Job Description Job Description Job Title: Cloud Security Architect Location: Princeton, NJ(Hybrid) Type: Contract Responsibilities: Lead architecture and implementation of Palo Alto Strata Cloud Manager (SCM) Design secure cloud network architectures across AWS/Azure/GCP Define standards, best practices, and security frameworks for cloud security Oversee integration of Palo Alto services into enterprise cloud environments Provide technical leadership and guidance to engineering teams Collaborate with stakeholders to align security architecture with business goals Requirements: Strong experience with Palo Alto Networks (SCM implementation required) Proven experience in cloud security architecture (AWS/Azure/GCP) Deep understanding of network security, firewalls, and cloud integrations Experience leading design and architecture decisions Excellent stakeholder communication and leadership skills On-site work commitment System One, and its subsidiaries including Joulé and Mountain Ltd., are leaders in delivering outsourced services and workforce solutions across North America. We help clients get work done more efficiently and economically, without compromising quality. System One not only serves as a valued partner for our clients, but we offer eligible employees health and welfare benefits coverage options including medical, dental, vision, spending accounts, life insurance, voluntary plans, as well as participation in a 401(k) plan. System One is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, age, national origin, disability, family care or medical leave status, genetic information, veteran status, marital status, or any other characteristic protected by applicable federal, state, or local law. Ref: Pittsburgh
11/08/2026
Full time
Job Description Job Description Job Title: Cloud Security Architect Location: Princeton, NJ(Hybrid) Type: Contract Responsibilities: Lead architecture and implementation of Palo Alto Strata Cloud Manager (SCM) Design secure cloud network architectures across AWS/Azure/GCP Define standards, best practices, and security frameworks for cloud security Oversee integration of Palo Alto services into enterprise cloud environments Provide technical leadership and guidance to engineering teams Collaborate with stakeholders to align security architecture with business goals Requirements: Strong experience with Palo Alto Networks (SCM implementation required) Proven experience in cloud security architecture (AWS/Azure/GCP) Deep understanding of network security, firewalls, and cloud integrations Experience leading design and architecture decisions Excellent stakeholder communication and leadership skills On-site work commitment System One, and its subsidiaries including Joulé and Mountain Ltd., are leaders in delivering outsourced services and workforce solutions across North America. We help clients get work done more efficiently and economically, without compromising quality. System One not only serves as a valued partner for our clients, but we offer eligible employees health and welfare benefits coverage options including medical, dental, vision, spending accounts, life insurance, voluntary plans, as well as participation in a 401(k) plan. System One is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, age, national origin, disability, family care or medical leave status, genetic information, veteran status, marital status, or any other characteristic protected by applicable federal, state, or local law. Ref: Pittsburgh
Job Description Job Description Job Title: Public Cloud Security Architect Location: New York City, NY Type: Contract -Onsite Responsibilities: Lead architecture and implementation of Palo Alto Strata Cloud Manager (SCM) Design secure cloud network architectures across AWS/Azure/GCP Define standards, best practices, and security frameworks Oversee integration of Palo Alto services into enterprise cloud environments Provide technical leadership and guidance to engineering teams Collaborate with stakeholders to align security architecture with business goals Requirements: Strong experience with Palo Alto Networks (SCM implementation required) Proven experience in cloud security architecture (AWS/Azure/GCP) Deep understanding of network security, firewalls, and cloud integrations Experience leading design and architecture decisions Excellent stakeholder communication and leadership skills Minimum experience: 10 years System One, and its subsidiaries including Joulé and Mountain Ltd., are leaders in delivering outsourced services and workforce solutions across North America. We help clients get work done more efficiently and economically, without compromising quality. System One not only serves as a valued partner for our clients, but we offer eligible employees health and welfare benefits coverage options including medical, dental, vision, spending accounts, life insurance, voluntary plans, as well as participation in a 401(k) plan. System One is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, age, national origin, disability, family care or medical leave status, genetic information, veteran status, marital status, or any other characteristic protected by applicable federal, state, or local law. Ref: Pittsburgh
11/08/2026
Full time
Job Description Job Description Job Title: Public Cloud Security Architect Location: New York City, NY Type: Contract -Onsite Responsibilities: Lead architecture and implementation of Palo Alto Strata Cloud Manager (SCM) Design secure cloud network architectures across AWS/Azure/GCP Define standards, best practices, and security frameworks Oversee integration of Palo Alto services into enterprise cloud environments Provide technical leadership and guidance to engineering teams Collaborate with stakeholders to align security architecture with business goals Requirements: Strong experience with Palo Alto Networks (SCM implementation required) Proven experience in cloud security architecture (AWS/Azure/GCP) Deep understanding of network security, firewalls, and cloud integrations Experience leading design and architecture decisions Excellent stakeholder communication and leadership skills Minimum experience: 10 years System One, and its subsidiaries including Joulé and Mountain Ltd., are leaders in delivering outsourced services and workforce solutions across North America. We help clients get work done more efficiently and economically, without compromising quality. System One not only serves as a valued partner for our clients, but we offer eligible employees health and welfare benefits coverage options including medical, dental, vision, spending accounts, life insurance, voluntary plans, as well as participation in a 401(k) plan. System One is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, age, national origin, disability, family care or medical leave status, genetic information, veteran status, marital status, or any other characteristic protected by applicable federal, state, or local law. Ref: Pittsburgh
Job Description Role Summary We're seeking a Senior Network / Infrastructure Engineer with strong experience designing, deploying, and supporting enterprise networks and modern infrastructure platforms. This hands-on role focuses on secure data transfer, infrastructure optimization, and day-to-day management of networking hardware, virtualization, and cloud workloads, with a strong bias toward automation and operational rigor. Key Responsibilities Infrastructure Management Own day-to-day operations of the VMware environment (vSphere/ESX/ESXi): lifecycle management, capacity, performance tuning, patching, upgrades, backup/DR coordination, and incident response. Partner on the virtualization roadmap, including planning and execution for migration from VMware to Nutanix (or Nutanix-based platforms), minimizing downtime and risk. Operate and optimize storage and compute platforms (e.g., Cisco UCS, SAN/NAS such as NetApp FAS/AFF, FlexPod), including performance troubleshooting and resilience planning. Cloud & Platform Operations Manage and optimize Microsoft Azure workloads: networking, compute, storage, security controls, cost optimization, and operational monitoring. Operate Kubernetes environments (cluster upgrades, reliability, networking, ingress, policy, and workload troubleshooting). Build, deploy, and support Docker containerized applications and supporting infrastructure (registries, image hygiene, runtime security, scaling). Implement and maintain load balancing solutions (L4/L7), including TLS configuration and operational monitoring. Network Engineering & Communications Design, implement, and support enterprise data/voice/video networks across LAN/WAN/Wi-Fi. Configure and support routing/switching and core network services (TCP/IP, BGP, OSPF, VLANs, QoS, DHCP/DNS). Administer and harden firewalls/VPNs (SonicWall, Cisco ASA, Palo Alto) and support secure remote access patterns. Security, Secure Transfers, and Compliance Support Maintain secure internal and external data transfer mechanisms (e.g., SFTP/managed file transfer), including certificate/keys, access controls, and auditing. Support vulnerability remediation, security hardening, and practical control implementation aligned to customer/security expectations (e.g., PCI/SOC-related controls where applicable). Own SSL/TLS certificate lifecycle management across infrastructure components. Operational Excellence & Automation Build repeatable, automated operations (Infrastructure-as-Code and configuration management preferred), reducing manual work and increasing reliability. Improve observability and troubleshooting practices (monitoring, alerting, packet capture, traffic analysis) and drive root-cause prevention. Participate in on-call/after-hours support rotations as needed for high-priority incidents and maintenance windows. Collaboration Collaborate across internal teams and external vendors/clients to plan changes, execute upgrades, resolve incidents, and document outcomes. Create and maintain clear technical documentation (runbooks, diagrams, standards) to improve operational consistency and knowledge sharing. Required Qualifications 5+ years in a senior network/infrastructure engineering role supporting enterprise environments (hybrid datacenter + cloud). Strong, hands-on experience with Kubernetes, VMware (vSphere/ESX/ESXi), and Microsoft Azure (these are must-haves). Proven experience designing/supporting enterprise networks: LAN/WAN/Wi-Fi, routing/switching, VPNs, QoS, and troubleshooting (packet capture/traffic analysis). Firewall administration experience with one or more of SonicWall, Cisco ASA, and Palo Alto (policy, VPN, logging/triage). Experience with virtualization operations and performance tuning (compute, storage, networking). Windows Server administration experience (including legacy environments as needed), Active Directory, Group Policy, and Exchange in enterprise contexts. Working knowledge supporting SQL Server environments (AlwaysOn preferred). Strong operational habits: change management discipline, incident response, documentation, and clear communication. Preferred Qualifications Bachelor's degree in a related field and significant datacenter operations experience. Certifications such as CCNA/CCNP, VCP, Nutanix (NCP), Azure (AZ-104/AZ-305), Security+, or equivalent experience. Experience with Cisco UCS, NetApp FAS/AFF, and FlexPod architectures in production environments. Familiarity with IIS/Tomcat administration and email security tooling (e.g., SpamTitan). Experience with tools such as Jira, Kace, SolarWinds, PRTG, Cerberus SFTP, Zerto, Trend Micro, WSUS, and related monitoring/endpoint/security platforms. Compensation & Benefits Competitive salary commensurate with experience and qualifications. Comprehensive health, dental, and vision insurance. Paid time off and holidays. Retirement savings plan options. Opportunities for career advancement and professional growth
11/08/2026
Full time
Job Description Role Summary We're seeking a Senior Network / Infrastructure Engineer with strong experience designing, deploying, and supporting enterprise networks and modern infrastructure platforms. This hands-on role focuses on secure data transfer, infrastructure optimization, and day-to-day management of networking hardware, virtualization, and cloud workloads, with a strong bias toward automation and operational rigor. Key Responsibilities Infrastructure Management Own day-to-day operations of the VMware environment (vSphere/ESX/ESXi): lifecycle management, capacity, performance tuning, patching, upgrades, backup/DR coordination, and incident response. Partner on the virtualization roadmap, including planning and execution for migration from VMware to Nutanix (or Nutanix-based platforms), minimizing downtime and risk. Operate and optimize storage and compute platforms (e.g., Cisco UCS, SAN/NAS such as NetApp FAS/AFF, FlexPod), including performance troubleshooting and resilience planning. Cloud & Platform Operations Manage and optimize Microsoft Azure workloads: networking, compute, storage, security controls, cost optimization, and operational monitoring. Operate Kubernetes environments (cluster upgrades, reliability, networking, ingress, policy, and workload troubleshooting). Build, deploy, and support Docker containerized applications and supporting infrastructure (registries, image hygiene, runtime security, scaling). Implement and maintain load balancing solutions (L4/L7), including TLS configuration and operational monitoring. Network Engineering & Communications Design, implement, and support enterprise data/voice/video networks across LAN/WAN/Wi-Fi. Configure and support routing/switching and core network services (TCP/IP, BGP, OSPF, VLANs, QoS, DHCP/DNS). Administer and harden firewalls/VPNs (SonicWall, Cisco ASA, Palo Alto) and support secure remote access patterns. Security, Secure Transfers, and Compliance Support Maintain secure internal and external data transfer mechanisms (e.g., SFTP/managed file transfer), including certificate/keys, access controls, and auditing. Support vulnerability remediation, security hardening, and practical control implementation aligned to customer/security expectations (e.g., PCI/SOC-related controls where applicable). Own SSL/TLS certificate lifecycle management across infrastructure components. Operational Excellence & Automation Build repeatable, automated operations (Infrastructure-as-Code and configuration management preferred), reducing manual work and increasing reliability. Improve observability and troubleshooting practices (monitoring, alerting, packet capture, traffic analysis) and drive root-cause prevention. Participate in on-call/after-hours support rotations as needed for high-priority incidents and maintenance windows. Collaboration Collaborate across internal teams and external vendors/clients to plan changes, execute upgrades, resolve incidents, and document outcomes. Create and maintain clear technical documentation (runbooks, diagrams, standards) to improve operational consistency and knowledge sharing. Required Qualifications 5+ years in a senior network/infrastructure engineering role supporting enterprise environments (hybrid datacenter + cloud). Strong, hands-on experience with Kubernetes, VMware (vSphere/ESX/ESXi), and Microsoft Azure (these are must-haves). Proven experience designing/supporting enterprise networks: LAN/WAN/Wi-Fi, routing/switching, VPNs, QoS, and troubleshooting (packet capture/traffic analysis). Firewall administration experience with one or more of SonicWall, Cisco ASA, and Palo Alto (policy, VPN, logging/triage). Experience with virtualization operations and performance tuning (compute, storage, networking). Windows Server administration experience (including legacy environments as needed), Active Directory, Group Policy, and Exchange in enterprise contexts. Working knowledge supporting SQL Server environments (AlwaysOn preferred). Strong operational habits: change management discipline, incident response, documentation, and clear communication. Preferred Qualifications Bachelor's degree in a related field and significant datacenter operations experience. Certifications such as CCNA/CCNP, VCP, Nutanix (NCP), Azure (AZ-104/AZ-305), Security+, or equivalent experience. Experience with Cisco UCS, NetApp FAS/AFF, and FlexPod architectures in production environments. Familiarity with IIS/Tomcat administration and email security tooling (e.g., SpamTitan). Experience with tools such as Jira, Kace, SolarWinds, PRTG, Cerberus SFTP, Zerto, Trend Micro, WSUS, and related monitoring/endpoint/security platforms. Compensation & Benefits Competitive salary commensurate with experience and qualifications. Comprehensive health, dental, and vision insurance. Paid time off and holidays. Retirement savings plan options. Opportunities for career advancement and professional growth
Job Description Hi There, Greetings for the day! We have an Urgent opening for IT NETWORK ENGINEER IV with one of our clients. Please go through the details below and respond with your resume. Job Title : IT NETWORK ENGINEER IV - FIREWALL ENGINEER Location : Remote -Hackensack, NJ (needs to be located in the tristate area. ) Duration : 6 Month Contract to Hire-W2 Position Overview The IT Network Engineer IV - Firewall Engineer is a senior-level technical resource responsible for designing, implementing, maintaining, and supporting enterprise network and network security infrastructure. The role has a primary focus on next-generation firewall engineering, including Palo Alto Networks and Fortinet platforms, while maintaining the broader networking expertise needed to support secure, reliable connectivity across local and wide area networks. The engineer works closely with Network Engineering, Information Security, infrastructure teams, end users, and technology vendors to protect organizational resources, resolve complex issues, and deliver network projects. Key Responsibilities Design, implement, maintain, and continuously improve enterprise firewall and network security architectures, with an emphasis on Palo Alto Networks and Fortinet technologies. Develop, review, implement, and maintain firewall policies, security rules, network objects, NAT, VPN configurations, and related controls in accordance with approved security standards and business requirements. Analyze network traffic, firewall logs, alerts, and system behavior to identify security risks, troubleshoot connectivity issues, and support the investigation and response to security incidents. Plan and execute firewall upgrades, configuration changes, platform maintenance, migrations, and lifecycle activities while minimizing operational risk and service disruption. Provide advanced troubleshooting and problem resolution for complex network and security issues involving firewalls, routing, switching, wireless, VPN, and LAN/WAN connectivity. Participate in the planning, design, implementation, testing, and documentation of network architecture and infrastructure solutions. Support network infrastructure that may include routers, switches, wireless systems, firewalls, optical transport, and related hardware and software. Evaluate emerging network and security technologies, conduct technical research, and provide recommendations regarding solutions, standards, and equipment purchases. Collaborate with Information Security, Network Engineering, infrastructure teams, application owners, end users, and vendors to resolve issues and deliver secure, reliable services. Participate in security incident response, root-cause analysis, remediation planning, and the development of corrective actions. Maintain accurate technical documentation, including network and firewall designs, configurations, standards, operational procedures, and change records. Contribute to project planning and execution, including technical coordination, implementation planning, testing, communication, and post-implementation validation. Respond to and resolve service requests and incidents in accordance with established support processes and service expectations. Provide technical guidance and knowledge sharing to team members and support the development of consistent engineering practices. Participate in the Network Team on-call program and provide after-hours support as required. Adhere to Hackensack Meridian Health organizational competencies, policies, and standards of behavior. Required Education, Knowledge, Skills, and Abilities Bachelor's degree in an IT-related discipline, equivalent certification, or a combination of education and relevant professional experience. Ten or more years of experience in an IT-related discipline, with substantial experience supporting enterprise network infrastructure. Demonstrated hands-on experience designing, implementing, administering, and troubleshooting next-generation firewalls, particularly Palo Alto Networks and Fortinet platforms. Strong understanding of firewall policy design and administration, including security rules, NAT, VPNs, traffic analysis, logging, and security best practices. Comprehensive working knowledge of TCP/IP networking, routing, switching, wireless, VPN, and LAN/WAN technologies. Ability to troubleshoot complex, multi-layer network and security issues using a structured, analytical approach. Working knowledge of optical transport systems, including DWDM and ROADM technologies. Experience planning and coordinating the installation, configuration, maintenance, and troubleshooting of network hardware, systems, software, and related infrastructure. Understanding of network security principles, access controls, threat mitigation, and the importance of maintaining compliance with organizational security policies. Strong written and verbal communication skills, including the ability to explain technical issues, risks, and proposed solutions to technical and non-technical audiences. Demonstrated leadership, project coordination, and organizational skills, including the ability to manage competing priorities and work independently. Strong problem-solving, analytical, collaboration, and interpersonal skills. Preferred Qualifications Experience working in a healthcare environment or supporting systems where availability, security, and operational continuity are critical. Experience supporting enterprise-scale network security environments and collaborating across Network Engineering and Information Security teams. Preferred Licenses and Certifications Cisco Certified Network Professional (CCNP). Cisco Certified Internetwork Expert (CCIE). Palo Alto Networks Next-Generation Firewall Engineer (NGFW-Engineer). Palo Alto Networks Network Security Professional (NetSec-Pro). Please share your resume & the below details to process your profile to the Client Full Name: Work Authorization/ Visa Status: Availability: LinkedIn: Current Location: Available to work onsite in NJ: Best Contact Number: Currently Working: Reason for Change of employment: DOB MMDD: SSN Last four digits: Highest Education / University & Year: Skill Matrix: Total years of exp as IT NETWORK ENGINEER IV: Total years of exp with FIREWALL ENGINEER: Total years of exp with Palo Alto:
11/08/2026
Full time
Job Description Hi There, Greetings for the day! We have an Urgent opening for IT NETWORK ENGINEER IV with one of our clients. Please go through the details below and respond with your resume. Job Title : IT NETWORK ENGINEER IV - FIREWALL ENGINEER Location : Remote -Hackensack, NJ (needs to be located in the tristate area. ) Duration : 6 Month Contract to Hire-W2 Position Overview The IT Network Engineer IV - Firewall Engineer is a senior-level technical resource responsible for designing, implementing, maintaining, and supporting enterprise network and network security infrastructure. The role has a primary focus on next-generation firewall engineering, including Palo Alto Networks and Fortinet platforms, while maintaining the broader networking expertise needed to support secure, reliable connectivity across local and wide area networks. The engineer works closely with Network Engineering, Information Security, infrastructure teams, end users, and technology vendors to protect organizational resources, resolve complex issues, and deliver network projects. Key Responsibilities Design, implement, maintain, and continuously improve enterprise firewall and network security architectures, with an emphasis on Palo Alto Networks and Fortinet technologies. Develop, review, implement, and maintain firewall policies, security rules, network objects, NAT, VPN configurations, and related controls in accordance with approved security standards and business requirements. Analyze network traffic, firewall logs, alerts, and system behavior to identify security risks, troubleshoot connectivity issues, and support the investigation and response to security incidents. Plan and execute firewall upgrades, configuration changes, platform maintenance, migrations, and lifecycle activities while minimizing operational risk and service disruption. Provide advanced troubleshooting and problem resolution for complex network and security issues involving firewalls, routing, switching, wireless, VPN, and LAN/WAN connectivity. Participate in the planning, design, implementation, testing, and documentation of network architecture and infrastructure solutions. Support network infrastructure that may include routers, switches, wireless systems, firewalls, optical transport, and related hardware and software. Evaluate emerging network and security technologies, conduct technical research, and provide recommendations regarding solutions, standards, and equipment purchases. Collaborate with Information Security, Network Engineering, infrastructure teams, application owners, end users, and vendors to resolve issues and deliver secure, reliable services. Participate in security incident response, root-cause analysis, remediation planning, and the development of corrective actions. Maintain accurate technical documentation, including network and firewall designs, configurations, standards, operational procedures, and change records. Contribute to project planning and execution, including technical coordination, implementation planning, testing, communication, and post-implementation validation. Respond to and resolve service requests and incidents in accordance with established support processes and service expectations. Provide technical guidance and knowledge sharing to team members and support the development of consistent engineering practices. Participate in the Network Team on-call program and provide after-hours support as required. Adhere to Hackensack Meridian Health organizational competencies, policies, and standards of behavior. Required Education, Knowledge, Skills, and Abilities Bachelor's degree in an IT-related discipline, equivalent certification, or a combination of education and relevant professional experience. Ten or more years of experience in an IT-related discipline, with substantial experience supporting enterprise network infrastructure. Demonstrated hands-on experience designing, implementing, administering, and troubleshooting next-generation firewalls, particularly Palo Alto Networks and Fortinet platforms. Strong understanding of firewall policy design and administration, including security rules, NAT, VPNs, traffic analysis, logging, and security best practices. Comprehensive working knowledge of TCP/IP networking, routing, switching, wireless, VPN, and LAN/WAN technologies. Ability to troubleshoot complex, multi-layer network and security issues using a structured, analytical approach. Working knowledge of optical transport systems, including DWDM and ROADM technologies. Experience planning and coordinating the installation, configuration, maintenance, and troubleshooting of network hardware, systems, software, and related infrastructure. Understanding of network security principles, access controls, threat mitigation, and the importance of maintaining compliance with organizational security policies. Strong written and verbal communication skills, including the ability to explain technical issues, risks, and proposed solutions to technical and non-technical audiences. Demonstrated leadership, project coordination, and organizational skills, including the ability to manage competing priorities and work independently. Strong problem-solving, analytical, collaboration, and interpersonal skills. Preferred Qualifications Experience working in a healthcare environment or supporting systems where availability, security, and operational continuity are critical. Experience supporting enterprise-scale network security environments and collaborating across Network Engineering and Information Security teams. Preferred Licenses and Certifications Cisco Certified Network Professional (CCNP). Cisco Certified Internetwork Expert (CCIE). Palo Alto Networks Next-Generation Firewall Engineer (NGFW-Engineer). Palo Alto Networks Network Security Professional (NetSec-Pro). Please share your resume & the below details to process your profile to the Client Full Name: Work Authorization/ Visa Status: Availability: LinkedIn: Current Location: Available to work onsite in NJ: Best Contact Number: Currently Working: Reason for Change of employment: DOB MMDD: SSN Last four digits: Highest Education / University & Year: Skill Matrix: Total years of exp as IT NETWORK ENGINEER IV: Total years of exp with FIREWALL ENGINEER: Total years of exp with Palo Alto:
Job Description Job Title: Senior F5 Engineer Location: 9601 South Meridian Boulevard Englewood Colorado 80112 Duration: 3 months Type: Contract to Hire Pay Rate: $54/hr. on W2 Work Schedule: 9-5pm, Full-Time Mon- Fri Work Location: 100% Onsite Description: As the Senior F5 Engineer , you ensure that application delivery, traffic management, and web application security remain resilient, performant, and secure across a distributed, cloud-integrated enterprise. You solve the challenge of keeping mission-critical services continuously available while modernizing a traditional F5 BIG-IP estate into automated, software-defined, and SaaS-delivered architectures. By bridging hardware-based load balancing with F5 Distributed Cloud and public cloud networking, you ensure that connectivity, security, and performance scale seamlessly as the business grows. As a senior individual contributor, you own deep technical execution and optimization of the F5 environment and mentor junior engineers, operating within the architectural standards and strategy set by Staff and Principal engineers. What Success Looks Like (Objectives): You drive the design, configuration, and optimization of F5 BIG-IP solutions (LTM, DNS/GTM, WAF/ASM) that align with departmental OKRs for scalability and high-availability performance You ensure the reliability and resiliency of application delivery platforms by establishing automated monitoring and alerting frameworks that significantly reduce mean time to resolution (MTTR) You drive technical excellence across the infrastructure team through hands-on mentorship of Level I/II engineers and the codification of F5 best practices, runbooks, and standard operating procedures You harden application security posture by developing and tuning WAF/ASM policies, managing SSL/TLS certificate lifecycles, and validating complex configurations against strict design specifications You lead root cause analysis for P1/P2 incidents and recurring problems, defining permanent remediation and automating repeatable operational workflows You leverage AI-driven insights from platforms like Dynatrace and F5 telemetry to proactively identify performance bottlenecks and automate predictive capacity planning Core Skills and Competencies (What you'll bring): You bring advanced, hands-on expertise administering and optimizing F5 BIG-IP active-active topologies, including LTM, DNS/GTM, and WAF/ASM modules You can develop, test, and troubleshoot custom F5 iRules (Tcl) for complex traffic steering, and tune WAF security policies that safeguard application traffic You have critical experience automating F5 and cloud networking workflows using infrastructure-as-code and scripting tools such as Python, Ansible, and Git You work comfortably across a multi-vendor security and traffic management stack, including F5 Distributed Cloud / SaaS WAF, AWS cloud networking, Zscaler (ZIA/ZPA), and Palo Alto firewall adjacency You troubleshoot effectively using packet captures (tcpdump, Wireshark), SSL handshake analysis, and log aggregation platforms You apply AI literacy to utilize machine learning recommendations for traffic optimization, threat detection, and automated troubleshooting You bring strong collaborative leadership and communication skills to mentor junior engineers, navigate complex projects, and deliver high-satisfaction outcomes for internal business partners Minimum Requirements: Minimum Education: Bachelor's degree in computer science, Computer Engineering, or a related technical field Minimum Experience: 5 years of experience in medium to large enterprise network/infrastructure environments, with demonstrable hands-on depth in F5 BIG-IP administration and optimization Required Technical Skills: F5 BIG-IP (LTM, DNS/GTM, WAF/ASM load balancing, SSL offload, DR/BC) F5 iRules development (Tcl) and WAF/ASM policy tuning F5 Distributed Cloud and SaaS-based WAF/security services Infrastructure automation (Python, Ansible, Git) Supporting technologies: AWS Cloud Networking, Zscaler (ZIA/ZPA), Palo Alto firewall administration Networking fundamentals (TCP/IP, HTTP/HTTPS, SSL/TLS, DNS) Preferred Certifications: F5 Certified Technology Specialist (F5-CTS) or F5 Certified Solution Expert (F5-CSE)
11/08/2026
Full time
Job Description Job Title: Senior F5 Engineer Location: 9601 South Meridian Boulevard Englewood Colorado 80112 Duration: 3 months Type: Contract to Hire Pay Rate: $54/hr. on W2 Work Schedule: 9-5pm, Full-Time Mon- Fri Work Location: 100% Onsite Description: As the Senior F5 Engineer , you ensure that application delivery, traffic management, and web application security remain resilient, performant, and secure across a distributed, cloud-integrated enterprise. You solve the challenge of keeping mission-critical services continuously available while modernizing a traditional F5 BIG-IP estate into automated, software-defined, and SaaS-delivered architectures. By bridging hardware-based load balancing with F5 Distributed Cloud and public cloud networking, you ensure that connectivity, security, and performance scale seamlessly as the business grows. As a senior individual contributor, you own deep technical execution and optimization of the F5 environment and mentor junior engineers, operating within the architectural standards and strategy set by Staff and Principal engineers. What Success Looks Like (Objectives): You drive the design, configuration, and optimization of F5 BIG-IP solutions (LTM, DNS/GTM, WAF/ASM) that align with departmental OKRs for scalability and high-availability performance You ensure the reliability and resiliency of application delivery platforms by establishing automated monitoring and alerting frameworks that significantly reduce mean time to resolution (MTTR) You drive technical excellence across the infrastructure team through hands-on mentorship of Level I/II engineers and the codification of F5 best practices, runbooks, and standard operating procedures You harden application security posture by developing and tuning WAF/ASM policies, managing SSL/TLS certificate lifecycles, and validating complex configurations against strict design specifications You lead root cause analysis for P1/P2 incidents and recurring problems, defining permanent remediation and automating repeatable operational workflows You leverage AI-driven insights from platforms like Dynatrace and F5 telemetry to proactively identify performance bottlenecks and automate predictive capacity planning Core Skills and Competencies (What you'll bring): You bring advanced, hands-on expertise administering and optimizing F5 BIG-IP active-active topologies, including LTM, DNS/GTM, and WAF/ASM modules You can develop, test, and troubleshoot custom F5 iRules (Tcl) for complex traffic steering, and tune WAF security policies that safeguard application traffic You have critical experience automating F5 and cloud networking workflows using infrastructure-as-code and scripting tools such as Python, Ansible, and Git You work comfortably across a multi-vendor security and traffic management stack, including F5 Distributed Cloud / SaaS WAF, AWS cloud networking, Zscaler (ZIA/ZPA), and Palo Alto firewall adjacency You troubleshoot effectively using packet captures (tcpdump, Wireshark), SSL handshake analysis, and log aggregation platforms You apply AI literacy to utilize machine learning recommendations for traffic optimization, threat detection, and automated troubleshooting You bring strong collaborative leadership and communication skills to mentor junior engineers, navigate complex projects, and deliver high-satisfaction outcomes for internal business partners Minimum Requirements: Minimum Education: Bachelor's degree in computer science, Computer Engineering, or a related technical field Minimum Experience: 5 years of experience in medium to large enterprise network/infrastructure environments, with demonstrable hands-on depth in F5 BIG-IP administration and optimization Required Technical Skills: F5 BIG-IP (LTM, DNS/GTM, WAF/ASM load balancing, SSL offload, DR/BC) F5 iRules development (Tcl) and WAF/ASM policy tuning F5 Distributed Cloud and SaaS-based WAF/security services Infrastructure automation (Python, Ansible, Git) Supporting technologies: AWS Cloud Networking, Zscaler (ZIA/ZPA), Palo Alto firewall administration Networking fundamentals (TCP/IP, HTTP/HTTPS, SSL/TLS, DNS) Preferred Certifications: F5 Certified Technology Specialist (F5-CTS) or F5 Certified Solution Expert (F5-CSE)
Job Description We are looking for an experienced, customer-facing Solution Architect who has already done this work at a VAR, MSP, or IT services firm - and wants to do it somewhere with fewer constraints and more impact. This is a senior individual contributor role with the authority to lead design sessions, scope full projects, build managed services proposals, and shape how our cybersecurity and infrastructure practice evolves. You will work alongside our sales team as their primary technical partner on strategic accounts, driving outcomes that matter: securing environments, modernizing networks, migrating to cloud, and building recurring managed services relationships. Your success is measured not just by technical quality but by revenue contribution, client retention, and the trust you build as an advisor. Key Responsibilities Technical Leadership & Pre-Sales Strategy Serve as the senior technical lead on strategic pre-sales engagements, orchestrating discovery, solution design, and presentation across all technology domains. Lead customer-facing design workshops and architecture sessions with both technical (network/security engineers, architects) and executive (CIO, CISO, VP IT) stakeholders. Own the technical win strategy for complex, multi-tower opportunities involving networking, cybersecurity, SASE, Zero Trust, cloud, and managed services. Develop and deliver compelling executive briefings, whiteboard sessions, and proof-of-concept demonstrations that translate technology into business outcomes. Solution Design & Documentation Architect comprehensive solutions across cybersecurity (Next-Gen Firewall, SASE, ZTA, endpoint, SIEM/SOC), enterprise networking, SD-WAN, cloud connectivity, and compute infrastructure. Produce high-quality network architecture diagrams, logical and physical designs, and solution overview documents suitable for C-level and technical audiences. Build detailed Bills of Materials with full line-item accuracy, licensing structures, professional services hours, and margin integrity. Author Statements of Work (SOWs) and project scopes that set clear expectations and protect our delivery team. Managed Services & Recurring Revenue Position and sell our managed services portfolio - including managed SASE, managed firewall, MDR/SOC services, NOC monitoring, and cloud management - as the preferred operational model for clients. Build outcome-based business cases for recurring and managed services engagements, demonstrating ROI, risk reduction, and operational efficiency against DIY alternatives. Structure multi-year managed services agreements with appropriate SLAs, pricing models, and renewal incentives. Partner with the services delivery team to design managed service architectures that are operationally viable and profitable. Vendor & Partner Engagement Maintain deep working relationships with our key vendor partners including Cisco, Palo Alto Networks, Fortinet, Zscaler, CrowdStrike, Microsoft, AWS, Aruba/HPE, and others. Leverage vendor resources - SEs, deal desk, BDMs, MDF - to support and accelerate strategic opportunities. Stay current on the SASE and Zero Trust product landscapes including Zscaler, Prisma Access, Fortinet SASE, Cato Networks, and Cisco Umbrella/SD-WAN. Represent us at vendor partner summits, technology briefings, and customer-facing events. Internal Collaboration & Growth Mentor junior and associate SAs, sharing design patterns, BOM best practices, and client engagement techniques. Contribute to the solution playbooks, standard architectures, and reference designs. Identify gaps and emerging opportunities in our portfolio and recommend new vendor partnerships or service offerings. Required Qualifications 7+ years of overall IT experience, including 3+ years in a customer-facing pre-sales Solution Architect, Consulting Architect, or Senior Systems Engineer role at a VAR, MSP, or IT services firm. Demonstrated experience leading technical discovery, architecture design, and pre-sales engagements for complex networking and cybersecurity solutions. Deep technical expertise in cybersecurity - including Next-Generation Firewall (NGFW), Secure Access Service Edge (SASE), Zero Trust Network Access (ZTNA), endpoint detection and response (EDR/XDR), SIEM, and identity-based security. Strong working knowledge of enterprise networking: routing and switching, SD-WAN, LAN/WAN design, wireless (802.11ax/Wi-Fi 6), and network segmentation. Experience architecting hybrid and multi-cloud solutions (AWS, Azure, GCP) including cloud networking, security controls, and governance. Proven ability to build and present outcome-based business cases for managed services, recurring revenue programs, and multi-year technology roadmaps. Experience authoring technical documentation including solution designs, BOMs, SOWs, and RFP responses at a professional quality standard. Polished executive communication skills - you are equally comfortable presenting a Zero Trust architecture to a CISO and a cost justification to a CFO. Preferred Qualifications Experience with SASE platforms: Zscaler (ZIA/ZPA), Palo Alto Prisma Access, Fortinet SASE, Cato Networks, Cisco Umbrella, or Cloudflare One. Hands-on familiarity with Zero Trust frameworks (NIST SP 800-207, Gartner ZTA) and their practical implementation in enterprise environments. Experience positioning and selling managed security services (managed SOC, MDR, managed SASE, managed firewall). Background in or exposure to compliance frameworks: NIST CSF, CIS Controls, SOC 2, HIPAA, PCI-DSS, or CMMC. Prior quota-bearing or KPI-tied pre-sales experience at a firm competing with ePlus, Presidio, WWT, Ahead, NTT, or similar. Certifications Required (or obtainable within 6 months with support): Cisco CCNP Security, CCNP Enterprise, or equivalent professional-level certification Palo Alto PCNSE, PCSAE, or Prisma Certified Fortinet NSE 6/7 or Zscaler ZCCA-IA / ZCCP-IA Highly Desired: CISSP (Certified Information Systems Security Professional) AWS Solutions Architect - Professional or Azure Solutions Expert Cisco CCIE Security or Enterprise (or in-progress) Zscaler Zero Trust Certified Architect (ZTCA)
11/08/2026
Full time
Job Description We are looking for an experienced, customer-facing Solution Architect who has already done this work at a VAR, MSP, or IT services firm - and wants to do it somewhere with fewer constraints and more impact. This is a senior individual contributor role with the authority to lead design sessions, scope full projects, build managed services proposals, and shape how our cybersecurity and infrastructure practice evolves. You will work alongside our sales team as their primary technical partner on strategic accounts, driving outcomes that matter: securing environments, modernizing networks, migrating to cloud, and building recurring managed services relationships. Your success is measured not just by technical quality but by revenue contribution, client retention, and the trust you build as an advisor. Key Responsibilities Technical Leadership & Pre-Sales Strategy Serve as the senior technical lead on strategic pre-sales engagements, orchestrating discovery, solution design, and presentation across all technology domains. Lead customer-facing design workshops and architecture sessions with both technical (network/security engineers, architects) and executive (CIO, CISO, VP IT) stakeholders. Own the technical win strategy for complex, multi-tower opportunities involving networking, cybersecurity, SASE, Zero Trust, cloud, and managed services. Develop and deliver compelling executive briefings, whiteboard sessions, and proof-of-concept demonstrations that translate technology into business outcomes. Solution Design & Documentation Architect comprehensive solutions across cybersecurity (Next-Gen Firewall, SASE, ZTA, endpoint, SIEM/SOC), enterprise networking, SD-WAN, cloud connectivity, and compute infrastructure. Produce high-quality network architecture diagrams, logical and physical designs, and solution overview documents suitable for C-level and technical audiences. Build detailed Bills of Materials with full line-item accuracy, licensing structures, professional services hours, and margin integrity. Author Statements of Work (SOWs) and project scopes that set clear expectations and protect our delivery team. Managed Services & Recurring Revenue Position and sell our managed services portfolio - including managed SASE, managed firewall, MDR/SOC services, NOC monitoring, and cloud management - as the preferred operational model for clients. Build outcome-based business cases for recurring and managed services engagements, demonstrating ROI, risk reduction, and operational efficiency against DIY alternatives. Structure multi-year managed services agreements with appropriate SLAs, pricing models, and renewal incentives. Partner with the services delivery team to design managed service architectures that are operationally viable and profitable. Vendor & Partner Engagement Maintain deep working relationships with our key vendor partners including Cisco, Palo Alto Networks, Fortinet, Zscaler, CrowdStrike, Microsoft, AWS, Aruba/HPE, and others. Leverage vendor resources - SEs, deal desk, BDMs, MDF - to support and accelerate strategic opportunities. Stay current on the SASE and Zero Trust product landscapes including Zscaler, Prisma Access, Fortinet SASE, Cato Networks, and Cisco Umbrella/SD-WAN. Represent us at vendor partner summits, technology briefings, and customer-facing events. Internal Collaboration & Growth Mentor junior and associate SAs, sharing design patterns, BOM best practices, and client engagement techniques. Contribute to the solution playbooks, standard architectures, and reference designs. Identify gaps and emerging opportunities in our portfolio and recommend new vendor partnerships or service offerings. Required Qualifications 7+ years of overall IT experience, including 3+ years in a customer-facing pre-sales Solution Architect, Consulting Architect, or Senior Systems Engineer role at a VAR, MSP, or IT services firm. Demonstrated experience leading technical discovery, architecture design, and pre-sales engagements for complex networking and cybersecurity solutions. Deep technical expertise in cybersecurity - including Next-Generation Firewall (NGFW), Secure Access Service Edge (SASE), Zero Trust Network Access (ZTNA), endpoint detection and response (EDR/XDR), SIEM, and identity-based security. Strong working knowledge of enterprise networking: routing and switching, SD-WAN, LAN/WAN design, wireless (802.11ax/Wi-Fi 6), and network segmentation. Experience architecting hybrid and multi-cloud solutions (AWS, Azure, GCP) including cloud networking, security controls, and governance. Proven ability to build and present outcome-based business cases for managed services, recurring revenue programs, and multi-year technology roadmaps. Experience authoring technical documentation including solution designs, BOMs, SOWs, and RFP responses at a professional quality standard. Polished executive communication skills - you are equally comfortable presenting a Zero Trust architecture to a CISO and a cost justification to a CFO. Preferred Qualifications Experience with SASE platforms: Zscaler (ZIA/ZPA), Palo Alto Prisma Access, Fortinet SASE, Cato Networks, Cisco Umbrella, or Cloudflare One. Hands-on familiarity with Zero Trust frameworks (NIST SP 800-207, Gartner ZTA) and their practical implementation in enterprise environments. Experience positioning and selling managed security services (managed SOC, MDR, managed SASE, managed firewall). Background in or exposure to compliance frameworks: NIST CSF, CIS Controls, SOC 2, HIPAA, PCI-DSS, or CMMC. Prior quota-bearing or KPI-tied pre-sales experience at a firm competing with ePlus, Presidio, WWT, Ahead, NTT, or similar. Certifications Required (or obtainable within 6 months with support): Cisco CCNP Security, CCNP Enterprise, or equivalent professional-level certification Palo Alto PCNSE, PCSAE, or Prisma Certified Fortinet NSE 6/7 or Zscaler ZCCA-IA / ZCCP-IA Highly Desired: CISSP (Certified Information Systems Security Professional) AWS Solutions Architect - Professional or Azure Solutions Expert Cisco CCIE Security or Enterprise (or in-progress) Zscaler Zero Trust Certified Architect (ZTCA)
Job Description Job Description Job Title: Senior Network Security Engineer Location: Washington, DC (Onsite) Employment Type: W2 Contract Duration: 11 months About the Opportunity: ZipStaff is hiring a Senior Network Security Engineer for our client, a major U.S. passenger rail transportation organization based in Washington, DC. As a technical leader, you will design, implement and optimize perimeter and infrastructure security controls across on-premises networks and AWS/Azure, with a heavy focus on Palo Alto Networks firewalls. What You'll Do: Lead design, configuration, rule maintenance and optimization of enterprise Palo Alto firewalls and perimeter platforms. Maintain WAF, IDS/IPS, VPN and NAC technologies. Partner with cloud, network and application teams on secure AWS and Azure architectures. Respond to network security incidents, monitor via SIEM, perform threat hunting and root-cause investigations. Conduct security reviews and risk assessments aligned with NIST, CIS, PCI-DSS, HIPAA and ISO. Automate security tasks with Python, PowerShell or Bash. Maintain runbooks, network diagrams and SOPs. Mentor junior engineers and support maintenance windows, after-hours work and emergency response. Required Qualifications: Bachelor's in Cybersecurity, Computer Science, IT, Engineering or related field. 11+ years of cybersecurity engineering focused on enterprise network and firewall security. Advanced hands-on Palo Alto Networks firewall administration. Deep knowledge of TCP/IP, routing, switching, VPNs, WAN/LAN and perimeter defense. Experience with IDS/IPS, SIEM, EDR, DLP, CASB and WAF. Securing AWS and Azure cloud infrastructure. Scripting in Python, PowerShell or Bash. Understanding of NIST, CIS Controls, PCI-DSS, HIPAA and ISO 27001. Strong problem-solving, communication and stakeholder skills. Nice to Have: Master's degree in Cybersecurity or IT. PCNSE, CISSP, CCNP Security, GIAC, CEH or Security+. SOC experience. Zero Trust architectures and cloud-native security tools. Benefits: Health Insurance. Dental Insurance. Vision Insurance. 401(k) + 401(k) matching. Paid time off. Referral Program. About ZipStaff: ZipStaff connects skilled technology professionals with leading organizations across the United States, matching top talent with impactful contract and full-time opportunities. To apply, submit your resume through this posting. Qualified candidates will be contacted by a ZipStaff recruiter.
