37 jobs found

Job Description Job Description Job Title: Web Application Firewall Engineer Job Description Candidate must have hands-on experience on F5 and Big-IP product, also they have experience on migrating applications from old legacy Big IP to F5 Position Description: The Web Application Firewall Engineer position at our financial client is a member of the Information Protection & Risk Management organization and works closely with other members of the IPRM program to develop, implement and support a wide range of critical security controls at our financial client. The engineer works with a team of security engineers within the Cyber Security Technology group to deploy, sustain and monitor technical controls and tools to meet specific security requirements, and help with defining processes to ensure that security configurations and tools are maintained. Job Responsibilities : • Operations and monitoring and day to day troubleshooting for web application firewalls (F5 and Akamai) across the enterprise. • Provide expert level troubleshooting for supported technologies • Perform architecture and engineering responsibilities in support of existing technologies and new security projects • Perform regular health checks and user activity audits • Author and vigilantly maintain documents related to the design, purpose, operation, and management of security applications Qualifications : • Minimum 5 years knowledge and experience with deployment and maintenance of enterprise web application firewall products: Akamai Kona, F5 ASM/AWAF, Salt API Protection. • Primary responsibility is support of our security infrastructure and security projects with potential to take on responsibilities for other network security technologies such as Network Access Control, Firewall etc • Must have good working knowledge of troubleshooting techniques: performing and analyzing the results of packet captures, CLI commands, familiarity with network protocols • Understand application layer TCP/IP Layer 7 security fundamentals • Ability to analyze application logs and work with developers to ensure secure coding practices are in use • Bachelor's degree in information systems or relevant field of study • Excellent communications skills (verbal and written) are required. • Ability to interact with personnel at all levels across the organization and to comprehend business imperatives. • A strong customer/client focus with ability to manage expectations appropriately and provide superior customer/client experience and build long-term relationships. • Willing to have a flexible work schedule and be on call for incident resolution • Coding/Scripting experience such as Python or PowerShell to automate tasks is a bonus.

Job Description Job Description Title: Network Engineer Location: Westlake, TX or Merrimack, NH On- site/Remote/Hybrid: Onsite Duration: 6 Months Interview Process: Webcam only No of submissions: No of Positions: 1 Work Authorization: Candidates must be authorized to work in the U.S. No current or future sponsorship (including H1B transfers or OPT) will be accepted. Job Description: Top Skills 2-5 years of data analysis with a focus on network and network security Splunk and Cisco Firepower Regulatory frameworks such as SOX, HIPAA, ISO 27001, or NIST Position Summary We are seeking a thorough and proactive Data Analyst to support a workstream within our network segmentation program. The ideal candidate will have 2-5 years' experience analyzing large data sets consisting of both log and telemetry data to formulate network-based security policies in support of cyber network segmentation policy. Success in this role includes producing validated application flow maps and enabling enforcement of least-privilege network policies. As a valued team member, you will help ensure secure and compliant access across secure network boundaries, with a solid understanding of routing, firewall and IPS/IDS controls. Key Responsibilities Analyze network traffic data (NetFlow, logs, packet captures) to identify application communication patterns and dependencies. Develop and refine network segmentation policies aligned with security standards and Zero Trust principles. Partner with engineering, cybersecurity, and application teams to validate dependencies and enforce least privilege connectivity. Translate flow data and CMDB information into application dependency mappings. Support implementation and tuning of policies across firewalls and security platforms (e.g., Cisco Firepower, IDS/IPS). Contribute to governance and compliance activities, ensuring adherence to internal policies and regulatory requirements. Document findings, produce reports, and communicate insights to technical and non-technical stakeholders. Identify opportunities to improve segmentation effectiveness and reduce attack surface. Qualifications Bachelor's degree in Information Security, Computer Science, or related field preferred. 2-5 years of hands-on experience in data analysis with a focus on network and network security. Experience supporting enterprise-level network environments. Working knowledge of Splunk and Cisco Firepower in an enterprise environment. Familiarity with regulatory frameworks such as SOX, HIPAA, ISO 27001, or NIST. Strong analytical and problem-solving skills. Excellent communication and documentation abilities. Preferred Skills Experience with scripting or automation (PowerShell, Python). Cisco Firepower, Check Point, and Juniper firewall security policy management. Snowflake and analytics visualization experience with Tableau or Power BI. Understanding of Zero Trust principles and least privilege access models. Certifications such as CISSP, CISM, or vendor-specific IAM/PAM certifications. About Us: InterSources Inc , is a Small, Woman, and Minority-Owned Business Enterprise, ISO/IEC 27001, SOC 2 Type 2 certified company with massive 18 years of diversified experience in providing IT Consulting Services, Artificial Intelligence, Data Analysis, Application Development, Cloud Services, Cybersecurity, Digital Marketing, ERP Management, Custom Software Development, Web Development, UI/ UX Design, System Integration, QA Support etc. We make reasonable accommodations for clients and employees, and we do not discriminate based on any protected attribute including race, religion, color, national origin, gender sexual orientation, gender identity, age, or marital status. We also are a Google Cloud and Oracle partner company.

Job Description Job Description Network Engineer - Sr - Design & Deployment The Network Engineer - Sr - Design & Deployment will successfully lead surveys, assessments, and designs for replacement network components, end point devices, equipment, and software in execution of customer IT life-cycle management plans. Design and deployment efforts include configuration, implementation, acceptance, technical documentation, and follow-up technical support. Planning also includes capacity management and load balancing analysis to ensure that capacity efficiently meets workload requirements. Assists in the maintenance of and submits recommendations for addition to the customer's Approved Products List (APL) and Approved Software List (ASL). Education and Experience: Bachelor's Degree and 5+ years of relevant experience or a combination of technical training, certifications, and 8+ years of experience 5+ years of network design, deployment, and operation desired CCNA/CCNP, MSCS or other related certifications or specialty experience Security+ CE (or appropriate DoDM 8570 Baseline Certification) IAT Level II certification is required before start Responsibilities: Surveys current and future locations to support agency network infrastructure Inventory and validation of agency current and future network devices and topologies Designs and installs architecture to include the software, hardware, and communications to support the network requirements as well as provide for present and future cross-functional requirements and interfaces Configures, installs, tests, validates, and troubleshoots network infrastructure devices Ensures Network systems are compatible and in compliance with the standards for open systems architectures, the Open Systems Interconnection (OSI) and International Standards Organization (ISO) reference models and profiles of standards - such as Institute of Electrical and Electronic Engineers (IEEE) Open Systems Environment (OSE) reference model - as they apply to the implementation and specification of Information Management (IM) solution of the network layers, across the application program interface (API) and the external environment/software application Ensures that the network/transport layers of the common operating environment are compliant with policies, processes, and procedures Evaluates analytically and systematically problems of workflows and network usage, organization and planning and develops appropriate corrective action Provide support team members with the tools, knowledge, and support documentation required to support enterprise architecture Have flexible working hours to be available to support team when needed Attend work regularly to ensure all job duties are timely performed Other duties as assigned from time to time by management Knowledge and Skills: Understanding of structured cabling and installation standards Knowledge and/or experience with network security practices Designing and deploying OSPF, IS-IS, BGP, MPLS, MBGP, VXLAN, VLAN, Virtual Chassis, LACP, 802.1x, WLAN, SSL-VPN, and Spanning Tree Ability to configure, install, test and validate, and troubleshoot enterprise-wide network infrastructure devices Knowledge of network troubleshooting techniques and tools (e.g., network packet capture and analysis, network analyzers, port scanning, and monitoring) Ability to review and develop network diagrams Ability to assess, document and provide recommended courses of action (CoA) to mitigate risk Excellent verbal and written communication skills, and attention to of risks detail MS Office Suite (Word, Visio, PowerPoint, Excel, Project, and other applications) proficient Ability to organize and facilitate planning and demonstrations. Ability to track, manage, and ensure projects are kept on track, and tasks are completed in a timely manner Desirable Technical Knowledge Cisco Switch Series (2900, 3700, 3800, 3900, 4500, 6500) Cisco Switch Nexus Series (7k/9k) and Catalyst 9000 Series Preferred Cisco Router Series (3700, 3800, 3900, ASI 1000) Cisco Router ISR 4000 Series preferred Palo Alto Firewalls VoIP TCP/IP, DNS, DHCP, NTP, Syslog, SNMP, and IPv4/v6 Juniper Series (MX, SRX, EX) Bluecoat Web Proxies General Dynamic TACLANEs Remedy VMWare Active Directory SolarWinds Familiar with DoD Joint Regional Security Stack (JRSS) Experience with DoD network device installation and configuration Familiar with working in a ticketing system/ITIL framework Experience with upgrading systems and applying security patches Experience with WAN optimization and load balancing Clearance/Citizenship: TS/SCI Must be US Citizen Travel Requirements: This position may involve up to 20% travel Location: Fort Meade, MD

