21 jobs found

Job Description Job Description ANG SIGNAL is looking for a Network Architect to join our team supporting the federal government. In this role, the candidate will be responsible for providing technical leadership on a variety of network projects. The Network Architect must have considerable specialist skills and knowledge that allow them to provide technical leadership as well as training and support for team members. The Network Architect should be able to design, communicate, and implement solutions within a timely manner. This is a customer-facing role, and the candidate must be able to communicate complex information to a variety of audiences with different knowledge backgrounds. About Us: ANG SIGNAL is a technology focused company specialized in delivering world class network services and mission critical solutions to the federal government. We strongly believe that our staff is our greatest asset and the backbone of our company; and that a company is only as good as its team members. We strive to hire the most highly qualified applicants for a wide range of challenging and fulfilling positions. Our diverse team embraces challenges in an inclusive atmosphere that values work-life balance. We are an Equal Opportunity Employer encouraging diversity in the workplace. All qualified applicants receive consideration for employment without regard to race, national origin, gender identity/expression, age, religion, disability, sexual orientation, genetics, veteran status, marital status or any other characteristic protected by law. ANG SIGNAL offers a competitive benefits package including paid time off, paid holidays; medical, dental, vision and prescription drug coverage plans; matching 401K plan and tuition/training reimbursement. Key Responsibilities Design and execute migration, consolidation, and optimization strategies for complex enterprise network environments. Work with a team of network experts to support a service provider scale network that connects multiple high-performance computing sites and data centers Lead Network Implementations and migrations for large scale complex networks Provide technical leadership to the team to execute multiple mission critical projects and maintain a stable operations environment Provide analysis and recommendations for the continuous improvement of the network infrastructure and cloud network environment Manage the day-to-day operations of the network, troubleshoot complex and escalated network problems and coordinate with the various department administrators to facilitate connectivity issue resolution Design and implement network solutions and participate in lab testing of new technologies Engage with both customer and development personnel to maintain open lines of communication Effectively support the coordination of project development from kickoff briefing to delivery Write and manage technical documentation, Standard Operating Procedures, and maintenance plans. Provide status reports as required by the upper management, and participate in data calls and other operational and maintenance tasks Analyze existing operations and make recommendations for the improvement and growth Define project scope, goals and deliverables that support business goals in collaboration with the team, government client, senior management and other stakeholders Qualifications 10+ years of functional experience in a Sr. Network Engineering role, with at least 6 years of experience as a Technical Lead or SME in a large-scale enterprise network environment In-depth knowledge of network design to include complex routing and switching, remote access, wireless and network security solutions Strong knowledge of MPLS, BGP, OSPF and other R&S technologies Experience with cloud networks and security; Azure, AWS or GCP Hands-on experience with Cisco and Aruba Routers and Switches Experience with Cisco ISE, Aruba wireless and Clearpass Experience designing, implementing and managing complex network security environments, including but not limited to firewalls (Cisco firewalls, and Fortigate), UTM, and IPS Ability to communicate designs and network concepts to a variety of audiences, including peers and customers, verbally and in writing Strong understanding of project management processes and terminology Strong leadership skills, personal drive, and ability to see projects through to execution in a matrixed environment Strong organizational and mentoring skills Possesses strong written, verbal, and presentation skills Bachelor's Degree or equivalent Professional expert level certification (CCIE preferred) Background check / Clearance Requirements: Applicants selected will be subject to a government security investigation and may need to meet eligibility requirements for access to classified information. We wish to thank all applicants for their interest and effort in applying for the position; however, only candidates selected for interviews will be contacted. W2 or Corp to Corp. We are unable to sponsor applicants for work visas at this time.

Job Description Job Description Description We are seeking a Network Security Engineer to provide technical support in design and deployment of Network Transformation and Network Operations. In this role, you will assess and deploy the relevant technology solutions according to customers' business, security policy and application requirements and work directly with the Senior Network Engineer. Key Responsibilities Participate in daily network, firewall, and operational support. Ability to troubleshoot network issues and failures and follow best practices and troubleshooting methodology to quickly assess current situations, find solutions, and implement changes to correct and/or update network topologies to ensure stability and functionality. Provide technical analysis of operational issues and remediations during troubleshooting efforts to ensure documentations and procedures are followed and updated during active events. This includes the ability to report to management. Stay up to date on emerging technologies and products, including attaining certifications and participation in industry events as appropriate. Work with various stake holders to lead problem solving, evolve system roadmap and take critical decisions. Provide clear communication with regular updates/reports to the management team. Skills, Knowledge & Expertise Minimum of 5 years' experience in deployment and configuration and architectural design of networking technologies specific to routing, switching and general network security best practices, in which 3 years must be in customer-facing positions. Minimum of CCNA or comparable level of knowledge. Ability to work on call rotation as needed. B.S./B.A./M.S. degree or equivalent technical training. Fortinet NSE 6 and NSE 7 Knowledge of Azure and AWS Experience with Aruba ClearPass, Aruba switches and wireless Experience with Cisco Firepower Services and Palo Alto security services. Understanding of encryption and SSL/TLS technologies and best practices. Experience working for or with local government, service providers, and/or enterprises customers. Experience in large Data Center or Enterprise/campus designs, architecture, deployment and configuration with physical and virtual appliances. Familiarity with applications driving modern infrastructure design in private and public cloud. Experience in networking technologies such as STP, Nexus vPC, IPSEC / SSLVPN, Routing: VRF, MPLS, OSPF, BGP and Multi-Homed environments. Datacenter Network services including Security, Load Balancing, DNS, etc. at the virtual and physical level. Experience with Cisco, Juniper, Fortinet, HP, Aruba and CATO products (Firewall, Routing / switching, SASE, wireless and security) Wireless networking technologies including access-control platforms such as Cisco ISE or Aruba Clear Pass Policy Manager IPS/IDS, as well as other NGFW (Next Gen Firewall) features and capabilities. Ability to write incident and problem record documentation to support daily efforts. Strong analytical thinking and decision-making skills & highly organized. Strong ability to influence others and build consensus via excellent verbal and written communication skills. We consider all qualified applicants for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or protected veteran status. Reasonable accommodations will be made to enable employees with disabilities to perform the essential functions of the job. This job description is intended to describe the general nature of work being performed by employees in this job. It is not intended to be a complete list of all responsibilities, duties, and skills required. Agencies/3 Parties may not solicit to any employee of Blue Mantis. Any candidate information received from any Agency/3 Party will be considered a gift and property of Blue Mantis, unless the Agency/3 Party is an Authorized Vendor of Blue Mantis with an up-to-date Blue Mantis Contract in hand signed by Blue Mantis Talent Acquisition. No payment will be made to any Agency/3 Party who is not an Authorized Vendor, nor has specific approval in writing from Blue Mantis Talent Acquisition to engage in recruitment efforts for Blue Mantis. At this time, we have no interest in onboarding any new staffing partners.