11/08/2026
Full time
Job Description Job Description Job Title: Senior Network Security Engineer Location: Washington, DC (Onsite) Employment Type: W2 Contract Duration: 11 months About the Opportunity: ZipStaff is hiring a Senior Network Security Engineer for our client, a major U.S. passenger rail transportation organization based in Washington, DC. As a technical leader, you will design, implement and optimize perimeter and infrastructure security controls across on-premises networks and AWS/Azure, with a heavy focus on Palo Alto Networks firewalls. What You'll Do: Lead design, configuration, rule maintenance and optimization of enterprise Palo Alto firewalls and perimeter platforms. Maintain WAF, IDS/IPS, VPN and NAC technologies. Partner with cloud, network and application teams on secure AWS and Azure architectures. Respond to network security incidents, monitor via SIEM, perform threat hunting and root-cause investigations. Conduct security reviews and risk assessments aligned with NIST, CIS, PCI-DSS, HIPAA and ISO. Automate security tasks with Python, PowerShell or Bash. Maintain runbooks, network diagrams and SOPs. Mentor junior engineers and support maintenance windows, after-hours work and emergency response. Required Qualifications: Bachelor's in Cybersecurity, Computer Science, IT, Engineering or related field. 11+ years of cybersecurity engineering focused on enterprise network and firewall security. Advanced hands-on Palo Alto Networks firewall administration. Deep knowledge of TCP/IP, routing, switching, VPNs, WAN/LAN and perimeter defense. Experience with IDS/IPS, SIEM, EDR, DLP, CASB and WAF. Securing AWS and Azure cloud infrastructure. Scripting in Python, PowerShell or Bash. Understanding of NIST, CIS Controls, PCI-DSS, HIPAA and ISO 27001. Strong problem-solving, communication and stakeholder skills. Nice to Have: Master's degree in Cybersecurity or IT. PCNSE, CISSP, CCNP Security, GIAC, CEH or Security+. SOC experience. Zero Trust architectures and cloud-native security tools. Benefits: Health Insurance. Dental Insurance. Vision Insurance. 401(k) + 401(k) matching. Paid time off. Referral Program. About ZipStaff: ZipStaff connects skilled technology professionals with leading organizations across the United States, matching top talent with impactful contract and full-time opportunities. To apply, submit your resume through this posting. Qualified candidates will be contacted by a ZipStaff recruiter.
Job Description Job Description Description We are seeking a Network Security Engineer to provide technical support in design and deployment of Network Transformation and Network Operations. In this role, you will assess and deploy the relevant technology solutions according to customers' business, security policy and application requirements and work directly with the Senior Network Engineer. Key Responsibilities Participate in daily network, firewall, and operational support. Ability to troubleshoot network issues and failures and follow best practices and troubleshooting methodology to quickly assess current situations, find solutions, and implement changes to correct and/or update network topologies to ensure stability and functionality. Provide technical analysis of operational issues and remediations during troubleshooting efforts to ensure documentations and procedures are followed and updated during active events. This includes the ability to report to management. Stay up to date on emerging technologies and products, including attaining certifications and participation in industry events as appropriate. Work with various stake holders to lead problem solving, evolve system roadmap and take critical decisions. Provide clear communication with regular updates/reports to the management team. Skills, Knowledge & Expertise Minimum of 5 years' experience in deployment and configuration and architectural design of networking technologies specific to routing, switching and general network security best practices, in which 3 years must be in customer-facing positions. Minimum of CCNA or comparable level of knowledge. Ability to work on call rotation as needed. B.S./B.A./M.S. degree or equivalent technical training. Fortinet NSE 6 and NSE 7 Knowledge of Azure and AWS Experience with Aruba ClearPass, Aruba switches and wireless Experience with Cisco Firepower Services and Palo Alto security services. Understanding of encryption and SSL/TLS technologies and best practices. Experience working for or with local government, service providers, and/or enterprises customers. Experience in large Data Center or Enterprise/campus designs, architecture, deployment and configuration with physical and virtual appliances. Familiarity with applications driving modern infrastructure design in private and public cloud. Experience in networking technologies such as STP, Nexus vPC, IPSEC / SSLVPN, Routing: VRF, MPLS, OSPF, BGP and Multi-Homed environments. Datacenter Network services including Security, Load Balancing, DNS, etc. at the virtual and physical level. Experience with Cisco, Juniper, Fortinet, HP, Aruba and CATO products (Firewall, Routing / switching, SASE, wireless and security) Wireless networking technologies including access-control platforms such as Cisco ISE or Aruba Clear Pass Policy Manager IPS/IDS, as well as other NGFW (Next Gen Firewall) features and capabilities. Ability to write incident and problem record documentation to support daily efforts. Strong analytical thinking and decision-making skills & highly organized. Strong ability to influence others and build consensus via excellent verbal and written communication skills. We consider all qualified applicants for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or protected veteran status. Reasonable accommodations will be made to enable employees with disabilities to perform the essential functions of the job. This job description is intended to describe the general nature of work being performed by employees in this job. It is not intended to be a complete list of all responsibilities, duties, and skills required. Agencies/3 Parties may not solicit to any employee of Blue Mantis. Any candidate information received from any Agency/3 Party will be considered a gift and property of Blue Mantis, unless the Agency/3 Party is an Authorized Vendor of Blue Mantis with an up-to-date Blue Mantis Contract in hand signed by Blue Mantis Talent Acquisition. No payment will be made to any Agency/3 Party who is not an Authorized Vendor, nor has specific approval in writing from Blue Mantis Talent Acquisition to engage in recruitment efforts for Blue Mantis. At this time, we have no interest in onboarding any new staffing partners.
11/08/2026
Full time
Job Description Job Description Description We are seeking a Network Security Engineer to provide technical support in design and deployment of Network Transformation and Network Operations. In this role, you will assess and deploy the relevant technology solutions according to customers' business, security policy and application requirements and work directly with the Senior Network Engineer. Key Responsibilities Participate in daily network, firewall, and operational support. Ability to troubleshoot network issues and failures and follow best practices and troubleshooting methodology to quickly assess current situations, find solutions, and implement changes to correct and/or update network topologies to ensure stability and functionality. Provide technical analysis of operational issues and remediations during troubleshooting efforts to ensure documentations and procedures are followed and updated during active events. This includes the ability to report to management. Stay up to date on emerging technologies and products, including attaining certifications and participation in industry events as appropriate. Work with various stake holders to lead problem solving, evolve system roadmap and take critical decisions. Provide clear communication with regular updates/reports to the management team. Skills, Knowledge & Expertise Minimum of 5 years' experience in deployment and configuration and architectural design of networking technologies specific to routing, switching and general network security best practices, in which 3 years must be in customer-facing positions. Minimum of CCNA or comparable level of knowledge. Ability to work on call rotation as needed. B.S./B.A./M.S. degree or equivalent technical training. Fortinet NSE 6 and NSE 7 Knowledge of Azure and AWS Experience with Aruba ClearPass, Aruba switches and wireless Experience with Cisco Firepower Services and Palo Alto security services. Understanding of encryption and SSL/TLS technologies and best practices. Experience working for or with local government, service providers, and/or enterprises customers. Experience in large Data Center or Enterprise/campus designs, architecture, deployment and configuration with physical and virtual appliances. Familiarity with applications driving modern infrastructure design in private and public cloud. Experience in networking technologies such as STP, Nexus vPC, IPSEC / SSLVPN, Routing: VRF, MPLS, OSPF, BGP and Multi-Homed environments. Datacenter Network services including Security, Load Balancing, DNS, etc. at the virtual and physical level. Experience with Cisco, Juniper, Fortinet, HP, Aruba and CATO products (Firewall, Routing / switching, SASE, wireless and security) Wireless networking technologies including access-control platforms such as Cisco ISE or Aruba Clear Pass Policy Manager IPS/IDS, as well as other NGFW (Next Gen Firewall) features and capabilities. Ability to write incident and problem record documentation to support daily efforts. Strong analytical thinking and decision-making skills & highly organized. Strong ability to influence others and build consensus via excellent verbal and written communication skills. We consider all qualified applicants for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or protected veteran status. Reasonable accommodations will be made to enable employees with disabilities to perform the essential functions of the job. This job description is intended to describe the general nature of work being performed by employees in this job. It is not intended to be a complete list of all responsibilities, duties, and skills required. Agencies/3 Parties may not solicit to any employee of Blue Mantis. Any candidate information received from any Agency/3 Party will be considered a gift and property of Blue Mantis, unless the Agency/3 Party is an Authorized Vendor of Blue Mantis with an up-to-date Blue Mantis Contract in hand signed by Blue Mantis Talent Acquisition. No payment will be made to any Agency/3 Party who is not an Authorized Vendor, nor has specific approval in writing from Blue Mantis Talent Acquisition to engage in recruitment efforts for Blue Mantis. At this time, we have no interest in onboarding any new staffing partners.
Job Description Job Description Job Title: Palo Alto Firewall Engineer Location: Springfield, VA Type: Contract To Hire Compensation: $80/hr. W2 Benefits available Conversion Salary: $150,000 annually plus benefits Work Model: Onsite Security Clearance: Active TS/SCI clearance and the ability to successfully pass and maintain a U.S. Government polygraph Responsibilities Lead the design, requirements analysis, testing, integration, and implementation of secure network architectures centered on the Palo Alto Networks ecosystem. Serve as the lead technical authority for administering, configuring, and troubleshooting Palo Alto Networks Next-Generation Firewalls (NGFWs) across a hybrid enterprise environment. Engineer and implement solutions for customer Change Requests (CRQs); assess impacts on enterprise transport and security activities and provide technically sound recommendations. Serve as the technical representative for assigned projects and coordinate issues with the appropriate owners, organizations, contract leadership, and customer leadership. Manage the full lifecycle of Palo Alto hardware and software, including complex hardware refreshes, PAN-OS upgrades, legacy-platform sustainment, physical troubleshooting, and line-card replacements. Develop, oversee, and maintain configuration-management processes, network architecture diagrams, technical documentation, integration and test plans, and Standard Operating Procedures (SOPs) for Palo Alto security platforms. Use Panorama for centralized policy management, including templates, device groups, inheritance, and consistent configuration across a diverse fleet of physical and virtual firewalls. Configure and maintain advanced security capabilities and profiles, including App-ID, User-ID, Content-ID, SSL Decryption, WildFire, NAT, IPSec VPNs, and threat prevention. Oversee security-incident reporting, documentation, investigation, and corrective-action development. Act as a liaison to contract/customer management and the government Designated Approving Authority (DAA) regarding network-security status, policies, procedures, and risks. Evaluate and report on new and emerging network-security and communications technologies to improve network capacity, performance, reliability, standardization, and security. Provide mentorship and technical oversight to junior engineers and serve as an escalation point for complex troubleshooting. Follow all customer network-security processes and procedures, maintain compliance with Government and QA standards, and ensure service-performance indicators are met or exceeded. Requirements Security Clearance: Active TS/SCI clearance and the ability to successfully pass and maintain a U.S. Government polygraph. A minimum of 7+ years of hands-on experience administering, configuring, and troubleshooting Palo Alto Networks NGFWs in large-scale enterprise/global environments. Active Palo Alto Networks Certified Network Security Engineer (PCNSE) certification. DoD 8140.01 and DoD 8570.01-M IAT Level II compliance (for example, Security+ CE). Ability to obtain and maintain a CSSP Infrastructure Support certification within 120 days of the start date. Deep practical knowledge of legacy Gen 2/Gen 3 Palo Alto hardware, including PA-3000 and PA-5000 series platforms, legacy CLI, hardware troubleshooting, and line-card replacements. Experience deploying and managing modern PAN-OS architectures, including Prisma Access (SASE), Prisma SD-WAN, and VM-Series virtual firewalls in cloud environments such as AWS, Azure, GCP, or private-cloud. Proven expertise with Panorama for centralized policy management, template/device-group inheritance, and configuration deployment across a hybrid firewall fleet. Advanced understanding of BGP, OSPF, IPSec VPNs, NAT, TLS/SSL, mutual TLS (mTLS), HTTP, SAML, OAuth, OCSP revocation, DoD PKI, Kerberos, LDAP, and Active Directory. Experience with F5 technologies, including APM, AFM, and SSL Orchestrator (SSLO), and troubleshooting TLS/SSL handshake/connection issues. Strong network design, engineering, implementation, and troubleshooting skills, including ROM equipment lists and cost estimates. Knowledge of DISA and Intelligence Community security standards and requirements. Excellent interpersonal skills and technical judgment with the ability to work independently and support weekend/evening work if needed. Bachelor's degree in IT, Cybersecurity, Computer Science, or a related field, with additional relevant experience considered in lieu of a degree. Desired Qualifications Active Palo Alto Networks Certified Network Security Consultant (PCNSC) or Prisma Certified SASE Professional (PCSAE). F5 Networks Certified Technology Specialist (CTS). Cisco CCNP, CCVP, CCNA, CCDP, or equivalent. ITIL v3 Foundations and/or ISC2 CISSP Certification. Proficiency in Python and automation tools such as Ansible, Terraform, or Palo Alto XML/REST APIs. Hands-on experience with Cortex XDR or Cortex XSOAR. Experience with Palo Alto Networks Expedition for migration and rule consolidation. Knowledge of Zero Trust Network Access (ZTNA) architectures and additional security platforms (e.g., Juniper SRX, Cisco FTD/ASA). Master's degree in related fields is a plus. System One, and its subsidiaries including Joulé and Mountain Ltd., are leaders in delivering outsourced services and workforce solutions across North America. We help clients get work done more efficiently and economically, without compromising quality. System One not only serves as a valued partner for our clients, but we offer eligible employees health and welfare benefits coverage options including medical, dental, vision, spending accounts, life insurance, voluntary plans, as well as participation in a 401(k) plan. System One is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, age, national origin, disability, family care or medical leave status, genetic information, veteran status, marital status, or any other characteristic protected by applicable federal, state, or local law. Ref: Baltimore
11/08/2026
Full time
Job Description Job Description Job Title: Palo Alto Firewall Engineer Location: Springfield, VA Type: Contract To Hire Compensation: $80/hr. W2 Benefits available Conversion Salary: $150,000 annually plus benefits Work Model: Onsite Security Clearance: Active TS/SCI clearance and the ability to successfully pass and maintain a U.S. Government polygraph Responsibilities Lead the design, requirements analysis, testing, integration, and implementation of secure network architectures centered on the Palo Alto Networks ecosystem. Serve as the lead technical authority for administering, configuring, and troubleshooting Palo Alto Networks Next-Generation Firewalls (NGFWs) across a hybrid enterprise environment. Engineer and implement solutions for customer Change Requests (CRQs); assess impacts on enterprise transport and security activities and provide technically sound recommendations. Serve as the technical representative for assigned projects and coordinate issues with the appropriate owners, organizations, contract leadership, and customer leadership. Manage the full lifecycle of Palo Alto hardware and software, including complex hardware refreshes, PAN-OS upgrades, legacy-platform sustainment, physical troubleshooting, and line-card replacements. Develop, oversee, and maintain configuration-management processes, network architecture diagrams, technical documentation, integration and test plans, and Standard Operating Procedures (SOPs) for Palo Alto security platforms. Use Panorama for centralized policy management, including templates, device groups, inheritance, and consistent configuration across a diverse fleet of physical and virtual firewalls. Configure and maintain advanced security capabilities and profiles, including App-ID, User-ID, Content-ID, SSL Decryption, WildFire, NAT, IPSec VPNs, and threat prevention. Oversee security-incident reporting, documentation, investigation, and corrective-action development. Act as a liaison to contract/customer management and the government Designated Approving Authority (DAA) regarding network-security status, policies, procedures, and risks. Evaluate and report on new and emerging network-security and communications technologies to improve network capacity, performance, reliability, standardization, and security. Provide mentorship and technical oversight to junior engineers and serve as an escalation point for complex troubleshooting. Follow all customer network-security processes and procedures, maintain compliance with Government and QA standards, and ensure service-performance indicators are met or exceeded. Requirements Security Clearance: Active TS/SCI clearance and the ability to successfully pass and maintain a U.S. Government polygraph. A minimum of 7+ years of hands-on experience administering, configuring, and troubleshooting Palo Alto Networks NGFWs in large-scale enterprise/global environments. Active Palo Alto Networks Certified Network Security Engineer (PCNSE) certification. DoD 8140.01 and DoD 8570.01-M IAT Level II compliance (for example, Security+ CE). Ability to obtain and maintain a CSSP Infrastructure Support certification within 120 days of the start date. Deep practical knowledge of legacy Gen 2/Gen 3 Palo Alto hardware, including PA-3000 and PA-5000 series platforms, legacy CLI, hardware troubleshooting, and line-card replacements. Experience deploying and managing modern PAN-OS architectures, including Prisma Access (SASE), Prisma SD-WAN, and VM-Series virtual firewalls in cloud environments such as AWS, Azure, GCP, or private-cloud. Proven expertise with Panorama for centralized policy management, template/device-group inheritance, and configuration deployment across a hybrid firewall fleet. Advanced understanding of BGP, OSPF, IPSec VPNs, NAT, TLS/SSL, mutual TLS (mTLS), HTTP, SAML, OAuth, OCSP revocation, DoD PKI, Kerberos, LDAP, and Active Directory. Experience with F5 technologies, including APM, AFM, and SSL Orchestrator (SSLO), and troubleshooting TLS/SSL handshake/connection issues. Strong network design, engineering, implementation, and troubleshooting skills, including ROM equipment lists and cost estimates. Knowledge of DISA and Intelligence Community security standards and requirements. Excellent interpersonal skills and technical judgment with the ability to work independently and support weekend/evening work if needed. Bachelor's degree in IT, Cybersecurity, Computer Science, or a related field, with additional relevant experience considered in lieu of a degree. Desired Qualifications Active Palo Alto Networks Certified Network Security Consultant (PCNSC) or Prisma Certified SASE Professional (PCSAE). F5 Networks Certified Technology Specialist (CTS). Cisco CCNP, CCVP, CCNA, CCDP, or equivalent. ITIL v3 Foundations and/or ISC2 CISSP Certification. Proficiency in Python and automation tools such as Ansible, Terraform, or Palo Alto XML/REST APIs. Hands-on experience with Cortex XDR or Cortex XSOAR. Experience with Palo Alto Networks Expedition for migration and rule consolidation. Knowledge of Zero Trust Network Access (ZTNA) architectures and additional security platforms (e.g., Juniper SRX, Cisco FTD/ASA). Master's degree in related fields is a plus. System One, and its subsidiaries including Joulé and Mountain Ltd., are leaders in delivering outsourced services and workforce solutions across North America. We help clients get work done more efficiently and economically, without compromising quality. System One not only serves as a valued partner for our clients, but we offer eligible employees health and welfare benefits coverage options including medical, dental, vision, spending accounts, life insurance, voluntary plans, as well as participation in a 401(k) plan. System One is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, age, national origin, disability, family care or medical leave status, genetic information, veteran status, marital status, or any other characteristic protected by applicable federal, state, or local law. Ref: Baltimore
