivity issues, certificates, authentication flows, and after-hours troubleshooting. RSA / MFA administration: RSA SecurID or equivalent MFA operations, token support, server administration, user troubleshooting, VPN integration, certificates, patching, backups, logs, and monitoring. Day-to-day operations: ticket resolution, monitoring alerts, health checks, change requests, incident support, maintenance windows, operational reporting, and customer support. Configuration and administration: installing, configuring, maintaining, patching, upgrading, backing up, validating, and troubleshooting assigned security platforms. Production troubleshooting: strong TCP/IP, DNS, routing, firewall logs, packet captures, VPN authentication, certificate, and connectivity troubleshooting. Documentation and process discipline: SOPs, runbooks, diagrams, change records, rollback plans, evidence collection, knowledge transfer, and formal change management. Federal/customer environment maturity: Public Trust eligibility, regulated-environment documentation, customer support, cross-team coordination, and comfort working with government stakeholders. The best candidate can credibly say: "I have operated enterprise Cisco and Palo Alto firewalls in production, handled firewall rule changes and troubleshooting, supported VPN users and site-to-site tunnels, administered or supported RSA/MFA tied to VPN access, followed formal change-management processes, maintained documentation and backups, and can step into daily operational support with minimal ramp-up." Scope and Role Boundaries Primary platforms include Cisco ASA/Firepower/FTD/FMC, Palo Alto NGFW/Panorama/GlobalProtect, remote-access and site-to-site VPN, RSA SecurID Authentication Manager or comparable MFA, monitoring/logging/SIEM integrations, and related network security controls. Coordinate with SOC/NOC, cloud, identity/directory, wireless/LAN, server, endpoint, system owner, application, governance, and vendor teams during changes, incidents, troubleshooting, compliance, and audit support. Cloudflare, Cisco ISE/NAC, secure web/email gateways, packet visibility tools, SD-WAN/SASE/ZTNA, AWS/Azure security, and F5/application-delivery awareness are useful where they intersect with assigned operational support, but the core need is firewall, VPN, RSA/MFA, and production operations. Key Responsibilities Provide daily, weekly, monthly, and annual operational support for assigned security systems, including tickets, alerts, health checks, email/phone support, metrics, status reporting, and operational validation. Administer and troubleshoot enterprise firewalls, including rule bases, NAT, segmentation, high availability, threat prevention, VPN integration, logging, secure baselines, rule reviews, recertification, cleanup, and decommissioning. Install, configure, maintain, patch, upgrade, back up, and validate firewall, VPN, MFA, and related network security systems in production environments. Support remote-access VPN, site-to-site VPN, partner connectivity, cloud connectivity, mobile/remote users, certificates, authentication policies, availability, utilization, and user access issues. Maintain and troubleshoot RSA SecurID Authentication Manager or equivalent MFA services, including servers/appliances, agents, certificates, HA, backups, logs, monitoring, directory integration, VPN authentication, and token lifecycle support. Respond to incidents, vulnerability notices, urgent requests, vendor advisories, PSIRT notices, system alerts, and emergency troubleshooting while minimizing service disruption. Use firewall logs, VPN logs, packet captures, SIEM data, monitoring tools, DNS/routing checks, and standard diagnostics to resolve complex connectivity, authentication, TLS/certificate, and application-flow issues. Create and maintain topology diagrams, equipment inventories, configurations, SOPs, runbooks, implementation plans, rollback plans, build/upgrade procedures, troubleshooting notes, and knowledge articles. Follow approved change, release, incident, problem, and configuration-management processes; prepare change records, peer-review materials, validation evidence, root-cause analysis, metrics, and audit artifacts. Support vulnerability remediation, POA&M tracking, continuous monitoring, compliance reviews, audit evidence collection, and coordination with ISSO, system owner, and security governance teams. Requirements 7+ years of experience in network security engineering, network infrastructure, cybersecurity infrastructure, or a closely related role. 5+ years of hands-on experience administering, maintaining, and troubleshooting enterprise firewall platforms in production environments. Hands-on experience with Cisco security technologies such as Cisco ASA, Firepower, FTD, FMC, AnyConnect/Secure Client, or equivalent Cisco firewall/VPN platforms. Hands-on experience with Palo Alto Networks technologies such as NGFW, Panorama, GlobalProtect, security profiles, App-ID/User-ID, logging, and policy optimization. Experience administering or supporting RSA SecurID Authentication Manager or comparable enterprise MFA/two-factor authentication platforms, including token support, server operations, patching/upgrades, backups, certificates, monitoring, and directory/VPN integration. Strong knowledge of firewall policy, NAT, VPNs, routing, DNS, DHCP, BGP, TLS/certificates, packet captures, log analysis, segmentation, high availability, and common network diagnostic tools. Experience with enterprise monitoring, logging, SIEM, alerting, vulnerability management, incident response, formal change management, and regulated-environment documentation. Ability to create clear technical documentation, support customers and stakeholders, prioritize operational work, communicate clearly, and coordinate across technical teams. Ability to obtain and maintain a Public Trust background investigation. Desired Certifications Relevant certifications are helpful but should not replace demonstrated hands-on experience. Examples include CCNP Security, CCIE Security, PCNSE, PCCSE, CISSP, CCSP, AWS Certified Security - Specialty, AWS Advanced Networking - Specialty, Microsoft Certified: Azure Security Engineer Associate, Microsoft Certified: Azure Network Engineer Associate, CompTIA Security+, CompTIA CySA+, GIAC certifications, or equivalent vendor/cloud certifications. Core Competencies Enterprise firewall engineering and policy lifecycle management VPN, remote access, RSA/MFA, and token lifecycle operations Cloudflare, edge security, secure access, and Zero Trust support Content filtering, secure web/email gateway, and NAC operations Hybrid-cloud network security and secure connectivity Monitoring, logging, SIEM integration, and incident response support Security visibility, packet analysis, and advanced troubleshooting Vulnerability remediation, compliance evidence, and POA&M support Change management, documentation, reporting, and operational metrics Technical leadership, customer support, and cross-team collaboration Benefits 401(k) 401(k) matching Dental insurance Flexible schedule Flexible spending account Health insurance Health savings account Life insurance Paid time off Professional development assistance Referral program Retirement plan Tuition reimbursement Vision insurance
10/20/2026
Full time
Job Description Job Description We are seeking a Senior Network Security Engineer for an operations-first role supporting enterprise network security infrastructure across on-premises, remote-access, hybrid-cloud, and cloud-connected environments. This is not primarily an architecture/design role. The priority is a hands-on engineer who can administer, configure, maintain, troubleshoot, patch, upgrade, back up, validate, document, and operate production security platforms with minimal ramp-up. Firewall operations: hands-on Cisco and Palo Alto firewall administration, rule changes, NAT, troubleshooting, policy cleanup, upgrades, backups, logging, and production support. VPN / remote access: support for remote-access VPN, site-to-site VPN, user connectivity issues, certificates, authentication flows, and after-hours troubleshooting. RSA / MFA administration: RSA SecurID or equivalent MFA operations, token support, server administration, user troubleshooting, VPN integration, certificates, patching, backups, logs, and monitoring. Day-to-day operations: ticket resolution, monitoring alerts, health checks, change requests, incident support, maintenance windows, operational reporting, and customer support. Configuration and administration: installing, configuring, maintaining, patching, upgrading, backing up, validating, and troubleshooting assigned security platforms. Production troubleshooting: strong TCP/IP, DNS, routing, firewall logs, packet captures, VPN authentication, certificate, and connectivity troubleshooting. Documentation and process discipline: SOPs, runbooks, diagrams, change records, rollback plans, evidence collection, knowledge transfer, and formal change management. Federal/customer environment maturity: Public Trust eligibility, regulated-environment documentation, customer support, cross-team coordination, and comfort working with government stakeholders. The best candidate can credibly say: "I have operated enterprise Cisco and Palo Alto firewalls in production, handled firewall rule changes and troubleshooting, supported VPN users and site-to-site tunnels, administered or supported RSA/MFA tied to VPN access, followed formal change-management processes, maintained documentation and backups, and can step into daily operational support with minimal ramp-up." Scope and Role Boundaries Primary platforms include Cisco ASA/Firepower/FTD/FMC, Palo Alto NGFW/Panorama/GlobalProtect, remote-access and site-to-site VPN, RSA SecurID Authentication Manager or comparable MFA, monitoring/logging/SIEM integrations, and related network security controls. Coordinate with SOC/NOC, cloud, identity/directory, wireless/LAN, server, endpoint, system owner, application, governance, and vendor teams during changes, incidents, troubleshooting, compliance, and audit support. Cloudflare, Cisco ISE/NAC, secure web/email gateways, packet visibility tools, SD-WAN/SASE/ZTNA, AWS/Azure security, and F5/application-delivery awareness are useful where they intersect with assigned operational support, but the core need is firewall, VPN, RSA/MFA, and production operations. Key Responsibilities Provide daily, weekly, monthly, and annual operational support for assigned security systems, including tickets, alerts, health checks, email/phone support, metrics, status reporting, and operational validation. Administer and troubleshoot enterprise firewalls, including rule bases, NAT, segmentation, high availability, threat prevention, VPN integration, logging, secure baselines, rule reviews, recertification, cleanup, and decommissioning. Install, configure, maintain, patch, upgrade, back up, and validate firewall, VPN, MFA, and related network security systems in production environments. Support remote-access VPN, site-to-site VPN, partner connectivity, cloud connectivity, mobile/remote users, certificates, authentication policies, availability, utilization, and user access issues. Maintain and troubleshoot RSA SecurID Authentication Manager or equivalent MFA services, including servers/appliances, agents, certificates, HA, backups, logs, monitoring, directory integration, VPN authentication, and token lifecycle support. Respond to incidents, vulnerability notices, urgent requests, vendor advisories, PSIRT notices, system alerts, and emergency troubleshooting while minimizing service disruption. Use firewall logs, VPN logs, packet captures, SIEM data, monitoring tools, DNS/routing checks, and standard diagnostics to resolve complex connectivity, authentication, TLS/certificate, and