Job Description Job Description Overview Senior Network Engineer Arlington, VA Are you ready to enhance your skills and build your career in a rapidly evolving business climate? Are you looking for a career where professional development is embedded in your employer's core culture? If so, Chenega Military, Intelligence & Operations Support (MIOS) could be the place for you! Join our team of professionals who support large-scale government operations by leveraging cutting-edge technology and take your career to the next level! We deliver essential technology services to our customers in support of their missions to sustain the national security and economic interests of our nation. SecuriGence is seeking a talented Senior Network Engineer to help contribute to our success. Come help us solve problems with Innovation through Intelligence. As a Senior Network Engineer , you will be assigned to an engineering implementation team with a concentration of networking capabilities. As a member of the implementation team, you will have the opportunity to be engaged in a variety of solution implementations, rather than just networking-focused. Responsibilities Design and troubleshoot complex network architectures and solutions. Use centralized network management tools to gather statistics, generate usage reports, and back up device configurations. Provide technical leadership on major network tasks and enterprise technology initiatives. Research and evaluate emerging network technologies, protocols, and applications for potential integration into the enterprise environment. Ensure seamless and secure connectivity across all enterprise endpoints. Analyze interoperability, integration, and deployment issues; optimize topology and site configurations. Apply advanced network design tools and techniques to develop efficient and secure architectures. Support mission-critical operations, with the expectation of occasional off-duty work hours. Develop automation using tools such as Ansible, Python, Terraform, or Cisco DNA Center Collaborate with security, systems, cloud, and DevOps teams to align infrastructure strategies Coordinate with vendors and service providers for escalations, procurement, and support Configure and manage security policies, NAT rules, decryption, and application-based controls (App-ID, User-ID, Content-ID) Monitor and analyze firewall logs, threat intelligence feeds, and traffic flows to proactively identify and mitigate risks. Other duties as assigned Qualifications Bachelor's degree in network management or other related fields. Additional years of experience can be used in lieu of a degree. 8+ years of professional experience in network engineering and NGFWs Classified/Air-gapped Network experience IAT II required Palo Alto Network Security Professional is preferred Secret clearance with the ability to obtain TS/SCI Knowledge, Skills and Abilities: In-depth understanding of network architecture design, including LAN, WAN, SDN, VPNs, and hybrid cloud environments. Experience with SD-WAN technologies and solutions is a plus. Expertise in routing, switching, firewalls, load balancers, and intrusion detection/prevention systems. Advanced troubleshooting and problem-solving across complex enterprise networks. Strong knowledge of TCP/IP, DNS, DHCP, BGP, OSPF, and other core networking protocols. Knowledge of classified/unclassified government network requirements, NIST, DISA STIGs, and other cybersecurity frameworks. Effective collaboration with cross-functional teams, including security, systems engineering, and program management. Lead enterprise-scale network operations in a secure, mission-critical environment. Ability to adapt to shifting priorities and lead through change. Familiarity with SIEM and SOAR solutions (XSOAR, Swimlane, Splunk, Cortex XDR, QRadar, etc.). Familiarity with cross-functional tool connections and how they interact with each other over the network. How you'll grow At Chenega MIOS, our professional development plan focuses on helping our team members at every level of their careers to identify and use their strengths to do their best work every day. From entry-level employees to senior leaders, we believe there's always room to learn. We offer opportunities to help sharpen skills in addition to hands-on experience in the global, fast-changing business world. From on-the-job learning experiences to formal development programs, our professionals have a variety of opportunities to continue to grow throughout their careers. Benefits At Chenega MIOS, we know that great people make a great organization. We value our team members and offer them a broad range of benefits. Learn more about what working at Chenega MIOS can mean for you. Chenega MIOS's culture Our positive and supportive culture encourages our team members to do their best work every day. We celebrate individuals by recognizing their uniqueness and offering them the flexibility to make daily choices that can help them be healthy, centered, confident, and aware. We offer well-being programs and continuously look for new ways to maintain a culture where we excel and lead healthy, happy lives. Corporate citizenship Chenega MIOS is led by a purpose to make an impact that matters. This purpose defines who we are and extends to relationships with our clients, our team members, and our communities. We believe that business has the power to inspire and transform. We focus on education, giving, skill-based volunteerism, and leadership to help drive positive social impact in our communities. Learn more about Chenega's impact on the world. Chenega MIOS News- Tips from your Talent Acquisition Team We want job seekers exploring opportunities at Chenega MIOS to feel prepared and confident. To help you with your research, we suggest you review the following links: Chenega MIOS web site - Glassdoor at-Chenega-MIOS- EI_IE369514.11,23.htm LinkedIn - Facebook -

Job Description Job Description Description: Athenix Solutions Group is looking for Network Engineers for a variety of roles to design, install, configure, and maintain complex data networks that are critical to the defense of our nation. We have roles for Engineers to work individually or as part of a team. Do you have skills and experience in some of the following areas? Collaborating with technical and application teams to identify, evaluate, and recommend technical networking solutions to support project requirements Configuring web services; monitoring status, and making updates as needed Designing and building an information technology framework or environment Experience documenting Network topology and data flows. Understanding of integrating ang configuring physical network devices in complex environments (switches, routers, firewalls, etc) Configuring DNS and performing routine maintenance and updates in complex network environments. Design and integrate various functions of network and telecommunications equipment into functional systems Familiarity and experience with network security infrastructure and associated standards procedures and technologies If so, we have an exciting job waiting for you! Requirements: Active Clearance: TS/SCI with Polygraph is required Education: Positions available no matter where you are in your career! Entry Level - Bachelor's degree in information technology, or related field, and no or minimal experience (Note: even without a degree experience can qualify you for this level with 4 years of relevant experience) Basic Level - Bachelor's degree in information technology, or related field, and 4 years of relevant experience Mid Level - Bachelor's degree in information technology, or related field, and 8 years of relevant experience Senior Level - Bachelor's degree in information technology, or related field, and 12 years of relevant experience Note: A Master's degree in information technology or relevant field can be used to substitute for 4 years of experience. Equal Opportunity Employer, including disability and protected veteran status.