Job Description Network Engineer The Opportunity: We are seeking a dedicated Network Engineer to support the design, deployment, and maintenance of enterprise and tactical networks for the Department of Defense ( DoD ) . This role is an opportunity to apply your technical expertise in wireless, SD-WAN, and cybersecurity to build secure, resilient infrastructure that directly enhances the quality of life for military personnel and their families. You'll work on meaningful projects that support mission readiness and day-to-day connectivity across DoD environments. What You'll Work On: Serve as a core member of the Operations and Maintenance ( O & M ) team, responsible for the day-to-day operation and sustainment of enterprise and tactical network systems. Participate in a 24x7x365 shift schedule, including night shifts, weekends, and holidays, to support mission-critical operations. Configure and troubleshoot Aruba wireless LANs, controllers, access points, and ClearPass and SD-WAN solutions. Conduct performance tuning and network health assessments. Conduct and document cybersecurity vulnerability scans using approved tools in compliance with DoD requirements. Maintain accurate network documentation and diagrams. Lead troubleshooting efforts for escalated network issues. Collaborate across IT teams to ensure secure, scalable, and compliant network operations. Join us. The world can't wait. You Have: 3+ years of experience in enterprise networking roles 3+ years of experience in network engineering and troubleshooting Experience with IP networking solutions Knowledge of SD-WAN technologies and routing protocols such as RIP, OSPF, EIGRP, or BGP Knowledge of TCP / IP and data network protocols, and protocol analysis tools such as tcpdump or Wireshark Knowledge of DoD network deployments, STIGs, and IA compliance standards Ability to create and maintain technical documentation and diagrams Ability to work on a rotational shift schedule to provide 24x7x365 coverage, including night shifts, weekends, and holidays Secret clearance HS diploma or GED Nice If You Have: Experience with firewalls such as Palo Alto or Fortinet, NAC, and network security policies Experience with access control appliances such as Aruba ClearPass Knowledge of scripting or automation tools such as Python or Ansible Knowledge of cloud networking such as AWS, Azure, or GCP Bachelor's degree in a CS, IT, or Engineering field DoD 8570 Certification such as Security+ Certification Aruba Certified Mobility Asso cia te ( ACMA ) , Cisco Certified Network Asso cia te ( CCNA ) , or CompTIA Network+ Certification Clearance: Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information ; Secret clearance is required. Compensation At Booz Allen, we celebrate your contributions, provide you with opportunities and choices, and support your total well-being. Our offerings include health, life, disability, financial, and retirement benefits, as well as paid leave, professional development, tuition assistance, work-life programs, and dependent care. Our recognition awards program acknowledges employees for exceptional performance and superior demonstration of our values. Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible to participate in Booz Allen's benefit programs. Individuals that do not meet the threshold are only eligible for select offerings, not inclusive of health benefits. We encourage you to learn more about our total benefits by visiting the Resource page on our Careers site and reviewing Our Employee Benefits page. Salary at Booz Allen is determined by various factors, including but not limited to location, the individual's particular combination of education, knowledge, skills, competencies, and experience, as well as contract-specific affordability and organizational requirements. The projected compensation range for this position is $61,900.00 to $141,000.00 (annualized USD). The estimate displayed represents the typical salary range for this position and is just one component of Booz Allen's total compensation package for employees. This posting will close within 90 days from the Posting Date. Identity Statement As part of the hiring process, we will ask you to complete an identity verification process that leverages advanced biometrics and artificial intelligence to ensure authenticity and protect against identity fraud. You are expected to be on camera during interviews and assessments. We reserve the right to take your picture to verify your identity and prevent fraud. Candidate AI Usage Policy AI is a part of our daily work at Booz Allen, and we are committed to the responsible and ethical use of AI tools. However, we want to ensure a fair candidate process based on your own skills and knowledge. As part of this commitment, the use of artificial intelligence (AI) or other tools to assist with responses during interviews (whether in-person or virtual) is prohibited unless permission is explicitly provided. Work Model Our people-first culture prioritizes the benefits of collaboration, whether it occurs in person or virtually. To support engagement and effective communication, employees working virtually are generally expected to have their cameras on during meetings. Remote: If this position is listed as remote, there may still be occasions when you are required to work in person at a Booz Allen or customer facility. Hybrid: If this position is listed as hybrid, you will be expected to work from a Booz Allen facility frequently, in alignment with leadership expectations and the needs of the role. You may also be required to work from or visit a customer facility. Onsite: If this position is listed as onsite, work will primarily be performed at a Booz Allen office or customer facility, where employees will collaborate directly with colleagues and customers as required by the role. Commitment to Non-Discrimination All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, local, or international law.
11/07/2026
Full time
Job Description Network Engineer The Opportunity: We are seeking a dedicated Network Engineer to support the design, deployment, and maintenance of enterprise and tactical networks for the Department of Defense ( DoD ) . This role is an opportunity to apply your technical expertise in wireless, SD-WAN, and cybersecurity to build secure, resilient infrastructure that directly enhances the quality of life for military personnel and their families. You'll work on meaningful projects that support mission readiness and day-to-day connectivity across DoD environments. What You'll Work On: Serve as a core member of the Operations and Maintenance ( O & M ) team, responsible for the day-to-day operation and sustainment of enterprise and tactical network systems. Participate in a 24x7x365 shift schedule, including night shifts, weekends, and holidays, to support mission-critical operations. Configure and troubleshoot Aruba wireless LANs, controllers, access points, and ClearPass and SD-WAN solutions. Conduct performance tuning and network health assessments. Conduct and document cybersecurity vulnerability scans using approved tools in compliance with DoD requirements. Maintain accurate network documentation and diagrams. Lead troubleshooting efforts for escalated network issues. Collaborate across IT teams to ensure secure, scalable, and compliant network operations. Join us. The world can't wait. You Have: 3+ years of experience in enterprise networking roles 3+ years of experience in network engineering and troubleshooting Experience with IP networking solutions Knowledge of SD-WAN technologies and routing protocols such as RIP, OSPF, EIGRP, or BGP Knowledge of TCP / IP and data network protocols, and protocol analysis tools such as tcpdump or Wireshark Knowledge of DoD network deployments, STIGs, and IA compliance standards Ability to create and maintain technical documentation and diagrams Ability to work on a rotational shift schedule to provide 24x7x365 coverage, including night shifts, weekends, and holidays Secret clearance HS diploma or GED Nice If You Have: Experience with firewalls such as Palo Alto or Fortinet, NAC, and network security policies Experience with access control appliances such as Aruba ClearPass Knowledge of scripting or automation tools such as Python or Ansible Knowledge of cloud networking such as AWS, Azure, or GCP Bachelor's degree in a CS, IT, or Engineering field DoD 8570 Certification such as Security+ Certification Aruba Certified Mobility Asso cia te ( ACMA ) , Cisco Certified Network Asso cia te ( CCNA ) , or CompTIA Network+ Certification Clearance: Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information ; Secret clearance is required. Compensation At Booz Allen, we celebrate your contributions, provide you with opportunities and choices, and support your total well-being. Our offerings include health, life, disability, financial, and retirement benefits, as well as paid leave, professional development, tuition assistance, work-life programs, and dependent care. Our recognition awards program acknowledges employees for exceptional performance and superior demonstration of our values. Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible to participate in Booz Allen's benefit programs. Individuals that do not meet the threshold are only eligible for select offerings, not inclusive of health benefits. We encourage you to learn more about our total benefits by visiting the Resource page on our Careers site and reviewing Our Employee Benefits page. Salary at Booz Allen is determined by various factors, including but not limited to location, the individual's particular combination of education, knowledge, skills, competencies, and experience, as well as contract-specific affordability and organizational requirements. The projected compensation range for this position is $61,900.00 to $141,000.00 (annualized USD). The estimate displayed represents the typical salary range for this position and is just one component of Booz Allen's total compensation package for employees. This posting will close within 90 days from the Posting Date. Identity Statement As part of the hiring process, we will ask you to complete an identity verification process that leverages advanced biometrics and artificial intelligence to ensure authenticity and protect against identity fraud. You are expected to be on camera during interviews and assessments. We reserve the right to take your picture to verify your identity and prevent fraud. Candidate AI Usage Policy AI is a part of our daily work at Booz Allen, and we are committed to the responsible and ethical use of AI tools. However, we want to ensure a fair candidate process based on your own skills and knowledge. As part of this commitment, the use of artificial intelligence (AI) or other tools to assist with responses during interviews (whether in-person or virtual) is prohibited unless permission is explicitly provided. Work Model Our people-first culture prioritizes the benefits of collaboration, whether it occurs in person or virtually. To support engagement and effective communication, employees working virtually are generally expected to have their cameras on during meetings. Remote: If this position is listed as remote, there may still be occasions when you are required to work in person at a Booz Allen or customer facility. Hybrid: If this position is listed as hybrid, you will be expected to work from a Booz Allen facility frequently, in alignment with leadership expectations and the needs of the role. You may also be required to work from or visit a customer facility. Onsite: If this position is listed as onsite, work will primarily be performed at a Booz Allen office or customer facility, where employees will collaborate directly with colleagues and customers as required by the role. Commitment to Non-Discrimination All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, local, or international law.
BOOZ, ALLEN & HAMILTON, INC.
Colorado Springs, Colorado
Job Description Application Security Engineer, Lead The Opportunity: A well-designed network is critical to move data and enable finan cia l institutions to achieve their missions, but how can an organization make sure their network will fit their evolving needs? Crafting the right network, with the right equipment and sof tware, requires a combination of technical skill and careful planning. That's why we need you, an experienced network engineer who knows how to develop the exact network finan cia l institutions need. As a Lead Application Security Engineer on our team, you'll use your experience with implementing and integrating information systems, including routing and switching technologies. You'll develop enterprise-wide infrastructure, troubleshoot and resolve complex network issues, analyze working infrastructures, and increase security, reliability, and availability for mission-critical network systems. Your knowledge of network protocols, equipment, emerging technology, and configurations will come in handy as you optimize client operations and modernization. Using your technical curiosity and knowledge of industry standards, you'll make an impact on national security missions. Join us. The world can't wait. You Have: 5+ years of experience implementing Zero Trust compliant application and network security services and controls 5+ years of experience with next-generation firewalls, such as such as Palo Alto, Versa, Cisco, Fortinet, or Juniper 5+ years of experience with application delivery products, such as F5, Nginx, A10, or NetScaler Experience with host-based micro-segmentation solutions such as ColorTokens or Illumio Experience leading cross-functional teams across various technologies and environments Experience with DoD enterprise networks, such as defense infrastructure, including DMZ and application security Secret clearance HS diploma or GED Nice If You Have: Experience with Palo Alto Next-Generation Firewalls and Panorama Experience with F5 BIG-IP Application Security Manager ( ASM ) and Advanced Web Application Firewall ( AWAF ) Experience securing enterprise web applications to be compliant with OWASP Top 10, CVSS, CWE, WASC, and SANS-25 Experience working with Infrastructure-as-Code ( IaC ) tools, including Terraform and deploying IaC with VS Code Knowledge of Azure Cloud and AWS Cloud environments Knowledge of federal compliance standards, including DoD STIG, NIST 800-53, FIPS, and DoD IL5 and 6 Clearance: Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information ; Secret clearance is required. Compensation At Booz Allen, we celebrate your contributions, provide you with opportunities and choices, and support your total well-being. Our offerings include health, life, disability, financial, and retirement benefits, as well as paid leave, professional development, tuition assistance, work-life programs, and dependent care. Our recognition awards program acknowledges employees for exceptional performance and superior demonstration of our values. Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible to participate in Booz Allen's benefit programs. Individuals that do not meet the threshold are only eligible for select offerings, not inclusive of health benefits. We encourage you to learn more about our total benefits by visiting the Resource page on our Careers site and reviewing Our Employee Benefits page. Salary at Booz Allen is determined by various factors, including but not limited to location, the individual's particular combination of education, knowledge, skills, competencies, and experience, as well as contract-specific affordability and organizational requirements. The projected compensation range for this position is $99,000.00 to $225,000.00 (annualized USD). The estimate displayed represents the typical salary range for this position and is just one component of Booz Allen's total compensation package for employees. This posting will close within 90 days from the Posting Date. Identity Statement As part of the hiring process, we will ask you to complete an identity verification process that leverages advanced biometrics and artificial intelligence to ensure authenticity and protect against identity fraud. You are expected to be on camera during interviews and assessments. We reserve the right to take your picture to verify your identity and prevent fraud. Candidate AI Usage Policy AI is a part of our daily work at Booz Allen, and we are committed to the responsible and ethical use of AI tools. However, we want to ensure a fair candidate process based on your own skills and knowledge. As part of this commitment, the use of artificial intelligence (AI) or other tools to assist with responses during interviews (whether in-person or virtual) is prohibited unless permission is explicitly provided. Work Model Our people-first culture prioritizes the benefits of collaboration. To support engagement and effective communication, employees working virtually are generally expected to have their cameras on during meetings. Remote: If this position is listed as remote, there may still be occasions when you are required to work in person at a Booz Allen or customer facility. Hybrid: If this position is listed as hybrid, you will be expected to work from a Booz Allen or customer facility, in alignment with your leadership's expectations and the needs of the role. Onsite: If this position is listed as onsite, work will primarily be performed full-time at a customer facility, where employees will collaborate directly with colleagues and customers as required by the role. Commitment to Non-Discrimination All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, local, or international law.
11/07/2026
Full time
Job Description Application Security Engineer, Lead The Opportunity: A well-designed network is critical to move data and enable finan cia l institutions to achieve their missions, but how can an organization make sure their network will fit their evolving needs? Crafting the right network, with the right equipment and sof tware, requires a combination of technical skill and careful planning. That's why we need you, an experienced network engineer who knows how to develop the exact network finan cia l institutions need. As a Lead Application Security Engineer on our team, you'll use your experience with implementing and integrating information systems, including routing and switching technologies. You'll develop enterprise-wide infrastructure, troubleshoot and resolve complex network issues, analyze working infrastructures, and increase security, reliability, and availability for mission-critical network systems. Your knowledge of network protocols, equipment, emerging technology, and configurations will come in handy as you optimize client operations and modernization. Using your technical curiosity and knowledge of industry standards, you'll make an impact on national security missions. Join us. The world can't wait. You Have: 5+ years of experience implementing Zero Trust compliant application and network security services and controls 5+ years of experience with next-generation firewalls, such as such as Palo Alto, Versa, Cisco, Fortinet, or Juniper 5+ years of experience with application delivery products, such as F5, Nginx, A10, or NetScaler Experience with host-based micro-segmentation solutions such as ColorTokens or Illumio Experience leading cross-functional teams across various technologies and environments Experience with DoD enterprise networks, such as defense infrastructure, including DMZ and application security Secret clearance HS diploma or GED Nice If You Have: Experience with Palo Alto Next-Generation Firewalls and Panorama Experience with F5 BIG-IP Application Security Manager ( ASM ) and Advanced Web Application Firewall ( AWAF ) Experience securing enterprise web applications to be compliant with OWASP Top 10, CVSS, CWE, WASC, and SANS-25 Experience working with Infrastructure-as-Code ( IaC ) tools, including Terraform and deploying IaC with VS Code Knowledge of Azure Cloud and AWS Cloud environments Knowledge of federal compliance standards, including DoD STIG, NIST 800-53, FIPS, and DoD IL5 and 6 Clearance: Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information ; Secret clearance is required. Compensation At Booz Allen, we celebrate your contributions, provide you with opportunities and choices, and support your total well-being. Our offerings include health, life, disability, financial, and retirement benefits, as well as paid leave, professional development, tuition assistance, work-life programs, and dependent care. Our recognition awards program acknowledges employees for exceptional performance and superior demonstration of our values. Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible to participate in Booz Allen's benefit programs. Individuals that do not meet the threshold are only eligible for select offerings, not inclusive of health benefits. We encourage you to learn more about our total benefits by visiting the Resource page on our Careers site and reviewing Our Employee Benefits page. Salary at Booz Allen is determined by various factors, including but not limited to location, the individual's particular combination of education, knowledge, skills, competencies, and experience, as well as contract-specific affordability and organizational requirements. The projected compensation range for this position is $99,000.00 to $225,000.00 (annualized USD). The estimate displayed represents the typical salary range for this position and is just one component of Booz Allen's total compensation package for employees. This posting will close within 90 days from the Posting Date. Identity Statement As part of the hiring process, we will ask you to complete an identity verification process that leverages advanced biometrics and artificial intelligence to ensure authenticity and protect against identity fraud. You are expected to be on camera during interviews and assessments. We reserve the right to take your picture to verify your identity and prevent fraud. Candidate AI Usage Policy AI is a part of our daily work at Booz Allen, and we are committed to the responsible and ethical use of AI tools. However, we want to ensure a fair candidate process based on your own skills and knowledge. As part of this commitment, the use of artificial intelligence (AI) or other tools to assist with responses during interviews (whether in-person or virtual) is prohibited unless permission is explicitly provided. Work Model Our people-first culture prioritizes the benefits of collaboration. To support engagement and effective communication, employees working virtually are generally expected to have their cameras on during meetings. Remote: If this position is listed as remote, there may still be occasions when you are required to work in person at a Booz Allen or customer facility. Hybrid: If this position is listed as hybrid, you will be expected to work from a Booz Allen or customer facility, in alignment with your leadership's expectations and the needs of the role. Onsite: If this position is listed as onsite, work will primarily be performed full-time at a customer facility, where employees will collaborate directly with colleagues and customers as required by the role. Commitment to Non-Discrimination All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, local, or international law.