application-flow issues. Create and maintain topology diagrams, equipment inventories, configurations, SOPs, runbooks, implementation plans, rollback plans, build/upgrade procedures, troubleshooting notes, and knowledge articles. Follow approved change, release, incident, problem, and configuration-management processes; prepare change records, peer-review materials, validation evidence, root-cause analysis, metrics, and audit artifacts. Support vulnerability remediation, POA&M tracking, continuous monitoring, compliance reviews, audit evidence collection, and coordination with ISSO, system owner, and security governance teams. Requirements 7+ years of experience in network security engineering, network infrastructure, cybersecurity infrastructure, or a closely related role. 5+ years of hands-on experience administering, maintaining, and troubleshooting enterprise firewall platforms in production environments. Hands-on experience with Cisco security technologies such as Cisco ASA, Firepower, FTD, FMC, AnyConnect/Secure Client, or equivalent Cisco firewall/VPN platforms. Hands-on experience with Palo Alto Networks technologies such as NGFW, Panorama, GlobalProtect, security profiles, App-ID/User-ID, logging, and policy optimization. Experience administering or supporting RSA SecurID Authentication Manager or comparable enterprise MFA/two-factor authentication platforms, including token support, server operations, patching/upgrades, backups, certificates, monitoring, and directory/VPN integration. Strong knowledge of firewall policy, NAT, VPNs, routing, DNS, DHCP, BGP, TLS/certificates, packet captures, log analysis, segmentation, high availability, and common network diagnostic tools. Experience with enterprise monitoring, logging, SIEM, alerting, vulnerability management, incident response, formal change management, and regulated-environment documentation. Ability to create clear technical documentation, support customers and stakeholders, prioritize operational work, communicate clearly, and coordinate across technical teams. Ability to obtain and maintain a Public Trust background investigation. Desired Certifications Relevant certifications are helpful but should not replace demonstrated hands-on experience. Examples include CCNP Security, CCIE Security, PCNSE, PCCSE, CISSP, CCSP, AWS Certified Security - Specialty, AWS Advanced Networking - Specialty, Microsoft Certified: Azure Security Engineer Associate, Microsoft Certified: Azure Network Engineer Associate, CompTIA Security+, CompTIA CySA+, GIAC certifications, or equivalent vendor/cloud certifications. Core Competencies Enterprise firewall engineering and policy lifecycle management VPN, remote access, RSA/MFA, and token lifecycle operations Cloudflare, edge security, secure access, and Zero Trust support Content filtering, secure web/email gateway, and NAC operations Hybrid-cloud network security and secure connectivity Monitoring, logging, SIEM integration, and incident response support Security visibility, packet analysis, and advanced troubleshooting Vulnerability remediation, compliance evidence, and POA&M support Change management, documentation, reporting, and operational metrics Technical leadership, customer support, and cross-team collaboration Benefits 401(k) 401(k) matching Dental insurance Flexible schedule Flexible spending account Health insurance Health savings account Life insurance Paid time off Professional development assistance Referral program Retirement plan Tuition reimbursement Vision insurance
Job Description Job Description Revolutional delivers advanced technology solutions and mission support to federal agencies across civilian, health, and national security environments. We apply modern capabilities, including AI/ML, cloud, cybersecurity, and IT modernization to solve complex challenges, enable faster and more secure operations, and drive measurable mission outcomes. We are redefining how federal technology gets built and delivered by operating with a product mindset, prioritizing speed, ownership, and execution over bureaucracy. Title: Cloud Network Security Engineer Location: Onsite (Washington, D.C. or Bethesda, MD) Terms: Full-time Salary: 175k - 200k DOE Clearance: Active Top Secret with SCI eligibility required Citizenship: U.S. citizenship required Travel: 0-10% Position Description Revolutional has an exciting full time opportunity for a Cloud Network Security Engineer to own network connectivity between our federal government customer's on-premises environment and its cloud environments (currently Azure and AWS). This is a senior, hands-on ownership role: the engineer will serve as the primary technical bridge between the customer's on-premises network team and Revolutional's cloud/platform team, taking day-to-day responsibility for configuration, troubleshooting, firewall policy, and lifecycle management of hybrid, multi-cloud network infrastructure. A strong understanding of how cloud networking affects application design, routing, and capacity planning is central to this role. What You'll Do As a Cloud Network Security Engineer you will: Configure and maintain core hybrid and multi-cloud networking components, virtual networks, gateways, and site-to-site or dedicated circuit connections (e.g., Azure VNets/ExpressRoute/Virtual WAN, AWS VPCs/Transit Gateways), along with DNS, IP address management, load balancing, and private connectivity to platform services. Configure and manage firewall and network security policy across platforms (NSGs, Azure Firewall, and enterprise platforms including Palo Alto and Cisco), including policy configuration, log analysis, and troubleshooting of connectivity issues. Design and optimize routing and traffic engineering (BGP, route tables, user-defined routes), accounting for how application and data traffic patterns affect bandwidth-constrained on-premises circuits, and support secure, high-throughput connectivity for priority mission initiatives. Manage DNS configuration (Azure DNS, Private DNS Zones) and IP address management (IPAM) across Azure subscriptions. Deploy and maintain Private Link / Private Endpoint configurations to secure connectivity to PaaS services. Monitor network health, performance, and security posture across on-premises and cloud environments, and develop and maintain Infrastructure-as-Code for repeatable, auditable configuration changes. Document configurations, network diagrams, and standard operating procedures; respond to and resolve network incidents within defined SLAs; interface with telecommunications carriers and/or colocation providers as needed. Collaborate with security and infrastructure teams to support network design for new workloads, migrations, and the program's long-term multi-cloud strategy. What You Bring (Requirements): Active Top Secret (TS) clearance with SCI eligibility. Must be a U.S. citizen. Bachelor's degree in a related technical field, or equivalent professional experience. 8+ years of overall network engineering experience. 5+ years of hands-on experience configuring, administering, and troubleshooting cloud networking environments. Security+ Certification. Nice to Have (Differentiators): Demonstrated experience configuring both Azure (VNets, subnets, NSGs, ExpressRoute, VPN Gateway, Azure Firewall) and AWS (VPCs, Transit Gateways, Site-to-Site VPN, Security Groups) networking environments. Solid understanding of core networking fundamentals (TCP/IP, routing, switching, DNS, DHCP, BGP, VPN protocols) and experience troubleshooting hybrid connectivity between on-premises and multi-cloud environments. Hands-on experience administering and troubleshooting enterprise firewall platforms (Palo Alto and Cisco), including policy configuration and firewall log analysis. Experience with Infrastructure-as-Code (ARM templates, Bicep, Terraform, or CloudFormation) and working knowledge of network security best practices (segmentation, least-privilege access, firewall policy management). Demonstrated ability to independently own and lead network engineering efforts for a customer environment. Microsoft Certified: Azure Network Engineer Associate or Azure Administrator Associate; AWS Certified Advanced Networking - Specialty. Experience with multi-region/multi-cloud network architectures (Azure Virtual WAN, Azure Front Door, AWS Transit Gateway/Direct Connect) or carrier cloud-connect and colocation solutions (e.g., AT&T NetBond, Verizon Software-Defined Interconnect, Equinix, Digital Realty). Scripting experience (PowerShell, Python, Azure CLI, or AWS CLI) for network automation; familiarity with Trusted Internet Connection (TIC) 3.0 and Policy Enforcement Point (PEP) concepts. Experience supporting federal government, regulated, or compliance-driven environments (FedRAMP, NIST 800-53, etc.). _ Here at Revolutional we are pleased to have been repeatedly recognized for our outstanding work culture, the innovative work we do, and the employees on our team who make a difference each day. Some of these recognitions include: Recognized as a Top 20 "Best Place to Work in Virginia" Recipient of Department of Labor's HireVets Gold Medallion Great Place to Work Certification for five years running A Virginia Chamber of Commerce Fantastic 50 company A Northern Virginia Technology Council Tech 100 company Inc. 5000 list of fastest growing companies for eleven years Two-time SBA SBIR Tibbett's Award winner Virginia Values Veterans (V3) Certification We recognize that every bit of our success is the result of our teams of hard-working, motivated, and innovative professionals who are proud to call themselves part of the Revolutional family! In addition to competitive compensation, a family-focused culture, and a dynamic, productive work environment, we offer all full-time employees a variety of benefits including, but not limited to Traditional and HSA- eligible medical insurance plans 100% employer-paid dental and vision insurance options 100% employer-sponsored STD, LTD, and life insurance 5% 401(k) company matching Flexible-schedules and teleworking options Paid holidays and PTO Accrual Plans Paid Parental Leave Professional development and career growth opportunities Team and company-wide events, recognition, and appreciation and so much more! Check out our Revolutional LinkedIn to find out a little more about who we are and if we are the right next step for your career! Revolutional is an Equal Opportunity Employer providing equal employment opportunity to all employees and applicants for employment without regard to race, color, religion, national origin, age, gender, gender identity, sexual orientation, disability, or genetics. Revolutional does and will take affirmative action to employ and advance in employment individuals with disabilities and protected veterans. To perform the above job successfully, an individual must possess the knowledge, skills, and abilities listed; meet the education and work experience required; and must be able to perform each essential duty and responsibility satisfactorily. Other duties in addition to those listed may be assigned as necessary to meet business needs. Reasonable accommodation will be made to enable an applicant with a disability to successfully apply for and/or perform the essential duties of the job. If you are in need of an accommodation, please contact . "Know Your Rights: Workplace Discrimination is Illegal" Poster U.S. Equal Employment Opportunity Commission
10/20/2026
Full time