Job Description Job Description We are seeking a Senior Network Security Engineer for an operations-first role supporting enterprise network security infrastructure across on-premises, remote-access, hybrid-cloud, and cloud-connected environments. This is not primarily an architecture/design role. The priority is a hands-on engineer who can administer, configure, maintain, troubleshoot, patch, upgrade, back up, validate, document, and operate production security platforms with minimal ramp-up. Firewall operations: hands-on Cisco and Palo Alto firewall administration, rule changes, NAT, troubleshooting, policy cleanup, upgrades, backups, logging, and production support. VPN / remote access: support for remote-access VPN, site-to-site VPN, user connectivity issues, certificates, authentication flows, and after-hours troubleshooting. RSA / MFA administration: RSA SecurID or equivalent MFA operations, token support, server administration, user troubleshooting, VPN integration, certificates, patching, backups, logs, and monitoring. Day-to-day operations: ticket resolution, monitoring alerts, health checks, change requests, incident support, maintenance windows, operational reporting, and customer support. Configuration and administration: installing, configuring, maintaining, patching, upgrading, backing up, validating, and troubleshooting assigned security platforms. Production troubleshooting: strong TCP/IP, DNS, routing, firewall logs, packet captures, VPN authentication, certificate, and connectivity troubleshooting. Documentation and process discipline: SOPs, runbooks, diagrams, change records, rollback plans, evidence collection, knowledge transfer, and formal change management. Federal/customer environment maturity: Public Trust eligibility, regulated-environment documentation, customer support, cross-team coordination, and comfort working with government stakeholders. The best candidate can credibly say: "I have operated enterprise Cisco and Palo Alto firewalls in production, handled firewall rule changes and troubleshooting, supported VPN users and site-to-site tunnels, administered or supported RSA/MFA tied to VPN access, followed formal change-management processes, maintained documentation and backups, and can step into daily operational support with minimal ramp-up." Scope and Role Boundaries Primary platforms include Cisco ASA/Firepower/FTD/FMC, Palo Alto NGFW/Panorama/GlobalProtect, remote-access and site-to-site VPN, RSA SecurID Authentication Manager or comparable MFA, monitoring/logging/SIEM integrations, and related network security controls. Coordinate with SOC/NOC, cloud, identity/directory, wireless/LAN, server, endpoint, system owner, application, governance, and vendor teams during changes, incidents, troubleshooting, compliance, and audit support. Cloudflare, Cisco ISE/NAC, secure web/email gateways, packet visibility tools, SD-WAN/SASE/ZTNA, AWS/Azure security, and F5/application-delivery awareness are useful where they intersect with assigned operational support, but the core need is firewall, VPN, RSA/MFA, and production operations. Key Responsibilities Provide daily, weekly, monthly, and annual operational support for assigned security systems, including tickets, alerts, health checks, email/phone support, metrics, status reporting, and operational validation. Administer and troubleshoot enterprise firewalls, including rule bases, NAT, segmentation, high availability, threat prevention, VPN integration, logging, secure baselines, rule reviews, recertification, cleanup, and decommissioning. Install, configure, maintain, patch, upgrade, back up, and validate firewall, VPN, MFA, and related network security systems in production environments. Support remote-access VPN, site-to-site VPN, partner connectivity, cloud connectivity, mobile/remote users, certificates, authentication policies, availability, utilization, and user access issues. Maintain and troubleshoot RSA SecurID Authentication Manager or equivalent MFA services, including servers/appliances, agents, certificates, HA, backups, logs, monitoring, directory integration, VPN authentication, and token lifecycle support. Respond to incidents, vulnerability notices, urgent requests, vendor advisories, PSIRT notices, system alerts, and emergency troubleshooting while minimizing service disruption. Use firewall logs, VPN logs, packet captures, SIEM data, monitoring tools, DNS/routing checks, and standard diagnostics to resolve complex connectivity, authentication, TLS/certificate, and application-flow issues. Create and maintain topology diagrams, equipment inventories, configurations, SOPs, runbooks, implementation plans, rollback plans, build/upgrade procedures, troubleshooting notes, and knowledge articles. Follow approved change, release, incident, problem, and configuration-management processes; prepare change records, peer-review materials, validation evidence, root-cause analysis, metrics, and audit artifacts. Support vulnerability remediation, POA&M tracking, continuous monitoring, compliance reviews, audit evidence collection, and coordination with ISSO, system owner, and security governance teams. Requirements 7+ years of experience in network security engineering, network infrastructure, cybersecurity infrastructure, or a closely related role. 5+ years of hands-on experience administering, maintaining, and troubleshooting enterprise firewall platforms in production environments. Hands-on experience with Cisco security technologies such as Cisco ASA, Firepower, FTD, FMC, AnyConnect/Secure Client, or equivalent Cisco firewall/VPN platforms. Hands-on experience with Palo Alto Networks technologies such as NGFW, Panorama, GlobalProtect, security profiles, App-ID/User-ID, logging, and policy optimization. Experience administering or supporting RSA SecurID Authentication Manager or comparable enterprise MFA/two-factor authentication platforms, including token support, server operations, patching/upgrades, backups, certificates, monitoring, and directory/VPN integration. Strong knowledge of firewall policy, NAT, VPNs, routing, DNS, DHCP, BGP, TLS/certificates, packet captures, log analysis, segmentation, high availability, and common network diagnostic tools. Experience with enterprise monitoring, logging, SIEM, alerting, vulnerability management, incident response, formal change management, and regulated-environment documentation. Ability to create clear technical documentation, support customers and stakeholders, prioritize operational work, communicate clearly, and coordinate across technical teams. Ability to obtain and maintain a Public Trust background investigation. Desired Certifications Relevant certifications are helpful but should not replace demonstrated hands-on experience. Examples include CCNP Security, CCIE Security, PCNSE, PCCSE, CISSP, CCSP, AWS Certified Security - Specialty, AWS Advanced Networking - Specialty, Microsoft Certified: Azure Security Engineer Associate, Microsoft Certified: Azure Network Engineer Associate, CompTIA Security+, CompTIA CySA+, GIAC certifications, or equivalent vendor/cloud certifications. Core Competencies Enterprise firewall engineering and policy lifecycle management VPN, remote access, RSA/MFA, and token lifecycle operations Cloudflare, edge security, secure access, and Zero Trust support Content filtering, secure web/email gateway, and NAC operations Hybrid-cloud network security and secure connectivity Monitoring, logging, SIEM integration, and incident response support Security visibility, packet analysis, and advanced troubleshooting Vulnerability remediation, compliance evidence, and POA&M support Change management, documentation, reporting, and operational metrics Technical leadership, customer support, and cross-team collaboration Benefits 401(k) 401(k) matching Dental insurance Flexible schedule Flexible spending account Health insurance Health savings account Life insurance Paid time off Professional development assistance Referral program Retirement plan Tuition reimbursement Vision insurance

At Whitman, Requardt & Associates, LLP, we are People Focused and Project Driven . We have been in business for more than 110 years and we are known for our quality work and quality employees. This is your chance to join our team - help us to design the infrastructure and buildings that improve the world! Whitman, Requardt & Associates (WRA) is currently seeking an entry-level Operations Technology and SCADA System Network & Cybersecurity Engineer in our York, PA office. This position focuses on the design, implementation, and security of industrial communication networks for water and wastewater facilities. The selected candidate will work alongside WRA's Instrumentation & Controls (I&C) group to support network architecture, industrial cybersecurity, and system integration for both new and existing infrastructure projects. This role is ideal for candidates with a background or strong interest in networking, cybersecurity, and computer engineering, with an emphasis on applying those skills within industrial control systems (ICS), Supervisory Control and Data Acquisition (SCADA) systems, and operational technology (OT) environments. Responsibilities Work in a collaborative environment to assist engineers in the design of OT networks and SCADA system architectures. Support the design of industrial communication systems, including fiber optic, Ethernet, cellular, and wireless networks Support the design of instrumentation and control systems including the development of drawings such as process & instrumentation diagrams (P&IDs), electrical diagrams, schematic diagrams, and loop diagrams. Support the design of cybersecurity measures for SCADA and control systems, including: Network segmentation and secure zones/conduits Remote access solutions (VPNs, jump hosts, cloud solutions, and RDP gateways) User access control and authentication strategies Participate in cybersecurity assessments using industry frameworks such as National Institute of Standards and Technology (NIST CSF),NIST 800-53, NIST 800-82, UFGS , American Water Works Association (AWWA) guidance, and Cybersecurity and Infrastructure Security Agency (CISA) tools Assist in design of SCADA system infrastructure, including server architecture, virtualization, and network integration Prepare technical documentation, including network diagrams, cybersecurity plans, policies, procedures, and control system specifications Coordinate with engineers, IT staff, contractors, and system integrators during design and construction Participate in Factory Acceptance Testing (FAT) and Site Acceptance Testing (SAT) for network and SCADA systems Perform field investigations, testing, and commissioning support for communication and control systems Support senior engineers in the development of cybersecurity training for internal employees. Work with other engineers to create, present, and recommend a best practice approach tailored for specific client needs. Requirements Bachelor's degree in Computer Engineering, Network Engineering, Cybersecurity, or related field 0-4 years of relevant experience Strong interest in networking, cybersecurity, and industrial systems (OT/SCADA) Understanding of network fundamentals (TCP/IP, routing, switching, VLANs) Basic knowledge of cybersecurity principles (firewalls, authentication, access control) Strong verbal and written communication skills Ability to work in a collaborative, multidisciplinary team environment Proficiency in Microsoft Office applications (Word, Excel, Teams) Willingness to learn industrial systems, SCADA platforms, and communication networks Ability to travel occasionally (approximately 10%) for site visits, field investigations, and testing Capability to explain technical concepts at a high level to a non-technical audience U.S. citizenship required Preferred Qualifications Exposure to industrial networking equipment (e.g., Cisco Systems industrial switches and routers) Familiarity with SCADA platforms such as VTScada, AVEVA System Platform, and Ignition Understanding of industrial communication protocols (Modbus TCP, Ethernet/IP, DNP3) Exposure to OT cybersecurity concepts, including network segmentation and asset inventory Experience with virtualization technologies (VMware or similar) Certifications such as CompTIA Security+, CCNA, or GICSP (or willingness to obtain) Experience with AutoCAD or similar tools for network/system diagrams Familiarity with NIST 800-82, NIST 800-53, and UFGS . Conceptual understanding of standard cybersecurity policies and procedures Understanding of Zero Trust architecture and design Fundamental understanding of cloud technologies Work Environment & Growth Work on critical infrastructure projects supporting public water and wastewater systems Collaborate with experienced SCADA, controls, and instrumentation professionals Gain hands-on experience in OT networking and industrial cybersecurity Opportunity to grow into a technical leader in SCADA network architecture and cybersecurity Required Submissions: Resume A copy of current, or most recent, school transcript (If you are applying via a 3rd party site that does not allow attachments, please email transcript to Benefits: WRA recognizes that employees play an important role in its success. Our commitment to full-time employees is reflected in the comprehensive benefits package we offer: Flexible work schedule options Competitive salary Leave accrual and paid holidays Healthcare benefits Group Life Insurance, as well as additional optional life Insurance, short and long term disability insurance Flexible spending accounts for medical and dependent care reimbursement 401(k) Retirement Plan Tuition Reimbursement Employee Assistance Program Parental and maternity leave benefits WRA is an equal opportunity/affirmative action employer and complies with all applicable anti-discrimination laws. The expected compensation range for this position is $70,000.00 - $125,000.00. This range represents a good faith estimate for this position. The specific compensation offered to a candidate may vary based on factors including, but not limited to, the candidate's relevant knowledge, training, skills, work location, and/or experience. Applicants must be currently authorized to work in the United States on a full-time basis without the need for employment-based visa sponsorship now or in the future. WRA will not sponsor applicants for U.S. work visa status for this opportunity. (no sponsorship is available for H-1B, L-1, TN, O-1, E-3, H-1B1, F-1, J-1, OPT, CPT or any other employment-based visa) Not accepting resumes from 3rd party recruiters for this position Position # 3512 - Entry Level - Onsite