BOOZ, ALLEN & HAMILTON, INC.
Virginia Beach, Virginia
Job Description Network Engineer The Opportunity: We are seeking a dedicated Network Engineer to support the design, deployment, and maintenance of enterprise and tactical networks for the Department of Defense ( DoD ) . This role is an opportunity to apply your technical expertise in wireless, SD-WAN, and cybersecurity to build secure, resilient infrastructure that directly enhances the quality of life for military personnel and their families. You'll work on meaningful projects that support mission readiness and day-to-day connectivity across DoD environments. What You'll Work On: Serve as a core member of the Operations and Maintenance ( O & M ) team, responsible for the day-to-day operation and sustainment of enterprise and tactical network systems. Participate in a 24x7x365 shift schedule, including night shifts, weekends, and holidays, to support mission-critical operations. Configure and troubleshoot Aruba wireless LANs, controllers, access points, and ClearPass and SD-WAN solutions. Conduct performance tuning and network health assessments. Conduct and document cybersecurity vulnerability scans using approved tools in compliance with DoD requirements. Maintain accurate network documentation and diagrams. Lead troubleshooting efforts for escalated network issues. Collaborate across IT teams to ensure secure, scalable, and compliant network operations. Join us. The world can't wait. You Have: 3+ years of experience in enterprise networking roles 3+ years of experience in network engineering and troubleshooting Experience with IP networking solutions Knowledge of SD-WAN technologies and routing protocols such as RIP, OSPF, EIGRP, or BGP Knowledge of TCP / IP and data network protocols, and protocol analysis tools such as tcpdump or Wireshark Knowledge of DoD network deployments, STIGs, and IA compliance standards Ability to create and maintain technical documentation and diagrams Ability to work on a rotational shift schedule to provide 24x7x365 coverage, including night shifts, weekends, and holidays Secret clearance HS diploma or GED Nice If You Have: Experience with firewalls such as Palo Alto or Fortinet, NAC, and network security policies Experience with access control appliances such as Aruba ClearPass Knowledge of scripting or automation tools such as Python or Ansible Knowledge of cloud networking such as AWS, Azure, or GCP Bachelor's degree in a CS, IT, or Engineering field DoD 8570 Certification such as Security+ Certification Aruba Certified Mobility Asso cia te ( ACMA ) , Cisco Certified Network Asso cia te ( CCNA ) , or CompTIA Network+ Certification Clearance: Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information ; Secret clearance is required. Compensation At Booz Allen, we celebrate your contributions, provide you with opportunities and choices, and support your total well-being. Our offerings include health, life, disability, financial, and retirement benefits, as well as paid leave, professional development, tuition assistance, work-life programs, and dependent care. Our recognition awards program acknowledges employees for exceptional performance and superior demonstration of our values. Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible to participate in Booz Allen's benefit programs. Individuals that do not meet the threshold are only eligible for select offerings, not inclusive of health benefits. We encourage you to learn more about our total benefits by visiting the Resource page on our Careers site and reviewing Our Employee Benefits page. Salary at Booz Allen is determined by various factors, including but not limited to location, the individual's particular combination of education, knowledge, skills, competencies, and experience, as well as contract-specific affordability and organizational requirements. The projected compensation range for this position is $61,900.00 to $141,000.00 (annualized USD). The estimate displayed represents the typical salary range for this position and is just one component of Booz Allen's total compensation package for employees. This posting will close within 90 days from the Posting Date. Identity Statement As part of the hiring process, we will ask you to complete an identity verification process that leverages advanced biometrics and artificial intelligence to ensure authenticity and protect against identity fraud. You are expected to be on camera during interviews and assessments. We reserve the right to take your picture to verify your identity and prevent fraud. Candidate AI Usage Policy AI is a part of our daily work at Booz Allen, and we are committed to the responsible and ethical use of AI tools. However, we want to ensure a fair candidate process based on your own skills and knowledge. As part of this commitment, the use of artificial intelligence (AI) or other tools to assist with responses during interviews (whether in-person or virtual) is prohibited unless permission is explicitly provided. Work Model Our people-first culture prioritizes the benefits of collaboration, whether it occurs in person or virtually. To support engagement and effective communication, employees working virtually are generally expected to have their cameras on during meetings. Remote: If this position is listed as remote, there may still be occasions when you are required to work in person at a Booz Allen or customer facility. Hybrid: If this position is listed as hybrid, you will be expected to work from a Booz Allen facility frequently, in alignment with leadership expectations and the needs of the role. You may also be required to work from or visit a customer facility. Onsite: If this position is listed as onsite, work will primarily be performed at a Booz Allen office or customer facility, where employees will collaborate directly with colleagues and customers as required by the role. Commitment to Non-Discrimination All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, local, or international law.
11/07/2026
Full time
Job Description Network Engineer The Opportunity: We are seeking a dedicated Network Engineer to support the design, deployment, and maintenance of enterprise and tactical networks for the Department of Defense ( DoD ) . This role is an opportunity to apply your technical expertise in wireless, SD-WAN, and cybersecurity to build secure, resilient infrastructure that directly enhances the quality of life for military personnel and their families. You'll work on meaningful projects that support mission readiness and day-to-day connectivity across DoD environments. What You'll Work On: Serve as a core member of the Operations and Maintenance ( O & M ) team, responsible for the day-to-day operation and sustainment of enterprise and tactical network systems. Participate in a 24x7x365 shift schedule, including night shifts, weekends, and holidays, to support mission-critical operations. Configure and troubleshoot Aruba wireless LANs, controllers, access points, and ClearPass and SD-WAN solutions. Conduct performance tuning and network health assessments. Conduct and document cybersecurity vulnerability scans using approved tools in compliance with DoD requirements. Maintain accurate network documentation and diagrams. Lead troubleshooting efforts for escalated network issues. Collaborate across IT teams to ensure secure, scalable, and compliant network operations. Join us. The world can't wait. You Have: 3+ years of experience in enterprise networking roles 3+ years of experience in network engineering and troubleshooting Experience with IP networking solutions Knowledge of SD-WAN technologies and routing protocols such as RIP, OSPF, EIGRP, or BGP Knowledge of TCP / IP and data network protocols, and protocol analysis tools such as tcpdump or Wireshark Knowledge of DoD network deployments, STIGs, and IA compliance standards Ability to create and maintain technical documentation and diagrams Ability to work on a rotational shift schedule to provide 24x7x365 coverage, including night shifts, weekends, and holidays Secret clearance HS diploma or GED Nice If You Have: Experience with firewalls such as Palo Alto or Fortinet, NAC, and network security policies Experience with access control appliances such as Aruba ClearPass Knowledge of scripting or automation tools such as Python or Ansible Knowledge of cloud networking such as AWS, Azure, or GCP Bachelor's degree in a CS, IT, or Engineering field DoD 8570 Certification such as Security+ Certification Aruba Certified Mobility Asso cia te ( ACMA ) , Cisco Certified Network Asso cia te ( CCNA ) , or CompTIA Network+ Certification Clearance: Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information ; Secret clearance is required. Compensation At Booz Allen, we celebrate your contributions, provide you with opportunities and choices, and support your total well-being. Our offerings include health, life, disability, financial, and retirement benefits, as well as paid leave, professional development, tuition assistance, work-life programs, and dependent care. Our recognition awards program acknowledges employees for exceptional performance and superior demonstration of our values. Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible to participate in Booz Allen's benefit programs. Individuals that do not meet the threshold are only eligible for select offerings, not inclusive of health benefits. We encourage you to learn more about our total benefits by visiting the Resource page on our Careers site and reviewing Our Employee Benefits page. Salary at Booz Allen is determined by various factors, including but not limited to location, the individual's particular combination of education, knowledge, skills, competencies, and experience, as well as contract-specific affordability and organizational requirements. The projected compensation range for this position is $61,900.00 to $141,000.00 (annualized USD). The estimate displayed represents the typical salary range for this position and is just one component of Booz Allen's total compensation package for employees. This posting will close within 90 days from the Posting Date. Identity Statement As part of the hiring process, we will ask you to complete an identity verification process that leverages advanced biometrics and artificial intelligence to ensure authenticity and protect against identity fraud. You are expected to be on camera during interviews and assessments. We reserve the right to take your picture to verify your identity and prevent fraud. Candidate AI Usage Policy AI is a part of our daily work at Booz Allen, and we are committed to the responsible and ethical use of AI tools. However, we want to ensure a fair candidate process based on your own skills and knowledge. As part of this commitment, the use of artificial intelligence (AI) or other tools to assist with responses during interviews (whether in-person or virtual) is prohibited unless permission is explicitly provided. Work Model Our people-first culture prioritizes the benefits of collaboration, whether it occurs in person or virtually. To support engagement and effective communication, employees working virtually are generally expected to have their cameras on during meetings. Remote: If this position is listed as remote, there may still be occasions when you are required to work in person at a Booz Allen or customer facility. Hybrid: If this position is listed as hybrid, you will be expected to work from a Booz Allen facility frequently, in alignment with leadership expectations and the needs of the role. You may also be required to work from or visit a customer facility. Onsite: If this position is listed as onsite, work will primarily be performed at a Booz Allen office or customer facility, where employees will collaborate directly with colleagues and customers as required by the role. Commitment to Non-Discrimination All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, local, or international law.
Job Description Network Engineer The Opportunity: We are seeking a dedicated Network Engineer to support the design, deployment, and maintenance of enterprise and tactical networks for the Department of Defense ( DoD ) . This role is an opportunity to apply your technical expertise in wireless, SD-WAN, and cybersecurity to build secure, resilient infrastructure that directly enhances the quality of life for military personnel and their families. You'll work on meaningful projects that support mission readiness and day-to-day connectivity across DoD environments. What You'll Work On: Serve as a core member of the Operations and Maintenance ( O & M ) team, responsible for the day-to-day operation and sustainment of enterprise and tactical network systems. Participate in a 24x7x365 shift schedule, including night shifts, weekends, and holidays, to support mission-critical operations. Configure and troubleshoot Aruba wireless LANs, controllers, access points, and ClearPass and SD-WAN solutions. Conduct performance tuning and network health assessments. Conduct and document cybersecurity vulnerability scans using approved tools in compliance with DoD requirements. Maintain accurate network documentation and diagrams. Lead troubleshooting efforts for escalated network issues. Collaborate across IT teams to ensure secure, scalable, and compliant network operations. Join us. The world can't wait. You Have: 3+ years of experience in enterprise networking roles 3+ years of experience in network engineering and troubleshooting Experience with IP networking solutions Knowledge of SD-WAN technologies and routing protocols such as RIP, OSPF, EIGRP, or BGP Knowledge of TCP / IP and data network protocols, and protocol analysis tools such as tcpdump or Wireshark Knowledge of DoD network deployments, STIGs, and IA compliance standards Ability to create and maintain technical documentation and diagrams Ability to work on a rotational shift schedule to provide 24x7x365 coverage, including night shifts, weekends, and holidays Secret clearance HS diploma or GED Nice If You Have: Experience with firewalls such as Palo Alto or Fortinet, NAC, and network security policies Experience with access control appliances such as Aruba ClearPass Knowledge of scripting or automation tools such as Python or Ansible Knowledge of cloud networking such as AWS, Azure, or GCP Bachelor's degree in a CS, IT, or Engineering field DoD 8570 Certification such as Security+ Certification Aruba Certified Mobility Asso cia te ( ACMA ) , Cisco Certified Network Asso cia te ( CCNA ) , or CompTIA Network+ Certification Clearance: Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information ; Secret clearance is required. Compensation At Booz Allen, we celebrate your contributions, provide you with opportunities and choices, and support your total well-being. Our offerings include health, life, disability, financial, and retirement benefits, as well as paid leave, professional development, tuition assistance, work-life programs, and dependent care. Our recognition awards program acknowledges employees for exceptional performance and superior demonstration of our values. Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible to participate in Booz Allen's benefit programs. Individuals that do not meet the threshold are only eligible for select offerings, not inclusive of health benefits. We encourage you to learn more about our total benefits by visiting the Resource page on our Careers site and reviewing Our Employee Benefits page. Salary at Booz Allen is determined by various factors, including but not limited to location, the individual's particular combination of education, knowledge, skills, competencies, and experience, as well as contract-specific affordability and organizational requirements. The projected compensation range for this position is $61,900.00 to $141,000.00 (annualized USD). The estimate displayed represents the typical salary range for this position and is just one component of Booz Allen's total compensation package for employees. This posting will close within 90 days from the Posting Date. Identity Statement As part of the hiring process, we will ask you to complete an identity verification process that leverages advanced biometrics and artificial intelligence to ensure authenticity and protect against identity fraud. You are expected to be on camera during interviews and assessments. We reserve the right to take your picture to verify your identity and prevent fraud. Candidate AI Usage Policy AI is a part of our daily work at Booz Allen, and we are committed to the responsible and ethical use of AI tools. However, we want to ensure a fair candidate process based on your own skills and knowledge. As part of this commitment, the use of artificial intelligence (AI) or other tools to assist with responses during interviews (whether in-person or virtual) is prohibited unless permission is explicitly provided. Work Model Our people-first culture prioritizes the benefits of collaboration, whether it occurs in person or virtually. To support engagement and effective communication, employees working virtually are generally expected to have their cameras on during meetings. Remote: If this position is listed as remote, there may still be occasions when you are required to work in person at a Booz Allen or customer facility. Hybrid: If this position is listed as hybrid, you will be expected to work from a Booz Allen facility frequently, in alignment with leadership expectations and the needs of the role. You may also be required to work from or visit a customer facility. Onsite: If this position is listed as onsite, work will primarily be performed at a Booz Allen office or customer facility, where employees will collaborate directly with colleagues and customers as required by the role. Commitment to Non-Discrimination All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, local, or international law.
11/07/2026
Full time
Job Description Network Engineer The Opportunity: We are seeking a dedicated Network Engineer to support the design, deployment, and maintenance of enterprise and tactical networks for the Department of Defense ( DoD ) . This role is an opportunity to apply your technical expertise in wireless, SD-WAN, and cybersecurity to build secure, resilient infrastructure that directly enhances the quality of life for military personnel and their families. You'll work on meaningful projects that support mission readiness and day-to-day connectivity across DoD environments. What You'll Work On: Serve as a core member of the Operations and Maintenance ( O & M ) team, responsible for the day-to-day operation and sustainment of enterprise and tactical network systems. Participate in a 24x7x365 shift schedule, including night shifts, weekends, and holidays, to support mission-critical operations. Configure and troubleshoot Aruba wireless LANs, controllers, access points, and ClearPass and SD-WAN solutions. Conduct performance tuning and network health assessments. Conduct and document cybersecurity vulnerability scans using approved tools in compliance with DoD requirements. Maintain accurate network documentation and diagrams. Lead troubleshooting efforts for escalated network issues. Collaborate across IT teams to ensure secure, scalable, and compliant network operations. Join us. The world can't wait. You Have: 3+ years of experience in enterprise networking roles 3+ years of experience in network engineering and troubleshooting Experience with IP networking solutions Knowledge of SD-WAN technologies and routing protocols such as RIP, OSPF, EIGRP, or BGP Knowledge of TCP / IP and data network protocols, and protocol analysis tools such as tcpdump or Wireshark Knowledge of DoD network deployments, STIGs, and IA compliance standards Ability to create and maintain technical documentation and diagrams Ability to work on a rotational shift schedule to provide 24x7x365 coverage, including night shifts, weekends, and holidays Secret clearance HS diploma or GED Nice If You Have: Experience with firewalls such as Palo Alto or Fortinet, NAC, and network security policies Experience with access control appliances such as Aruba ClearPass Knowledge of scripting or automation tools such as Python or Ansible Knowledge of cloud networking such as AWS, Azure, or GCP Bachelor's degree in a CS, IT, or Engineering field DoD 8570 Certification such as Security+ Certification Aruba Certified Mobility Asso cia te ( ACMA ) , Cisco Certified Network Asso cia te ( CCNA ) , or CompTIA Network+ Certification Clearance: Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information ; Secret clearance is required. Compensation At Booz Allen, we celebrate your contributions, provide you with opportunities and choices, and support your total well-being. Our offerings include health, life, disability, financial, and retirement benefits, as well as paid leave, professional development, tuition assistance, work-life programs, and dependent care. Our recognition awards program acknowledges employees for exceptional performance and superior demonstration of our values. Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible to participate in Booz Allen's benefit programs. Individuals that do not meet the threshold are only eligible for select offerings, not inclusive of health benefits. We encourage you to learn more about our total benefits by visiting the Resource page on our Careers site and reviewing Our Employee Benefits page. Salary at Booz Allen is determined by various factors, including but not limited to location, the individual's particular combination of education, knowledge, skills, competencies, and experience, as well as contract-specific affordability and organizational requirements. The projected compensation range for this position is $61,900.00 to $141,000.00 (annualized USD). The estimate displayed represents the typical salary range for this position and is just one component of Booz Allen's total compensation package for employees. This posting will close within 90 days from the Posting Date. Identity Statement As part of the hiring process, we will ask you to complete an identity verification process that leverages advanced biometrics and artificial intelligence to ensure authenticity and protect against identity fraud. You are expected to be on camera during interviews and assessments. We reserve the right to take your picture to verify your identity and prevent fraud. Candidate AI Usage Policy AI is a part of our daily work at Booz Allen, and we are committed to the responsible and ethical use of AI tools. However, we want to ensure a fair candidate process based on your own skills and knowledge. As part of this commitment, the use of artificial intelligence (AI) or other tools to assist with responses during interviews (whether in-person or virtual) is prohibited unless permission is explicitly provided. Work Model Our people-first culture prioritizes the benefits of collaboration, whether it occurs in person or virtually. To support engagement and effective communication, employees working virtually are generally expected to have their cameras on during meetings. Remote: If this position is listed as remote, there may still be occasions when you are required to work in person at a Booz Allen or customer facility. Hybrid: If this position is listed as hybrid, you will be expected to work from a Booz Allen facility frequently, in alignment with leadership expectations and the needs of the role. You may also be required to work from or visit a customer facility. Onsite: If this position is listed as onsite, work will primarily be performed at a Booz Allen office or customer facility, where employees will collaborate directly with colleagues and customers as required by the role. Commitment to Non-Discrimination All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, local, or international law.