Job Description Job Description Description: CarShield is seeking an experienced Network Engineer to join its growing Infrastructure team. In this role, you will design, implement, monitor, and manage the organization's local and wide area networks, helping maintain secure, reliable connectivity and maximum availability for users across the business. In this role, you will: Design and implement new network solutions and improve the efficiency, security, and reliability of existing networks. Install, configure, and support network infrastructure, including routers, proxy servers, switches, WAN accelerators, DNS, and DHCP. Configure firewalls, routing, and switching to maximize network performance and security. Administer web application firewalls and manage SSL/TLS certificates, including issuance, installation, and renewal. Monitor network performance, investigate faults, and identify opportunities to improve availability and efficiency. Troubleshoot LAN/WAN, VPN, routing, switching, and firewall issues from end to end and implement durable resolutions. Maintain network equipment by applying current, approved firmware releases. Document network configurations, incidents, troubleshooting activities, and resolutions within the IT service management environment. Communicate network status, risks, and relevant updates to key stakeholders. Perform other duties as assigned. Compensation and Benefits Salary commensurate with experience. Group insurance, including medical, dental, vision, and life coverage. 401(k) with employer match. Discounted CarShield policies. Discounted tuition at Lindenwood University. Professional development opportunities. On-site basketball and other recreation. On-site fitness facilities and classes led by a staff personal trainer at the St. Peters headquarters. Requirements: Ability to work fully on-site at CarShield's St. Peters, Missouri, office five days per week. Bachelor's degree in Information Systems or a related field, or equivalent practical experience. At least four years of networking experience and two years of cloud engineering experience. Strong understanding of switches, routers, firewalls, and VPN appliances, including technologies such as Cisco ASA/Firepower, Nexus, Catalyst, and Check Point. Strong working knowledge of TCP/IP, subnetting, IPsec, network segmentation, VRFs, switching, VLANs, routing, and load balancers. Strong understanding of identity management, federated identity systems such as Microsoft ADFS, multifactor authentication, and Active Directory integration with cloud applications and Azure AD. Current knowledge of DevOps practices, containerization, security, and observability. Scripting experience supporting automation and infrastructure-as-code deployments using Terraform, Azure Resource Manager, Azure PowerShell, and Azure CLI. Knowledge of SNMP monitoring and device management, including SNMP v2c and v3, community strings, traps and polling, and MIBs/OIDs. Experience working in an IT service management environment with strong technical documentation practices. Demonstrated ability to troubleshoot complex operational issues efficiently and drive them to resolution. Ability to work independently, exercise sound judgment, and collaborate effectively with direction when needed. Strong written, verbal, and presentation skills, including the ability to explain complex technical concepts to varied audiences.

Description: CarShield is seeking an experienced Network Engineer to join its growing Infrastructure team. In this role, you will design, implement, monitor, and manage the organization's local and wide area networks, helping maintain secure, reliable connectivity and maximum availability for users across the business. In this role, you will: Design and implement new network solutions and improve the efficiency, security, and reliability of existing networks. Install, configure, and support network infrastructure, including routers, proxy servers, switches, WAN accelerators, DNS, and DHCP. Configure firewalls, routing, and switching to maximize network performance and security. Administer web application firewalls and manage SSL/TLS certificates, including issuance, installation, and renewal. Monitor network performance, investigate faults, and identify opportunities to improve availability and efficiency. Troubleshoot LAN/WAN, VPN, routing, switching, and firewall issues from end to end and implement durable resolutions. Maintain network equipment by applying current, approved firmware releases. Document network configurations, incidents, troubleshooting activities, and resolutions within the IT service management environment. Communicate network status, risks, and relevant updates to key stakeholders. Perform other duties as assigned. Compensation and Benefits Salary commensurate with experience. Group insurance, including medical, dental, vision, and life coverage. 401(k) with employer match. Discounted CarShield policies. Discounted tuition at Lindenwood University. Professional development opportunities. On-site basketball and other recreation. On-site fitness facilities and classes led by a staff personal trainer at the St. Peters headquarters. Requirements: Ability to work fully on-site at CarShield's St. Peters, Missouri, office five days per week. Bachelor's degree in Information Systems or a related field, or equivalent practical experience. At least four years of networking experience and two years of cloud engineering experience. Strong understanding of switches, routers, firewalls, and VPN appliances, including technologies such as Cisco ASA/Firepower, Nexus, Catalyst, and Check Point. Strong working knowledge of TCP/IP, subnetting, IPsec, network segmentation, VRFs, switching, VLANs, routing, and load balancers. Strong understanding of identity management, federated identity systems such as Microsoft ADFS, multifactor authentication, and Active Directory integration with cloud applications and Azure AD. Current knowledge of DevOps practices, containerization, security, and observability. Scripting experience supporting automation and infrastructure-as-code deployments using Terraform, Azure Resource Manager, Azure PowerShell, and Azure CLI. Knowledge of SNMP monitoring and device management, including SNMP v2c and v3, community strings, traps and polling, and MIBs/OIDs. Experience working in an IT service management environment with strong technical documentation practices. Demonstrated ability to troubleshoot complex operational issues efficiently and drive them to resolution. Ability to work independently, exercise sound judgment, and collaborate effectively with direction when needed. Strong written, verbal, and presentation skills, including the ability to explain complex technical concepts to varied audiences. PIfd87c6f6fe03-4343

Job Description Job Description Job Title: F5 Network Administrator Location (city, state): Oklahoma City, Oklahoma, or Dallas, Texas Direct Hire: Must be authorized to work in the United States now and in the future without assistance Pay: $120,000-$140,000 annually, plus short-term and long-term incentive opportunities Work Schedule: Full-time, onsite five days per week. Benefits: This position is eligible for medical, dental, vision, and 401(k). Additional highlights include employer-paid family health coverage, a 10% employer 401(k) contribution with a 5% employee contribution, and generous PTO An established energy organization is expanding its infrastructure team and seeking an experienced networking professional to support a modernized data center environment. This newly created position will serve as the primary technical resource for F5 platforms while contributing to broader network operations. The role combines hands-on application delivery, load balancing, and security responsibilities with routing, switching, and data center networking. The ideal candidate brings practical production experience with F5 and can independently manage the platform while partnering with infrastructure, systems, and security teams. Key Responsibilities: Administer F5 BIG-IP services across traffic management, application access, web application protection, and DNS functions. Create and maintain load-balancing configurations, including virtual servers, server pools, health checks, and traffic-handling rules. Write and refine iRules and streamline platform administration through Ansible, Terraform, and API-based automation. Maintain secure application connections through SSL/TLS configuration and certificate renewal management. Adjust web application firewall controls, bot protection, and DDoS defenses to address evolving threats. Assist with F5 Distributed Cloud services, including application protection, cloud load balancing, and Customer Edge deployments. Diagnose connectivity and application delivery issues, evaluate platform performance, and coordinate upgrades. Support routing, switching, and network operations within the data center. Work closely with systems administrators, security professionals, and application teams to resolve issues and plan changes. Maintain technical documentation and provide guidance on F5 configuration and operational practices. Qualifications: At least five years of professional networking experience, with approximately five to ten years preferred. A minimum of one year with F5 administration as a primary responsibility in a production environment. Broad technical knowledge of enterprise routing, switching, and data center networks. Hands-on familiarity with F5 BIG-IP modules such as LTM, APM, WAF/ASM, and DNS/GTM. Understanding of TCP/IP, HTTP/HTTPS, DNS, and networking across Layers 4-7. Experience with infrastructure automation, configuration tools, or REST APIs. Knowledge of certificate management, PKI, and secure network design. Experience with F5 Distributed Cloud or comparable cloud application delivery services. A degree is not required; relevant technical experience is the priority.