Data Collection Specialist Company Overview Communication Technology Services (CTS) is one of the largest integrators and managed service providers in the U.S., specializing in the design, installation, and support of Distributed Antenna Systems (DAS), Small Cell, and 4G/5G Private Wireless Networks. We are driven by the desire to solve complex customer problems, the excitement of deploying new technologies, and our dedication to delivering advanced wireless solutions as simple, scalable offerings for our customers. We are seeking a Data Collections Specialist to support our National Team. This role is ideal for candidates who are flexible, hands-on, and eager to travel, as it requires up to 75% National Travel . Candidates may be based anywhere in the U.S., with all travel fully supported by CTS. Position Summary The is an entry-level or junior position within the CTS Engineering team, designed for individuals who are in the process of being trained to take on the full responsibilities of the role. This position will typically be paired with a System Performance Engineer to accelerate skill development through hands-on mentorship and field experience. On-site activities include benchmark data collection, post-deployment data collection, commissioning activity, and basic troubleshooting. There is a heavy emphasis on rapid learning and assessment of skills so that the individual can be sent to remote locations and trusted to complete a project independently. ESSENTIAL RESPONSIBILITIES Conduct benchmark walk data collections using SeeHawk Touch platform in accordance with CTS standards and project specifications Perform proof-of-product walk data collections using LML data collection platform for post-deployment validation Execute post-deployment data collection activities to verify system performance against design requirements Participate in commissioning processes alongside the National System Performance Engineering (SPE) team Perform basic troubleshooting of data collection platforms and field equipment in real-time during deployments Maintain and care for assigned LML and scanner kits in coordination with the reporting manager and equipment vendor Submit travel requests and timesheets accurately and on time in compliance with CTS administrative procedures Recognize and report anomalies in walk data KPIs, DAS alarms, and related performance indicators Support senior SPEs in commissioning activities including signal readings and RF measurements Travel to remote project sites independently as competency is demonstrated, completing data collection assignments without on-site supervision JOB REQUIREMENTS Education & Experience High school diploma or GED required; Associate's degree in Electronics, Telecommunications, IT, or a related technical field preferred 0-2 years of experience in a technical or field-based role; prior internship or coursework in RF, wireless, or networking is a plus Valid driver's license with a clean driving record and the ability to travel extensively (up to75% or more) Technical Skills Basic understanding of wireless communication concepts (cellular, Wi-Fi, RF signal propagation) or demonstrated aptitude to learn quickly Comfort with technology platforms, software tools, and data collection instruments;willingness to master SeeHawk Touch and LML platforms Familiarity with or ability to learn RF metrics including signal strength (RSRP), signal quality (RSRQ/SINR), and interference measurements Basic math proficiency with the ability to develop working knowledge of RF mathematics as applied to walk data and commissioning Ability to understand signal architecture concepts for LTE, NR (5G), and Public Safetysystems through structured training Professional Competencies Strong learning agility - must demonstrate the ability to rapidly absorb new technicalconcepts and apply them in the field under time pressure High degree of self-motivation and accountability; must be capable of working independently at remote sites after initial training period Detail-oriented with strong organizational skills; data collection requires precision andconsistent adherence to established workflows Effective communication skills for coordinating with SPE team members, project managers,and administrative staff Problem-solving mindset with the ability to troubleshoot equipment and software issues in the field without immediate on-site support Professional demeanor representing CTS at client sites; commitment to CTS values of respect, integrity, and excellence Physical & Work Environment Requirements Ability to walk, stand, and carry equipment (up to 30 lbs) for extended periods during walk data collections in various building environments Willingness to work in active construction sites, mechanical rooms, rooftops, and otherindustrial environments as required by project needs Flexibility to travel on short notice and work variable hours including occasional weekends based on project schedules Comfort working at heights and in confined spaces as dictated by in-building wireless infrastructure locations Willingness to perform telecom installation and QOI testing job duties if required. PI48d79732e0d0-1089

Join Stellantis' Advanced Connectivity Technologies team to define and assess next-generation wireless architectures for future vehicle platforms. You'll translate stakeholder needs into system requirements and technical specifications, evaluate technologies such as 5G Advanced, 6G, V2X and satellite networks, and collaborate with global teams, standards bodies and industry partners. Responsibilities Define end-to-end architectures for advanced automotive connectivity technologies. Translate product and stakeholder needs into system requirements, technical specifications and interface definitions. Assess architectural trade-offs across vehicle, edge and cloud systems, including cost, performance, scalability and reliability. Evaluate emerging wireless technologies and lead or contribute to feasibility studies and proof-of-concepts. Conduct system-level and link-level simulations and analyze wireless performance under automotive conditions. Monitor standards and collaborate with industry and academic partners on reports, publications and invention disclosures. Required Skills System architecture Wireless communications5 G Advanced6 GNR-V2 XC-V2 XNon-Terrestrial Networks Edge computing MATLABns-3

Technical Summary Statement: The IT Infrastructure Engineer V is a senior-level engineering role responsible for the design, implementation, operation, and continuous improvement of enterprise voice and collaboration services. The role serves as the lead Service Area Engineer (SAE) for assigned platforms, providing technical leadership across solution architecture, deployment, integration, troubleshooting, maintenance, and service recovery. This position partners business stakeholders, architects, engineering and operations teams, technical support, and vendors to develop reliable, secure, scalable, and supportable solutions aligned with business requirements and enterprise architecture standards. Responsibilities include evaluating technology and service options, resolving complex telephony and collaboration issues, developing technical standards and documentation, supporting downtime and recovery procedures, ensuring security and operational requirements are met, and mentoring engineering team members. The position serves as a technical authority for assigned voice and collaboration services, driving reliability, maintainability, and continuous service improvement. Job Summary: In addition to the responsibilities listed below, this position is responsible for a deep understanding of one or more networking technologies (Data Center networking , LAN, WAN, Voice, Wireless, TCIP/IP protocols and services). Some of the unique challenges this position will face include working on a large scale network, across 1,000 sites with multiple data centers requiring 5 9s availability. Essential Responsibilities: Completes work assignments and supports business-specific projects by applying expertise in subject area; supporting the development of work plans to meet business priorities and deadlines; ensuring team follows all procedures and policies; coordinating and assigning resources to accomplish priorities and deadlines; collaborating cross-functionally to make effective business decisions; solving complex problems; escalating high priority issues or risks, as appropriate; and recognizing and capitalizing on improvement opportunities. Practices self-development and promotes learning in others by proactively providing information, resources, advice, and expertise with coworkers and customers; building relationships with cross-functional stakeholders; influencing others through technical explanations and examples; adapting to competing demands and new responsibilities; listening and responding to, seeking, and addressing performance feedback; providing feedback to others and managers; creating and executing plans to capitalize on strengths and develop weaknesses; supporting team collaboration; and adapting to and learning from change, difficulties, and feedback. As part of the IT Engineering job family, this position is responsible for leveraging DEVOPS, and both Waterfall and Agile practices, to design, develop, and deliver resilient, secure, multi-channel, high-volume, high-transaction, on/off-premise, cloud-based solutions. Supports the review of team deliverables. Provides some recommendations and input on options, risks, costs, and benefits for systems designs. Collaborates with team members to develop project support plans, schedules, and assignments. Translates business and functional requirements into technical specifications that support integrated and sustainable designs for designated infrastructure systems by partnering with Business Analysts to understand business needs and functional specifications. Serves as a liaison with business partners, Solutions, and enterprise architects to define and understand target strategies. Collaborates with counterparts in various IT Teams (e.g., database, operations, technical support) throughout system development and implementation. Develops and modifies solutions by identifying technical solutions to business problems. Provides consultation and technical advice on IT infrastructure planning, engineering, and architecture for assigned systems by assessing the implications of IT strategies on infrastructure capabilities. Reviews and makes changes to technical specifications and documentation. Collaborates with IT teams and key business partners to troubleshoot complex systems and provides solutions, as appropriate. Evaluates existing systems to make recommendations on resources required to maintain service levels. Evaluates new service options, identifies issues and impacts, and provides recommendations on feasibility and ROI. Collaborates with architects and software engineers to ensure functional specifications are converted into flexible, scalable, and maintainable designs. Verifies system designs adhere to company architecture standards. Drives physical architecture design for new initiatives. Leads the implementation of assigned enterprise infrastructure systems to ensure successful deployment and operation by developing and documenting detailed standards (e.g., guidelines, processes, procedures) for the introduction and maintenance of services. Minimum Qualifications: Minimum four (4) years experience in network infrastructure planning, design, and implementation. Minimum one (1) year in a technical leadership role with or without direct reports. Bachelors degree in Computer Science, CIS, or related field and Minimum six (6) years experience in an IT operations environment with technical experience in distributed technologies , systems development, and/or networking. Additional equivalent work experience may be substituted for the degree requirement.

Job Family: Technology Consulting Travel Required: None Clearance Required: Active Top Secret (TS) Guidehouse is seeking an experienced Senior Network Engineer to design, install, configure, and document a standalone Cisco-based network in a dedicated lab environment. The ideal candidate brings hands-on experience deploying complex enterprise network solutions, deep familiarity with Cisco technologies, and strong operational discipline in building secure, reliable, and fully documented networks. The Senior Network Engineer will be responsible for: Designing, installing, and configuring a standalone Cisco network tailored for a lab environment. Deploying and configuring: Cisco ACI fabric, Cisco SDA (Software-Defined Access) networks, Cisco wireless access points, Firewall uplinks and associated security zones. Implementing best practices for segmentation, access control, and network performance. Standing up and configuring foundational enterprise services, including DNS, DHCP, Active Directory Producing detailed system documentation including network diagrams, configuration baselines, operational procedures, and test results. Ensuring all configurations adhere to Guidehouse quality standards and any client-specific requirements. Conducting functional and performance testing. Ensuring successful integration between network components. Troubleshooting and resolving complex issues across multiple layers. Working closely with internal stakeholders, project leads, and technical teams. Providing status updates, risk identification, and recommendations throughout the build. What You Will Do: Interface directly with clients to define IT project requirements. Implement project documentation governance aligned with company and client requirements. Track progress of project against goals, objectives, approved budgets, approved timelines. Implement change management routines to assess change requests, make recommendations, secure client approvals, and issue change orders. Assesses change requests to determine impacts to scope, budget, schedule, quality, and risk. Demonstrate ability to identify complex project risks, lead constructability reviews, develop risk mitigation and contingency plans, and implement action plans to reduce or eliminate project risks. Make decisions with in-depth understanding and interpretation of procedures, organizational policies, and business practices to achieve general results. Responsible for setting department deadlines. Draw upon the analysis of others and makes recommendations that have a direct impact on the company. Other duties as assigned. What You Will Need: Bachelor's degree (Relevant experience may be substituted for formal education or advanced degree. US Citizenship is required. FIVE (5) + years of related experience and/or training. An ACTIVE TOP SECRET federal security clearance. Ability to comprehend, analyze, and interpret the most complex business/IT documents. Ability to write reports, manuals, speeches, and articles using distinctive style. What Would Be Nice To Have: CCNA, CCNP or CCIE highly preferred. Advanced skills with Microsoft Office Suite. Ability to read and understand architectural drawings and network diagrams Ability to solve advanced problems and deal with a variety of options in complex situations. What We Offer: Guidehouse offers a comprehensive, total rewards package that includes competitive compensation and a flexible benefits package that reflects our commitment to creating a diverse and supportive workplace. Benefits include: Medical, Rx, Dental & Vision Insurance Personal and Family Sick Time & Company Paid Holidays Position may be eligible for a discretionary variable incentive bonus Parental Leave and Adoption Assistance 401(k) Retirement Plan Basic Life & Supplemental Life Health Savings Account, Dental/Vision & Dependent Care Flexible Spending Accounts Short-Term & Long-Term Disability Student Loan PayDown Tuition Reimbursement, Personal Development & Learning Opportunities Skills Development & Certifications Employee Referral Program Corporate Sponsored Events & Community Outreach Emergency Back-Up Childcare Program Mobility Stipend About Guidehouse Guidehouse is an Equal Opportunity Employer-Protected Veterans, Individuals with Disabilities or any other basis protected by law, ordinance, or regulation. Guidehouse will consider for employment qualified applicants with criminal histories in a manner consistent with the requirements of applicable law or ordinance including the Fair Chance Ordinance of Los Angeles and San Francisco. If you have visited our website for information about employment opportunities, or to apply for a position, and you require an accommodation, please contact Guidehouse Recruiting at 1- or via email at . All information you provide will be kept confidential and will be used only to the extent required to provide needed reasonable accommodation. All communication regarding recruitment for a Guidehouse position will be sent from Guidehouse email domains or . Correspondence received by an applicant from any other domain should be considered unauthorized and will not be honored by Guidehouse. Note that Guidehouse will never charge a fee or require a money transfer at any stage of the recruitment process and does not collect fees from educational institutions for participation in a recruitment event. Never provide your banking information to a third party purporting to need that information to proceed in the hiring process. If any person or organization demands money related to a job opportunity with Guidehouse, please report the matter to Guidehouse's Ethics Hotline. If you want to check the validity of correspondence you have received, please contact . Guidehouse is not responsible for losses incurred (monetary or otherwise) from an applicant's dealings with unauthorized third parties. Guidehouse does not accept unsolicited resumes through or from search firms or staffing agencies. All unsolicited resumes will be considered the property of Guidehouse and Guidehouse will not be obligated to pay a placement fee.