Job Description Job Description BAE Systems, a top-ten prime contractor to the U.S. Department of Defense, enables the U.S. government to transform data into intelligence and provides engineering, integration and sustainment support for critical military platforms and systems. Intelligence & Security provides services and products to the Department of Defense, the government, federal law enforcement officials, and troops deployed around the world. At BAE Systems, we promote a strong, collaborative culture and provide our employees with the tools, skills and training they need to succeed. We are all about trust, camaraderie and a shared ambition to lead the world in defense technologies and national security services. We offer flexible work environment to support the balance in your life and keep you performing at your best. Be a part of a company that is part of the community; driven to improve our future and protect our freedom. We are seeking a talented and experienced Network Engineer with a specialized focus on Firewalls, particularly with expertise in CISCO, Palo Alto, and Juniper network devices and associated management software to join our technology-based program supporting a key Government customer. The ideal candidate will have a deep understanding of network security principles, excellent problem-solving skills, and a proactive approach to maintaining and optimizing firewall infrastructure. ABC Required Education, Experience, & Skills We are actively seeking Network Engineers with a minimum of 16 years' experience. Bachelor's or Master's Degrees are preferred in one or more of the disciplines described below where specific skills may include the following: Design, implement, and manage firewall solutions utilizing Cisco, Pala Alto, and Juniper network devices Perform configuration, maintenance, and troubleshooting of firewall policies and rules Monitor network traffic for potential security threats and proactively address vulnerabilities Collaborate with cross-functional teams to ensure network security standards align with business objectives Stay up-to-date with the latest industry trends and best practices in network security and firewall technologies Ability to translate customer requirements into enterprise network solutions Proven experience as a Network Engineer with a focus on firewall technologies Excellent communication and interpersonal skills Ability to work independently and collaboratively in a fast-paced environment Preferred Education, Experience, & Skills Strong proficiency with Palo Alto & CISCO firewall platforms, Palo Alto firewall platforms is a plus In-depth knowledge of network protocols, TCP/IP stack, and OSI model Experience with firewall management software such as Cisco FTD and Palo Alto Panorama Experience with a wide variety of network technologies and solutions architectures is a plus Broad understanding of technical principles, theories and concepts in the networking field Knowledge of state-of-the-art systems engineering principles and network design concepts Cloud Service Provider and hybrid cloud experience (extending on-premise networks to cloud providers such as AWS, Azure, Oracle and Google) Strong proficiency with Palo Alto and Cisco firewall platforms is a plus Industry certifications such as CCNA Security, CCNP Security, Palo Alto Networks Certified Network Security Engineer (PCNSE), or similar industry certifications are preferred Pay Information Full-Time Salary Range: $140690 - $239140 Please note: This range is based on our market pay structures. However, individual salaries are determined by a variety of factors including, but not limited to: business considerations, local market conditions, and internal equity, as well as candidate qualifications, such as skills, education, and experience. Employee Benefits: At BAE Systems, we support our employees in all aspects of their life, including their health and financial well-being. Regular employees scheduled to work 20+ hours per week are offered: health, dental, and vision insurance; health savings accounts; a 401(k) savings plan; disability coverage; and life and accident insurance. We also have an employee assistance program, a legal plan, and other perks including discounts on things like home, auto, and pet insurance. Our leave programs include paid time off, paid holidays, as well as other types of leave, including paid parental, military, bereavement, and any applicable federal and state sick leave. Employees may participate in the company recognition program to receive monetary or non-monetary recognition awards. Other incentives may be available based on position level and/or job specifics. About BAE Systems, Inc. BAE Systems, Inc. is a defense, aerospace, and security company headquartered in Falls Church, Virginia, with more than 40,000 employees worldwide. We serve, supply, and protect those who protect us. As one of the most geographically diverse international defense companies, we deliver a full range of products and services spanning air, land, maritime, space, and cyber, including advanced electronics, intelligence solutions, and dedicated customer support. Our culture is performance-driven and values-led, built on curiosity, creativity, and collaboration. Purpose isn't a tagline here. It's what drives us. We're developing breakthrough technologies that defend national security and make a lasting impact on our communities and our planet. When you join BAE Systems, you're not just building a career. You're contributing to a mission that truly matters. This position will be posted for at least 5 calendar days. The posting will remain active until the position is filled, or a qualified pool of candidates is identified.
11/07/2026
Full time
Job Description Job Description BAE Systems, a top-ten prime contractor to the U.S. Department of Defense, enables the U.S. government to transform data into intelligence and provides engineering, integration and sustainment support for critical military platforms and systems. Intelligence & Security provides services and products to the Department of Defense, the government, federal law enforcement officials, and troops deployed around the world. At BAE Systems, we promote a strong, collaborative culture and provide our employees with the tools, skills and training they need to succeed. We are all about trust, camaraderie and a shared ambition to lead the world in defense technologies and national security services. We offer flexible work environment to support the balance in your life and keep you performing at your best. Be a part of a company that is part of the community; driven to improve our future and protect our freedom. We are seeking a talented and experienced Network Engineer with a specialized focus on Firewalls, particularly with expertise in CISCO, Palo Alto, and Juniper network devices and associated management software to join our technology-based program supporting a key Government customer. The ideal candidate will have a deep understanding of network security principles, excellent problem-solving skills, and a proactive approach to maintaining and optimizing firewall infrastructure. ABC Required Education, Experience, & Skills We are actively seeking Network Engineers with a minimum of 16 years' experience. Bachelor's or Master's Degrees are preferred in one or more of the disciplines described below where specific skills may include the following: Design, implement, and manage firewall solutions utilizing Cisco, Pala Alto, and Juniper network devices Perform configuration, maintenance, and troubleshooting of firewall policies and rules Monitor network traffic for potential security threats and proactively address vulnerabilities Collaborate with cross-functional teams to ensure network security standards align with business objectives Stay up-to-date with the latest industry trends and best practices in network security and firewall technologies Ability to translate customer requirements into enterprise network solutions Proven experience as a Network Engineer with a focus on firewall technologies Excellent communication and interpersonal skills Ability to work independently and collaboratively in a fast-paced environment Preferred Education, Experience, & Skills Strong proficiency with Palo Alto & CISCO firewall platforms, Palo Alto firewall platforms is a plus In-depth knowledge of network protocols, TCP/IP stack, and OSI model Experience with firewall management software such as Cisco FTD and Palo Alto Panorama Experience with a wide variety of network technologies and solutions architectures is a plus Broad understanding of technical principles, theories and concepts in the networking field Knowledge of state-of-the-art systems engineering principles and network design concepts Cloud Service Provider and hybrid cloud experience (extending on-premise networks to cloud providers such as AWS, Azure, Oracle and Google) Strong proficiency with Palo Alto and Cisco firewall platforms is a plus Industry certifications such as CCNA Security, CCNP Security, Palo Alto Networks Certified Network Security Engineer (PCNSE), or similar industry certifications are preferred Pay Information Full-Time Salary Range: $140690 - $239140 Please note: This range is based on our market pay structures. However, individual salaries are determined by a variety of factors including, but not limited to: business considerations, local market conditions, and internal equity, as well as candidate qualifications, such as skills, education, and experience. Employee Benefits: At BAE Systems, we support our employees in all aspects of their life, including their health and financial well-being. Regular employees scheduled to work 20+ hours per week are offered: health, dental, and vision insurance; health savings accounts; a 401(k) savings plan; disability coverage; and life and accident insurance. We also have an employee assistance program, a legal plan, and other perks including discounts on things like home, auto, and pet insurance. Our leave programs include paid time off, paid holidays, as well as other types of leave, including paid parental, military, bereavement, and any applicable federal and state sick leave. Employees may participate in the company recognition program to receive monetary or non-monetary recognition awards. Other incentives may be available based on position level and/or job specifics. About BAE Systems, Inc. BAE Systems, Inc. is a defense, aerospace, and security company headquartered in Falls Church, Virginia, with more than 40,000 employees worldwide. We serve, supply, and protect those who protect us. As one of the most geographically diverse international defense companies, we deliver a full range of products and services spanning air, land, maritime, space, and cyber, including advanced electronics, intelligence solutions, and dedicated customer support. Our culture is performance-driven and values-led, built on curiosity, creativity, and collaboration. Purpose isn't a tagline here. It's what drives us. We're developing breakthrough technologies that defend national security and make a lasting impact on our communities and our planet. When you join BAE Systems, you're not just building a career. You're contributing to a mission that truly matters. This position will be posted for at least 5 calendar days. The posting will remain active until the position is filled, or a qualified pool of candidates is identified.
Job Description Network Engineer The Opportunity: We are seeking a dedicated Network Engineer to support the design, deployment, and maintenance of enterprise and tactical networks for the Department of Defense ( DoD ) . This role is an opportunity to apply your technical expertise in wireless, SD-WAN, and cybersecurity to build secure, resilient infrastructure that directly enhances the quality of life for military personnel and their families. You'll work on meaningful projects that support mission readiness and day-to-day connectivity across DoD environments. What You'll Work On: Serve as a core member of the Operations and Maintenance ( O & M ) team, responsible for the day-to-day operation and sustainment of enterprise and tactical network systems. Participate in a 24x7x365 shift schedule, including night shifts, weekends, and holidays, to support mission-critical operations. Configure and troubleshoot Aruba wireless LANs, controllers, access points, and ClearPass and SD-WAN solutions. Conduct performance tuning and network health assessments. Conduct and document cybersecurity vulnerability scans using approved tools in compliance with DoD requirements. Maintain accurate network documentation and diagrams. Lead troubleshooting efforts for escalated network issues. Collaborate across IT teams to ensure secure, scalable, and compliant network operations. Join us. The world can't wait. You Have: 3+ years of experience in enterprise networking roles 3+ years of experience in network engineering and troubleshooting Experience with IP networking solutions Knowledge of SD-WAN technologies and routing protocols such as RIP, OSPF, EIGRP, or BGP Knowledge of TCP / IP and data network protocols, and protocol analysis tools such as tcpdump or Wireshark Knowledge of DoD network deployments, STIGs, and IA compliance standards Ability to create and maintain technical documentation and diagrams Ability to work on a rotational shift schedule to provide 24x7x365 coverage, including night shifts, weekends, and holidays Secret clearance HS diploma or GED Nice If You Have: Experience with firewalls such as Palo Alto or Fortinet, NAC, and network security policies Experience with access control appliances such as Aruba ClearPass Knowledge of scripting or automation tools such as Python or Ansible Knowledge of cloud networking such as AWS, Azure, or GCP Bachelor's degree in a CS, IT, or Engineering field DoD 8570 Certification such as Security+ Certification Aruba Certified Mobility Asso cia te ( ACMA ) , Cisco Certified Network Asso cia te ( CCNA ) , or CompTIA Network+ Certification Clearance: Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information ; Secret clearance is required. Compensation At Booz Allen, we celebrate your contributions, provide you with opportunities and choices, and support your total well-being. Our offerings include health, life, disability, financial, and retirement benefits, as well as paid leave, professional development, tuition assistance, work-life programs, and dependent care. Our recognition awards program acknowledges employees for exceptional performance and superior demonstration of our values. Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible to participate in Booz Allen's benefit programs. Individuals that do not meet the threshold are only eligible for select offerings, not inclusive of health benefits. We encourage you to learn more about our total benefits by visiting the Resource page on our Careers site and reviewing Our Employee Benefits page. Salary at Booz Allen is determined by various factors, including but not limited to location, the individual's particular combination of education, knowledge, skills, competencies, and experience, as well as contract-specific affordability and organizational requirements. The projected compensation range for this position is $61,900.00 to $141,000.00 (annualized USD). The estimate displayed represents the typical salary range for this position and is just one component of Booz Allen's total compensation package for employees. This posting will close within 90 days from the Posting Date. Identity Statement As part of the hiring process, we will ask you to complete an identity verification process that leverages advanced biometrics and artificial intelligence to ensure authenticity and protect against identity fraud. You are expected to be on camera during interviews and assessments. We reserve the right to take your picture to verify your identity and prevent fraud. Candidate AI Usage Policy AI is a part of our daily work at Booz Allen, and we are committed to the responsible and ethical use of AI tools. However, we want to ensure a fair candidate process based on your own skills and knowledge. As part of this commitment, the use of artificial intelligence (AI) or other tools to assist with responses during interviews (whether in-person or virtual) is prohibited unless permission is explicitly provided. Work Model Our people-first culture prioritizes the benefits of collaboration, whether it occurs in person or virtually. To support engagement and effective communication, employees working virtually are generally expected to have their cameras on during meetings. Remote: If this position is listed as remote, there may still be occasions when you are required to work in person at a Booz Allen or customer facility. Hybrid: If this position is listed as hybrid, you will be expected to work from a Booz Allen facility frequently, in alignment with leadership expectations and the needs of the role. You may also be required to work from or visit a customer facility. Onsite: If this position is listed as onsite, work will primarily be performed at a Booz Allen office or customer facility, where employees will collaborate directly with colleagues and customers as required by the role. Commitment to Non-Discrimination All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, local, or international law.
11/07/2026
Full time
Job Description Network Engineer The Opportunity: We are seeking a dedicated Network Engineer to support the design, deployment, and maintenance of enterprise and tactical networks for the Department of Defense ( DoD ) . This role is an opportunity to apply your technical expertise in wireless, SD-WAN, and cybersecurity to build secure, resilient infrastructure that directly enhances the quality of life for military personnel and their families. You'll work on meaningful projects that support mission readiness and day-to-day connectivity across DoD environments. What You'll Work On: Serve as a core member of the Operations and Maintenance ( O & M ) team, responsible for the day-to-day operation and sustainment of enterprise and tactical network systems. Participate in a 24x7x365 shift schedule, including night shifts, weekends, and holidays, to support mission-critical operations. Configure and troubleshoot Aruba wireless LANs, controllers, access points, and ClearPass and SD-WAN solutions. Conduct performance tuning and network health assessments. Conduct and document cybersecurity vulnerability scans using approved tools in compliance with DoD requirements. Maintain accurate network documentation and diagrams. Lead troubleshooting efforts for escalated network issues. Collaborate across IT teams to ensure secure, scalable, and compliant network operations. Join us. The world can't wait. You Have: 3+ years of experience in enterprise networking roles 3+ years of experience in network engineering and troubleshooting Experience with IP networking solutions Knowledge of SD-WAN technologies and routing protocols such as RIP, OSPF, EIGRP, or BGP Knowledge of TCP / IP and data network protocols, and protocol analysis tools such as tcpdump or Wireshark Knowledge of DoD network deployments, STIGs, and IA compliance standards Ability to create and maintain technical documentation and diagrams Ability to work on a rotational shift schedule to provide 24x7x365 coverage, including night shifts, weekends, and holidays Secret clearance HS diploma or GED Nice If You Have: Experience with firewalls such as Palo Alto or Fortinet, NAC, and network security policies Experience with access control appliances such as Aruba ClearPass Knowledge of scripting or automation tools such as Python or Ansible Knowledge of cloud networking such as AWS, Azure, or GCP Bachelor's degree in a CS, IT, or Engineering field DoD 8570 Certification such as Security+ Certification Aruba Certified Mobility Asso cia te ( ACMA ) , Cisco Certified Network Asso cia te ( CCNA ) , or CompTIA Network+ Certification Clearance: Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information ; Secret clearance is required. Compensation At Booz Allen, we celebrate your contributions, provide you with opportunities and choices, and support your total well-being. Our offerings include health, life, disability, financial, and retirement benefits, as well as paid leave, professional development, tuition assistance, work-life programs, and dependent care. Our recognition awards program acknowledges employees for exceptional performance and superior demonstration of our values. Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible to participate in Booz Allen's benefit programs. Individuals that do not meet the threshold are only eligible for select offerings, not inclusive of health benefits. We encourage you to learn more about our total benefits by visiting the Resource page on our Careers site and reviewing Our Employee Benefits page. Salary at Booz Allen is determined by various factors, including but not limited to location, the individual's particular combination of education, knowledge, skills, competencies, and experience, as well as contract-specific affordability and organizational requirements. The projected compensation range for this position is $61,900.00 to $141,000.00 (annualized USD). The estimate displayed represents the typical salary range for this position and is just one component of Booz Allen's total compensation package for employees. This posting will close within 90 days from the Posting Date. Identity Statement As part of the hiring process, we will ask you to complete an identity verification process that leverages advanced biometrics and artificial intelligence to ensure authenticity and protect against identity fraud. You are expected to be on camera during interviews and assessments. We reserve the right to take your picture to verify your identity and prevent fraud. Candidate AI Usage Policy AI is a part of our daily work at Booz Allen, and we are committed to the responsible and ethical use of AI tools. However, we want to ensure a fair candidate process based on your own skills and knowledge. As part of this commitment, the use of artificial intelligence (AI) or other tools to assist with responses during interviews (whether in-person or virtual) is prohibited unless permission is explicitly provided. Work Model Our people-first culture prioritizes the benefits of collaboration, whether it occurs in person or virtually. To support engagement and effective communication, employees working virtually are generally expected to have their cameras on during meetings. Remote: If this position is listed as remote, there may still be occasions when you are required to work in person at a Booz Allen or customer facility. Hybrid: If this position is listed as hybrid, you will be expected to work from a Booz Allen facility frequently, in alignment with leadership expectations and the needs of the role. You may also be required to work from or visit a customer facility. Onsite: If this position is listed as onsite, work will primarily be performed at a Booz Allen office or customer facility, where employees will collaborate directly with colleagues and customers as required by the role. Commitment to Non-Discrimination All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, local, or international law.