Job Description Job Description Description: Founded in 2009, RSC2, Inc. is a Small Business Administration (SBA) Certified HUBZone Professional Services company headquartered in Baltimore, Maryland. RSC2 provides breakthrough expertise, support services, and technologies to make operations, programs and systems of record perform better. Our professional staff is trained to provide world-class services to all types of customers. We uphold the integrity and quality of our work so you can expect only the best from us. RSC2 is currently looking for a Network Engineer to join our growing team at Fort Detrick, MD to support the GAIT program! The Network Engineer will perform the daily tasks of operating and maintaining the Global Agile Integrated Transport (GAIT) Network Service Center (NSC). The candidate fulfilling these functions must be fully knowledgeable in the tactical, worldwide global network from a planning, implementation and troubleshooting perspective. The GAIT cell will be based out of the Fort Detrick, Maryland (Fredrick Maryland) area. The cell will operate on a 24 x 7 x 365 basis. GAIT is a colorless (transport) MPLS network that connects each of the Army Regional Hub Nodes (RHNs), multiple DoD Teleports (SATCOM only), and other points of presence together in support of a global tactical network. This network will support training, contingency and operational missions on a global scale. GAIT will provide for the successful integration of processing equipment that solves a multiphase convergence methodology: Transport Convergence phase 1 (Intelligence Convergence) and phase 2 (Telemedicine Convergence). It also provides the backhaul network for emerging requirements such as Intelligence, Surveillance and Reconnaissance (ISR) Processing, Exploitation and Dissemination (PED) and Enroute Mission Command and Control (EMC2). The GAIT Network Engineer will be responsible for mission planning, engineering, implementation, maintenance and troubleshooting as required to support users requiring GAIT services. Knowledge of the PM Tactical Network (formerly PM WIN-T) architecture along with emerging technologies is required. All candidates must be able to identify with all variations of the WIN-T network, configuration and the implementation processes and procedures associated with each. The ability to assess and implement network outage or degradation remediation in a quick and resourceful manner is required. Must have excellent reasoning and troubleshooting skills enough to assist and guide problems to resolution over the phone. To that end, good customer relations skills are also a must. All candidates should have a basic understanding of tactical satellite (TACSAT) equipment and understand its relationship to the greater network architecture Requirements: Active Secret Clearance BS Degree and 4+ years of experience. Additional work experience can be substituted for degree. Understand Linkway modem operations (Basic Ops), Raydyne FDMA modem operations (Basic Ops), and NCW modem operations (Basic Ops) Setup, troubleshoot, and understand Linkway NCC operations (Advanced Ops) Setup, troubleshoot and understand iDirect network operations (Advanced Ops) An in-depth knowledge of IP networking and processes is mandatory. The candidate must possess knowledge that is commensurate with a Cisco Certified Network Associate (CCNA) certification (or higher) but the certification is not a requirement for the position. Travel is estimated at 10% for all employees within CONUS. Shift work is required and there may be periods of time where employees are placed in an on call scenario and provide a good point of contact number. Teamwork is a must. The candidate network engineer should have a working knowledge of the topics listed below or have the potential to learn the required knowledge in a reasonable timeframe. Voice Create trunks (CCNA Voice) Build call managers (CCNP Voice) Create route patterns (CCNA Voice) Setup and operate the REDCOM Setup and operate the Voice Gateway Routers (VGR) (CCNP Voice) Understand call setup and call traffic flow (CCNP Voice) Routing Load routers/switches IOS (CCNA R&S) Load configurations on router/switches (CCNA R&S) Setup, troubleshoot, and understand Border Gateway Protocol (BGP) (CCNP R&S) Setup, troubleshoot, and understand Open Shortest Path First (OSPF) (CCNP R&S) Setup, troubleshoot, and understand Dynamic Multipoint Virtual Private Network (DMVPN) (CCIE R&S) Setup, troubleshoot, and understand Multicast (CCIE R&S) Setup, troubleshoot, and understand switch technologies (CCNP R&S) Setup, troubleshoot, and understand Riverbed wide area network (WAN) accelerators Setup, troubleshoot, and understand Policy Based Routing (PBR) and Web Cache Communication Protocol (WCCP) (CCNP R&S) Setup, troubleshoot, and understand Multi-Protocol Label Switching (MPLS) (CCNP SP) Setup, troubleshoot, and understand MPLS Layer 3 VPN (L3VPN) (CCNP SP) Setup, troubleshoot, and understand MPLS Layer 2 VPN (L2VPN) (CCNP SP) Setup, troubleshoot, and understand various SP technologies ie, MVPN, LDP, MPBGP (CCNP SP) Information Assurance (IA) Load IOSs on Cisco firewalls/IPSs (CCNA Security) Setup, troubleshoot, and configure Cisco firewall/IPS configurations (CCNP Security) Understand routing and traffic flows in the RHNs, and downrange assets (CCNP Security/CCNP R&S) Setup, troubleshoot, and configure Cisco Security Manager (CSM) (CCNP Security) Setup, troubleshoot, and configure Palo Alto virtual firewalls Setup, troubleshoot, and configure Palo Alto's Panorama firewall management tool Communications Security Set up and operate KG-175A and KG-175D model TACLANEs and/or similar encryption devices Set up and operate KIV-7M NetOps Setup, troubleshoot, and understand the VMware vSphere 6.0 (VMware VCP-DCV) Setup, troubleshoot, and understand the various Netops applications, such as: SNMPc, Solarwinds ORION, Radius, and TACACS (Cisco ISE) Work Location: Fort Detrick, Maryland Employment Type: Full-time, Salary-Exempt Benefits Package: We offer a top-tier benefits package which includes medical, dental, vision, PTO, employer matching retirement plan, and more! We are an equal opportunity employer. Qualified applicants are considered without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, veteran status, or any other protected characteristic. If you require a reasonable accommodation to participate in the application or interview process, please contact us at . Salary at RSC2 is determined by various factors including but not limited to location, the particular combination of education, knowledge, skills, competencies, and experience as well as contract-specific affordability and organizational requirements. The projected compensation range for this position is $71,000 to $136,000 (annualized USD). The estimate displayed represents the typical total compensation range for this position.

Job Description Job Description Benefits: 401(k) 401(k) matching Dental insurance Health insurance Paid time off Profit sharing Tuition assistance Vision insurance Serve as the senior technical lead for the deployment, security, and operational availability of DTRA's enterprise application delivery controllers, perimeter security appliances, and core routing and switching infrastructure. Administer F5 BIG-IP platforms, including Local Traffic Manager (LTM), Global Traffic Manager/DNS (GTM/DNS), Access Policy Manager (APM), and Application Security Manager/Advanced Web Application Firewall (ASM/AWAF). Configure and maintain F5 virtual servers, pools, iRules, SSL/TLS offloading, and health monitors to support highly available mission applications. Manage secure remote access, CAC/PKI multifactor authentication, SAML/OAuth federation, and Zero Trust access policies through F5 APM. Maintain global server load balancing, DNSSEC, and automated failover across geographically dispersed data centers. Configure and tune web application firewall policies, maintain security signatures, and mitigate application-layer DDoS attacks and OWASP Top 10 threats. Maintain and troubleshoot Cisco enterprise routers and switches, including BGP, OSPF, EIGRP, VLANs, Spanning Tree, and VRF segmentation. Plan, stage, and execute migrations from legacy WAN circuits to SD-WAN edge appliances while minimizing mission downtime. Configure, administer, and troubleshoot Palo Alto Networks Next-Generation Firewalls and Panorama, including NAT rules, security policies, network objects, and IP address and URL blocking. Apply DISA Security Technical Implementation Guides (STIGs) and remediate vulnerabilities identified through ACAS scans across F5, Cisco, and Palo Alto assets. Prepare change control documentation, maintain network topology diagrams, and provide Tier 3/4 incident escalation support. Required Qualifications: • Active DoD security clearance at the level required for the assigned billet (Secret or TS/SCI). • Meet the applicable DoD 8570/8140 certification requirements for the position, including the specified IAT Level II requirement. • At least five years of hands-on experience administering F5 BIG-IP platforms, including BIG-IP appliances, VIPRION, or rSeries, with demonstrated expertise in LTM and APM. • At least five years of hands-on experience with Cisco IOS-XE/NX-OS routing and switching and Palo Alto Networks Next-Generation Firewalls. • Demonstrated ability to configure and troubleshoot enterprise routing, switching, load balancing, secure remote access, and firewall technologies. • Experience applying DISA STIGs, remediating ACAS findings, and supporting change management and advanced incident resolution in a DoD environment. Desired Qualifications: • IAT Level III certification, such as CISSP or CASP+, consistent with the position's applicable qualification requirements. • F5 Certified Administrator (F5-CA) or F5 Technology Specialist certification in LTM, ASM, or APM. • Hands-on experience migrating F5 environments to rSeries or VELOS platforms. • Cisco Certified Network Professional (CCNP) Enterprise certification. • Palo Alto Networks Certified Network Security Engineer (PCNSE) certification. • Proven experience leading live SD-WAN migrations and cutovers with minimal operational disruption. • Advanced experience with F5 GTM/DNS and ASM/AWAF, including global load balancing, automated site failover, and web application security.