Job Description Job Description Revolutional delivers advanced technology solutions and mission support to federal agencies across civilian, health, and national security environments. We apply modern capabilities, including AI/ML, cloud, cybersecurity, and IT modernization to solve complex challenges, enable faster and more secure operations, and drive measurable mission outcomes. We are redefining how federal technology gets built and delivered by operating with a product mindset, prioritizing speed, ownership, and execution over bureaucracy. Title: Cloud Network Security Engineer Location: Onsite (Washington, D.C. or Bethesda, MD) Terms: Full-time Salary: 175k - 200k DOE Clearance: Active Top Secret with SCI eligibility required Citizenship: U.S. citizenship required Travel: 0-10% Position Description Revolutional has an exciting full time opportunity for a Cloud Network Security Engineer to own network connectivity between our federal government customer's on-premises environment and its cloud environments (currently Azure and AWS). This is a senior, hands-on ownership role: the engineer will serve as the primary technical bridge between the customer's on-premises network team and Revolutional's cloud/platform team, taking day-to-day responsibility for configuration, troubleshooting, firewall policy, and lifecycle management of hybrid, multi-cloud network infrastructure. A strong understanding of how cloud networking affects application design, routing, and capacity planning is central to this role. What You'll Do As a Cloud Network Security Engineer you will: Configure and maintain core hybrid and multi-cloud networking components, virtual networks, gateways, and site-to-site or dedicated circuit connections (e.g., Azure VNets/ExpressRoute/Virtual WAN, AWS VPCs/Transit Gateways), along with DNS, IP address management, load balancing, and private connectivity to platform services. Configure and manage firewall and network security policy across platforms (NSGs, Azure Firewall, and enterprise platforms including Palo Alto and Cisco), including policy configuration, log analysis, and troubleshooting of connectivity issues. Design and optimize routing and traffic engineering (BGP, route tables, user-defined routes), accounting for how application and data traffic patterns affect bandwidth-constrained on-premises circuits, and support secure, high-throughput connectivity for priority mission initiatives. Manage DNS configuration (Azure DNS, Private DNS Zones) and IP address management (IPAM) across Azure subscriptions. Deploy and maintain Private Link / Private Endpoint configurations to secure connectivity to PaaS services. Monitor network health, performance, and security posture across on-premises and cloud environments, and develop and maintain Infrastructure-as-Code for repeatable, auditable configuration changes. Document configurations, network diagrams, and standard operating procedures; respond to and resolve network incidents within defined SLAs; interface with telecommunications carriers and/or colocation providers as needed. Collaborate with security and infrastructure teams to support network design for new workloads, migrations, and the program's long-term multi-cloud strategy. What You Bring (Requirements): Active Top Secret (TS) clearance with SCI eligibility. Must be a U.S. citizen. Bachelor's degree in a related technical field, or equivalent professional experience. 8+ years of overall network engineering experience. 5+ years of hands-on experience configuring, administering, and troubleshooting cloud networking environments. Security+ Certification. Nice to Have (Differentiators): Demonstrated experience configuring both Azure (VNets, subnets, NSGs, ExpressRoute, VPN Gateway, Azure Firewall) and AWS (VPCs, Transit Gateways, Site-to-Site VPN, Security Groups) networking environments. Solid understanding of core networking fundamentals (TCP/IP, routing, switching, DNS, DHCP, BGP, VPN protocols) and experience troubleshooting hybrid connectivity between on-premises and multi-cloud environments. Hands-on experience administering and troubleshooting enterprise firewall platforms (Palo Alto and Cisco), including policy configuration and firewall log analysis. Experience with Infrastructure-as-Code (ARM templates, Bicep, Terraform, or CloudFormation) and working knowledge of network security best practices (segmentation, least-privilege access, firewall policy management). Demonstrated ability to independently own and lead network engineering efforts for a customer environment. Microsoft Certified: Azure Network Engineer Associate or Azure Administrator Associate; AWS Certified Advanced Networking - Specialty. Experience with multi-region/multi-cloud network architectures (Azure Virtual WAN, Azure Front Door, AWS Transit Gateway/Direct Connect) or carrier cloud-connect and colocation solutions (e.g., AT&T NetBond, Verizon Software-Defined Interconnect, Equinix, Digital Realty). Scripting experience (PowerShell, Python, Azure CLI, or AWS CLI) for network automation; familiarity with Trusted Internet Connection (TIC) 3.0 and Policy Enforcement Point (PEP) concepts. Experience supporting federal government, regulated, or compliance-driven environments (FedRAMP, NIST 800-53, etc.). _ Here at Revolutional we are pleased to have been repeatedly recognized for our outstanding work culture, the innovative work we do, and the employees on our team who make a difference each day. Some of these recognitions include: Recognized as a Top 20 "Best Place to Work in Virginia" Recipient of Department of Labor's HireVets Gold Medallion Great Place to Work Certification for five years running A Virginia Chamber of Commerce Fantastic 50 company A Northern Virginia Technology Council Tech 100 company Inc. 5000 list of fastest growing companies for eleven years Two-time SBA SBIR Tibbett's Award winner Virginia Values Veterans (V3) Certification We recognize that every bit of our success is the result of our teams of hard-working, motivated, and innovative professionals who are proud to call themselves part of the Revolutional family! In addition to competitive compensation, a family-focused culture, and a dynamic, productive work environment, we offer all full-time employees a variety of benefits including, but not limited to Traditional and HSA- eligible medical insurance plans 100% employer-paid dental and vision insurance options 100% employer-sponsored STD, LTD, and life insurance 5% 401(k) company matching Flexible-schedules and teleworking options Paid holidays and PTO Accrual Plans Paid Parental Leave Professional development and career growth opportunities Team and company-wide events, recognition, and appreciation and so much more! Check out our Revolutional LinkedIn to find out a little more about who we are and if we are the right next step for your career! Revolutional is an Equal Opportunity Employer providing equal employment opportunity to all employees and applicants for employment without regard to race, color, religion, national origin, age, gender, gender identity, sexual orientation, disability, or genetics. Revolutional does and will take affirmative action to employ and advance in employment individuals with disabilities and protected veterans. To perform the above job successfully, an individual must possess the knowledge, skills, and abilities listed; meet the education and work experience required; and must be able to perform each essential duty and responsibility satisfactorily. Other duties in addition to those listed may be assigned as necessary to meet business needs. Reasonable accommodation will be made to enable an applicant with a disability to successfully apply for and/or perform the essential duties of the job. If you are in need of an accommodation, please contact . "Know Your Rights: Workplace Discrimination is Illegal" Poster U.S. Equal Employment Opportunity Commission
Job Description Job Description Revolutional delivers advanced technology solutions and mission support to federal agencies across civilian, health, and national security environments. We apply modern capabilities, including AI/ML, cloud, cybersecurity, and IT modernization to solve complex challenges, enable faster and more secure operations, and drive measurable mission outcomes. We are redefining how federal technology gets built and delivered by operating with a product mindset, prioritizing speed, ownership, and execution over bureaucracy. Title: Cloud Network Security Engineer Location: Onsite (Washington, D.C. or Bethesda, MD) Terms: Full-time Salary: 175k - 200k DOE Clearance: Active Top Secret with SCI eligibility required Citizenship: U.S. citizenship required Travel: 0-10% Position Description Revolutional has an exciting full time opportunity for a Cloud Network Security Engineer to own network connectivity between our federal government customer's on-premises environment and its cloud environments (currently Azure and AWS). This is a senior, hands-on ownership role: the engineer will serve as the primary technical bridge between the customer's on-premises network team and Revolutional's cloud/platform team, taking day-to-day responsibility for configuration, troubleshooting, firewall policy, and lifecycle management of hybrid, multi-cloud network infrastructure. A strong understanding of how cloud networking affects application design, routing, and capacity planning is central to this role. What You'll Do As a Cloud Network Security Engineer you will: Configure and maintain core hybrid and multi-cloud networking components, virtual networks, gateways, and site-to-site or dedicated circuit connections (e.g., Azure VNets/ExpressRoute/Virtual WAN, AWS VPCs/Transit Gateways), along with DNS, IP address management, load balancing, and private connectivity to platform services. Configure and manage firewall and network security policy across platforms (NSGs, Azure Firewall, and enterprise platforms including Palo Alto and Cisco), including policy configuration, log analysis, and troubleshooting of connectivity issues. Design and optimize routing and traffic engineering (BGP, route tables, user-defined routes), accounting for how application and data traffic patterns affect bandwidth-constrained on-premises circuits, and support secure, high-throughput connectivity for priority mission initiatives. Manage DNS configuration (Azure DNS, Private DNS Zones) and IP address management (IPAM) across Azure subscriptions. Deploy and maintain Private Link / Private Endpoint configurations to secure connectivity to PaaS services. Monitor network health, performance, and security posture across on-premises and cloud environments, and develop and maintain Infrastructure-as-Code for repeatable, auditable configuration changes. Document configurations, network diagrams, and standard operating procedures; respond to and resolve network incidents within defined SLAs; interface with telecommunications carriers and/or colocation providers as needed. Collaborate with security and infrastructure teams to support network design for new workloads, migrations, and the program's long-term multi-cloud strategy. What You Bring (Requirements): Active Top Secret (TS) clearance with SCI eligibility. Must be a U.S. citizen. Bachelor's degree in a related technical field, or equivalent professional experience. 8+ years of overall network engineering experience. 