Job Description Network Engineer The Opportunity: We are seeking a dedicated Network Engineer to support the design, deployment, and maintenance of enterprise and tactical networks for the Department of Defense ( DoD ) . This role is an opportunity to apply your technical expertise in wireless, SD-WAN, and cybersecurity to build secure, resilient infrastructure that directly enhances the quality of life for military personnel and their families. You'll work on meaningful projects that support mission readiness and day-to-day connectivity across DoD environments. What You'll Work On: Serve as a core member of the Operations and Maintenance ( O & M ) team, responsible for the day-to-day operation and sustainment of enterprise and tactical network systems. Participate in a 24x7x365 shift schedule, including night shifts, weekends, and holidays, to support mission-critical operations. Configure and troubleshoot Aruba wireless LANs, controllers, access points, and ClearPass and SD-WAN solutions. Conduct performance tuning and network health assessments. Conduct and document cybersecurity vulnerability scans using approved tools in compliance with DoD requirements. Maintain accurate network documentation and diagrams. Lead troubleshooting efforts for escalated network issues. Collaborate across IT teams to ensure secure, scalable, and compliant network operations. Join us. The world can't wait. You Have: 3+ years of experience in enterprise networking roles 3+ years of experience in network engineering and troubleshooting Experience with IP networking solutions Knowledge of SD-WAN technologies and routing protocols such as RIP, OSPF, EIGRP, or BGP Knowledge of TCP / IP and data network protocols, and protocol analysis tools such as tcpdump or Wireshark Knowledge of DoD network deployments, STIGs, and IA compliance standards Ability to create and maintain technical documentation and diagrams Ability to work on a rotational shift schedule to provide 24x7x365 coverage, including night shifts, weekends, and holidays Secret clearance HS diploma or GED Nice If You Have: Experience with firewalls such as Palo Alto or Fortinet, NAC, and network security policies Experience with access control appliances such as Aruba ClearPass Knowledge of scripting or automation tools such as Python or Ansible Knowledge of cloud networking such as AWS, Azure, or GCP Bachelor's degree in a CS, IT, or Engineering field DoD 8570 Certification such as Security+ Certification Aruba Certified Mobility Asso cia te ( ACMA ) , Cisco Certified Network Asso cia te ( CCNA ) , or CompTIA Network+ Certification Clearance: Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information ; Secret clearance is required. Compensation At Booz Allen, we celebrate your contributions, provide you with opportunities and choices, and support your total well-being. Our offerings include health, life, disability, financial, and retirement benefits, as well as paid leave, professional development, tuition assistance, work-life programs, and dependent care. Our recognition awards program acknowledges employees for exceptional performance and superior demonstration of our values. Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible to participate in Booz Allen's benefit programs. Individuals that do not meet the threshold are only eligible for select offerings, not inclusive of health benefits. We encourage you to learn more about our total benefits by visiting the Resource page on our Careers site and reviewing Our Employee Benefits page. Salary at Booz Allen is determined by various factors, including but not limited to location, the individual's particular combination of education, knowledge, skills, competencies, and experience, as well as contract-specific affordability and organizational requirements. The projected compensation range for this position is $61,900.00 to $141,000.00 (annualized USD). The estimate displayed represents the typical salary range for this position and is just one component of Booz Allen's total compensation package for employees. This posting will close within 90 days from the Posting Date. Identity Statement As part of the hiring process, we will ask you to complete an identity verification process that leverages advanced biometrics and artificial intelligence to ensure authenticity and protect against identity fraud. You are expected to be on camera during interviews and assessments. We reserve the right to take your picture to verify your identity and prevent fraud. Candidate AI Usage Policy AI is a part of our daily work at Booz Allen, and we are committed to the responsible and ethical use of AI tools. However, we want to ensure a fair candidate process based on your own skills and knowledge. As part of this commitment, the use of artificial intelligence (AI) or other tools to assist with responses during interviews (whether in-person or virtual) is prohibited unless permission is explicitly provided. Work Model Our people-first culture prioritizes the benefits of collaboration, whether it occurs in person or virtually. To support engagement and effective communication, employees working virtually are generally expected to have their cameras on during meetings. Remote: If this position is listed as remote, there may still be occasions when you are required to work in person at a Booz Allen or customer facility. Hybrid: If this position is listed as hybrid, you will be expected to work from a Booz Allen facility frequently, in alignment with leadership expectations and the needs of the role. You may also be required to work from or visit a customer facility. Onsite: If this position is listed as onsite, work will primarily be performed at a Booz Allen office or customer facility, where employees will collaborate directly with colleagues and customers as required by the role. Commitment to Non-Discrimination All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, local, or international law.
11/07/2026
Full time
Job Description Network Engineer The Opportunity: We are seeking a dedicated Network Engineer to support the design, deployment, and maintenance of enterprise and tactical networks for the Department of Defense ( DoD ) . This role is an opportunity to apply your technical expertise in wireless, SD-WAN, and cybersecurity to build secure, resilient infrastructure that directly enhances the quality of life for military personnel and their families. You'll work on meaningful projects that support mission readiness and day-to-day connectivity across DoD environments. What You'll Work On: Serve as a core member of the Operations and Maintenance ( O & M ) team, responsible for the day-to-day operation and sustainment of enterprise and tactical network systems. Participate in a 24x7x365 shift schedule, including night shifts, weekends, and holidays, to support mission-critical operations. Configure and troubleshoot Aruba wireless LANs, controllers, access points, and ClearPass and SD-WAN solutions. Conduct performance tuning and network health assessments. Conduct and document cybersecurity vulnerability scans using approved tools in compliance with DoD requirements. Maintain accurate network documentation and diagrams. Lead troubleshooting efforts for escalated network issues. Collaborate across IT teams to ensure secure, scalable, and compliant network operations. Join us. The world can't wait. You Have: 3+ years of experience in enterprise networking roles 3+ years of experience in network engineering and troubleshooting Experience with IP networking solutions Knowledge of SD-WAN technologies and routing protocols such as RIP, OSPF, EIGRP, or BGP Knowledge of TCP / IP and data network protocols, and protocol analysis tools such as tcpdump or Wireshark Knowledge of DoD network deployments, STIGs, and IA compliance standards Ability to create and maintain technical documentation and diagrams Ability to work on a rotational shift schedule to provide 24x7x365 coverage, including night shifts, weekends, and holidays Secret clearance HS diploma or GED Nice If You Have: Experience with firewalls such as Palo Alto or Fortinet, NAC, and network security policies Experience with access control appliances such as Aruba ClearPass Knowledge of scripting or automation tools such as Python or Ansible Knowledge of cloud networking such as AWS, Azure, or GCP Bachelor's degree in a CS, IT, or Engineering field DoD 8570 Certification such as Security+ Certification Aruba Certified Mobility Asso cia te ( ACMA ) , Cisco Certified Network Asso cia te ( CCNA ) , or CompTIA Network+ Certification Clearance: Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information ; Secret clearance is required. Compensation At Booz Allen, we celebrate your contributions, provide you with opportunities and choices, and support your total well-being. Our offerings include health, life, disability, financial, and retirement benefits, as well as paid leave, professional development, tuition assistance, work-life programs, and dependent care. Our recognition awards program acknowledges employees for exceptional performance and superior demonstration of our values. Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible to participate in Booz Allen's benefit programs. Individuals that do not meet the threshold are only eligible for select offerings, not inclusive of health benefits. We encourage you to learn more about our total benefits by visiting the Resource page on our Careers site and reviewing Our Employee Benefits page. Salary at Booz Allen is determined by various factors, including but not limited to location, the individual's particular combination of education, knowledge, skills, competencies, and experience, as well as contract-specific affordability and organizational requirements. The projected compensation range for this position is $61,900.00 to $141,000.00 (annualized USD). The estimate displayed represents the typical salary range for this position and is just one component of Booz Allen's total compensation package for employees. This posting will close within 90 days from the Posting Date. Identity Statement As part of the hiring process, we will ask you to complete an identity verification process that leverages advanced biometrics and artificial intelligence to ensure authenticity and protect against identity fraud. You are expected to be on camera during interviews and assessments. We reserve the right to take your picture to verify your identity and prevent fraud. Candidate AI Usage Policy AI is a part of our daily work at Booz Allen, and we are committed to the responsible and ethical use of AI tools. However, we want to ensure a fair candidate process based on your own skills and knowledge. As part of this commitment, the use of artificial intelligence (AI) or other tools to assist with responses during interviews (whether in-person or virtual) is prohibited unless permission is explicitly provided. Work Model Our people-first culture prioritizes the benefits of collaboration, whether it occurs in person or virtually. To support engagement and effective communication, employees working virtually are generally expected to have their cameras on during meetings. Remote: If this position is listed as remote, there may still be occasions when you are required to work in person at a Booz Allen or customer facility. Hybrid: If this position is listed as hybrid, you will be expected to work from a Booz Allen facility frequently, in alignment with leadership expectations and the needs of the role. You may also be required to work from or visit a customer facility. Onsite: If this position is listed as onsite, work will primarily be performed at a Booz Allen office or customer facility, where employees will collaborate directly with colleagues and customers as required by the role. Commitment to Non-Discrimination All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, local, or international law.
Job Description Job Description BAE Systems, a top-ten prime contractor to the U.S. Department of Defense, enables the U.S. government to transform data into intelligence and provides engineering, integration and sustainment support for critical military platforms and systems. Intelligence & Security provides services and products to the Department of Defense, the government, federal law enforcement officials, and troops deployed around the world. At BAE Systems, we promote a strong, collaborative culture and provide our employees with the tools, skills and training they need to succeed. We are all about trust, camaraderie and a shared ambition to lead the world in defense technologies and national security services. We offer flexible work environment to support the balance in your life and keep you performing at your best. Be a part of a company that is part of the community; driven to improve our future and protect our freedom. We are seeking a talented and experienced Network Engineer with a specialized focus on Firewalls, particularly with expertise in CISCO, Palo Alto, and Netscaler firewall network devices and associated management software to join our technology-based program supporting a key Government customer. The ideal candidate will have a deep understanding of network security principles, excellent problem-solving skills, and a proactive approach to maintaining and optimizing firewall infrastructure. ABC Required Education, Experience, & Skills We are actively seeking Network Engineers with a minimum of 11 years' experience. Bachelor's or Master's Degrees are preferred in one or more of the disciplines described below where specific skills may include the following: Design, implement, and manage firewall solutions utilizing Cisco, Pala Alto, and Netscaler firewall network devices Perform configuration, maintenance, and troubleshooting of firewall policies and rules Monitor network traffic for potential security threats and proactively address vulnerabilities Collaborate with cross-functional teams to ensure network security standards align with business objectives Stay up-to-date with the latest industry trends and best practices in network security and firewall technologies Ability to translate customer requirements into enterprise network solutions Proven experience as a Network Engineer with a focus on firewall technologies Excellent communication and interpersonal skills Ability to work independently and collaboratively in a fast-paced environment Preferred Education, Experience, & Skills Strong proficiency with Palo Alto & CISCO firewall platforms, Netscaler firewall platforms is a plus In-depth knowledge of network protocols, TCP/IP stack, and OSI model Experience with firewall management software such as Cisco FTD and Palo Alto Panorama Experience with a wide variety of network technologies and solutions architectures is a plus Broad understanding of technical principles, theories and concepts in the networking field Knowledge of state-of-the-art systems engineering principles and network design concepts Cloud Service Provider and hybrid cloud experience (extending on-premise networks to cloud providers such as AWS, Azure, Oracle and Google) Industry certifications such as CCNA Security, CCNP Security, Palo Alto Networks Certified Network Security Engineer (PCNSE), or similar industry certifications are preferred Pay Information Full-Time Salary Range: $140690 - $239140 Please note: This range is based on our market pay structures. However, individual salaries are determined by a variety of factors including, but not limited to: business considerations, local market conditions, and internal equity, as well as candidate qualifications, such as skills, education, and experience. Employee Benefits: At BAE Systems, we support our employees in all aspects of their life, including their health and financial well-being. Regular employees scheduled to work 20+ hours per week are offered: health, dental, and vision insurance; health savings accounts; a 401(k) savings plan; disability coverage; and life and accident insurance. We also have an employee assistance program, a legal plan, and other perks including discounts on things like home, auto, and pet insurance. Our leave programs include paid time off, paid holidays, as well as other types of leave, including paid parental, military, bereavement, and any applicable federal and state sick leave. Employees may participate in the company recognition program to receive monetary or non-monetary recognition awards. Other incentives may be available based on position level and/or job specifics. About BAE Systems, Inc. BAE Systems, Inc. is a defense, aerospace, and security company headquartered in Falls Church, Virginia, with more than 40,000 employees worldwide. We serve, supply, and protect those who protect us. As one of the most geographically diverse international defense companies, we deliver a full range of products and services spanning air, land, maritime, space, and cyber, including advanced electronics, intelligence solutions, and dedicated customer support. Our culture is performance-driven and values-led, built on curiosity, creativity, and collaboration. Purpose isn't a tagline here. It's what drives us. We're developing breakthrough technologies that defend national security and make a lasting impact on our communities and our planet. When you join BAE Systems, you're not just building a career. You're contributing to a mission that truly matters. This position will be posted for at least 5 calendar days. The posting will remain active until the position is filled, or a qualified pool of candidates is identified.
11/07/2026
Full time
Job Description Job Description BAE Systems, a top-ten prime contractor to the U.S. Department of Defense, enables the U.S. government to transform data into intelligence and provides engineering, integration and sustainment support for critical military platforms and systems. Intelligence & Security provides services and products to the Department of Defense, the government, federal law enforcement officials, and troops deployed around the world. At BAE Systems, we promote a strong, collaborative culture and provide our employees with the tools, skills and training they need to succeed. We are all about trust, camaraderie and a shared ambition to lead the world in defense technologies and national security services. We offer flexible work environment to support the balance in your life and keep you performing at your best. Be a part of a company that is part of the community; driven to improve our future and protect our freedom. We are seeking a talented and experienced Network Engineer with a specialized focus on Firewalls, particularly with expertise in CISCO, Palo Alto, and Netscaler firewall network devices and associated management software to join our technology-based program supporting a key Government customer. The ideal candidate will have a deep understanding of network security principles, excellent problem-solving skills, and a proactive approach to maintaining and optimizing firewall infrastructure. ABC Required Education, Experience, & Skills We are actively seeking Network Engineers with a minimum of 11 years' experience. Bachelor's or Master's Degrees are preferred in one or more of the disciplines described below where specific skills may include the following: Design, implement, and manage firewall solutions utilizing Cisco, Pala Alto, and Netscaler firewall network devices Perform configuration, maintenance, and troubleshooting of firewall policies and rules Monitor network traffic for potential security threats and proactively address vulnerabilities Collaborate with cross-functional teams to ensure network security standards align with business objectives Stay up-to-date with the latest industry trends and best practices in network security and firewall technologies Ability to translate customer requirements into enterprise network solutions Proven experience as a Network Engineer with a focus on firewall technologies Excellent communication and interpersonal skills Ability to work independently and collaboratively in a fast-paced environment Preferred Education, Experience, & Skills Strong proficiency with Palo Alto & CISCO firewall platforms, Netscaler firewall platforms is a plus In-depth knowledge of network protocols, TCP/IP stack, and OSI model Experience with firewall management software such as Cisco FTD and Palo Alto Panorama Experience with a wide variety of network technologies and solutions architectures is a plus Broad understanding of technical principles, theories and concepts in the networking field Knowledge of state-of-the-art systems engineering principles and network design concepts Cloud Service Provider and hybrid cloud experience (extending on-premise networks to cloud providers such as AWS, Azure, Oracle and Google) Industry certifications such as CCNA Security, CCNP Security, Palo Alto Networks Certified Network Security Engineer (PCNSE), or similar industry certifications are preferred Pay Information Full-Time Salary Range: $140690 - $239140 Please note: This range is based on our market pay structures. However, individual salaries are determined by a variety of factors including, but not limited to: business considerations, local market conditions, and internal equity, as well as candidate qualifications, such as skills, education, and experience. Employee Benefits: At BAE Systems, we support our employees in all aspects of their life, including their health and financial well-being. Regular employees scheduled to work 20+ hours per week are offered: health, dental, and vision insurance; health savings accounts; a 401(k) savings plan; disability coverage; and life and accident insurance. We also have an employee assistance program, a legal plan, and other perks including discounts on things like home, auto, and pet insurance. Our leave programs include paid time off, paid holidays, as well as other types of leave, including paid parental, military, bereavement, and any applicable federal and state sick leave. Employees may participate in the company recognition program to receive monetary or non-monetary recognition awards. Other incentives may be available based on position level and/or job specifics. About BAE Systems, Inc. BAE Systems, Inc. is a defense, aerospace, and security company headquartered in Falls Church, Virginia, with more than 40,000 employees worldwide. We serve, supply, and protect those who protect us. As one of the most geographically diverse international defense companies, we deliver a full range of products and services spanning air, land, maritime, space, and cyber, including advanced electronics, intelligence solutions, and dedicated customer support. Our culture is performance-driven and values-led, built on curiosity, creativity, and collaboration. Purpose isn't a tagline here. It's what drives us. We're developing breakthrough technologies that defend national security and make a lasting impact on our communities and our planet. When you join BAE Systems, you're not just building a career. You're contributing to a mission that truly matters. This position will be posted for at least 5 calendar days. The posting will remain active until the position is filled, or a qualified pool of candidates is identified.
Job Description Job Description TRAVERSA SOLUTIONS, INC. Senior Network Security Engineer - Fortinet Implementation Focused Reports to: Director of Service Delivery In person, Richardson, TX Full-time, Exempt Travel 20-30% About Traversa Traversa Solutions is a network professional services firm based in Richardson, TX. We design, implement and support enterprise LAN, WLAN, SD-WAN and network security for value-added resellers, manufacturers and their end customers. Fortinet is one of our core practices, alongside HPE Aruba Networking, Juniper, Cisco and Arista, for customers in higher education, K-12, energy, industrial/OT and mid-market enterprise. About the Role The Senior Network Security Engineer leads Fortinet implementations from discovery through cutover and handoff. You will own the technical outcome on your projects: running design sessions with the customer, building and migrating FortiGate, SD-WAN and Security Fabric deployments, and reviewing the work of other engineers on the project. We are looking for someone who has already delivered end-to-end FortiGate deployments for external customers and can do it again from day one. Key Responsibilities Lead discovery and design workshops, and produce high-level and low-level designs for FortiGate, SD-WAN and Security Fabric deployments Implement FortiGate next-generation firewall: policy and NAT, IPS, web filtering, application control, SSL inspection, VDOMs and HA clustering Design and deploy Fortinet SD-WAN, including hub-and-spoke and ADVPN overlays, performance SLAs and SD-WAN rules Migrate customers from other firewall platforms (Palo Alto Networks, Cisco ASA/FTD, Check Point, SonicWall), including policy conversion, testing and cutover Migrate remote access from SSL VPN tunnel mode to IPsec VPN and ZTNA as customers move to FortiOS 7.6.3 and later Deploy and configure FortiManager and FortiAnalyzer: ADOMs, templates, device provisioning, logging and reporting Integrate FortiAuthenticator and FortiToken with RADIUS, LDAP and SAML identity sources, and FortiSwitch and FortiAP into the Security Fabric where in scope Deploy FortiGate-VM in AWS and Azure Act as technical lead on assigned projects: manage technical risk, review configurations and mentor other engineers Support pre-sales with scoping, level-of-effort input and bill-of-materials review Deliver knowledge transfer sessions and as-built documentation Maintain customer documentation in SharePoint and record time and project notes in Odoo daily Required Qualifications 7 or more years of enterprise networking and network security experience 4 or more years of hands-on FortiGate design and implementation, including end-to-end enterprise deployments you led 2 or more years deploying Fortinet SD-WAN in production 5 or more years with a value-added reseller, systems integrator, managed services provider or professional services firm, consulting directly with customers: requirements gathering, design and implementation Active Fortinet NSE 4 certification (FortiOS Administrator) and an active NSE 5 or NSE 6 certification, preferably in the Secure Networking track, such as FortiManager Administrator or FortiAnalyzer Administrator Strong command of TCP/IP, BGP, OSPF, IPsec, NAT, DNS, DHCP and IPv6 Ability to explain design decisions to both technical and non-technical stakeholders Able to travel 20 to 30 percent, including overnight travel, and to support after-hours cutovers Authorized to work in the United States. Visa sponsorship is not available for this role Preferred Qualifications Fortinet NSE 7 Secure Networking Architect or SASE Architect FortiNAC, FortiClient EMS or FortiSASE deployment experience Experience with compliance frameworks such as PCI DSS, HIPAA, NERC CIP or IEC 62443 Experience securing industrial and OT networks Python, Ansible or the FortiOS REST API for automation CCNP Security, PCNSE or another professional-level security certification Bachelor's degree in a technical discipline, or equivalent experience Core Values We hire for alignment with Traversa's core values: Communication Ownership Drive for Excellence and Growth Problem Solving and Innovation Benefits 401(k) with up to 3 percent employer match Health, dental and vision insurance Health savings account with $600 annual employer contribution Flexible spending account Life insurance Paid time off Employee assistance program Company-paid training and certification exams Work Location This is an in-person role based in our Richardson, TX office (75081). Traversa does not discriminate in employment on the basis of race, color, religion, sex (including pregnancy and gender identity), national origin, political affiliation, sexual orientation, marital status, disability, genetic information, age, membership in an employee organization, retaliation, parental status, military service, or other non-merit factor.