Job Description Job Description GadellNet Consulting Services is a rapidly growing IT company based in the Midwest, providing technical solutions to hundreds of businesses across various markets. We are a family-friendly company and an Equal Opportunity Employer committed to building a creative, growth-oriented, and progressive work environment. We believe that diverse perspectives strengthen our team and drive innovation, and we are intentional about creating an environment where all employees feel valued, respected, and empowered to bring their full selves to work. As a Certified B Corporation, we are committed to considering the impact of our decisions on our employees, customers, suppliers, community, and environment. Join us in powering the missions of our team and our clients while making a difference in our communities. We encourage candidates to review our website to learn more about our values and company culture. About the Position: The core responsibilities of a Deployment Engineer are to ensure that our partners' new devices are provided with the configuration, software, access, licenses, data, and similar resources requested. The Deployment Engineer works with end users and Points of Contact to complete new hardware setups and with Account Managers and Points of Contact to ensure the necessary documentation and processes exist for GadellNet to meet the client's expectations when setting up new hardware. The Deployment Engineer is also a backup to the Branch Engineers in their region. Work in the office, travel to client sites and remote support are all required. Responsibilities: Deployments Install and configure operating systems and applications to meet client requirements, utilizing modern deployment techniques (Provisioning packages, Windows Intune/Autopilot, Scripting and Automation tasks) Set up hardware at client sites, or remotely and connect to required resources. Configure user profiles and migrate existing user data. Onboardings: Create user accounts: AD, M365, Gmail, LOB apps, systems access, etc. Create user profiles on client devices, install/configure OS and apps as needed. Branch: Assist with onsite troubleshooting of client issues, ranging from printers, networks, firewalls, VPNs, etc. Help with warranty claims of devices. Help GadellNet employees while in the office. Documentation and Processes: Work with AMs, POCs, Client Integration and others to create and update documentation and processes. Develop scripts and other tools to improve accuracy and efficiency. Admin: Attend meetings and complete regular performance measurements (15Five) Training: Complete assigned training. Pursue and complete other training to support core job functions. Provide training and related resources to internal staff. Other duties as assigned. Requirements: 2+ years working in an IT support setting with experience: Installing and configuring Windows 10/11 and macOS Supporting PCs, Macs, and peripheral devices Performing basic network setup and troubleshooting: VPN, Wi-Fi, LAN Printer/scanner troubleshooting Creating and configuring user accounts and access Familiarity with On-Premises Active Directory and Microsoft Entra ID Familiarity with Remote Access applications (RDP, Screen Connect, Take Control) 2+ years ConnectWise or other PSA Experience. Strong documentation skills. Exceptional attention to detail and follow-through. Ability to multitask and collaborate in a fast-paced team environment. Knowledge of diagnostic utilities, and ability to research a wide range of issues. Excellent communication skills, both written and verbal. This includes strong interpersonal skills, with a focus on rapport building, listening, and questioning skills. Preferred: Microsoft certifications (e.g., Microsoft 365 and Azure Fundamentals) Values: GadellNet serves businesses in multiple markets with outsourced technical expertise. We are poised for continued growth and looking for team players excited to power missions through technology. At GadellNet, our core values guide our decision-making processes, the overall empowerment of our employees, and the assignment of responsibility within our teams. Our team members support the values and goals of GadellNet, which fosters a one-of-a-kind service experience for our clients and establishes a culture that attracts and retains the top talent available in our markets. At GadellNet, we live and celebrate our three core values: Make an Impact 100% Responsibility 0% Excuses Grow or Die Benefits: GadellNet also offers the following benefits: Health, vision, and dental insurance. Paid time off, including parental leave and volunteer time. Flexible work environment. Access to mental health services. Employee matching donation program. 401k and employer matching.

Job Description Job Description We are seeking a Senior Network Security Engineer for an operations-first role supporting enterprise network security infrastructure across on-premises, remote-access, hybrid-cloud, and cloud-connected environments. This is not primarily an architecture/design role. The priority is a hands-on engineer who can administer, configure, maintain, troubleshoot, patch, upgrade, back up, validate, document, and operate production security platforms with minimal ramp-up. Firewall operations: hands-on Cisco and Palo Alto firewall administration, rule changes, NAT, troubleshooting, policy cleanup, upgrades, backups, logging, and production support. VPN / remote access: support for remote-access VPN, site-to-site VPN, user connectivity issues, certificates, authentication flows, and after-hours troubleshooting. RSA / MFA administration: RSA SecurID or equivalent MFA operations, token support, server administration, user troubleshooting, VPN integration, certificates, patching, backups, logs, and monitoring. Day-to-day operations: ticket resolution, monitoring alerts, health checks, change requests, incident support, maintenance windows, operational reporting, and customer support. Configuration and administration: installing, configuring, maintaining, patching, upgrading, backing up, validating, and troubleshooting assigned security platforms. Production troubleshooting: strong TCP/IP, DNS, routing, firewall logs, packet captures, VPN authentication, certificate, and connectivity troubleshooting. Documentation and process discipline: SOPs, runbooks, diagrams, change records, rollback plans, evidence collection, knowledge transfer, and formal change management. Federal/customer environment maturity: Public Trust eligibility, regulated-environment documentation, customer support, cross-team coordination, and comfort working with government stakeholders. The best candidate can credibly say: "I have operated enterprise Cisco and Palo Alto firewalls in production, handled firewall rule changes and troubleshooting, supported VPN users and site-to-site tunnels, administered or supported RSA/MFA tied to VPN access, followed formal change-management processes, maintained documentation and backups, and can step into daily operational support with minimal ramp-up." Scope and Role Boundaries Primary platforms include Cisco ASA/Firepower/FTD/FMC, Palo Alto NGFW/Panorama/GlobalProtect, remote-access and site-to-site VPN, RSA SecurID Authentication Manager or comparable MFA, monitoring/logging/SIEM integrations, and related network security controls. Coordinate with SOC/NOC, cloud, identity/directory, wireless/LAN, server, endpoint, system owner, application, governance, and vendor teams during changes, incidents, troubleshooting, compliance, and audit support. Cloudflare, Cisco ISE/NAC, secure web/email gateways, packet visibility tools, SD-WAN/SASE/ZTNA, AWS/Azure security, and F5/application-delivery awareness are useful where they intersect with assigned operational support, but the core need is firewall, VPN, RSA/MFA, and production operations. Key Responsibilities Provide daily, weekly, monthly, and annual operational support for assigned security systems, including tickets, alerts, health checks, email/phone support, metrics, status reporting, and operational validation. Administer and troubleshoot enterprise firewalls, including rule bases, NAT, segmentation, high availability, threat prevention, VPN integration, logging, secure baselines, rule reviews, recertification, cleanup, and decommissioning. Install, configure, maintain, patch, upgrade, back up, and validate firewall, VPN, MFA, and related network security systems in production environments. Support remote-access VPN, site-to-site VPN, partner connectivity, cloud connectivity, mobile/remote users, certificates, authentication policies, availability, utilization, and user access issues. Maintain and troubleshoot RSA SecurID Authentication Manager or equivalent MFA services, including servers/appliances, agents, certificates, HA, backups, logs, monitoring, directory integration, VPN authentication, and token lifecycle support. Respond to incidents, vulnerability notices, urgent requests, vendor advisories, PSIRT notices, system alerts, and emergency troubleshooting while minimizing service disruption. Use firewall logs, VPN logs, packet captures, SIEM data, monitoring tools, DNS/routing checks, and standard diagnostics to resolve complex connectivity, authentication, TLS/certificate, and application-flow issues. Create and maintain topology diagrams, equipment inventories, configurations, SOPs, runbooks, implementation plans, rollback plans, build/upgrade procedures, troubleshooting notes, and knowledge articles. Follow approved change, release, incident, problem, and configuration-management processes; prepare change records, peer-review materials, validation evidence, root-cause analysis, metrics, and audit artifacts. Support vulnerability remediation, POA&M tracking, continuous monitoring, compliance reviews, audit evidence collection, and coordination with ISSO, system owner, and security governance teams. Requirements 7+ years of experience in network security engineering, network infrastructure, cybersecurity infrastructure, or a closely related role. 5+ years of hands-on experience administering, maintaining, and troubleshooting enterprise firewall platforms in production environments. Hands-on experience with Cisco security technologies such as Cisco ASA, Firepower, FTD, FMC, AnyConnect/Secure Client, or equivalent Cisco firewall/VPN platforms. Hands-on experience with Palo Alto Networks technologies such as NGFW, Panorama, GlobalProtect, security profiles, App-ID/User-ID, logging, and policy optimization. Experience administering or supporting RSA SecurID Authentication Manager or comparable enterprise MFA/two-factor authentication platforms, including token support, server operations, patching/upgrades, backups, certificates, monitoring, and directory/VPN integration. Strong knowledge of firewall policy, NAT, VPNs, routing, DNS, DHCP, BGP, TLS/certificates, packet captures, log analysis, segmentation, high availability, and common network diagnostic tools. Experience with enterprise monitoring, logging, SIEM, alerting, vulnerability management, incident response, formal change management, and regulated-environment documentation. Ability to create clear technical documentation, support customers and stakeholders, prioritize operational work, communicate clearly, and coordinate across technical teams. Ability to obtain and maintain a Public Trust background investigation. Desired Certifications Relevant certifications are helpful but should not replace demonstrated hands-on experience. Examples include CCNP Security, CCIE Security, PCNSE, PCCSE, CISSP, CCSP, AWS Certified Security - Specialty, AWS Advanced Networking - Specialty, Microsoft Certified: Azure Security Engineer Associate, Microsoft Certified: Azure Network Engineer Associate, CompTIA Security+, CompTIA CySA+, GIAC certifications, or equivalent vendor/cloud certifications. Core Competencies Enterprise firewall engineering and policy lifecycle management VPN, remote access, RSA/MFA, and token lifecycle operations Cloudflare, edge security, secure access, and Zero Trust support Content filtering, secure web/email gateway, and NAC operations Hybrid-cloud network security and secure connectivity Monitoring, logging, SIEM integration, and incident response support Security visibility, packet analysis, and advanced troubleshooting Vulnerability remediation, compliance evidence, and POA&M support Change management, documentation, reporting, and operational metrics Technical leadership, customer support, and cross-team collaboration Benefits 401(k) 401(k) matching Dental insurance Flexible schedule Flexible spending account Health insurance Health savings account Life insurance Paid time off Professional development assistance Referral program Retirement plan Tuition reimbursement Vision insurance