5+ years of hands-on experience configuring, administering, and troubleshooting cloud networking environments. Security+ Certification. Nice to Have (Differentiators): Demonstrated experience configuring both Azure (VNets, subnets, NSGs, ExpressRoute, VPN Gateway, Azure Firewall) and AWS (VPCs, Transit Gateways, Site-to-Site VPN, Security Groups) networking environments. Solid understanding of core networking fundamentals (TCP/IP, routing, switching, DNS, DHCP, BGP, VPN protocols) and experience troubleshooting hybrid connectivity between on-premises and multi-cloud environments. Hands-on experience administering and troubleshooting enterprise firewall platforms (Palo Alto and Cisco), including policy configuration and firewall log analysis. Experience with Infrastructure-as-Code (ARM templates, Bicep, Terraform, or CloudFormation) and working knowledge of network security best practices (segmentation, least-privilege access, firewall policy management). Demonstrated ability to independently own and lead network engineering efforts for a customer environment. Microsoft Certified: Azure Network Engineer Associate or Azure Administrator Associate; AWS Certified Advanced Networking - Specialty. Experience with multi-region/multi-cloud network architectures (Azure Virtual WAN, Azure Front Door, AWS Transit Gateway/Direct Connect) or carrier cloud-connect and colocation solutions (e.g., AT&T NetBond, Verizon Software-Defined Interconnect, Equinix, Digital Realty). Scripting experience (PowerShell, Python, Azure CLI, or AWS CLI) for network automation; familiarity with Trusted Internet Connection (TIC) 3.0 and Policy Enforcement Point (PEP) concepts. Experience supporting federal government, regulated, or compliance-driven environments (FedRAMP, NIST 800-53, etc.). _ Here at Revolutional we are pleased to have been repeatedly recognized for our outstanding work culture, the innovative work we do, and the employees on our team who make a difference each day. Some of these recognitions include: Recognized as a Top 20 "Best Place to Work in Virginia" Recipient of Department of Labor's HireVets Gold Medallion Great Place to Work Certification for five years running A Virginia Chamber of Commerce Fantastic 50 company A Northern Virginia Technology Council Tech 100 company Inc. 5000 list of fastest growing companies for eleven years Two-time SBA SBIR Tibbett's Award winner Virginia Values Veterans (V3) Certification We recognize that every bit of our success is the result of our teams of hard-working, motivated, and innovative professionals who are proud to call themselves part of the Revolutional family! In addition to competitive compensation, a family-focused culture, and a dynamic, productive work environment, we offer all full-time employees a variety of benefits including, but not limited to Traditional and HSA- eligible medical insurance plans 100% employer-paid dental and vision insurance options 100% employer-sponsored STD, LTD, and life insurance 5% 401(k) company matching Flexible-schedules and teleworking options Paid holidays and PTO Accrual Plans Paid Parental Leave Professional development and career growth opportunities Team and company-wide events, recognition, and appreciation and so much more! Check out our Revolutional LinkedIn to find out a little more about who we are and if we are the right next step for your career! Revolutional is an Equal Opportunity Employer providing equal employment opportunity to all employees and applicants for employment without regard to race, color, religion, national origin, age, gender, gender identity, sexual orientation, disability, or genetics. Revolutional does and will take affirmative action to employ and advance in employment individuals with disabilities and protected veterans. To perform the above job successfully, an individual must possess the knowledge, skills, and abilities listed; meet the education and work experience required; and must be able to perform each essential duty and responsibility satisfactorily. Other duties in addition to those listed may be assigned as necessary to meet business needs. Reasonable accommodation will be made to enable an applicant with a disability to successfully apply for and/or perform the essential duties of the job. If you are in need of an accommodation, please contact . "Know Your Rights: Workplace Discrimination is Illegal" Poster U.S. Equal Employment Opportunity Commission
10/20/2026
Full time
Job Description Job Description Revolutional delivers advanced technology solutions and mission support to federal agencies across civilian, health, and national security environments. We apply modern capabilities, including AI/ML, cloud, cybersecurity, and IT modernization to solve complex challenges, enable faster and more secure operations, and drive measurable mission outcomes. We are redefining how federal technology gets built and delivered by operating with a product mindset, prioritizing speed, ownership, and execution over bureaucracy. Title: Cloud Network Security Engineer Location: Onsite (Washington, D.C. or Bethesda, MD) Terms: Full-time Salary: 175k - 200k DOE Clearance: Active Top Secret with SCI eligibility required Citizenship: U.S. citizenship required Travel: 0-10% Position Description Revolutional has an exciting full time opportunity for a Cloud Network Security Engineer to own network connectivity between our federal government customer's on-premises environment and its cloud environments (currently Azure and AWS). This is a senior, hands-on ownership role: the engineer will serve as the primary technical bridge between the customer's on-premises network team and Revolutional's cloud/platform team, taking day-to-day responsibility for configuration, troubleshooting, firewall policy, and lifecycle management of hybrid, multi-cloud network infrastructure. A strong understanding of how cloud networking affects application design, routing, and capacity planning is central to this role. What You'll Do As a Cloud Network Security Engineer you will: Configure and maintain core hybrid and multi-cloud networking components, virtual networks, gateways, and site-to-site or dedicated circuit connections (e.g., Azure VNets/ExpressRoute/Virtual WAN, AWS VPCs/Transit Gateways), along with DNS, IP address management, load balancing, and private connectivity to platform services. Configure and manage firewall and network security policy across platforms (NSGs, Azure Firewall, and enterprise platforms including Palo Alto and Cisco), including policy configuration, log analysis, and troubleshooting of connectivity issues. Design and optimize routing and traffic engineering (BGP, route tables, user-defined routes), accounting for how application and data traffic patterns affect bandwidth-constrained on-premises circuits, and support secure, high-throughput connectivity for priority mission initiatives. Manage DNS configuration (Azure DNS, Private DNS Zones) and IP address management (IPAM) across Azure subscriptions. Deploy and maintain Private Link / Private Endpoint configurations to secure connectivity to PaaS services. Monitor network health, performance, and security posture across on-premises and cloud environments, and develop and maintain Infrastructure-as-Code for repeatable, auditable configuration changes. Document configurations, network diagrams, and standard operating procedures; respond to and resolve network incidents within defined SLAs; interface with telecommunications carriers and/or colocation providers as needed. Collaborate with security and infrastructure teams to support network design for new workloads, migrations, and the program's long-term multi-cloud strategy. What You Bring (Requirements): Active Top Secret (TS) clearance with SCI eligibility. Must be a U.S. citizen. Bachelor's degree in a related technical field, or equivalent professional experience. 8+ years of overall network engineering experience. 5+ years of hands-on experience configuring, administering, and troubleshooting cloud networking environments. Security+ Certification. Nice to Have (Differentiators): Demonstrated experience configuring both Azure (VNets, subnets, NSGs, ExpressRoute, VPN Gateway, Azure Firewall) and AWS (VPCs, Transit Gateways, Site-to-Site VPN, Security Groups) networking environments. Solid understanding of core networking fundamentals (TCP/IP, routing, switching, DNS, DHCP, BGP, VPN protocols) and experience troubleshooting hybrid connectivity between on-premises and multi-cloud environments. Hands-on experience administering and troubleshooting enterprise firewall platforms (Palo Alto and Cisco), including policy configuration and firewall log analysis. Experience with Infrastructure-as-Code (ARM templates, Bicep, Terraform, or CloudFormation) and working knowledge of network security best practices (segmentation, least-privilege access, firewall policy management). Demonstrated ability to independently own and lead network engineering efforts for a customer environment. Microsoft Certified: Azure Network Engineer Associate or Azure Administrator Associate; AWS Certified Advanced Networking - Specialty. Experience with multi-region/multi-cloud network architectures (Azure Virtual WAN, Azure Front Door, AWS Transit Gateway/Direct Connect) or carrier cloud-connect and colocation solutions (e.g., AT&T NetBond, Verizon Software-Defined Interconnect, Equinix, Digital Realty). Scripting experience (PowerShell, Python, Azure CLI, or AWS CLI) for network automation; familiarity with Trusted Internet Connection (TIC) 3.0 and Policy Enforcement Point (PEP) concepts. Experience supporting federal government, regulated, or compliance-driven environments (FedRAMP, NIST 800-53, etc.). _ Here at Revolutional we are pleased to have been repeatedly recognized for our outstanding work culture, the innovative work we do, and the employees on our team who make a difference each day. Some of these recognitions include: Recognized as a Top 20 "Best Place to Work in Virginia" Recipient of Department of Labor's HireVets Gold Medallion Great Place to Work Certification for five years running A Virginia Chamber of Commerce Fantastic 50 company A Northern Virginia Technology Council Tech 100 company Inc. 5000 list of fastest growing companies for eleven years Two-time SBA SBIR Tibbett's Award winner Virginia Values Veterans (V3) Certification We recognize that every bit of our success is the result of our teams of hard-working, motivated, and innovative professionals who are proud to call themselves part of the Revolutional family! In addition to competitive compensation, a family-focused culture, and a dynamic, productive work environment, we offer all full-time employees a variety of benefits including, but not limited to Traditional and HSA- eligible medical insurance plans 100% employer-paid dental and vision insurance options 100% employer-sponsored STD, LTD, and life insurance 5% 401(k) company matching Flexible-schedules and teleworking options Paid holidays and PTO Accrual Plans Paid Parental Leave Professional development and career growth opportunities Team and company-wide events, recognition, and appreciation and so much more! Check out our Revolutional LinkedIn to find out a little more about who we are and if we are the right next step for your career! Revolutional is an Equal Opportunity Employer providing equal employment opportunity to all employees and applicants for employment without regard to race, color, religion, national origin, age, gender, gender identity, sexual orientation, disability, or genetics. Revolutional does and will take affirmative action to employ and advance in employment individuals with disabilities and protected veterans. To perform the above job successfully, an individual must possess the knowledge, skills, and abilities listed; meet the education and work experience required; and must be able to perform each essential duty and responsibility satisfactorily. Other duties in addition to those listed may be assigned as necessary to meet business needs. Reasonable accommodation will be made to enable an applicant with a disability to successfully apply for and/or perform the essential duties of the job. If you are in need of an accommodation, please contact . "Know Your Rights: Workplace Discrimination is Illegal" Poster U.S. Equal Employment Opportunity Commission
