Global Enterprise Services, LLC
Fort George G Meade, Maryland
Job Description Job Description GES is seeking a Principal Network Engineer specializing in routing and switching to serve as the senior technical authority for the routed and switched enterprise. The role is responsible for advancing network innovation through the execution of strategic design and implementation efforts that improve the security, scalability, resiliency, and performance of the enterprise network. This position is responsible for overall network engineering support across a broad range of efforts, including planning, designing, and evaluating the various components of the network. Duties include providing specifications for network architecture, evaluating and recommending new technologies to enhance current capabilities, performing needs assessments, and directing the installation, modification, testing, and servicing of network infrastructure. The successful candidate sets technical direction for routing and switching across the enterprise - defining standards, resolving the architecture questions no one else can, and directing the work of other engineers against designs they own. Days Required in Office: Five Days in Office Until Acclimated and then possibly One Day Remote Clearance Required: Secret Scope and Impact: Impact: Influences development of solutions that impact strategic project and program goals and business results. Recommends and develops new technical solutions, products, and standards. Leads and manages the work of other technical staff that has significant impact on project results and outputs. Complexity: Resolves highly complex problems through significant application of technical knowledge, conceptualization, reasoning, and interpretation. Develops solutions that are highly innovative and achieved through research and integration of best practices. Communication: Communicates with executive and client leadership on matters of significant technical importance. Presents architecture recommendations, implementation plans, risks, dependencies, and status to technical leadership, stakeholders, and approval boards, and works to build consensus around new concepts, practices, and approaches. Knowledge: In-depth understanding of network engineering principles, theories, and concepts and their application across a range of programs. Serves as a subject matter expert within the routing and switching domain. Primary Responsibilities: Architecture and Design Authority Own the enterprise routing and switching architecture, including core, distribution, access, WAN edge, and data center interconnect designs. Define routing architecture and policy standards across BGP, OSPF, EIGRP, and static routing, including addressing strategy, route filtering and summarization, path selection, redistribution boundaries, and convergence targets. Define Layer 2 and high-availability architecture, including VLAN and spanning-tree strategy, link aggregation, redundancy models, VRF and segmentation structure, multicast design, and QoS policy architecture. Evaluate the current network architecture, identify gaps and improvement opportunities, estimate level of effort, assess implementation risk, and develop practical engineering plans to improve enterprise capabilities. Provide specifications for network architecture, evaluate and recommend emerging technologies, and perform needs assessments to inform design and investment decisions. Establish and enforce configuration standards, design patterns, and technical baselines that other engineers build against. Project Execution Drive strategic engineering projects from concept through implementation, including architecture evaluation, requirements analysis, dependency identification, design coordination, planning, execution, validation, and transition to operations. Develop and manage implementation plans, schedules, cutover strategies, contingency plans, rollback procedures, validation steps, stakeholder communications, and change documentation for mission-critical network changes. Lead network modernization efforts such as segmentation, IPv4/IPv6 transition, network optimization, connectivity consolidation, lifecycle replacement, automation, and software-defined networking adoption. Coordinate change windows, maintenance activities, test validation, and rollback procedures for high-impact network activities. Partner with architecture, cybersecurity, operations, project management, and technical SME teams to resolve blockers, manage dependencies, and reduce delivery risk. Technical Leadership Serve as the final technical escalation point for complex routing, switching, transport, and performance problems spanning multiple domains and vendors. Provide technical direction, mentoring, and day-to-day guidance to network engineers, administrators, and analysts; review designs and implementation work for technical quality. Organize technical priorities, track details across concurrent efforts, manage competing demands, and maintain accountability against aggressive schedules. Continuously improve engineering processes, documentation standards, implementation playbooks, migration runbooks, technical standards, and execution models to accelerate delivery, reduce rework, improve operational handoff, and lower sustainment burden. Documentation Develop and maintain engineering and operational documentation, including: Logical and physical network designs and architecture diagrams Routing architecture, policy standards, and addressing plans Configuration standards, design patterns, and technical baselines Implementation and cutover plans with rollback and contingency procedures Test and validation plans Risk, dependency, and decision registers Technical standards, playbooks, and runbooks As-built and operations transition documentation This position requires more than a senior engineer executing assigned work. It requires the person who decides what the routing and switching architecture should be, defends that decision in front of leadership and approval boards, and then makes sure it gets built correctly. The successful engineer is equally credible in the deepest technical detail - a BGP path-selection argument, a