Job Description Job Description Duration: 6+ Months Contract Key Responsibilities: Translate high-level business strategic objectives and goals into Enterprise IT requirements and conceptual designs. Develop and support comprehensive solutions that meet requirements and align with client's global network security and microsegmentation strategy . Develop and maintain a multi-year strategic network and security architecture roadmap, incorporating Zero Trust and segmentation-driven security models . Lead end-to-end network and security architecture across global platforms ensuring secure, high-performing, fault-tolerant, and resilient environments. Microsegmentation & Zero Trust Responsibilities: Architect and implement microsegmentation strategies across data center, campus, and cloud environments to limit lateral movement and enforce least-privilege access . Design and operationalize Zero Trust Architecture (ZTA) principles, integrating identity, application, and network-based policy enforcement. Collaborate with application owners to Client, validate, and map application dependencies to enable policy-driven segmentation. Define and enforce granular security policies using label/tag-based segmentation approaches across hybrid environments. Integrate microsegmentation with firewalls, SIEM, IAM, EDR/XDR, and cloud-native controls for unified policy enforcement. Lead adoption of microsegmentation platforms (e.g , Guardicore/Akamai Segmentation ). Develop segmentation governance models , policy lifecycle management, and compliance alignment (CIS/NIST/Zero Trust frameworks). Core Network Security Responsibilities: Participate in network security design reviews and ensure all implementations meet enterprise security standards. Analyze business requirements to design and implement security across data centers, campus networks, and hybrid environments . Provide ongoing risk metrics, control effectiveness tracking, and security posture reporting . Conduct and support internal and external security audits and compliance assessments . Maintain awareness of emerging threats and update policies accordingly. Develop and manage policies, processes, and procedures ensuring reliability, availability, and security of network systems. Manage and optimize Security Information and Event Management (SIEM) systems. Collaborate with Cyber Security, infrastructure, and application teams toward compliance and operational excellence. Microsegmentation & Advanced Security: Strong hands-on experience in designing and implementing microsegmentation solutions in complex enterprise environments. Proven capability to build application-aware segmentation policies based on traffic flow analysis. Experience with policy simulation, enforcement, monitoring, and optimization in segmentation platforms. Understanding of east-west traffic inspection, workload protection, and software-defined segmentation . Familiarity with Zero Trust Network Access (ZTNA) and identity-driven access models. Network Security & Infrastructure: Strong experience managing LAN/WAN security technologies, including firewalls, IDS/IPS, SIEM, VPN, and NAC . Expertise in firewall architecture and design with hands-on experience in: Fortinet (Fortigate), Palo Alto, Client Policy design, NAT, routing, application control, and threat prevention profiles Experience securing public and private cloud (AWS, Clienture, GCP) environments. Design and implementation of Web Application and API Protection (WAAP) solutions. Strong experience in proxy (forward/reverse), load balancing, and application security integration . Experience with SDN and SD-WAN architectures , including segmentation use cases. Qualifications: 10+ years of experience in enterprise network security architecture, engineering, and operations. Networking & Protocol Expertise: Strong knowledge of: Routing protocols: BGP, OSPF, RIP, MPLS Network services: DNS, DHCP, NTP IPv4/IPv6 architecture and traffic management Experience in QoS, NetFlow, ACLs, NAT, multicast, and wireless technologies (802.11 variants) . Experience with F5 GTM/LTM, VPN technologies, and Internet proxy solutions . Data Center & Infrastructure: Experience managing enterprise data center environments with technologies including: Aruba, Arista, Client switching Firewalls, WAN optimization, IDS/IPS, DLP Strong understanding of structured cabling and network facilities . Operations & Lifecycle Management: Plan, implement, and document infrastructure changes, including upgrades and migrations. Work within ITIL frameworks for incident, change, and problem management. Education & Certifications: Bachelor's Degree in Computer Science, Network Engineering, or related field (or equivalent experience). 10+ years of experience in global network security environments. Preferred certifications: CCNP / CCIE JNCIE Security certifications (CISSP, CISM, or equivalent) are a plus Key Differentiators Added (for your context) This version strengthens the JD by: Embedding microsegmentation as a core capability (not just one bullet) Aligning with Zero Trust and application dependency mapping (important for your programs) Emphasizing cross-team collaboration with application owners (critical for rollout success) Integrating segmentation with existing firewall + SIEM ecosystem (not replacing, but complementing) About US Tech Solutions: US Tech Solutions is a global staff augmentation firm providing a wide range of talent on-demand and total workforce solutions. To know more about US Tech Solutions, please visit . US Tech Solutions is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, colour, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran. AI Statement: By applying, you acknowledge that AI-assisted tools may be used during hiring.