Job Description Job Description Revolutional delivers advanced technology solutions and mission support to federal agencies across civilian, health, and national security environments. We apply modern capabilities, including AI/ML, cloud, cybersecurity, and IT modernization to solve complex challenges, enable faster and more secure operations, and drive measurable mission outcomes. We are redefining how federal technology gets built and delivered by operating with a product mindset, prioritizing speed, ownership, and execution over bureaucracy. Title: Cloud Network Security Engineer Location: Onsite (Washington, D.C. or Bethesda, MD) Terms: Full-time Salary: 175k - 200k DOE Clearance: Active Top Secret with SCI eligibility required Citizenship: U.S. citizenship required Travel: 0-10% Position Description Revolutional has an exciting full time opportunity for a Cloud Network Security Engineer to own network connectivity between our federal government customer's on-premises environment and its cloud environments (currently Azure and AWS). This is a senior, hands-on ownership role: the engineer will serve as the primary technical bridge between the customer's on-premises network team and Revolutional's cloud/platform team, taking day-to-day responsibility for configuration, troubleshooting, firewall policy, and lifecycle management of hybrid, multi-cloud network infrastructure. A strong understanding of how cloud networking affects application design, routing, and capacity planning is central to this role. What You'll Do As a Cloud Network Security Engineer you will: Configure and maintain core hybrid and multi-cloud networking components, virtual networks, gateways, and site-to-site or dedicated circuit connections (e.g., Azure VNets/ExpressRoute/Virtual WAN, AWS VPCs/Transit Gateways), along with DNS, IP address management, load balancing, and private connectivity to platform services. Configure and manage firewall and network security policy across platforms (NSGs, Azure Firewall, and enterprise platforms including Palo Alto and Cisco), including policy configuration, log analysis, and troubleshooting of connectivity issues. Design and optimize routing and traffic engineering (BGP, route tables, user-defined routes), accounting for how application and data traffic patterns affect bandwidth-constrained on-premises circuits, and support secure, high-throughput connectivity for priority mission initiatives. Manage DNS configuration (Azure DNS, Private DNS Zones) and IP address management (IPAM) across Azure subscriptions. Deploy and maintain Private Link / Private Endpoint configurations to secure connectivity to PaaS services. Monitor network health, performance, and security posture across on-premises and cloud environments, and develop and maintain Infrastructure-as-Code for repeatable, auditable configuration changes. Document configurations, network diagrams, and standard operating procedures; respond to and resolve network incidents within defined SLAs; interface with telecommunications carriers and/or colocation providers as needed. Collaborate with security and infrastructure teams to support network design for new workloads, migrations, and the program's long-term multi-cloud strategy. What You Bring (Requirements): Active Top Secret (TS) clearance with SCI eligibility. Must be a U.S. citizen. Bachelor's degree in a related technical field, or equivalent professional experience. 8+ years of overall network engineering experience. 5+ years of hands-on experience configuring, administering, and troubleshooting cloud networking environments. Security+ Certification. Nice to Have (Differentiators): Demonstrated experience configuring both Azure (VNets, subnets, NSGs, ExpressRoute, VPN Gateway, Azure Firewall) and AWS (VPCs, Transit Gateways, Site-to-Site VPN, Security Groups) networking environments. Solid understanding of core networking fundamentals (TCP/IP, routing, switching, DNS, DHCP, BGP, VPN protocols) and experience troubleshooting hybrid connectivity between on-premises and multi-cloud environments. Hands-on experience administering and troubleshooting enterprise firewall platforms (Palo Alto and Cisco), including policy configuration and firewall log analysis. Experience with Infrastructure-as-Code (ARM templates, Bicep, Terraform, or CloudFormation) and working knowledge of network security best practices (segmentation, least-privilege access, firewall policy management). Demonstrated ability to independently own and lead network engineering efforts for a customer environment. Microsoft Certified: Azure Network Engineer Associate or Azure Administrator Associate; AWS Certified Advanced Networking - Specialty. Experience with multi-region/multi-cloud network architectures (Azure Virtual WAN, Azure Front Door, AWS Transit Gateway/Direct Connect) or carrier cloud-connect and colocation solutions (e.g., AT&T NetBond, Verizon Software-Defined Interconnect, Equinix, Digital Realty). Scripting experience (PowerShell, Python, Azure CLI, or AWS CLI) for network automation; familiarity with Trusted Internet Connection (TIC) 3.0 and Policy Enforcement Point (PEP) concepts. Experience supporting federal government, regulated, or compliance-driven environments (FedRAMP, NIST 800-53, etc.). _ Here at Revolutional we are pleased to have been repeatedly recognized for our outstanding work culture, the innovative work we do, and the employees on our team who make a difference each day. Some of these recognitions include: Recognized as a Top 20 "Best Place to Work in Virginia" Recipient of Department of Labor's HireVets Gold Medallion Great Place to Work Certification for five years running A Virginia Chamber of Commerce Fantastic 50 company A Northern Virginia Technology Council Tech 100 company Inc. 5000 list of fastest growing companies for eleven years Two-time SBA SBIR Tibbett's Award winner Virginia Values Veterans (V3) Certification We recognize that every bit of our success is the result of our teams of hard-working, motivated, and innovative professionals who are proud to call themselves part of the Revolutional family! In addition to competitive compensation, a family-focused culture, and a dynamic, productive work environment, we offer all full-time employees a variety of benefits including, but not limited to Traditional and HSA- eligible medical insurance plans 100% employer-paid dental and vision insurance options 100% employer-sponsored STD, LTD, and life insurance 5% 401(k) company matching Flexible-schedules and teleworking options Paid holidays and PTO Accrual Plans Paid Parental Leave Professional development and career growth opportunities Team and company-wide events, recognition, and appreciation and so much more! Check out our Revolutional LinkedIn to find out a little more about who we are and if we are the right next step for your career! Revolutional is an Equal Opportunity Employer providing equal employment opportunity to all employees and applicants for employment without regard to race, color, religion, national origin, age, gender, gender identity, sexual orientation, disability, or genetics. Revolutional does and will take affirmative action to employ and advance in employment individuals with disabilities and protected veterans. To perform the above job successfully, an individual must possess the knowledge, skills, and abilities listed; meet the education and work experience required; and must be able to perform each essential duty and responsibility satisfactorily. Other duties in addition to those listed may be assigned as necessary to meet business needs. Reasonable accommodation will be made to enable an applicant with a disability to successfully apply for and/or perform the essential duties of the job. If you are in need of an accommodation, please contact . "Know Your Rights: Workplace Discrimination is Illegal" Poster U.S. Equal Employment Opportunity Commission
10/20/2026
Full time
Job Description Job Description Revolutional delivers advanced technology solutions and mission support to federal agencies across civilian, health, and national security environments. We apply modern capabilities, including AI/ML, cloud, cybersecurity, and IT modernization to solve complex challenges, enable faster and more secure operations, and drive measurable mission outcomes. We are redefining how federal technology gets built and delivered by operating with a product mindset, prioritizing speed, ownership, and execution over bureaucracy. Title: Cloud Network Security Engineer Location: Onsite (Washington, D.C. or Bethesda, MD) Terms: Full-time Salary: 175k - 200k DOE Clearance: Active Top Secret with SCI eligibility required Citizenship: U.S. citizenship required Travel: 0-10% Position Description Revolutional has an exciting full time opportunity for a Cloud Network Security Engineer to own network connectivity between our federal government customer's on-premises environment and its cloud environments (currently Azure and AWS). This is a senior, hands-on ownership role: the engineer will serve as the primary technical bridge between the customer's on-premises network team and Revolutional's cloud/platform team, taking day-to-day responsibility for configuration, troubleshooting, firewall policy, and lifecycle management of hybrid, multi-cloud network infrastructure. A strong understanding of how cloud networking affects application design, routing, and capacity planning is central to this role. What You'll Do As a Cloud Network Security Engineer you will: Configure and maintain core hybrid and multi-cloud networking components, virtual networks, gateways, and site-to-site or dedicated circuit connections (e.g., Azure VNets/ExpressRoute/Virtual WAN, AWS VPCs/Transit Gateways), along with DNS, IP address management, load balancing, and private connectivity to platform services. Configure and manage firewall and network security policy across platforms (NSGs, Azure Firewall, and enterprise platforms including Palo Alto and Cisco), including policy configuration, log analysis, and troubleshooting of connectivity issues. Design and optimize routing and traffic engineering (BGP, route tables, user-defined routes), accounting for how application and data traffic patterns affect bandwidth-constrained on-premises circuits, and support secure, high-throughput connectivity for priority mission initiatives. Manage DNS configuration (Azure DNS, Private DNS Zones) and IP address management (IPAM) across Azure subscriptions. Deploy and maintain Private Link / Private Endpoint configurations to secure connectivity to PaaS services. Monitor network health, performance, and security posture across on-premises and cloud environments, and develop and maintain Infrastructure-as-Code for repeatable, auditable configuration changes. Document configurations, network diagrams, and standard operating procedures; respond to and resolve network incidents within defined SLAs; interface with telecommunications carriers and/or colocation providers as needed. Collaborate with security and infrastructure teams to support network design for new workloads, migrations, and the program's long-term multi-cloud strategy. What You Bring (Requirements): Active Top Secret (TS) clearance with SCI eligibility. Must be a U.S. citizen. Bachelor's degree in a related technical field, or equivalent professional experience. 8+ years of overall network engineering experience. 