11/07/2026
Full time
Job Description Job Description TRAVERSA SOLUTIONS, INC. Senior Network Security Engineer - Fortinet Implementation Focused Reports to: Director of Service Delivery In person, Richardson, TX Full-time, Exempt Travel 20-30% About Traversa Traversa Solutions is a network professional services firm based in Richardson, TX. We design, implement and support enterprise LAN, WLAN, SD-WAN and network security for value-added resellers, manufacturers and their end customers. Fortinet is one of our core practices, alongside HPE Aruba Networking, Juniper, Cisco and Arista, for customers in higher education, K-12, energy, industrial/OT and mid-market enterprise. About the Role The Senior Network Security Engineer leads Fortinet implementations from discovery through cutover and handoff. You will own the technical outcome on your projects: running design sessions with the customer, building and migrating FortiGate, SD-WAN and Security Fabric deployments, and reviewing the work of other engineers on the project. We are looking for someone who has already delivered end-to-end FortiGate deployments for external customers and can do it again from day one. Key Responsibilities Lead discovery and design workshops, and produce high-level and low-level designs for FortiGate, SD-WAN and Security Fabric deployments Implement FortiGate next-generation firewall: policy and NAT, IPS, web filtering, application control, SSL inspection, VDOMs and HA clustering Design and deploy Fortinet SD-WAN, including hub-and-spoke and ADVPN overlays, performance SLAs and SD-WAN rules Migrate customers from other firewall platforms (Palo Alto Networks, Cisco ASA/FTD, Check Point, SonicWall), including policy conversion, testing and cutover Migrate remote access from SSL VPN tunnel mode to IPsec VPN and ZTNA as customers move to FortiOS 7.6.3 and later Deploy and configure FortiManager and FortiAnalyzer: ADOMs, templates, device provisioning, logging and reporting Integrate FortiAuthenticator and FortiToken with RADIUS, LDAP and SAML identity sources, and FortiSwitch and FortiAP into the Security Fabric where in scope Deploy FortiGate-VM in AWS and Azure Act as technical lead on assigned projects: manage technical risk, review configurations and mentor other engineers Support pre-sales with scoping, level-of-effort input and bill-of-materials review Deliver knowledge transfer sessions and as-built documentation Maintain customer documentation in SharePoint and record time and project notes in Odoo daily Required Qualifications 7 or more years of enterprise networking and network security experience 4 or more years of hands-on FortiGate design and implementation, including end-to-end enterprise deployments you led 2 or more years deploying Fortinet SD-WAN in production 5 or more years with a value-added reseller, systems integrator, managed services provider or professional services firm, consulting directly with customers: requirements gathering, design and implementation Active Fortinet NSE 4 certification (FortiOS Administrator) and an active NSE 5 or NSE 6 certification, preferably in the Secure Networking track, such as FortiManager Administrator or FortiAnalyzer Administrator Strong command of TCP/IP, BGP, OSPF, IPsec, NAT, DNS, DHCP and IPv6 Ability to explain design decisions to both technical and non-technical stakeholders Able to travel 20 to 30 percent, including overnight travel, and to support after-hours cutovers Authorized to work in the United States. Visa sponsorship is not available for this role Preferred Qualifications Fortinet NSE 7 Secure Networking Architect or SASE Architect FortiNAC, FortiClient EMS or FortiSASE deployment experience Experience with compliance frameworks such as PCI DSS, HIPAA, NERC CIP or IEC 62443 Experience securing industrial and OT networks Python, Ansible or the FortiOS REST API for automation CCNP Security, PCNSE or another professional-level security certification Bachelor's degree in a technical discipline, or equivalent experience Core Values We hire for alignment with Traversa's core values: Communication Ownership Drive for Excellence and Growth Problem Solving and Innovation Benefits 401(k) with up to 3 percent employer match Health, dental and vision insurance Health savings account with $600 annual employer contribution Flexible spending account Life insurance Paid time off Employee assistance program Company-paid training and certification exams Work Location This is an in-person role based in our Richardson, TX office (75081). Traversa does not discriminate in employment on the basis of race, color, religion, sex (including pregnancy and gender identity), national origin, political affiliation, sexual orientation, marital status, disability, genetic information, age, membership in an employee organization, retaliation, parental status, military service, or other non-merit factor.
Job Description Job Description POSITION SUMMARY: The Senior Manager, Network Infrastructure & Services is responsible for the strategy, architecture, security, availability, and lifecycle management of all network and connectivity services supporting LBCT's critical business and terminal operations. This position provides leadership and oversight for enterprise networking, telecommunications, wireless infrastructure, operational technology (OT) connectivity, carrier services, network security platforms, and managed service providers. The Senior Manager oversees Cisco networking, Fortinet and Palo Alto security platforms, enterprise wireless infrastructure, network segmentation, carrier services, and managed service provider governance. The role ensures highly available, secure, and resilient network services capable of supporting 24x7 marine terminal operations. The Senior Manager develops technology roadmaps, establishes engineering standards, manages vendor relationships, and drives continuous improvement through automation, analytics, and emerging technologies. This position works closely with Cyber Security, Systems Administration, Operations, and business stakeholders to ensure infrastructure services meet operational and strategic business requirements. ESSENTIAL DUTIES AND RESPONSIBILITIES Maintain a safe and secure working environment while promoting IT Operational excellence throughout the organization. Develop and maintain the terminal's network architecture, standards, technology roadmap, and lifecycle strategy. Architect highly available LAN, WAN, wireless, Internet, data center, cloud, and remote-access connectivity. Design networks for environments requiring extremely high availability and rapid recovery from infrastructure failures. Establish architecture and engineering standards for enterprise and outdoor wireless infrastructure. Establish network segmentation and security architectures separating corporate IT, OT, vendors, Internet-facing systems, and other security zones. Develop standards for switching, routing, firewalls, wireless, IP addressing, DNS/DHCP, network access control, and connectivity services. Evaluate emerging technologies and determine their applicability to terminal operations. Ensure infrastructure capacity supports growth in automation, IoT/OT devices, video, telemetry, mobile equipment, and cloud services. Participate in operational change management to minimize disruption to terminal activities. Provide technical leadership and governance for the terminal's Cisco environment. Maintain configuration, architecture, lifecycle, and resilience standards across the network environment. Lead network-security architecture and operations using technologies including Fortinet and Palo Alto Networks, as applicable. Maintain compliance with industry regulations and standards, including those specific to maritime and port operations. Partner with cybersecurity team to implement Zero Trust principles and strengthen protection of critical IT and operational infrastructure. Assist cyber team with regular security audits and vulnerability assessments. Own the performance and governance of network-related managed service providers, telecommunications carriers, contractors, and technology vendors. Maintain appropriate records of vendor issues, decisions, commitments, and outstanding actions. Enforce and monitor contractual service level agreements (SLAs) with IT vendors and assigned independent contractors. Foster a culture of accountability, technical excellence, continuous improvement, and customer service. With other IT management, contribute to the development and implementation of the IT strategy for the terminal. Perform other related duties as assigned. REQUIRED KNOWLEDGE, SKILLS, AND ABILITIES : Strong managerial, supervisory, and decision-making skills to achieve department and company goals. Excellent interpersonal skills. Ability to interact with a variety of people throughout the corporation. Ability to remain calm and professional during confrontational situations. Effective public speaking and presentation skills. Be able to present and defend a point of view. Possess excellent communication, written, oral, and interpersonal and teamwork skills, communicate constructively and confidently, listen openly, and collaborate well with staff and others in different groups. Ability to relate information from a multitude of sources. Capability to turn theoretical information into practical applications. Convey a professional and positive attitude with action/results orientation to problem solving and elimination of backlogs. Proven ability and experience in exercising good judgment and discretion in handling confidential materials and matters. Possess strong organizational and analytical skills in managing daily, weekly, monthly, quarterly, or annual deadlines, but flexible to a changing list of priorities, sometimes daily. Excellent attention to detail with a high degree of accuracy. Ability to handle multiple demands; prioritize workloads; establish and maintain positive, cooperative, and productive working relationships. Advanced understanding and familiarity with Microsoft: Server, SQL, Office Suite, Azure, Active Directory, and DNS. Advanced understanding of and familiarity with VMWare and Dell EMC storage solutions. Experience with vulnerability scanning solutions. Familiarity with the NIST Cybersecurity Framework, CIS Controls, and relevant cybersecurity frameworks. In-depth knowledge of Routing and switching, TCP/IP, BGP and OSPF, VLANs and VRFs, Wireless networking, Firewalls, VPN technologies, Network segmentation, DNS/DHCP, Network monitoring, and High-availability architecture. Network automation using APIs, scripting, orchestration platforms, or infrastructure as code. Knowledge of marine terminal technology is highly desirable, including Terminal Operating Systems, Gate systems, OCR, RFID, GPS/location technologies, and truck appointment systems (NAVIS experience a plus). Stay informed about emerging technologies and trends and make recommendations for future IT investments. EDUCATION AND/OR EXPERIENCE Bachelor's degree in Information Technology, Computer Science, Engineering, or a related field. Seven (7+) years of progressive experience in network engineering, telecommunications, or infrastructure operations. Five (5+) years of leadership experience managing technical teams or critical infrastructure services. Advanced experience with Cisco networking technologies. Significant experience with enterprise firewall and security technologies, Palo Alto and/or Fortinet preferred. Experience in a marine container terminal or similar industrial environment is preferred Experience working in a unionized environment, a plus. PHYSICAL REQUIREMENTS The ability to work any days or hours, including weekends and holidays. The ability to walk and stand for extended periods of time. The ability to use a computer and keyboard. The ability to sit and work at a desk and/or computer for extended periods of time. The ability to lift 30-50 pounds with or without assistance. The ability to drive a company owned pickup truck. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions of the position. WORKING ENVIRONMENT The work is performed both inside and outside at LBCT sites, various marine terminal locations, in temporary offices and in classrooms. Position is based in Long Beach, CA; work assignments may require travel to other marine terminal sites or travel to other offices. TWIC: You will be required to apply and successfully obtain a TWIC (Transportation Worker's Identification Credential). NOTE: This job description is not all-inclusive. An Employee may perform other related duties as required to meet the ongoing needs of LBCT LLC. LBCT LLC is an equal opportunity employer committed to equity and inclusion in the workplace. Compensation details: 00 Yearly Salary PI8967c5-
11/07/2026
Full time
Job Description Job Description POSITION SUMMARY: The Senior Manager, Network Infrastructure & Services is responsible for the strategy, architecture, security, availability, and lifecycle management of all network and connectivity services supporting LBCT's critical business and terminal operations. This position provides leadership and oversight for enterprise networking, telecommunications, wireless infrastructure, operational technology (OT) connectivity, carrier services, network security platforms, and managed service providers. The Senior Manager oversees Cisco networking, Fortinet and Palo Alto security platforms, enterprise wireless infrastructure, network segmentation, carrier services, and managed service provider governance. The role ensures highly available, secure, and resilient network services capable of supporting 24x7 marine terminal operations. The Senior Manager develops technology roadmaps, establishes engineering standards, manages vendor relationships, and drives continuous improvement through automation, analytics, and emerging technologies. This position works closely with Cyber Security, Systems Administration, Operations, and business stakeholders to ensure infrastructure services meet operational and strategic business requirements. ESSENTIAL DUTIES AND RESPONSIBILITIES Maintain a safe and secure working environment while promoting IT Operational excellence throughout the organization. Develop and maintain the terminal's network architecture, standards, technology roadmap, and lifecycle strategy. Architect highly available LAN, WAN, wireless, Internet, data center, cloud, and remote-access connectivity. Design networks for environments requiring extremely high availability and rapid recovery from infrastructure failures. Establish architecture and engineering standards for enterprise and outdoor wireless infrastructure. Establish network segmentation and security architectures separating corporate IT, OT, vendors, Internet-facing systems, and other security zones. Develop standards for switching, routing, firewalls, wireless, IP addressing, DNS/DHCP, network access control, and connectivity services. Evaluate emerging technologies and determine their applicability to terminal operations. Ensure infrastructure capacity supports growth in automation, IoT/OT devices, video, telemetry, mobile equipment, and cloud services. Participate in operational change management to minimize disruption to terminal activities. Provide technical leadership and governance for the terminal's Cisco environment. Maintain configuration, architecture, lifecycle, and resilience standards across the network environment. Lead network-security architecture and operations using technologies including Fortinet and Palo Alto Networks, as applicable. Maintain compliance with industry regulations and standards, including those specific to maritime and port operations. Partner with cybersecurity team to implement Zero Trust principles and strengthen protection of critical IT and operational infrastructure. Assist cyber team with regular security audits and vulnerability assessments. Own the performance and governance of network-related managed service providers, telecommunications carriers, contractors, and technology vendors. Maintain appropriate records of vendor issues, decisions, commitments, and outstanding actions. Enforce and monitor contractual service level agreements (SLAs) with IT vendors and assigned independent contractors. Foster a culture of accountability, technical excellence, continuous improvement, and customer service. With other IT management, contribute to the development and implementation of the IT strategy for the terminal. Perform other related duties as assigned. REQUIRED KNOWLEDGE, SKILLS, AND ABILITIES : Strong managerial, supervisory, and decision-making skills to achieve department and company goals. Excellent interpersonal skills. Ability to interact with a variety of people throughout the corporation. Ability to remain calm and professional during confrontational situations. Effective public speaking and presentation skills. Be able to present and defend a point of view. Possess excellent communication, written, oral, and interpersonal and teamwork skills, communicate constructively and confidently, listen openly, and collaborate well with staff and others in different groups. Ability to relate information from a multitude of sources. Capability to turn theoretical information into practical applications. Convey a professional and positive attitude with action/results orientation to problem solving and elimination of backlogs. Proven ability and experience in exercising good judgment and discretion in handling confidential materials and matters. Possess strong organizational and analytical skills in managing daily, weekly, monthly, quarterly, or annual deadlines, but flexible to a changing list of priorities, sometimes daily. Excellent attention to detail with a high degree of accuracy. Ability to handle multiple demands; prioritize workloads; establish and maintain positive, cooperative, and productive working relationships. Advanced understanding and familiarity with Microsoft: Server, SQL, Office Suite, Azure, Active Directory, and DNS. Advanced understanding of and familiarity with VMWare and Dell EMC storage solutions. Experience with vulnerability scanning solutions. Familiarity with the NIST Cybersecurity Framework, CIS Controls, and relevant cybersecurity frameworks. In-depth knowledge of Routing and switching, TCP/IP, BGP and OSPF, VLANs and VRFs, Wireless networking, Firewalls, VPN technologies, Network segmentation, DNS/DHCP, Network monitoring, and High-availability architecture. Network automation using APIs, scripting, orchestration platforms, or infrastructure as code. Knowledge of marine terminal technology is highly desirable, including Terminal Operating Systems, Gate systems, OCR, RFID, GPS/location technologies, and truck appointment systems (NAVIS experience a plus). Stay informed about emerging technologies and trends and make recommendations for future IT investments. EDUCATION AND/OR EXPERIENCE Bachelor's degree in Information Technology, Computer Science, Engineering, or a related field. Seven (7+) years of progressive experience in network engineering, telecommunications, or infrastructure operations. Five (5+) years of leadership experience managing technical teams or critical infrastructure services. Advanced experience with Cisco networking technologies. Significant experience with enterprise firewall and security technologies, Palo Alto and/or Fortinet preferred. Experience in a marine container terminal or similar industrial environment is preferred Experience working in a unionized environment, a plus. PHYSICAL REQUIREMENTS The ability to work any days or hours, including weekends and holidays. The ability to walk and stand for extended periods of time. The ability to use a computer and keyboard. The ability to sit and work at a desk and/or computer for extended periods of time. The ability to lift 30-50 pounds with or without assistance. The ability to drive a company owned pickup truck. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions of the position. WORKING ENVIRONMENT The work is performed both inside and outside at LBCT sites, various marine terminal locations, in temporary offices and in classrooms. Position is based in Long Beach, CA; work assignments may require travel to other marine terminal sites or travel to other offices. TWIC: You will be required to apply and successfully obtain a TWIC (Transportation Worker's Identification Credential). NOTE: This job description is not all-inclusive. An Employee may perform other related duties as required to meet the ongoing needs of LBCT LLC. LBCT LLC is an equal opportunity employer committed to equity and inclusion in the workplace. Compensation details: 00 Yearly Salary PI8967c5-
Hunter Douglas seeks an IT Senior Network Engineer to design, secure, and optimize enterprise networks that power our custom manufacturing and smart-home solutions. In this role, you will architect and manage LAN/WAN, wireless, VPN, and firewall infrastructure across plants and offices, ensuring high availability for production and corporate systems. You'll troubleshoot complex issues, drive upgrades, bolster network security, and collaborate closely with cross-functional teams. Ideal candidates bring strong Cisco/networking expertise, experience in high-uptime environments, and a passion for reliable, scalable infrastructure. Responsibilities Design, implement, and maintain secure, high-availability LAN/WAN and wireless networks across manufacturing and corporate sites Administer and optimize firewalls, VPNs, load balancers, and network monitoring tools Troubleshoot complex network issues, ensuring uptime for production, smart-factory, and office environments Plan and execute network upgrades, capacity planning, and lifecycle management Harden network security, enforce policies, and support compliance with corporate standards Collaborate with infrastructure, applications, and OT/plant teams on integrated solutions Document network designs, configurations, and diagrams; create runbooks and standards Participate in on-call rotation and provide Tier 3 escalation support Required Skills Network design and architecture (LAN/WAN/WLAN) Cisco routing and switching (IOS/NX-OS) Firewall administration (e.g., Palo Alto, Fortinet, Cisco ASA/Firepower) VPN and remote access technologies Network security and segmentation Load balancers and traffic management Network monitoring and performance tools (e.g., Solar Winds, PRTG, Nagios) Qo S and voice/data convergence High availability and redundancy (HSRP/VRRP, clustering) IPv4/IPv6, BGP/OSPF/EIGRP routing protocols
11/07/2026
Full time
Hunter Douglas seeks an IT Senior Network Engineer to design, secure, and optimize enterprise networks that power our custom manufacturing and smart-home solutions. In this role, you will architect and manage LAN/WAN, wireless, VPN, and firewall infrastructure across plants and offices, ensuring high availability for production and corporate systems. You'll troubleshoot complex issues, drive upgrades, bolster network security, and collaborate closely with cross-functional teams. Ideal candidates bring strong Cisco/networking expertise, experience in high-uptime environments, and a passion for reliable, scalable infrastructure. Responsibilities Design, implement, and maintain secure, high-availability LAN/WAN and wireless networks across manufacturing and corporate sites Administer and optimize firewalls, VPNs, load balancers, and network monitoring tools Troubleshoot complex network issues, ensuring uptime for production, smart-factory, and office environments Plan and execute network upgrades, capacity planning, and lifecycle management Harden network security, enforce policies, and support compliance with corporate standards Collaborate with infrastructure, applications, and OT/plant teams on integrated solutions Document network designs, configurations, and diagrams; create runbooks and standards Participate in on-call rotation and provide Tier 3 escalation support Required Skills Network design and architecture (LAN/WAN/WLAN) Cisco routing and switching (IOS/NX-OS) Firewall administration (e.g., Palo Alto, Fortinet, Cisco ASA/Firepower) VPN and remote access technologies Network security and segmentation Load balancers and traffic management Network monitoring and performance tools (e.g., Solar Winds, PRTG, Nagios) Qo S and voice/data convergence High availability and redundancy (HSRP/VRRP, clustering) IPv4/IPv6, BGP/OSPF/EIGRP routing protocols