Job Description Job Description Job title: Network Security Engineer Location: Frederick, MD (Onsite) Duration: 6 months Salary Range: $58.00 - $60.00/Hour on W2 (Without Benefits). Applicants must be willing to work on W2 Role Description: We are seeking a Network Security Engineer to own and operate our secure access and web security stack, with a strong foundation in network security and hands-on security analysis. The primary focus of this role is protecting user and application traffic across the enterprise network, with deep operational ownership of the Zscaler platform (ZIA, SIPA, ZDX). The ideal candidate combines solid network security fundamentals with the analytical skills to investigate events, assess risk, and drive secure configuration changes across a complex enterprise environment. Key Responsibilities: Manage and support Zscaler Internet Access (ZIA), SIPA, and ZDX across the enterprise. Configure web filtering, URL categorization, SSL inspection, and security policies. Troubleshoot user access, authentication, and internet connectivity issues. Implement security changes and perform impact analysis before deployment. Monitor security events and integrate logs with the SIEM for detection and analysis. Support Zscaler Client Connector upgrades and broader endpoint security initiatives. Perform App Connector upgrades and migration activity for new enterprise applications. Support the enterprise GenAI solution for cloud app policy and source-based traffic path design. Implement Zscaler DLP for in-line web and endpoint policy enforcement. Analyze network firewall changes for critical scenarios, and prepare and submit change details for approval where required. Partner with application owners, network teams, and internal cybersecurity teams to ensure secure us Manage ServiceNow service requests and change tickets for security BAU tasks. Required Qualifications Strong network security background, including firewall policy, routing and traffic flow, DNS, proxy, and secure connectivity concepts. Hands-on security analysis experience: investigating security events, correlating logs, and assessing the risk and impact of changes. Production experience administering Zscaler (ZIA, and ideally SIPA and ZDX), including web filtering, SSL inspection, and policy management. Experience integrating security telemetry with a SIEM and monitoring for security events. Working knowledge of endpoint security tooling and client-based secure access agents. Familiarity with change management and ITSM processes (ServiceNow requests and change). Strong troubleshooting, documentation, and cross-team communication skills. Preferred Qualifications Experience with DLP (in-line web and endpoint) and cloud application security policy. Exposure to securing GenAI and cloud application traffic and source-based traffic path design. Relevant certifications (e.g., Zscaler ZDTA/ZCCA/ZCCP, Security+, CCNP Security, or equivalent). Top 3 Required Skills Zscaler Administration (ZIA, ZPA/SIPA, ZDX) Network Security (Firewalls, DNS, Routing, Proxy, SSL Inspection) Security Event Analysis, SIEM Monitoring, and Incident Investigation Top 3 Preferred Skills Data Loss Prevention (DLP) and Cloud Security Policy Management GenAI Security and Cloud Application Traffic Management ServiceNow Change Management and ITSM Processes Education Requirements Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field (or equivalent experience) Years of Experience 8+ years of Network Security experience 5+ years of hands-on Zscaler administration experience 7+ years in Zscaler Cloud Security Services

Job Description Job Description Network Security Engineer (Zscaler) Location: Frederick, Maryland Duration: 6 months Pay Range 70/hr Job Summary We are seeking an experienced Network Security Engineer with strong expertise in Zscaler technologies (ZIA, ZPA/SIPA, ZDX) and enterprise network security. The ideal candidate will be responsible for managing secure access solutions, web security policies, threat monitoring, and security incident analysis while ensuring secure connectivity across the enterprise environment. Key Responsibilities Administer and support Zscaler Internet Access (ZIA), ZPA/SIPA, and ZDX platforms. Configure and manage web filtering, URL categorization, SSL inspection, and security policies . Troubleshoot user access, authentication, and internet connectivity issues. Perform security impact assessments and implement approved configuration changes. Monitor security events and integrate Zscaler logs with SIEM platforms for threat detection and analysis. Support Zscaler Client Connector deployments, upgrades, and troubleshooting. Manage App Connector upgrades and application migration activities. Implement and manage Data Loss Prevention (DLP) policies. Support cloud security initiatives, including GenAI application security and traffic path design. Review firewall changes and prepare change requests for approval. Collaborate with cybersecurity, networking, and application teams to ensure secure access. Manage ServiceNow incidents, requests, and change tickets. Required Skills Hands-on experience with: ZIA (Zscaler Internet Access) ZPA/SIPA (Zscaler Private Access) ZDX (Zscaler Digital Experience) Strong understanding of: Network Security Firewalls Routing & Switching DNS Proxy Technologies SSL Inspection Experience with: SIEM Monitoring (Splunk, QRadar, Sentinel, etc.) Security Event Analysis Threat Investigation Incident Response Experience with endpoint security tools and secure access agents. Knowledge of ServiceNow and ITSM processes. Preferred Skills Data Loss Prevention (DLP) Cloud Security & SASE Architecture GenAI Security Controls CASB Solutions Application Security Policies Security Automation Education Bachelor's Degree in Computer Science, Information Technology, Cybersecurity, or related field. Equivalent professional experience will also be considered. Certifications (Preferred) Zscaler ZDTA ZCCP ZCCA CompTIA Security CCNP Security CISSP Experience Required 8 years of Network Security experience. 5 years of hands-on Zscaler administration experience. Experience in large enterprise environments supporting security operations and secure access solutions. For our open requirements, please visit Current Openings

Description: CarShield is seeking an experienced Network Engineer to join its growing Infrastructure team. In this role, you will design, implement, monitor, and manage the organization's local and wide area networks, helping maintain secure, reliable connectivity and maximum availability for users across the business. In this role, you will: Design and implement new network solutions and improve the efficiency, security, and reliability of existing networks. Install, configure, and support network infrastructure, including routers, proxy servers, switches, WAN accelerators, DNS, and DHCP. Configure firewalls, routing, and switching to maximize network performance and security. Administer web application firewalls and manage SSL/TLS certificates, including issuance, installation, and renewal. Monitor network performance, investigate faults, and identify opportunities to improve availability and efficiency. Troubleshoot LAN/WAN, VPN, routing, switching, and firewall issues from end to end and implement durable resolutions. Maintain network equipment by applying current, approved firmware releases. Document network configurations, incidents, troubleshooting activities, and resolutions within the IT service management environment. Communicate network status, risks, and relevant updates to key stakeholders. Perform other duties as assigned. Compensation and Benefits Salary commensurate with experience. Group insurance, including medical, dental, vision, and life coverage. 401(k) with employer match. Discounted CarShield policies. Discounted tuition at Lindenwood University. Professional development opportunities. On-site basketball and other recreation. On-site fitness facilities and classes led by a staff personal trainer at the St. Peters headquarters. Requirements: Ability to work fully on-site at CarShield's St. Peters, Missouri, office five days per week. Bachelor's degree in Information Systems or a related field, or equivalent practical experience. At least four years of networking experience and two years of cloud engineering experience. Strong understanding of switches, routers, firewalls, and VPN appliances, including technologies such as Cisco ASA/Firepower, Nexus, Catalyst, and Check Point. Strong working knowledge of TCP/IP, subnetting, IPsec, network segmentation, VRFs, switching, VLANs, routing, and load balancers. Strong understanding of identity management, federated identity systems such as Microsoft ADFS, multifactor authentication, and Active Directory integration with cloud applications and Azure AD. Current knowledge of DevOps practices, containerization, security, and observability. Scripting experience supporting automation and infrastructure-as-code deployments using Terraform, Azure Resource Manager, Azure PowerShell, and Azure CLI. Knowledge of SNMP monitoring and device management, including SNMP v2c and v3, community strings, traps and polling, and MIBs/OIDs. Experience working in an IT service management environment with strong technical documentation practices. Demonstrated ability to troubleshoot complex operational issues efficiently and drive them to resolution. Ability to work independently, exercise sound judgment, and collaborate effectively with direction when needed. Strong written, verbal, and presentation skills, including the ability to explain complex technical concepts to varied audiences. PIfb6b72985b1c-4343