convergence problem nobody else has reproduced - and in a room where the question is what the enterprise should do next and why. Required Qualifications: Bachelor's degree or equivalent experience and 12+ years of prior relevant experience, or Master's degree with 10+ years of experience. Specific experience, education, and training may be considered in lieu of a degree. Expert-level hands-on experience designing, engineering, and troubleshooting enterprise routing and switching infrastructure in large, complex environments. Deep knowledge of TCP/IP, BGP, OSPF, EIGRP, route policy and redistribution, VLANs, spanning tree, link aggregation, VRFs, MPLS, multicast, QoS, NAT, and high-availability design. Experience evaluating enterprise network architectures and developing improvement plans across LAN, WAN, WLAN, routing, switching, firewalls, VPN, proxies, software-defined networking, and cloud-connected environments. Experience leading network engineering projects from planning through implementation, including requirements analysis, dependency management, risk reduction, contingency planning, execution oversight, validation, and operational transition. Experience serving as a senior technical lead directing the work of other network engineers, administrators, or analysts. Hands-on experience with two or more of the following network technologies: Cisco, Aruba, Palo Alto, Dell, Infoblox, and Brocade. Experience documenting logical and physical network designs, implementation plans, risks, dependencies, decision points, and technical recommendations using tools such as Visio, PowerPoint, Cameo, or similar. Excellent written and verbal communication skills, including experience presenting architecture recommendations, implementation plans, risks, and status to technical leadership, stakeholders, and approval boards. Current IAT Level II or higher certification, such as Security+ or CISSP. Active DoD Secret clearance. Desired Qualifications: Cisco Certified Network Professional (CCNP) Enterprise, CCIE, or equivalent certification. Experience leading enterprise network innovation efforts such as segmentation, enterprise Wi-Fi modernization, IPv6 transition, automation, SDN, cloud connectivity, zero-trust-aligned networking, or security stack modernization. Experience with SD-WAN, SD-Access, Cisco Catalyst Center (DNA Center), or similar controller-based network architectures. Experience with network automation and infrastructure-as-code using Python, Ansible, REST APIs, or similar. Experience integrating enterprise networking with cloud infrastructure, including hybrid connectivity, cloud routing, and secure interconnects. Experience developing repeatable engineering execution frameworks, implementation playbooks, migration runbooks, technical standards, and risk-reduction processes. Experience with Jira, Confluence, or other project and knowledge-management tools used to coordinate technical work across distributed engineering teams. Understanding of Federal Government application, server, and network security requirements such as NIST, FedRAMP, FISMA, RMF, and DoD cybersecurity requirements.
Job Description Job Description GES is seeking a Principal Network Engineer specializing in routing and switching to serve as the senior technical authority for the routed and switched enterprise. The role is responsible for advancing network innovation through the execution of strategic design and implementation efforts that improve the security, scalability, resiliency, and performance of the enterprise network. This position is responsible for overall network engineering support across a broad range of efforts, including planning, designing, and evaluating the various components of the network. Duties include providing specifications for network architecture, evaluating and recommending new technologies to enhance current capabilities, performing needs assessments, and directing the installation, modification, testing, and servicing of network infrastructure. The successful candidate sets technical direction for routing and switching across the enterprise - defining standards, resolving the architecture questions no one else can, and directing the work of other engineers against designs they own. Days Required in Office: Five Days in Office Until Acclimated and then possibly One Day Remote Clearance Required: Secret Scope and Impact: Impact: Influences development of solutions that impact strategic project and program goals and business results. Recommends and develops new technical solutions, products, and standards. Leads and manages the work of other technical staff that has significant impact on project results and outputs. Complexity: Resolves highly complex problems through significant application of technical knowledge, conceptualization, reasoning, and interpretation. Develops solutions that are highly innovative and achieved through research and integration of best practices. Communication: Communicates with executive and client leadership on matters of significant technical importance. Presents architecture recommendations, implementation plans, risks, dependencies, and status to technical leadership, stakeholders, and approval boards, and works to build consensus around new concepts, practices, and approaches. Knowledge: In-depth understanding of network engineering principles, theories, and concepts and their application across a range of programs. Serves as a subject matter expert within the routing and switching domain. Primary Responsibilities: Architecture and Design Authority Own the enterprise routing and switching architecture, including core, distribution, access, WAN edge, and data center interconnect designs. Define routing architecture and policy standards across BGP, OSPF, EIGRP, and static routing, including addressing strategy, route filtering and summarization, path selection, redistribution boundaries, and convergence targets. Define Layer 2 and high-availability architecture, including VLAN and spanning-tree strategy, link aggregation, redundancy models, VRF and segmentation structure, multicast design, and QoS policy architecture. Evaluate the current network architecture, identify gaps and improvement