Job Description Job Description Job Title : Senior Network Security Engineer - Firewall Juniper SRX Job Location : Houston, TX (Onsite) Job Duration : 6 month(s) (Contract) Senior Network Security Engineer Client is an innovative, dynamic company with a rich past and a promising future. Originally Client has continuously reinvented itself. Today, Client is one of the world's leading technology companies and provides wired and wireless networking, servers, storage, IT and Cloud services, and software solutions for the next generation of IT infrastructure. Key Responsibilities Translate high-level business strategic objectives and goals into Enterprise IT requirements and conceptual designs. Develop and support comprehensive solutions that meet requirements and align with Client global network security and strategy using Juniper SRX platforms. Develop and maintain a multi-year strategic network and security architecture roadmap, incorporating Zero Trust and firewall-based segmentation models. Lead end-to-end network and security architecture across global platforms ensuring secure, high-performing, fault-tolerant, and resilient environments. Segmentation & Zero Trust Responsibilities (Juniper SRX Focus) Architect and implement network segmentation strategies using Juniper SRX firewalls across data center, campus, and cloud environments to limit lateral movement and enforce least-privilege access. Design and operationalize Zero Trust Architecture (ZTA) principles, integrating identity, application, and network-based policy enforcement using firewall controls. Collaborate with application owners to Client, validate, and map application dependencies to enable policy-driven segmentation via firewall rules and security zones. Define and enforce granular security policies using zone-based segmentation,VRFs, and SRX policy constructs across hybrid environments. Integrate segmentation with firewalls, SIEM, IAM, EDR/XDR, and cloud-native controls for unified policy enforcement. Lead adoption and standardization of Juniper SRX as the primary segmentation enforcement platform across enterprise environments. Develop segmentation governance models, policy lifecycle management, and compliance alignment (CIS/NIST/Zero Trust frameworks). Core Network Security Responsibilities Participate in network security design reviews and ensure all implementations meet enterprise security standards. Analyze business requirements to design and implement security across data centers, campus networks, and hybrid environments. Provide ongoing risk metrics, control effectiveness tracking, and security posture reporting. Conduct and support internal and external security audits and compliance assessments. Maintain awareness of emerging threats and update policies accordingly. Develop and manage policies, processes, and procedures ensuring reliability, availability, and security of network systems. Manage and optimize Security Information and Event Management (SIEM) systems. Collaborate with Cyber Security, infrastructure, and application teams toward compliance and operational excellence. Technical Qualifications Strong hands-on experience in designing and implementing network segmentation using enterprise firewalls (Juniper SRX preferred) in complex environments. Proven capability to build application-aware firewall policies based on traffic flow analysis. Experience with policy design, enforcement, monitoring, and optimization in firewall-based segmentation environments. Strong understanding of east-west traffic inspection, security zoning, and firewall-enforced segmentation. Familiarity with Zero Trust Network Access (ZTNA) and identity-driven access models. Network Security & Infrastructure Strong experience managing LAN/WAN security technologies, including firewalls, IDS/IPS, SIEM, VPN, and NAC. Expertise in firewall architecture and design with strong hands-on experience in Juniper SRX (primary), along with Fortinet and Palo Alto. Deep expertise in: Security zones, policies, NAT, routing Application control and threat prevention High-availability clustering and scale design Experience securing public and private cloud (AWS, Azure, GCP) environments. Design and implementation of Web Application and API Protection (WAAP) solutions. Strong experience in proxy (forward/reverse), load balancing, and application security integration. Experience with SDN and SD-WAN architectures, including segmentation use cases. Networking & Protocol Expertise Strong knowledge of Juniper:

Job Description Job Description Benefits: Competitive salary Location: Onsite: Tallahassee, FL Design, implement, and support enterprise network infrastructure and security solutions. Administer and maintain: Palo Alto NGFW Check Point Firewalls GlobalProtect VPN Network Security Policies Access Control Lists (ACLs) Perform firewall deployments, migrations, rule reviews, and policy conversions. Design and support LAN, WAN, wireless, VPN, cloud, and hybrid network environments. Develop network security architectures, segmentation strategies, and access controls. Monitor and troubleshoot network infrastructure, firewalls, VPNs, and security events. Conduct security risk assessments and recommend mitigation strategies. Support cloud firewall administration and cloud network security controls. Investigate and resolve complex network and cybersecurity incidents. Implement and maintain disaster recovery and high-availability solutions. Develop and maintain network diagrams, security documentation, standards, and procedures. Support enterprise modernization, integration, and infrastructure projects. Evaluate emerging networking and security technologies. Provide technical leadership, mentoring, and guidance to network and security teams. Ensure compliance with NIST security standards and best practices. Required Qualifications Bachelor's Degree in Computer Science, Information Systems, or related field, or equivalent experience. 5-10 years of IT infrastructure and security experience. 3-5 years of experience working with enterprise security technologies and NIST-based security frameworks. Extensive experience supporting enterprise networks and cybersecurity environments. Experience with: Palo Alto Firewalls Check Point Firewalls GlobalProtect VPN Network Security Administration Cloud Networking Enterprise Infrastructure Experience creating and maintaining network topology and infrastructure diagrams. Strong troubleshooting and analytical skills. Preferred Certifications PCNSE (Palo Alto Certified Network Security Engineer) CISSP CCNP CCIE Core Technologies Palo Alto NGFW Check Point Firewall GlobalProtect VPN LAN/WAN Networking Routing & Switching Network Segmentation VPN Technologies Cloud Networking Network Security VLAN Design ACL Administration Security Monitoring Incident Response Disaster Recovery High Availability Network Performance Optimization NIST Security Framework Infrastructure Documentation Preferred Experience Enterprise Security Architecture Zero Trust Networking Identity & Access Management (IAM) Security Event Monitoring Vulnerability Management Cloud Security (AWS/Azure) Security Operations (SecOps) Infrastructure Modernization Data Center Networking Enterprise Integration Services

Cherokee Federal seeks a Network Engineer SME to design, secure, and optimize enterprise networks supporting critical federal missions. You will lead architecture, configuration, and troubleshooting of Cisco-based LAN/WAN, VPN, and wireless infrastructure, ensuring high availability and compliance with government security standards. Collaborating with cross-functional teams, you'll develop technical documentation, implement monitoring and performance tuning, and guide junior engineers. Join a mission-driven, growth-focused organization delivering innovative IT solutions to U.S. government agencies nationwide. Responsibilities Design and implement secure LAN/WAN, VPN, and wireless architectures for federal environments Configure, maintain, and troubleshoot Cisco routers, switches, and firewalls Ensure network security, compliance, and documentation in line with government standards Monitor network performance, analyze logs, and optimize availability and throughput Lead complex incident resolution and root-cause analysis for network issues Develop and maintain network diagrams, runbooks, and configuration baselines Collaborate with cybersecurity, systems, and project teams on integrated solutions Provide technical leadership and mentorship to junior network engineers Required Skills Network design and architecture Cisco routing and switching (IOS/NX-OS) Firewall configuration and management VPN and remote access technologies WAN/LAN optimization and Qo SNetwork monitoring and performance tuning TCP/IP, DNS, DHCP, VLANs Network security and hardening Cisco wireless infrastructure Documentation and diagramming (Visio)