5+ years of hands-on experience configuring, administering, and troubleshooting cloud networking environments. Security+ Certification. Nice to Have (Differentiators): Demonstrated experience configuring both Azure (VNets, subnets, NSGs, ExpressRoute, VPN Gateway, Azure Firewall) and AWS (VPCs, Transit Gateways, Site-to-Site VPN, Security Groups) networking environments. Solid understanding of core networking fundamentals (TCP/IP, routing, switching, DNS, DHCP, BGP, VPN protocols) and experience troubleshooting hybrid connectivity between on-premises and multi-cloud environments. Hands-on experience administering and troubleshooting enterprise firewall platforms (Palo Alto and Cisco), including policy configuration and firewall log analysis. Experience with Infrastructure-as-Code (ARM templates, Bicep, Terraform, or CloudFormation) and working knowledge of network security best practices (segmentation, least-privilege access, firewall policy management). Demonstrated ability to independently own and lead network engineering efforts for a customer environment. Microsoft Certified: Azure Network Engineer Associate or Azure Administrator Associate; AWS Certified Advanced Networking - Specialty. Experience with multi-region/multi-cloud network architectures (Azure Virtual WAN, Azure Front Door, AWS Transit Gateway/Direct Connect) or carrier cloud-connect and colocation solutions (e.g., AT&T NetBond, Verizon Software-Defined Interconnect, Equinix, Digital Realty). Scripting experience (PowerShell, Python, Azure CLI, or AWS CLI) for network automation; familiarity with Trusted Internet Connection (TIC) 3.0 and Policy Enforcement Point (PEP) concepts. Experience supporting federal government, regulated, or compliance-driven environments (FedRAMP, NIST 800-53, etc.). _ Here at Revolutional we are pleased to have been repeatedly recognized for our outstanding work culture, the innovative work we do, and the employees on our team who make a difference each day. Some of these recognitions include: Recognized as a Top 20 "Best Place to Work in Virginia" Recipient of Department of Labor's HireVets Gold Medallion Great Place to Work Certification for five years running A Virginia Chamber of Commerce Fantastic 50 company A Northern Virginia Technology Council Tech 100 company Inc. 5000 list of fastest growing companies for eleven years Two-time SBA SBIR Tibbett's Award winner Virginia Values Veterans (V3) Certification We recognize that every bit of our success is the result of our teams of hard-working, motivated, and innovative professionals who are proud to call themselves part of the Revolutional family! In addition to competitive compensation, a family-focused culture, and a dynamic, productive work environment, we offer all full-time employees a variety of benefits including, but not limited to Traditional and HSA- eligible medical insurance plans 100% employer-paid dental and vision insurance options 100% employer-sponsored STD, LTD, and life insurance 5% 401(k) company matching Flexible-schedules and teleworking options Paid holidays and PTO Accrual Plans Paid Parental Leave Professional development and career growth opportunities Team and company-wide events, recognition, and appreciation and so much more! Check out our Revolutional LinkedIn to find out a little more about who we are and if we are the right next step for your career! Revolutional is an Equal Opportunity Employer providing equal employment opportunity to all employees and applicants for employment without regard to race, color, religion, national origin, age, gender, gender identity, sexual orientation, disability, or genetics. Revolutional does and will take affirmative action to employ and advance in employment individuals with disabilities and protected veterans. To perform the above job successfully, an individual must possess the knowledge, skills, and abilities listed; meet the education and work experience required; and must be able to perform each essential duty and responsibility satisfactorily. Other duties in addition to those listed may be assigned as necessary to meet business needs. Reasonable accommodation will be made to enable an applicant with a disability to successfully apply for and/or perform the essential duties of the job. If you are in need of an accommodation, please contact . "Know Your Rights: Workplace Discrimination is Illegal" Poster U.S. Equal Employment Opportunity Commission
Job Description Job Description Revolutional delivers advanced technology solutions and mission support to federal agencies across civilian, health, and national security environments. We apply modern capabilities, including AI/ML, cloud, cybersecurity, and IT modernization to solve complex challenges, enable faster and more secure operations, and drive measurable mission outcomes. We are redefining how federal technology gets built and delivered by operating with a product mindset, prioritizing speed, ownership, and execution over bureaucracy. Title: Cloud Network Security Engineer Location: Onsite (Washington, D.C. or Bethesda, MD) Terms: Full-time Salary: 175k - 200k DOE Clearance: Active Top Secret with SCI eligibility required Citizenship: U.S. citizenship required Travel: 0-10% Position Description Revolutional has an exciting full time opportunity for a Cloud Network Security Engineer to own network connectivity between our federal government customer's on-premises environment and its cloud environments (currently Azure and AWS). This is a senior, hands-on ownership role: the engineer will serve as the primary technical bridge between the customer's on-premises network team and Revolutional's cloud/platform team, taking day-to-day responsibility for configuration, troubleshooting, firewall policy, and lifecycle management of hybrid, multi-cloud network infrastructure. A strong understanding of how cloud networking affects application design, routing, and capacity planning is central to this role. What You'll Do As a Cloud Network Security Engineer you will: Configure and maintain core hybrid and multi-cloud networking components, virtual networks, gateways, and site-to-site or dedicated circuit connections (e.g., Azure VNets/ExpressRoute/Virtual WAN, AWS VPCs/Transit Gateways), along with DNS, IP address management, load balancing, and private connectivity to platform services. Configure and manage firewall and network security policy across platforms (NSGs, Azure Firewall, and enterprise platforms including Palo Alto and Cisco), including policy configuration, log analysis, and troubleshooting of connectivity issues. Design and optimize routing and traffic engineering (BGP, route tables, user-defined routes), accounting for how application and data traffic patterns affect bandwidth-constrained on-premises circuits, and support secure, high-throughput connectivity for priority mission initiatives. Manage DNS configuration (Azure DNS, Private DNS Zones) and IP address management (IPAM) across Azure subscriptions. Deploy and maintain Private Link / Private Endpoint configurations to secure connectivity to PaaS services. Monitor network health, performance, and security posture across on-premises and cloud environments, and develop and maintain Infrastructure-as-Code for repeatable, auditable configuration changes. Document configurations, network diagrams, and standard operating procedures; respond to and resolve network incidents within defined SLAs; interface with telecommunications carriers and/or colocation providers as needed. Collaborate with security and infrastructure teams to support network design for new workloads, migrations, and the program's long-term multi-cloud strategy. What You Bring (Requirements): Active Top Secret (TS) clearance with SCI eligibility. Must be a U.S. citizen. Bachelor's degree in a related technical field, or equivalent professional experience. 8+ years of overall network engineering experience. 5+ years of hands-on experience configuring, administering, and troubleshooting cloud networking environments. Security+ Certification. Nice to Have (Differentiators): Demonstrated experience configuring both Azure (VNets, subnets, NSGs, ExpressRoute, VPN Gateway, Azure Firewall) and AWS (VPCs, Transit Gateways, Site-to-Site VPN, Security Groups) networking environments. Solid understanding of core networking fundamentals (TCP/IP, routing, switching, DNS, DHCP, BGP, VPN protocols) and experience troubleshooting hybrid connectivity between on-premises and multi-cloud environments. Hands-on experience administering and troubleshooting enterprise firewall platforms (Palo Alto and Cisco), including policy configuration and firewall log analysis. Experience with Infrastructure-as-Code (ARM templates, Bicep, Terraform, or CloudFormation) and working knowledge of network security best practices (segmentation, least-privilege access, firewall policy management). Demonstrated ability to independently own and lead network engineering efforts for a customer environment. Microsoft Certified: Azure Network Engineer Associate or Azure Administrator Associate; AWS Certified Advanced Networking - Specialty. Experience with multi-region/multi-cloud network architectures (Azure Virtual WAN, Azure Front Door, AWS Transit Gateway/Direct Connect) or carrier cloud-connect and colocation solutions (e.g., AT&T NetBond, Verizon Software-Defined Interconnect, Equinix, Digital Realty). Scripting experience (PowerShell, Python, Azure CLI, or AWS CLI) for network automation; familiarity with Trusted Internet Connection (TIC) 3.0 and Policy Enforcement Point (PEP) concepts. Experience supporting federal government, regulated, or compliance-driven environments (FedRAMP, NIST 800-53, etc.). _ Here at Revolutional we are pleased to have been repeatedly recognized for our outstanding work culture, the innovative work we do, and the employees on our team who make a difference each day. Some of these recognitions include: Recognized as a Top 20 "Best Place to Work in Virginia" Recipient of Department of Labor's HireVets Gold Medallion Great Place to Work Certification for five years running A Virginia Chamber of Commerce Fantastic 50 company A Northern Virginia Technology Council Tech 100 company Inc. 5000 list of fastest growing companies for eleven years Two-time SBA SBIR Tibbett's Award winner Virginia Values Veterans (V3) Certification We recognize that every bit of our success is the result of our teams of hard-working, motivated, and innovative professionals who are proud to call themselves part of the Revolutional family! In addition to competitive compensation, a family-focused culture, and a dynamic, productive work environment, we offer all full-time employees a variety of benefits including, but not limited to Traditional and HSA- eligible medical insurance plans 100% employer-paid dental and vision insurance options 100% employer-sponsored STD, LTD, and life insurance 5% 401(k) company matching Flexible-schedules and teleworking options Paid holidays and PTO Accrual Plans Paid Parental Leave Professional development and career growth opportunities Team and company-wide events, recognition, and appreciation and so much more! Check out our Revolutional LinkedIn to find out a little more about who we are and if we are the right next step for your career! Revolutional is an Equal Opportunity Employer providing equal employment opportunity to all employees and applicants for employment without regard to race, color, religion, national origin, age, gender, gender identity, sexual orientation, disability, or genetics. Revolutional does and will take affirmative action to employ and advance in employment individuals with disabilities and protected veterans. To perform the above job successfully, an individual must possess the knowledge, skills, and abilities listed; meet the education and work experience required; and must be able to perform each essential duty and responsibility satisfactorily. Other duties in addition to those listed may be assigned as necessary to meet business needs. Reasonable accommodation will be made to enable an applicant with a disability to successfully apply for and/or perform the essential duties of the job. If you are in need of an accommodation, please contact . "Know Your Rights: Workplace Discrimination is Illegal" Poster U.S. Equal Employment Opportunity Commission
10/20/2026
Full time