opportunities, estimate level of effort, assess implementation risk, and develop practical engineering plans to improve enterprise capabilities. Provide specifications for network architecture, evaluate and recommend emerging technologies, and perform needs assessments to inform design and investment decisions. Establish and enforce configuration standards, design patterns, and technical baselines that other engineers build against. Project Execution Drive strategic engineering projects from concept through implementation, including architecture evaluation, requirements analysis, dependency identification, design coordination, planning, execution, validation, and transition to operations. Develop and manage implementation plans, schedules, cutover strategies, contingency plans, rollback procedures, validation steps, stakeholder communications, and change documentation for mission-critical network changes. Lead network modernization efforts such as segmentation, IPv4/IPv6 transition, network optimization, connectivity consolidation, lifecycle replacement, automation, and software-defined networking adoption. Coordinate change windows, maintenance activities, test validation, and rollback procedures for high-impact network activities. Partner with architecture, cybersecurity, operations, project management, and technical SME teams to resolve blockers, manage dependencies, and reduce delivery risk. Technical Leadership Serve as the final technical escalation point for complex routing, switching, transport, and performance problems spanning multiple domains and vendors. Provide technical direction, mentoring, and day-to-day guidance to network engineers, administrators, and analysts; review designs and implementation work for technical quality. Organize technical priorities, track details across concurrent efforts, manage competing demands, and maintain accountability against aggressive schedules. Continuously improve engineering processes, documentation standards, implementation playbooks, migration runbooks, technical standards, and execution models to accelerate delivery, reduce rework, improve operational handoff, and lower sustainment burden. Documentation Develop and maintain engineering and operational documentation, including: Logical and physical network designs and architecture diagrams Routing architecture, policy standards, and addressing plans Configuration standards, design patterns, and technical baselines Implementation and cutover plans with rollback and contingency procedures Test and validation plans Risk, dependency, and decision registers Technical standards, playbooks, and runbooks As-built and operations transition documentation This position requires more than a senior engineer executing assigned work. It requires the person who decides what the routing and switching architecture should be, defends that decision in front of leadership and approval boards, and then makes sure it gets built correctly. The successful engineer is equally credible in the deepest technical detail - a BGP path-selection argument, a convergence problem nobody else has reproduced - and in a room where the question is what the enterprise should do next and why. Required Qualifications: Bachelor's degree or equivalent experience and 12+ years of prior relevant experience, or Master's degree with 10+ years of experience. Specific experience, education, and training may be considered in lieu of a degree. Expert-level hands-on experience designing, engineering, and troubleshooting enterprise routing and switching infrastructure in large, complex environments. Deep knowledge of TCP/IP, BGP, OSPF, EIGRP, route policy and redistribution, VLANs, spanning tree, link aggregation, VRFs, MPLS, multicast, QoS, NAT, and high-availability design. Experience evaluating enterprise network architectures and developing improvement plans across LAN, WAN, WLAN, routing, switching, firewalls, VPN, proxies, software-defined networking, and cloud-connected environments. Experience leading network engineering projects from planning through implementation, including requirements analysis, dependency management, risk reduction, contingency planning, execution oversight, validation, and operational transition. Experience serving as a senior technical lead directing the work of other network engineers, administrators, or analysts. Hands-on experience with two or more of the following network technologies: Cisco, Aruba, Palo Alto, Dell, Infoblox, and Brocade. Experience documenting logical and physical network designs, implementation plans, risks, dependencies, decision points, and technical recommendations using tools such as Visio, PowerPoint, Cameo, or similar. Excellent written and verbal communication skills, including experience presenting architecture recommendations, implementation plans, risks, and status to technical leadership, stakeholders, and approval boards. Current IAT Level II or higher certification, such as Security+ or CISSP. Active DoD Secret clearance. Desired Qualifications: Cisco Certified Network Professional (CCNP) Enterprise, CCIE, or equivalent certification. Experience leading enterprise network innovation efforts such as segmentation, enterprise Wi-Fi modernization, IPv6 transition, automation, SDN, cloud connectivity, zero-trust-aligned networking, or security stack modernization. Experience with SD-WAN, SD-Access, Cisco Catalyst Center (DNA Center), or similar controller-based network architectures. Experience with network automation and infrastructure-as-code using Python, Ansible, REST APIs, or similar. Experience integrating enterprise networking with cloud infrastructure, including hybrid connectivity, cloud routing, and secure interconnects. Experience developing repeatable engineering execution frameworks, implementation playbooks, migration runbooks, technical standards, and risk-reduction processes. Experience with Jira, Confluence, or other project and knowledge-management tools used to coordinate technical work across distributed engineering teams. Understanding of Federal Government application, server, and network security requirements such as NIST, FedRAMP, FISMA, RMF, and DoD cybersecurity requirements.