Job Family: Technology Consulting Travel Required: None Clearance Required: Active Top Secret (TS) Guidehouse is seeking an experienced Senior Network Engineer to design, install, configure, and document a standalone Cisco-based network in a dedicated lab environment. The ideal candidate brings hands-on experience deploying complex enterprise network solutions, deep familiarity with Cisco technologies, and strong operational discipline in building secure, reliable, and fully documented networks. The Senior Network Engineer will be responsible for: Designing, installing, and configuring a standalone Cisco network tailored for a lab environment. Deploying and configuring: Cisco ACI fabric, Cisco SDA (Software-Defined Access) networks, Cisco wireless access points, Firewall uplinks and associated security zones. Implementing best practices for segmentation, access control, and network performance. Standing up and configuring foundational enterprise services, including DNS, DHCP, Active Directory Producing detailed system documentation including network diagrams, configuration baselines, operational procedures, and test results. Ensuring all configurations adhere to Guidehouse quality standards and any client-specific requirements. Conducting functional and performance testing. Ensuring successful integration between network components. Troubleshooting and resolving complex issues across multiple layers. Working closely with internal stakeholders, project leads, and technical teams. Providing status updates, risk identification, and recommendations throughout the build. What You Will Do: Interface directly with clients to define IT project requirements. Implement project documentation governance aligned with company and client requirements. Track progress of project against goals, objectives, approved budgets, approved timelines. Implement change management routines to assess change requests, make recommendations, secure client approvals, and issue change orders. Assesses change requests to determine impacts to scope, budget, schedule, quality, and risk. Demonstrate ability to identify complex project risks, lead constructability reviews, develop risk mitigation and contingency plans, and implement action plans to reduce or eliminate project risks. Make decisions with in-depth understanding and interpretation of procedures, organizational policies, and business practices to achieve general results. Responsible for setting department deadlines. Draw upon the analysis of others and makes recommendations that have a direct impact on the company. Other duties as assigned. What You Will Need: Bachelor's degree (Relevant experience may be substituted for formal education or advanced degree. US Citizenship is required. FIVE (5) + years of related experience and/or training. An ACTIVE TOP SECRET federal security clearance. Ability to comprehend, analyze, and interpret the most complex business/IT documents. Ability to write reports, manuals, speeches, and articles using distinctive style. What Would Be Nice To Have: CCNA, CCNP or CCIE highly preferred. Advanced skills with Microsoft Office Suite. Ability to read and understand architectural drawings and network diagrams Ability to solve advanced problems and deal with a variety of options in complex situations. What We Offer: Guidehouse offers a comprehensive, total rewards package that includes competitive compensation and a flexible benefits package that reflects our commitment to creating a diverse and supportive workplace. Benefits include: Medical, Rx, Dental & Vision Insurance Personal and Family Sick Time & Company Paid Holidays Position may be eligible for a discretionary variable incentive bonus Parental Leave and Adoption Assistance 401(k) Retirement Plan Basic Life & Supplemental Life Health Savings Account, Dental/Vision & Dependent Care Flexible Spending Accounts Short-Term & Long-Term Disability Student Loan PayDown Tuition Reimbursement, Personal Development & Learning Opportunities Skills Development & Certifications Employee Referral Program Corporate Sponsored Events & Community Outreach Emergency Back-Up Childcare Program Mobility Stipend About Guidehouse Guidehouse is an Equal Opportunity Employer-Protected Veterans, Individuals with Disabilities or any other basis protected by law, ordinance, or regulation. Guidehouse will consider for employment qualified applicants with criminal histories in a manner consistent with the requirements of applicable law or ordinance including the Fair Chance Ordinance of Los Angeles and San Francisco. If you have visited our website for information about employment opportunities, or to apply for a position, and you require an accommodation, please contact Guidehouse Recruiting at 1- or via email at . All information you provide will be kept confidential and will be used only to the extent required to provide needed reasonable accommodation. All communication regarding recruitment for a Guidehouse position will be sent from Guidehouse email domains or . Correspondence received by an applicant from any other domain should be considered unauthorized and will not be honored by Guidehouse. Note that Guidehouse will never charge a fee or require a money transfer at any stage of the recruitment process and does not collect fees from educational institutions for participation in a recruitment event. Never provide your banking information to a third party purporting to need that information to proceed in the hiring process. If any person or organization demands money related to a job opportunity with Guidehouse, please report the matter to Guidehouse's Ethics Hotline. If you want to check the validity of correspondence you have received, please contact . Guidehouse is not responsible for losses incurred (monetary or otherwise) from an applicant's dealings with unauthorized third parties. Guidehouse does not accept unsolicited resumes through or from search firms or staffing agencies. All unsolicited resumes will be considered the property of Guidehouse and Guidehouse will not be obligated to pay a placement fee.

Job Description Job Description 4. Scope of Servies The Florida Department of Transportation, Office of Information Technology (OIT) - Integration Services is in search of a Senior Network Engineer to play a key role in assisting the Office of Information Technology in the establishment of new integration methods and standards, along with implementing system integrations, according to those established methods and standards. Duties and Responsibilities will include but are not limited to: 1. Perform security administration to configure and document firewall infrastructure access rules and work with peripheral network components in the technology environment with Palo Alto, Checkpoint and Global Protect VPNs. 2. Firewall deployments, rule migrations, firewall administration and converting existing rule based policies onto new platforms. 3. Works with critical core network infrastructure devices like Next Gen Firewall, VPNs, log collectors and monitors which play a crucial role in security for our IT environment. 4. Works with cloud network infrastructure to configure firewall, security policies and monitor network traffic. 5. Develop and maintain documentation following NIST guidelines. 6. Project Manager; 7. Data Administration; 5 Education Bachelor's Degree in Computer Science, Information Systems or other related field. Or equivalent work experience. Preferred Certifications (PCNSE, CISSP, CCNP, CCIE) 6. Experience 1. Typically have 5 to 10 years of combined IT and security work experience with a broad range of exposure to systems analysis, applications development, database design and administration 2. Three to five years of experience with information security tools based on NIST standards. 3. Requires knowledge of security issues, techniques, and implications across all existing computer platforms. Preference given for experience with NGFW Palo Alto or Checkpoint security products. 4. Experience using schematic diagramming tools to map infrastructure layouts. 7 Primary Job Duties/ Tasks Senior Network Engineer - Job Duties 1. Develops, implements, and manages enterprise security solutions across multiple IT functional areas, including network infrastructure, data, systems, cloud environments, telecommunications, and Web-based services. Designs and maintains secure network architectures, segmentation strategies, access controls, firewalls, VPNs, encryption technologies, and other security controls. 2. Develops, implements, and maintains enterprise security policies, standards, procedures, and technical controls governing user authentication, privileged access, network access, security monitoring, vulnerability management, firewall administration, encryption, remote access, and incident escalation. Ensures security practices align with organizational requirements, industry standards, and applicable regulatory requirements. 3. Performs security risk assessments and develops risk-based response strategies for enterprise network and infrastructure environments. Prepares executive-level status reports, risk assessments, security metrics, and recommendations addressing vulnerabilities, emerging threats, security incidents, and operational risks. 4. Monitors, analyzes, and responds to cybersecurity threats and security events, including malware, software vulnerabilities, unauthorized access attempts, network anomalies, and policy violations. Administers and monitors security profiles and access controls, reviews security alerts and violation reports, investigates security exceptions, and coordinates remediation activities. Maintains comprehensive documentation of security controls, configurations, incidents, and corrective actions. 5. Evaluates emerging network and security technologies, products, and procedures to improve infrastructure reliability, security, performance, and operational efficiency. Leads technical evaluations, proof-of-concept activities, product assessments, and implementation recommendations for enterprise networking and cybersecurity solutions. 6. Provides advanced technical support and consultation to business and IT stakeholders on complex network, infrastructure, and cybersecurity issues. Troubleshoots escalated network and security incidents, provides technical guidance to infrastructure teams, and educates IT and business personnel on security policies, secure configurations, access requirements, and risk mitigation practices. 7. Provides security expertise and technical leadership throughout the IT project lifecycle, including requirements development, architecture and design, implementation, testing, deployment, and operational support. Reviews project designs and proposed solutions to identify security risks and ensures appropriate security controls are incorporated into network, cloud, application, and infrastructure initiatives. 8. Designs, implements, and supports enterprise network infrastructure, including LAN/WAN, routing and switching, wireless networks, firewalls, VPNs, network segmentation, Internet connectivity, cloud connectivity, and data center infrastructure. Develops network solutions that support high availability, resiliency, scalability, and security requirements. 9. Leads the investigation and resolution of complex network and security incidents, utilizing network monitoring, logging, packet analysis, performance data, and security tools to identify root causes and implement corrective actions. Coordinates with vendors, technical teams, and organizational stakeholders during critical incidents and service disruptions. 10. Develops network security architecture and segmentation strategies designed to limit lateral movement, protect critical systems, isolate sensitive workloads, and establish appropriate security boundaries between users, applications, devices, and infrastructure. Evaluates east-west and north-south traffic flows to identify security risks and opportunities for improved network controls. 11. Establishes and monitors network performance and security metrics to identify trends, capacity requirements, vulnerabilities, and potential operational risks. Develops dashboards, key performance indicators, and management reports to support data-driven infrastructure and security decisions. 12. Maintains technical documentation and configuration standards for network and security infrastructure, including network diagrams, IP addressing, VLANs, firewall rules, access controls, security configurations, operational procedures, and disaster recovery requirements. Ensures documentation remains accurate and aligned with the current enterprise environment. 13. Collaborates with architecture, cybersecurity, systems, database, application, cloud, telecommunications, and infrastructure teams to develop integrated technology solutions. Serves as a senior technical resource and provides guidance on enterprise networking, security architecture, infrastructure design, and technology modernization. 14. Provides technical leadership and mentoring to network and security staff, establishes network engineering standards and best practices, reviews technical solutions, and assists with the development of team capabilities in enterprise networking, cybersecurity, cloud infrastructure, and emerging technologies. Senior-Level Requirements Must have extensive knowledge and demonstrated experience in enterprise networking, cybersecurity, systems, databases, cloud infrastructure, and/or Web operations. The senior-level Network Engineer is responsible for developing and implementing enterprise network and security strategies, leading complex technical projects, designing secure and resilient infrastructure, resolving the most complex network and security issues, conducting risk assessments, evaluating emerging technologies, and providing technical guidance to IT and business leadership. The position requires advanced knowledge of network architecture, routing and switching, firewalls, VPN technologies, network segmentation, wireless infrastructure, cloud networking, identity and access management, security monitoring, incident response, vulnerability management, disaster recovery, and enterprise security controls. 8 Job Specific Skills and Abilities (KSAs): Intermediate professional level role. Works independently or on multiple IT security projects as a project team member, occasionally as a project leader. Works on small to large, complex security issues or projects that require increased skill in multiple IT functional areas. May coach more junior staff. 9 General Knowledge Skills and Abilities (KSAs): The submitted candidate must be able to apply common knowledge, skills, and abilities in the following areas: 1. Communication: Have the ability to clearly convey information, in both written and verbal formats, to individuals or groups in a wide variety of settings (i.e.; project team meetings, management presentations, etc.). Must have the ability to effectively listen and process information provided by others. 2. Customer Service: Works well with clients and customers (i.e.; business office, public, or other agencies). Able to assess the needs of the customer, provide information or assistance to satisfy expectations or resolve a problem. 3. Decision Making: Makes sound, well-informed, and objective decisions. 4. Flexibility: Is open to change, new processes (or process improvement), and new information. Has the ability to adapt in response to new information, changing conditions . click apply for full job details