Job Description Job Description Revolutional delivers advanced technology solutions and mission support to federal agencies across civilian, health, and national security environments. We apply modern capabilities, including AI/ML, cloud, cybersecurity, and IT modernization to solve complex challenges, enable faster and more secure operations, and drive measurable mission outcomes. We are redefining how federal technology gets built and delivered by operating with a product mindset, prioritizing speed, ownership, and execution over bureaucracy. Title: Cloud Network Security Engineer Location: Onsite (Washington, D.C. or Bethesda, MD) Terms: Full-time Salary: 175k - 200k DOE Clearance: Active Top Secret with SCI eligibility required Citizenship: U.S. citizenship required Travel: 0-10% Position Description Revolutional has an exciting full time opportunity for a Cloud Network Security Engineer to own network connectivity between our federal government customer's on-premises environment and its cloud environments (currently Azure and AWS). This is a senior, hands-on ownership role: the engineer will serve as the primary technical bridge between the customer's on-premises network team and Revolutional's cloud/platform team, taking day-to-day responsibility for configuration, troubleshooting, firewall policy, and lifecycle management of hybrid, multi-cloud network infrastructure. A strong understanding of how cloud networking affects application design, routing, and capacity planning is central to this role. What You'll Do As a Cloud Network Security Engineer you will: Configure and maintain core hybrid and multi-cloud networking components, virtual networks, gateways, and site-to-site or dedicated circuit connections (e.g., Azure VNets/ExpressRoute/Virtual WAN, AWS VPCs/Transit Gateways), along with DNS, IP address management, load balancing, and private connectivity to platform services. Configure and manage firewall and network security policy across platforms (NSGs, Azure Firewall, and enterprise platforms including Palo Alto and Cisco), including policy configuration, log analysis, and troubleshooting of connectivity issues. Design and optimize routing and traffic engineering (BGP, route tables, user-defined routes), accounting for how application and data traffic patterns affect bandwidth-constrained on-premises circuits, and support secure, high-throughput connectivity for priority mission initiatives. Manage DNS configuration (Azure DNS, Private DNS Zones) and IP address management (IPAM) across Azure subscriptions. Deploy and maintain Private Link / Private Endpoint configurations to secure connectivity to PaaS services. Monitor network health, performance, and security posture across on-premises and cloud environments, and develop and maintain Infrastructure-as-Code for repeatable, auditable configuration changes. Document configurations, network diagrams, and standard operating procedures; respond to and resolve network incidents within defined SLAs; interface with telecommunications carriers and/or colocation providers as needed. Collaborate with security and infrastructure teams to support network design for new workloads, migrations, and the program's long-term multi-cloud strategy. What You Bring (Requirements): Active Top Secret (TS) clearance with SCI eligibility. Must be a U.S. citizen. Bachelor's degree in a related technical field, or equivalent professional experience. 8+ years of overall network engineering experience. 5+ years of hands-on experience configuring, administering, and troubleshooting cloud networking environments. Security+ Certification. Nice to Have (Differentiators): Demonstrated experience configuring both Azure (VNets, subnets, NSGs, ExpressRoute, VPN Gateway, Azure Firewall) and AWS (VPCs, Transit Gateways, Site-to-Site VPN, Security Groups) networking environments. Solid understanding of core networking fundamentals (TCP/IP, routing, switching, DNS, DHCP, BGP, VPN protocols) and experience troubleshooting hybrid connectivity between on-premises and multi-cloud environments. Hands-on experience administering and troubleshooting enterprise firewall platforms (Palo Alto and Cisco), including policy configuration and firewall log analysis. Experience with Infrastructure-as-Code (ARM templates, Bicep, Terraform, or CloudFormation) and working knowledge of network security best practices (segmentation, least-privilege access, firewall policy management). Demonstrated ability to independently own and lead network engineering efforts for a customer environment. Microsoft Certified: Azure Network Engineer Associate or Azure Administrator Associate; AWS Certified Advanced Networking - Specialty. Experience with multi-region/multi-cloud network architectures (Azure Virtual WAN, Azure Front Door, AWS Transit Gateway/Direct Connect) or carrier cloud-connect and colocation solutions (e.g., AT&T NetBond, Verizon Software-Defined Interconnect, Equinix, Digital Realty). Scripting experience (PowerShell, Python, Azure CLI, or AWS CLI) for network automation; familiarity with Trusted Internet Connection (TIC) 3.0 and Policy Enforcement Point (PEP) concepts. Experience supporting federal government, regulated, or compliance-driven environments (FedRAMP, NIST 800-53, etc.). _ Here at Revolutional we are pleased to have been repeatedly recognized for our outstanding work culture, the innovative work we do, and the employees on our team who make a difference each day. Some of these recognitions include: Recognized as a Top 20 "Best Place to Work in Virginia" Recipient of Department of Labor's HireVets Gold Medallion Great Place to Work Certification for five years running A Virginia Chamber of Commerce Fantastic 50 company A Northern Virginia Technology Council Tech 100 company Inc. 5000 list of fastest growing companies for eleven years Two-time SBA SBIR Tibbett's Award winner Virginia Values Veterans (V3) Certification We recognize that every bit of our success is the result of our teams of hard-working, motivated, and innovative professionals who are proud to call themselves part of the Revolutional family! In addition to competitive compensation, a family-focused culture, and a dynamic, productive work environment, we offer all full-time employees a variety of benefits including, but not limited to Traditional and HSA- eligible medical insurance plans 100% employer-paid dental and vision insurance options 100% employer-sponsored STD, LTD, and life insurance 5% 401(k) company matching Flexible-schedules and teleworking options Paid holidays and PTO Accrual Plans Paid Parental Leave Professional development and career growth opportunities Team and company-wide events, recognition, and appreciation and so much more! Check out our Revolutional LinkedIn to find out a little more about who we are and if we are the right next step for your career! Revolutional is an Equal Opportunity Employer providing equal employment opportunity to all employees and applicants for employment without regard to race, color, religion, national origin, age, gender, gender identity, sexual orientation, disability, or genetics. Revolutional does and will take affirmative action to employ and advance in employment individuals with disabilities and protected veterans. To perform the above job successfully, an individual must possess the knowledge, skills, and abilities listed; meet the education and work experience required; and must be able to perform each essential duty and responsibility satisfactorily. Other duties in addition to those listed may be assigned as necessary to meet business needs. Reasonable accommodation will be made to enable an applicant with a disability to successfully apply for and/or perform the essential duties of the job. If you are in need of an accommodation, please contact . "Know Your Rights: Workplace Discrimination is Illegal" Poster U.S. Equal Employment Opportunity Commission
Job Description Job Description Revolutional delivers advanced technology solutions and mission support to federal agencies across civilian, health, and national security environments. We apply modern capabilities, including AI/ML, cloud, cybersecurity, and IT modernization to solve complex challenges, enable faster and more secure operations, and drive measurable mission outcomes. We are redefining how federal technology gets built and delivered by operating with a product mindset, prioritizing speed, ownership, and execution over bureaucracy. Title: Cloud Network Security Engineer Location: Onsite (Washington, D.C. or Bethesda, MD) Terms: Full-time Salary: 175k - 200k DOE Clearance: Active Top Secret with SCI eligibility required Citizenship: U.S. citizenship required Travel: 0-10% Position Description Revolutional has an exciting full time opportunity for a Cloud Network Security Engineer to own network connectivity between our federal government customer's on-premises environment and its cloud environments (currently Azure and AWS). This is a senior, hands-on ownership role: the engineer will serve as the primary technical bridge between the customer's on-premises network team and Revolutional's cloud/platform team, taking day-to-day responsibility for configuration, troubleshooting, firewall policy, and lifecycle management of hybrid, multi-cloud network infrastructure. A strong understanding of how cloud networking affects application design, routing, and capacity planning is central to this role. What You'll Do As a Cloud Network Security Engineer you will: Configure and maintain core hybrid and multi-cloud networking components, virtual networks, gateways, and site-to-site or dedicated circuit connections (e.g., Azure VNets/ExpressRoute/Virtual WAN, AWS VPCs/Transit Gateways), along with DNS, IP address management, load balancing, and private connectivity to platform services. Configure and manage firewall and network security policy across platforms (NSGs, Azure Firewall, and enterprise platforms including Palo Alto and Cisco), including policy configuration, log analysis, and troubleshooting of connectivity issues. Design and optimize routing and traffic engineering (BGP, route tables, user-defined routes), accounting for how application and data traffic patterns affect bandwidth-constrained on-premises circuits, and support secure, high-throughput connectivity for priority mission initiatives. Manage DNS configuration (Azure DNS, Private DNS Zones) and IP address management (IPAM) across Azure subscriptions. Deploy and maintain Private Link / Private Endpoint configurations to secure connectivity to PaaS services. Monitor network health, performance, and security posture across on-premises and cloud environments, and develop and maintain Infrastructure-as-Code for repeatable, auditable configuration changes. Document configurations, network diagrams, and standard operating procedures; respond to and resolve network incidents within defined SLAs; interface with telecommunications carriers and/or colocation providers as needed. Collaborate with security and infrastructure teams to support network design for new workloads, migrations, and the program's long-term multi-cloud strategy. What You Bring (Requirements): Active Top Secret (TS) clearance with SCI eligibility. Must be a U.S. citizen. Bachelor's degree in a related technical field, or equivalent professional experience. 8+ years of overall network engineering experience. 