Job Description Job Description We are seeking an experienced F5 WAF Engineer to support the design, implementation, administration, and optimization of enterprise application delivery and web application security solutions. The ideal candidate will have hands-on expertise with F5 BIG-IP technologies, including LTM and ASM/Advanced WAF, and a strong background in application security, load balancing, traffic management, and web application protection. The engineer will work closely with infrastructure, security, and application teams to ensure high availability, scalability, and security of critical business applications. Key Responsibilities Design, implement, and support F5 BIG-IP solutions including: Local Traffic Manager (LTM) Advanced WAF / Application Security Manager (ASM) Global Traffic Manager (GTM/DNS) Access Policy Manager (APM) Configure and manage web application firewall policies to protect enterprise applications from OWASP Top 10 and emerging threats. Develop, deploy, and maintain F5 iRules, policies, profiles, and virtual servers. Perform application onboarding, SSL certificate management, and traffic optimization activities. Troubleshoot application delivery, load balancing, and security incidents across complex enterprise environments. Support migration, upgrade, and modernization initiatives involving F5 platforms. Conduct performance tuning and capacity planning to ensure optimal application availability. Collaborate with security and development teams to identify and remediate application vulnerabilities. Support incident response and root cause analysis for application and network security issues. Create and maintain technical documentation, operational procedures, and architecture diagrams. Participate in on-call support and maintenance activities as required. Required Qualifications 5 years of experience administering and engineering F5 BIG-IP environments. Strong experience with: F5 LTM F5 ASM / Advanced WAF SSL/TLS administration Load balancing concepts High availability configurations Experience developing and troubleshooting F5 iRules. Strong understanding of: HTTP/HTTPS DNS TCP/IP Web application security principles Experience implementing WAF policies and mitigating web application threats. Knowledge of OWASP Top 10 vulnerabilities and remediation techniques. Ability to troubleshoot complex application and network connectivity issues. Excellent communication and documentation skills. Preferred Qualifications Experience with F5 Distributed Cloud WAAP. F5 Certified Administrator (CA) or F5 Certified Technology Specialist (CTS). Experience with cloud platforms including Azure, AWS, or Google Cloud. Familiarity with automation tools such as: Terraform Ansible Python REST APIs Experience supporting PCI, SOX, HIPAA, or other regulated environments. Knowledge of Zero Trust and API security frameworks. Technical Skills F5 Technologies BIG-IP LTM BIG-IP ASM / Advanced WAF BIG-IP GTM/DNS BIG-IP APM iRules SSL Offloading Load Balancing Traffic Management Security Web Application Firewall (WAF) OWASP Top 10 Application Security API Security Threat Mitigation

Job Description Job Description Tekfortune is a fast-growing consulting firm specialized in permanent, contract & project-based staffing services for world s leading organizations in a broad range of industries. In this quickly changing economic landscape, virtual recruiting and remote work are critical for the future of work. To support the active project demands and skills gaps, our staffing experts can help you find the best job for you. Job Title: Senior Palo Alto Firewall Engineer Location: Hybrid Richmond, VA Contract Type: Long-term contract with potential to convert to full-time Certifications: PCNSE / PCNSA would be preferred but not required. Overview The Senior Firewall Engineer will play a key role in designing, implementing, and maintaining enterprise level network security solutions. This role requires deep expertise with Palo Alto firewalls and Panorama, along with the ability to create, optimize, and troubleshoot complex security policies in a large, distributed environment. The ideal candidate is a proactive engineer who can balance hands on technical work with strategic input on security architecture and best practices. Required Skills & Experience Extensive hands-on experience with Palo Alto Networks firewalls (physical and virtual appliances) Strong proficiency with Panorama for centralized management, templates, device groups, and policy deployment Senior-level experience creating, modifying, and optimizing firewall rules, NAT policies, security profiles, and advanced threat prevention configurations Deep understanding of network protocols, routing, segmentation, and secure network design Experience supporting enterprise-scale firewall environments with high availability and redundancy Ability to troubleshoot complex connectivity and security issues across multiple network layers Familiarity with change management processes, documentation standards, and compliance requirements Strong communication skills for collaborating with security, network, and application teams Primary Responsibilities Design, create, and maintain security rules and policies across Palo Alto firewalls to support business and security requirements Configure, deploy, and manage firewalls including interfaces, zones, routing, NAT, VPNs, and security profiles Administer and support Panorama, including templates, device groups, centralized logging For more information and other jobs available please contact our recruitment team at . To view all the jobs available in the USA and Asia please visit our website at .

Job Description Job Description What are the top 3 skills required for this role? 1. Cloud Network Security Engineering 2. Infrastructure-as-Code (IaC) & Automation 3. Enterprise Network & SaaS Security Job Description/ Responsibilities Network Security Cloud Engineering Network Security Cloud Engineering role is focused on hands-on cloud network security engineering, including secure cloud connectivity, firewall and policy automation, cloud-native network controls, and operational support for enterprise-scale hybrid environments. The role directly supports enterprise network security capabilities that protect cloud infrastructure and applications. The successful candidate will work closely with Information Security, Cloud Engineering, Enterprise Architecture, Network Engineering, Cloud Operations, and application development teams to design and implement cloud network security solutions. This position requires a highly motivated engineer with strong analytical and problem-solving skills, the ability to manage multiple initiatives simultaneously, and a passion for automation, Infrastructure-as-Code, and cloud-native networking technologies Responsibilities • Design, develop, and implement cloud network security capabilities across public and private cloud platforms. • Engineer and automate network security controls including on-premises firewalls, cloud firewalls, security groups, network ACLs, and cloud-native security services. • Build and maintain Infrastructure-as-Code (Terraform, CloudFormation, or similar) to deploy secure cloud networking environments. • Collaborate with Cloud Engineering, Network Engineering, and Security Architecture teams to implement secure hybrid connectivity between on-premises and cloud environments. • Support secure connectivity solutions including VPN, Direct Connect, ExpressRoute, Transit Gateway, VPC/VNet peering, Private Link, and service mesh technologies. • Conduct proof-of-concept evaluations of emerging cloud networking and security technologies. • Partner with Security Operations and Incident Response teams to improve network visibility, logging, monitoring, and threat detection. • Participate in architecture reviews to ensure cloud applications and infrastructure comply with enterprise security standards. • Identify opportunities to improve operational efficiency through automation and security orchestration. Required Skills & Experience • 5 years of experience in Network Security, Cloud Security, or Infrastructure Security engineering. • Experience designing and securing networking in AWS, Azure, Google, or Oracle Cloud Platform. • Strong understanding of core cloud-native networking and security concepts, including VPCs and VNets, routing, segmentation, load balancing, private connectivity, identity-aware access, encryption, and network policy enforcement. • Experience leveraging AI tools to enhance productivity, automate engineering tasks, and accelerate the delivery of secure cloud networking solutions. • Experience with Infrastructure-as-Code tools such as Terraform or CloudFormation. • Familiarity with security monitoring, SIEM integration, logging, and network telemetry. • Familiarity with enterprise network security technologies such as next-generation firewalls, web application firewalls, secure web gateways, DNS security, IDS/IPS, network segmentation, and zero trust network access. • Experience designing, securing, and supporting Software-as-a-Service (SaaS) environments and integrations, including secure connectivity, identity-aware access, API security, and SaaS security best practices. • Familiarity with SaaS security solutions such as CASB, Secure Service Edge (SSE), Secure Access Service Edge (SASE), and Zero Trust Network Access (ZTNA) to protect enterprise users and cloud-based applications. • Experience integrating SaaS platforms with enterprise identity providers (Azure AD/Entra ID, Okta, Ping Identity, or similar) using SAML, OAuth, and OpenID Connect (OIDC). • Experience securing access to enterprise SaaS applications through conditional access policies, network segmentation, and cloud-native security controls. • Experience supporting large-scale enterprise cloud migrations. • Education & Certifications • Bachelor's degree in Computer Science, Computer Engineering, Cybersecurity, or a related technical discipline, or equivalent experience. • Preferred Certifications Include: • AWS Certified Security - Specialty • AWS Advanced Networking - Specialty • Azure Network Engineer Associate • Azure Security Engineer Associate • Google Professional Cloud Network Engineer • Google Professional Cloud Security Engineer • CCNP Security or equivalent