Job Description Job Description Description: US CITIZENSHIP, DoD SECRET SECURITY CLEARANCE IS REQUIRED. If your resume does not clearly state that you have an active DoD Secret security clearance, auto-filtering tools will reject/remove your application. EXPERIENCE for Senior Security Network Engineer position: Eight (8) years' experience in network security, demonstrating strong experience with Cisco Prime Infrastructure, understanding of IEEE 802.11 protocols, familiarity with TCP/IP (specifically Layers 3/4), and switching and routing protocols (internet standards and general architecture) and associated hardware. ReadSeal Experience Cisco ASA Cisco Firepower Switching and Troubleshooting Cisco Wireless LAN Controller Cisco DNA Center Bluecoat Proxy RSA Server Cisco ISE This is a Cyber Security Workforce IAT II position- Must hold one of the following active certifications: IAT Level III CISSP/CCNP-Routing or CCNP Security Requirements: EDUCATION for Senior Security Network Engineer: Minimum Education: Bachelor's degree in Information Technology, Computer Science, or an equivalent technical degree from an accredited college or university. Benefits for a Senior Security Network Engineer: As a team member of EHS Technologies, you'll have available benefits including Bonus Eligibility, No Cost Full Coverage Health Insurance, available Pet Insurance, industry high 401k matching among many other excellent benefits and up to 26 days of holiday and PTO EHS Technologies is an Equal Opportunity Employer.

Job Description Job Description Who we are The real world is the next frontier, and at Metropolis, we are creating the artificial intelligence to make it responsive. We are pioneering the Recognition Economy - a future where mundane repetition disappears and being known unlocks access, comfort and belonging everywhere you go. From transforming parking into a seamless drive-in, drive-out experience for millions of Members to expanding our intelligence layer across retail and hospitality, we are building a world that feels instinctive and magical. The future isn't coming; it's here, and we need builders, innovators and problem solvers to help us create it. Who you are Metropolis is seeking a Senior Security Engineer to establish and lead a dedicated infrastructure and network security engineering function within our Corporate IT and Information Security organization. In this senior technical role, you will design, build, and manage a dedicated AWS environment to power our security tooling, automation, and operational infrastructure, while also supporting our expanding Oracle Cloud Infrastructure footprint. You will drive enterprise network security initiatives-including firewalls, segmentation, WAF technologies, and zero-trust architectures-to protect our corporate office networks and remote access environments. Collaborating closely with Corporate IT, Network Engineering, Central Cloud Infrastructure, and platform engineering teams, you will deliver resilient security infrastructure that safeguards our expanding technology ecosystem. What you'll do Design, build, and manage a dedicated AWS environment owned by Corporate IT and Information Security to support security tooling, automation, and operational workloads Support Oracle Cloud Infrastructure environments as part of broader enterprise transformation initiatives Lead enterprise network engineering and network security initiatives across corporate office networks, firewalls, segmentation, and wireless environments Implement and manage VPN, remote access, WAF technologies, and secure connectivity architectures Drive zero-trust initiatives and enhance enterprise network visibility and monitoring Manage identity, access, endpoint, and server security platforms across the enterprise Develop infrastructure-as-code and cloud automation to scale security operations infrastructure Execute vulnerability management programs and establish enterprise infrastructure hardening and operational resiliency Provide detection engineering and incident response support across security platforms Partner closely across Corporate IT, Network Engineering, Central Cloud Infrastructure, Enterprise Systems, and platform engineering teams What we're looking for Demonstrate strong AWS and cloud security experience Exhibit strong networking and network security experience Show experience with enterprise identity systems and access management Display experience with security engineering infrastructure and automation Support hybrid enterprise and cloud-native environments Utilize modern infrastructure and security tooling Maintain familiarity with regulated environments such as PCI and SOC Possess experience with scripting and programming Experience leveraging AI tools to transform static workflows into responsive, high-output processes While not required, these are a plus: Use Python as the preferred language for scripting and programming 4 Days in Office: Metropolis values in-person collaboration to drive innovation, strengthen culture, and enhance the Member experience. Our corporate team members hold to our office-first model, which requires employees to be on-site at least four days a week, fostering organic interactions that spark creativity and connection When you join Metropolis, you'll join a team of world-class product leaders and engineers, building an ecosystem of technologies at the intersection of parking, mobility, and real estate. Our goal is to build an inclusive culture where everyone has a voice and the best idea wins. You will play a key role in building and maintaining this culture as our organization grows. The anticipated base salary for this position is $165,000.00 USD to $215,000.00 USD annually. The actual base salary offered is determined by a number of variables, including, as appropriate, the applicant's qualifications for the position, years of relevant experience, distinctive skills, level of education attained, certifications or other professional licenses held, and the location of residence and/or place of employment. Base salary is one component of Metropolis's total compensation package, which may also include access to or eligibility for healthcare benefits, a 401(k) plan, short-term and long-term disability coverage, basic life insurance, a lucrative stock option plan, bonus plans and more. Metropolis may utilize an automated employment decision tool (AEDT) to assess or evaluate your candidacy for employment or promotion. AEDTs are used to assist in assessing a candidate's application relative to the required job qualifications and responsibilities listed in the job posting. As part of this process, Metropolis retains data relevant to your candidacy, including personal information, for a period that is reasonably necessary for the use of the tool. If you are hired for the position, your data may become part of your employee records. Metropolis Technologies is an equal opportunity employer. We make all hiring decisions based on merit, qualifications, and business needs, without regard to race, color, religion, sex (including gender identity, sexual orientation, or pregnancy), national origin, disability, veteran status, or any other protected characteristic under federal, state, or local law.

Job Description Job Description Who we are The real world is the next frontier, and at Metropolis, we are creating the artificial intelligence to make it responsive. We are pioneering the Recognition Economy - a future where mundane repetition disappears and being known unlocks access, comfort and belonging everywhere you go. From transforming parking into a seamless drive-in, drive-out experience for millions of Members to expanding our intelligence layer across retail and hospitality, we are building a world that feels instinctive and magical. The future isn't coming; it's here, and we need builders, innovators and problem solvers to help us create it. Who you are Metropolis is seeking a Senior Security Engineer to establish and lead a dedicated infrastructure and network security engineering function within our Corporate IT and Information Security organization. In this senior technical role, you will design, build, and manage a dedicated AWS environment to power our security tooling, automation, and operational infrastructure, while also supporting our expanding Oracle Cloud Infrastructure footprint. You will drive enterprise network security initiatives-including firewalls, segmentation, WAF technologies, and zero-trust architectures-to protect our corporate office networks and remote access environments. Collaborating closely with Corporate IT, Network Engineering, Central Cloud Infrastructure, and platform engineering teams, you will deliver resilient security infrastructure that safeguards our expanding technology ecosystem. What you'll do Design, build, and manage a dedicated AWS environment owned by Corporate IT and Information Security to support security tooling, automation, and operational workloads Support Oracle Cloud Infrastructure environments as part of broader enterprise transformation initiatives Lead enterprise network engineering and network security initiatives across corporate office networks, firewalls, segmentation, and wireless environments Implement and manage VPN, remote access, WAF technologies, and secure connectivity architectures Drive zero-trust initiatives and enhance enterprise network visibility and monitoring Manage identity, access, endpoint, and server security platforms across the enterprise Develop infrastructure-as-code and cloud automation to scale security operations infrastructure Execute vulnerability management programs and establish enterprise infrastructure hardening and operational resiliency Provide detection engineering and incident response support across security platforms Partner closely across Corporate IT, Network Engineering, Central Cloud Infrastructure, Enterprise Systems, and platform engineering teams What we're looking for Demonstrate strong AWS and cloud security experience Exhibit strong networking and network security experience Show experience with enterprise identity systems and access management Display experience with security engineering infrastructure and automation Support hybrid enterprise and cloud-native environments Utilize modern infrastructure and security tooling Maintain familiarity with regulated environments such as PCI and SOC Possess experience with scripting and programming Experience leveraging AI tools to transform static workflows into responsive, high-output processes While not required, these are a plus: Use Python as the preferred language for scripting and programming 4 Days in Office: Metropolis values in-person collaboration to drive innovation, strengthen culture, and enhance the Member experience. Our corporate team members hold to our office-first model, which requires employees to be on-site at least four days a week, fostering organic interactions that spark creativity and connection When you join Metropolis, you'll join a team of world-class product leaders and engineers, building an ecosystem of technologies at the intersection of parking, mobility, and real estate. Our goal is to build an inclusive culture where everyone has a voice and the best idea wins. You will play a key role in building and maintaining this culture as our organization grows. The anticipated base salary for this position is $160,000.00 USD to $215,000.00 USD annually. The actual base salary offered is determined by a number of variables, including, as appropriate, the applicant's qualifications for the position, years of relevant experience, distinctive skills, level of education attained, certifications or other professional licenses held, and the location of residence and/or place of employment. Base salary is one component of Metropolis's total compensation package, which may also include access to or eligibility for healthcare benefits, a 401(k) plan, short-term and long-term disability coverage, basic life insurance, a lucrative stock option plan, bonus plans and more. Metropolis may utilize an automated employment decision tool (AEDT) to assess or evaluate your candidacy for employment or promotion. AEDTs are used to assist in assessing a candidate's application relative to the required job qualifications and responsibilities listed in the job posting. As part of this process, Metropolis retains data relevant to your candidacy, including personal information, for a period that is reasonably necessary for the use of the tool. If you are hired for the position, your data may become part of your employee records. Metropolis Technologies is an equal opportunity employer. We make all hiring decisions based on merit, qualifications, and business needs, without regard to race, color, religion, sex (including gender identity, sexual orientation, or pregnancy), national origin, disability, veteran status, or any other protected characteristic under federal, state, or local law.