5+ years of hands-on experience configuring, administering, and troubleshooting cloud networking environments. Security+ Certification. Nice to Have (Differentiators): Demonstrated experience configuring both Azure (VNets, subnets, NSGs, ExpressRoute, VPN Gateway, Azure Firewall) and AWS (VPCs, Transit Gateways, Site-to-Site VPN, Security Groups) networking environments. Solid understanding of core networking fundamentals (TCP/IP, routing, switching, DNS, DHCP, BGP, VPN protocols) and experience troubleshooting hybrid connectivity between on-premises and multi-cloud environments. Hands-on experience administering and troubleshooting enterprise firewall platforms (Palo Alto and Cisco), including policy configuration and firewall log analysis. Experience with Infrastructure-as-Code (ARM templates, Bicep, Terraform, or CloudFormation) and working knowledge of network security best practices (segmentation, least-privilege access, firewall policy management). Demonstrated ability to independently own and lead network engineering efforts for a customer environment. Microsoft Certified: Azure Network Engineer Associate or Azure Administrator Associate; AWS Certified Advanced Networking - Specialty. Experience with multi-region/multi-cloud network architectures (Azure Virtual WAN, Azure Front Door, AWS Transit Gateway/Direct Connect) or carrier cloud-connect and colocation solutions (e.g., AT&T NetBond, Verizon Software-Defined Interconnect, Equinix, Digital Realty). Scripting experience (PowerShell, Python, Azure CLI, or AWS CLI) for network automation; familiarity with Trusted Internet Connection (TIC) 3.0 and Policy Enforcement Point (PEP) concepts. Experience supporting federal government, regulated, or compliance-driven environments (FedRAMP, NIST 800-53, etc.). _ Here at Revolutional we are pleased to have been repeatedly recognized for our outstanding work culture, the innovative work we do, and the employees on our team who make a difference each day. Some of these recognitions include: Recognized as a Top 20 "Best Place to Work in Virginia" Recipient of Department of Labor's HireVets Gold Medallion Great Place to Work Certification for five years running A Virginia Chamber of Commerce Fantastic 50 company A Northern Virginia Technology Council Tech 100 company Inc. 5000 list of fastest growing companies for eleven years Two-time SBA SBIR Tibbett's Award winner Virginia Values Veterans (V3) Certification We recognize that every bit of our success is the result of our teams of hard-working, motivated, and innovative professionals who are proud to call themselves part of the Revolutional family! In addition to competitive compensation, a family-focused culture, and a dynamic, productive work environment, we offer all full-time employees a variety of benefits including, but not limited to Traditional and HSA- eligible medical insurance plans 100% employer-paid dental and vision insurance options 100% employer-sponsored STD, LTD, and life insurance 5% 401(k) company matching Flexible-schedules and teleworking options Paid holidays and PTO Accrual Plans Paid Parental Leave Professional development and career growth opportunities Team and company-wide events, recognition, and appreciation and so much more! Check out our Revolutional LinkedIn to find out a little more about who we are and if we are the right next step for your career! Revolutional is an Equal Opportunity Employer providing equal employment opportunity to all employees and applicants for employment without regard to race, color, religion, national origin, age, gender, gender identity, sexual orientation, disability, or genetics. Revolutional does and will take affirmative action to employ and advance in employment individuals with disabilities and protected veterans. To perform the above job successfully, an individual must possess the knowledge, skills, and abilities listed; meet the education and work experience required; and must be able to perform each essential duty and responsibility satisfactorily. Other duties in addition to those listed may be assigned as necessary to meet business needs. Reasonable accommodation will be made to enable an applicant with a disability to successfully apply for and/or perform the essential duties of the job. If you are in need of an accommodation, please contact . "Know Your Rights: Workplace Discrimination is Illegal" Poster U.S. Equal Employment Opportunity Commission
10/20/2026
Full time
Job Description Job Description Revolutional delivers advanced technology solutions and mission support to federal agencies across civilian, health, and national security environments. We apply modern capabilities, including AI/ML, cloud, cybersecurity, and IT modernization to solve complex challenges, enable faster and more secure operations, and drive measurable mission outcomes. We are redefining how federal technology gets built and delivered by operating with a product mindset, prioritizing speed, ownership, and execution over bureaucracy. Title: Cloud Network Security Engineer Location: Onsite (Washington, D.C. or Bethesda, MD) Terms: Full-time Salary: 175k - 200k DOE Clearance: Active Top Secret with SCI eligibility required Citizenship: U.S. citizenship required Travel: 0-10% Position Description Revolutional has an exciting full time opportunity for a Cloud Network Security Engineer to own network connectivity between our federal government customer's on-premises environment and its cloud environments (currently Azure and AWS). This is a senior, hands-on ownership role: the engineer will serve as the primary technical bridge between the customer's on-premises network team and Revolutional's cloud/platform team, taking day-to-day responsibility for configuration, troubleshooting, firewall policy, and lifecycle management of hybrid, multi-cloud network infrastructure. A strong understanding of how cloud networking affects application design, routing, and capacity planning is central to this role. What You'll Do As a Cloud Network Security Engineer you will: Configure and maintain core hybrid and multi-cloud networking components, virtual networks, gateways, and site-to-site or dedicated circuit connections (e.g., Azure VNets/ExpressRoute/Virtual WAN, AWS VPCs/Transit Gateways), along with DNS, IP address management, load balancing, and private connectivity to platform services. Configure and manage firewall and network security policy across platforms (NSGs, Azure Firewall, and enterprise platforms including Palo Alto and Cisco), including policy configuration, log analysis, and troubleshooting of connectivity issues. Design and optimize routing and traffic engineering (BGP, route tables, user-defined routes), accounting for how application and data traffic patterns affect bandwidth-constrained on-premises circuits, and support secure, high-throughput connectivity for priority mission initiatives. Manage DNS configuration (Azure DNS, Private DNS Zones) and IP address management (IPAM) across Azure subscriptions. Deploy and maintain Private Link / Private Endpoint configurations to secure connectivity to PaaS services. Monitor network health, performance, and security posture across on-premises and cloud environments, and develop and maintain Infrastructure-as-Code for repeatable, auditable configuration changes. Document configurations, network diagrams, and standard operating procedures; respond to and resolve network incidents within defined SLAs; interface with telecommunications carriers and/or colocation providers as needed. Collaborate with security and infrastructure teams to support network design for new workloads, migrations, and the program's long-term multi-cloud strategy. What You Bring (Requirements): Active Top Secret (TS) clearance with SCI eligibility. Must be a U.S. citizen. Bachelor's degree in a related technical field, or equivalent professional experience. 8+ years of overall network engineering experience. 5+ years of hands-on experience configuring, administering, and troubleshooting cloud networking environments. Security+ Certification. Nice to Have (Differentiators): Demonstrated experience configuring both Azure (VNets, subnets, NSGs, ExpressRoute, VPN Gateway, Azure Firewall) and AWS (VPCs, Transit Gateways, Site-to-Site VPN, Security Groups) networking environments. Solid understanding of core networking fundamentals (TCP/IP, routing, switching, DNS, DHCP, BGP, VPN protocols) and experience troubleshooting hybrid connectivity between on-premises and multi-cloud environments. Hands-on experience administering and troubleshooting enterprise firewall platforms (Palo Alto and Cisco), including policy configuration and firewall log analysis. Experience with Infrastructure-as-Code (ARM templates, Bicep, Terraform, or CloudFormation) and working knowledge of network security best practices (segmentation, least-privilege access, firewall policy management). Demonstrated ability to independently own and lead network engineering efforts for a customer environment. Microsoft Certified: Azure Network Engineer Associate or Azure Administrator Associate; AWS Certified Advanced Networking - Specialty. Experience with multi-region/multi-cloud network architectures (Azure Virtual WAN, Azure Front Door, AWS Transit Gateway/Direct Connect) or carrier cloud-connect and colocation solutions (e.g., AT&T NetBond, Verizon Software-Defined Interconnect, Equinix, Digital Realty). Scripting experience (PowerShell, Python, Azure CLI, or AWS CLI) for network automation; familiarity with Trusted Internet Connection (TIC) 3.0 and Policy Enforcement Point (PEP) concepts. Experience supporting federal government, regulated, or compliance-driven environments (FedRAMP, NIST 800-53, etc.). _ Here at Revolutional we are pleased to have been repeatedly recognized for our outstanding work culture, the innovative work we do, and the employees on our team who make a difference each day. Some of these recognitions include: Recognized as a Top 20 "Best Place to Work in Virginia" Recipient of Department of Labor's HireVets Gold Medallion Great Place to Work Certification for five years running A Virginia Chamber of Commerce Fantastic 50 company A Northern Virginia Technology Council Tech 100 company Inc. 5000 list of fastest growing companies for eleven years Two-time SBA SBIR Tibbett's Award winner Virginia Values Veterans (V3) Certification We recognize that every bit of our success is the result of our teams of hard-working, motivated, and innovative professionals who are proud to call themselves part of the Revolutional family! In addition to competitive compensation, a family-focused culture, and a dynamic, productive work environment, we offer all full-time employees a variety of benefits including, but not limited to Traditional and HSA- eligible medical insurance plans 100% employer-paid dental and vision insurance options 100% employer-sponsored STD, LTD, and life insurance 5% 401(k) company matching Flexible-schedules and teleworking options Paid holidays and PTO Accrual Plans Paid Parental Leave Professional development and career growth opportunities Team and company-wide events, recognition, and appreciation and so much more! Check out our Revolutional LinkedIn to find out a little more about who we are and if we are the right next step for your career! Revolutional is an Equal Opportunity Employer providing equal employment opportunity to all employees and applicants for employment without regard to race, color, religion, national origin, age, gender, gender identity, sexual orientation, disability, or genetics. Revolutional does and will take affirmative action to employ and advance in employment individuals with disabilities and protected veterans. To perform the above job successfully, an individual must possess the knowledge, skills, and abilities listed; meet the education and work experience required; and must be able to perform each essential duty and responsibility satisfactorily. Other duties in addition to those listed may be assigned as necessary to meet business needs. Reasonable accommodation will be made to enable an applicant with a disability to successfully apply for and/or perform the essential duties of the job. If you are in need of an accommodation, please contact . "Know Your Rights: Workplace Discrimination is Illegal" Poster U.S. Equal Employment Opportunity Commission