Job Description Job Description We are seeking a Senior Network Security Engineer for an operations-first role supporting enterprise network security infrastructure across on-premises, remote-access, hybrid-cloud, and cloud-connected environments. This is not primarily an architecture/design role. The priority is a hands-on engineer who can administer, configure, maintain, troubleshoot, patch, upgrade, back up, validate, document, and operate production security platforms with minimal ramp-up. Firewall operations: hands-on Cisco and Palo Alto firewall administration, rule changes, NAT, troubleshooting, policy cleanup, upgrades, backups, logging, and production support. VPN / remote access: support for remote-access VPN, site-to-site VPN, user connectivity issues, certificates, authentication flows, and after-hours troubleshooting. RSA / MFA administration: RSA SecurID or equivalent MFA operations, token support, server administration, user troubleshooting, VPN integration, certificates, patching, backups, logs, and monitoring. Day-to-day operations: ticket resolution, monitoring alerts, health checks, change requests, incident support, maintenance windows, operational reporting, and customer support. Configuration and administration: installing, configuring, maintaining, patching, upgrading, backing up, validating, and troubleshooting assigned security platforms. Production troubleshooting: strong TCP/IP, DNS, routing, firewall logs, packet captures, VPN authentication, certificate, and connectivity troubleshooting. Documentation and process discipline: SOPs, runbooks, diagrams, change records, rollback plans, evidence collection, knowledge transfer, and formal change management. Federal/customer environment maturity: Public Trust eligibility, regulated-environment documentation, customer support, cross-team coordination, and comfort working with government stakeholders. The best candidate can credibly say: "I have operated enterprise Cisco and Palo Alto firewalls in production, handled firewall rule changes and troubleshooting, supported VPN users and site-to-site tunnels, administered or supported RSA/MFA tied to VPN access, followed formal change-management processes, maintained documentation and backups, and can step into daily operational support with minimal ramp-up." Scope and Role Boundaries Primary platforms include Cisco ASA/Firepower/FTD/FMC, Palo Alto NGFW/Panorama/GlobalProtect, remote-access and site-to-site VPN, RSA SecurID Authentication Manager or comparable MFA, monitoring/logging/SIEM integrations, and related network security controls. Coordinate with SOC/NOC, cloud, identity/directory, wireless/LAN, server, endpoint, system owner, application, governance, and vendor teams during changes, incidents, troubleshooting, compliance, and audit support. Cloudflare, Cisco ISE/NAC, secure web/email gateways, packet visibility tools, SD-WAN/SASE/ZTNA, AWS/Azure security, and F5/application-delivery awareness are useful where they intersect with assigned operational support, but the core need is firewall, VPN, RSA/MFA, and production operations. Key Responsibilities Provide daily, weekly, monthly, and annual operational support for assigned security systems, including tickets, alerts, health checks, email/phone support, metrics, status reporting, and operational validation. Administer and troubleshoot enterprise firewalls, including rule bases, NAT, segmentation, high availability, threat prevention, VPN integration, logging, secure baselines, rule reviews, recertification, cleanup, and decommissioning. Install, configure, maintain, patch, upgrade, back up, and validate firewall, VPN, MFA, and related network security systems in production environments. Support remote-access VPN, site-to-site VPN, partner connectivity, cloud connectivity, mobile/remote users, certificates, authentication policies, availability, utilization, and user access issues. Maintain and troubleshoot RSA SecurID Authentication Manager or equivalent MFA services, including servers/appliances, agents, certificates, HA, backups, logs, monitoring, directory integration, VPN authentication, and token lifecycle support. Respond to incidents, vulnerability notices, urgent requests, vendor advisories, PSIRT notices, system alerts, and emergency troubleshooting while minimizing service disruption. Use firewall logs, VPN logs, packet captures, SIEM data, monitoring tools, DNS/routing checks, and standard diagnostics to resolve complex connectivity, authentication, TLS/certificate, and application-flow issues. Create and maintain topology diagrams, equipment inventories, configurations, SOPs, runbooks, implementation plans, rollback plans, build/upgrade procedures, troubleshooting notes, and knowledge articles. Follow approved change, release, incident, problem, and configuration-management processes; prepare change records, peer-review materials, validation evidence, root-cause analysis, metrics, and audit artifacts. Support vulnerability remediation, POA&M tracking, continuous monitoring, compliance reviews, audit evidence collection, and coordination with ISSO, system owner, and security governance teams. Requirements 7+ years of experience in network security engineering, network infrastructure, cybersecurity infrastructure, or a closely related role. 5+ years of hands-on experience administering, maintaining, and troubleshooting enterprise firewall platforms in production environments. Hands-on experience with Cisco security technologies such as Cisco ASA, Firepower, FTD, FMC, AnyConnect/Secure Client, or equivalent Cisco firewall/VPN platforms. Hands-on experience with Palo Alto Networks technologies such as NGFW, Panorama, GlobalProtect, security profiles, App-ID/User-ID, logging, and policy optimization. Experience administering or supporting RSA SecurID Authentication Manager or comparable enterprise MFA/two-factor authentication platforms, including token support, server operations, patching/upgrades, backups, certificates, monitoring, and directory/VPN integration. Strong knowledge of firewall policy, NAT, VPNs, routing, DNS, DHCP, BGP, TLS/certificates, packet captures, log analysis, segmentation, high availability, and common network diagnostic tools. Experience with enterprise monitoring, logging, SIEM, alerting, vulnerability management, incident response, formal change management, and regulated-environment documentation. Ability to create clear technical documentation, support customers and stakeholders, prioritize operational work, communicate clearly, and coordinate across technical teams. Ability to obtain and maintain a Public Trust background investigation. Desired Certifications Relevant certifications are helpful but should not replace demonstrated hands-on experience. Examples include CCNP Security, CCIE Security, PCNSE, PCCSE, CISSP, CCSP, AWS Certified Security - Specialty, AWS Advanced Networking - Specialty, Microsoft Certified: Azure Security Engineer Associate, Microsoft Certified: Azure Network Engineer Associate, CompTIA Security+, CompTIA CySA+, GIAC certifications, or equivalent vendor/cloud certifications. Core Competencies Enterprise firewall engineering and policy lifecycle management VPN, remote access, RSA/MFA, and token lifecycle operations Cloudflare, edge security, secure access, and Zero Trust support Content filtering, secure web/email gateway, and NAC operations Hybrid-cloud network security and secure connectivity Monitoring, logging, SIEM integration, and incident response support Security visibility, packet analysis, and advanced troubleshooting Vulnerability remediation, compliance evidence, and POA&M support Change management, documentation, reporting, and operational metrics Technical leadership, customer support, and cross-team collaboration Benefits 401(k) 401(k) matching Dental insurance Flexible schedule Flexible spending account Health insurance Health savings account Life insurance Paid time off Professional development assistance Referral program Retirement plan Tuition reimbursement Vision insurance

Job Description Job Description About Agile Defense At Agile Defense we know that action defines the outcome and new challenges require new solutions. That's why we always look to the future and embrace change with an unmovable spirit and the courage to build for what comes next. Our vision is to bring adaptive innovation to support our nation's most important missions through the seamless integration of advanced technologies, elite minds, and unparalleled agility-leveraging a foundation of speed, flexibility, and ingenuity to strengthen and protect our nation's vital interests. Requisition #: 1853 Job Title: Network Security Engineer Location: Suitland, MD Clearance Level: Public Trust Job Description Agile Defense is seeking a Senior Network Security Engineer to support the agency as it moves away from its legacy ForeScout CounterACT NAC/NAM system and adopts Cisco Identity Services Engine (ISE) as the new access control platform. The engineer will help configure and manage Cisco ISE across the environment, handling AAA services, wired and wireless 802.1X authentication, device administration, and posture checks for users and devices. This role also supports the agency's modernization work by improving authentication processes, updating ISE policies, and strengthening identity-based access controls. The engineer will troubleshoot access issues, refine policy designs, and help ensure users and devices can connect securely and reliably as the organization completes its transition from ForeScout to Cisco ISE. Troubleshoot and resolve Cisco ISE issues across RADIUS, TACACS+, 802.1X, device administration, and endpoint authentication. Deploy, configure, and maintain Cisco ISE running on two clustered Cisco SNS 3715 appliances, ensuring high availability and consistent policy enforcement. Support the agency's migration from ForeScout CounterACT to Cisco ISE, including reviewing legacy ForeScout policies, device groups, and access rules and mapping them into ISE policy sets. Provide general wireless support, including basic troubleshooting, wireless access workflows, and coordination with wireless infrastructure teams. Configure and support Cisco ISE integrations with Cisco 9800 WLCs, including guest/registration portals, wireless onboarding, and policy driven access control. Integrate and maintain Cisco ISE with Active Directory (AD) and LDAP, including identity lookups, group based authorization, and directory based authentication workflows. Deploy, configure, and maintain Cisco ISE components, including: o Policy Sets, Authorization Profiles, and Authentication Rules o TACACS+ device administration o 802.1X for wired and wireless networks o Profiling, posture, and compliance policies o Certificate based authentication and PKI integrations Monitor security events using ISE logs, syslog, and performing root cause analysis for authentication and access issues. Manage identity integrations, enforce security policies, and tune configurations to support Zero Trust and improve user experience. Perform routine health checks, upgrades, migrations, and document changes through SOPs, engineering designs, and implementation procedures. Work closely with engineering, operations, and compliance teams while mentoring junior staff and contributing to knowledge sharing efforts. Education and Background Bachelor's degree in Information Technology, Cybersecurity, or a related field. Years of Experience Eight (8) years of experience in a large government organization with five (5) years in technical leadership, including four (4) years implementing and troubleshooting Cisco ISE. Four (4) years of experience supporting identity centric or Zero Trust architectures with strong knowledge of segmentation, certificate management, and endpoint posture controls. Required Skills Senior Network Security Engineer responsible for designing, configuring, monitoring, and troubleshooting Cisco ISE as a NAC/NAM platform, including TACACS+/RADIUS services, device administration policies, and wired/wireless 802.1X authentication. Eight (8) years of experience in a large government organization with five (5) years in technical leadership, including four (4) years implementing and troubleshooting Cisco ISE with expertise in: o Authentication and authorization policies (RADIUS/TACACS+) o 802.1X/EAP methods for wireless and wired access o Device profiling, posture checks, and endpoint compliance o Certificate based authentication (EAP TLS) and PKI integration o AAA integrations for switches, appliances, firewalls, and wireless controllers Experience working with Cisco ISE deployed on Cisco SNS 3715 appliances, preferably in a two node clustered, high availability setup. Understanding of ForeScout CounterACT, including legacy NAC/NAM policies, device classification, and access workflows, to support the migration to Cisco ISE Experience providing general wireless network support, including basic troubleshooting, controller interactions, and wireless access workflows. Hands on experience integrating Cisco ISE with Active Directory (AD) and LDAP, including identity lookups, group based policy decisions, and directory based authentication. Experience supporting Cisco ISE integrations with Cisco 9800 Wireless LAN Controllers, including guest/registration page redirection and wireless onboarding. Experience migrating legacy NAC, RADIUS, or device authentication systems into Cisco ISE while aligning with Zero Trust principles. Solid understanding of telecommunications, network security, and Zero Trust best practices. Strong communication skills with the ability to explain Cisco ISE, NAC/NAM, and AAA concepts to both technical and non technical audiences. Preferred Skills Preferred certifications: Cisco CCNP Security, Cisco ISE Specialist, or similar identity/security certifications. Working Conditions On-site 5 days a week in Suitland, Maryland In addition, Agile Defense invests in its employees beyond just compensation. Agile's benefits offerings include, dependent upon position, Health Insurance, Life Insurance, Paid Time Off, Holiday Pay, short-term and long-term Disability, Retirement and Learning and Development opportunities as well as other optional benefit elections. Our Core Values Employees of Agile Defense are our number one priority, and the importance we place on our culture here is fundamental. Our culture is alive and evolving, but it always stays true to its roots. Here, you are valued as a family member, and we believe that we can accomplish great things together. Agile Defense has been highly successful in the past few years due to our employees and the culture we create together. What makes us Agile? We call it the 6Hs, the values that define our culture and guide everything we do. Together, these values infuse vibrancy, integrity, and a tireless work ethic into advancing the most important national security and critical civilian missions. It's how we show up every day. It's who we are. Happy - Be Infectious. Happiness multiplies and creates a positive and connected environment where motivation and satisfaction have an outsized effect on everything we do. Helpful - Be Supportive. Being helpful is the foundation of teamwork, resulting in a supportive atmosphere where collaboration flourishes, and collective success is celebrated. Honest - Be Trustworthy. Honesty serves as our compass, ensuring transparent communication and ethical conduct, essential to who we are and the complex domains we support. Humble - Be Grounded. Success is not achieved alone, humility ensures a culture of mutual respect, encouraging open communication, and a willingness to learn from one another and take on any task. Hungry - Be Eager. Our hunger for excellence drives an insatiable appetite for innovation and continuous improvement, propelling us forward in the face of new and unprecedented challenges. Hustle - Be Driven. Hustle is reflected in our relentless work ethic, where we are each committed to going above and beyond to advance the mission and achieve success. Equal Opportunity Employer/Protected Veterans/Individuals with Disabilities We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.

Job Description Job Description Purpose Information technology is foundational to how Citadel Aviation operates at every site, from the systems that move work across the hangar floor and the shops to the platforms that support administrative staff. Secure, reliable network and identity infrastructure enable Citadel to operate without interruption, protect its work and its people, and meet its obligations to customers and partners. This role owns the design, operation, and security of Citadel's network and identity infrastructure across every Citadel site: reliable connectivity, a hardened identity platform, and a security posture that scales with the business. The role serves as Citadel's internal technical counterpart to the company's security SOC and managed detection and response (MDR) provider, partners with IT leadership and peers across IT and the business, owns assigned IT projects, and is accountable for the reliability of the network and the strength of the security posture across every site. Environment The technology stack includes Palo Alto next-generation firewalls, Cisco switching, Meraki wireless, Microsoft 365 with Entra ID for identity, Microsoft Defender for Endpoint and Intune for endpoint security and management, Tenable for vulnerability management, and KnowBe4 for security awareness. Security operations are delivered in partnership with an external SOC and MDR provider. Essential Job Functions Own the design, operation, and security of Citadel's network infrastructure across all sites. Maintain firewalls, switching, wireless, ISP connectivity, and backup connectivity. Design and implement upgrades to support growth, lead network design and turn-up for new Citadel facilities, and maintain secure connectivity between sites, between sites and the cloud, and for remote users. Own the design, operation, and security of Citadel's voice and unified communications infrastructure, including the company's calling system, VOIP infrastructure, and integration with Microsoft 365 communications. Maintain consistent network and security service quality across all Citadel sites. Travel between sites is heavier during the initial standardization phase across existing sites and during turn-up of new sites, and lighter once the environment reaches steady state. Perform in line with established KPIs and service-level targets, including network availability, security patch SLA, mean time to remediate vulnerabilities, mean time to respond to security incidents, and related measures. Track and report performance regularly to IT leadership. Serve as the internal technical counterpart to the company's security SOC and MDR provider, who operate detection, monitoring, and response. Partner closely on detection tuning, alert triage, investigation, and remediation. Own endpoint security policy across the Microsoft 365 platform, including Microsoft Defender for Endpoint configuration, conditional access, identity hardening, and Intune security baselines. Partner with the IT manager and the support team on day-to-day operation and enforcement. Own technical email security controls, including anti-phishing, anti-malware, secure transport, and tenant security configuration. Partner with the IT manager on user-facing reporting and response workflows. Run Citadel's vulnerability management process in partnership with the MDR provider. Operate scanning tooling, prioritize findings, and drive remediation across the IT organization. Own identity and access management hardening, including multi-factor authentication, conditional access policy, privileged access controls, and account lifecycle hygiene. Set program direction and content for Citadel's cybersecurity awareness program, including training plans, phishing simulation strategy, and ongoing user education topics. Partner with the IT manager, who runs the user-facing activities and reporting. Conduct third-party security review of new vendors, software platforms, and integrations before they enter the environment. Assess data handling, integration security, and ongoing risk; track approval and remediation. Coordinate Citadel's response to external security assessments, including penetration testing, cyber insurance reviews, customer security questionnaires, and regulatory inquiries. Scope engagements, work with vendors, maintain evidence, and track remediation. Deliver assigned IT projects within networking and security, and contribute to broader IT initiatives. Coordinate with IT leadership and peers, and engage external specialists and contractors as needed. Partner with IT leadership and peers in infrastructure, support, and software development on initiatives originating in those service lines. Contribute network and security expertise to keep delivery on track. Own vendor relationships within the network and security portfolio, including ISPs, network hardware, security tooling, and specialized contractors. Take on broader IT vendor relationships as assigned. Own the network and security operating budget, with broader budget scope as assigned. Track expenses, project upcoming needs, and provide input on annual IT budget planning. Own the on-call rotation for network and security incidents. Drive diagnosis, coordinate internal and external resources, and engage directly in resolution. Own incident communication for network and security events. Notify IT leadership and impacted business stakeholders, provide regular status updates throughout an incident, and deliver post-incident summaries with root cause and follow-up actions. Conduct periodic internal security audits across user access, identity hygiene, configuration baselines, vulnerability posture, and policy adherence. Remediate findings in partnership with the IT manager. Maintain and enforce IT network and security policies, procedures, runbooks, technical documentation, and asset inventory. Contribute to the creation and modification of policies as needed. Identify and propose improvements in network design, security posture, monitoring coverage, and tool consolidation. Deliver approved initiatives. Non-Essential Functions Running cables and installing hardware. Other duties as assigned. Minimum Qualifications or Experience Bachelor's degree in Information Technology, Computer Science, Cybersecurity, Network Engineering, or a related technical discipline. Equivalent professional experience considered in lieu of degree. 5+ years of progressive experience in enterprise network engineering and information security. Hands-on experience with endpoint security platforms, including Microsoft Defender for Endpoint and modern identity and access management (Microsoft Entra ID, conditional access, multi-factor authentication). Experience operating in partnership with a managed detection and response (MDR) provider or security operations center (SOC). Experience with vulnerability management, including scanning tooling (Tenable Nessus or comparable), prioritization, and driving remediation across an organization. Experience operating in an environment with regular external security assessments (penetration testing, cyber insurance reviews, customer security audits) and remediating findings under deadline. Experience supporting multi-site operations or production environments where uptime, security, and consistency of service are operational requirements. Experience delivering IT projects from scope through completion, including scheduling, vendor coordination, and budget tracking. Demonstrated ability to communicate technical concepts clearly to non-technical business stakeholders and to senior leadership. Demonstrated experience adhering to and enforcing security best practices across network, endpoint, and identity domains. Preferred Qualifications or Experience Experience in aviation, aerospace, manufacturing, MRO, or other regulated operational environments. Hands-on experience with endpoint security platforms, including Microsoft Defender for Endpoint and modern identity and access management (Microsoft Entra ID, conditional access, multi-factor authentication). Active IT industry certifications such as CompTIA Security+ or Network+, Cisco CCNA / CCNP, Palo Alto PCNSA / PCNSE, Microsoft Security or Identity certifications, CISSP, GIAC, or comparable. Experience designing and bringing up network infrastructure at new sites or facilities. Experience with SD-WAN, zero-trust architecture, network segmentation, or related modern network design patterns. Familiarity with security frameworks (NIST, CIS) and audit or compliance work. Experience with security awareness platforms (KnowBe4 or comparable). Experience administering identity and access controls in a hybrid or cloud-first environment. Experience with VOIP or unified communications infrastructure. Supervisory Responsibilities This position has no direct reports. Coordinates day-to-day with external network and security contractors, managed-service providers, and the company's SOC and MDR partner. Provides technical guidance and security expertise to IT team peers and to business stakeholders as needed. Knowledge, Skills, and Other Attributes Deep technical expertise across enterprise networking (firewalls, switching, wireless, routing) and information security (endpoint, identity, vulnerability management, security monitoring). . click apply for full job details