JCS Solutions LLC
Fort George G Meade, Maryland
Job Description Job Description Grow, innovate, and generate progress: Harness your expertise to solve challenges and celebrate success! Job Summary JCS Solutions is seeking a Principal Network Engineer specializing in Routing and Switching to serve as the senior technical authority for a large-scale enterprise network supporting a Department of Defense environment. This role is responsible for advancing network innovation through strategic design, modernization, and implementation efforts that improve network security, scalability, resiliency, and performance. The successful candidate will provide architectural leadership across core, distribution, access, WAN, and data center environments while defining enterprise standards for routing, switching, segmentation, resiliency, and network modernization initiatives. This individual will serve as the final technical escalation point for complex networking challenges and will provide oversight and direction to engineering teams executing enterprise network initiatives. This role requires deep technical expertise, strong leadership skills, and the ability to communicate complex architectural decisions and implementation strategies to government stakeholders, technical leadership, and approval boards. Location: Ft. Meade, MD Clearance: Secret Salary: $104,000.00 - $149,000.00 Certification: Active DoD 8140/8570 IAT Level II certification. What's in it for you: Join a premier technology firm specializing in innovative solutions. Be part of a collaborative, inclusive, and innovative work culture. Enjoy tremendous growth potential in a high-performing team environment. A robust benefits package: Health, dental, and vision insurance Life insurance Short-and-long term disability Paid time off (PTO) 401k retirement plan with employer match Annual Professional Development Reimbursement Program And more! What you will do: Architecture and Design Authority Own the enterprise routing and switching architecture, including core, distribution, access, WAN edge, and data center interconnect designs. Define routing architecture and policy standards across BGP, OSPF, EIGRP, and static routing environments. Develop addressing strategies, route filtering and summarization standards, redistribution boundaries, convergence targets, and path-selection policies. Define Layer 2 and high-availability architectures, including VLAN strategy, spanning-tree design, link aggregation, VRFs, multicast, segmentation, redundancy models, and QoS policies. Evaluate current network architectures and identify opportunities to improve performance, scalability, resiliency, and operational efficiency. Establish and enforce network design standards, configuration baselines, and architectural patterns. Project Execution Lead network engineering projects from planning through implementation. Perform architecture reviews, requirements analysis, dependency identification, implementation planning, execution oversight, validation, and operational transition activities. Develop implementation plans, schedules, cutover procedures, rollback plans, contingency procedures, and validation methodologies. Lead network modernization initiatives involving segmentation, IPv4/IPv6 transition, network optimization, lifecycle replacement, connectivity consolidation, automation, and software-defined networking adoption. Coordinate maintenance windows, testing events, deployment activities, and rollback execution for mission-critical network changes. Collaborate with network architects, cybersecurity teams, operations personnel, project managers, and technical subject matter experts to deliver complex infrastructure initiatives. Technical Leadership Serve as the final escalation point for complex routing, switching, transport, convergence, and network performance issues. Provide technical direction, mentoring, and day-to-day guidance to network engineers, administrators, and analysts. Review engineering designs and implementation activities to ensure technical quality and architectural compliance. Manage competing priorities and concurrent engineering efforts while maintaining accountability for successful delivery. Improve engineering processes, implementation playbooks, runbooks, technical standards, documentation practices, and operational transition procedures. Documentation Develop and maintain logical and physical network architecture diagrams. Create routing standards, policy documentation, address plans, and configuration baselines. Develop implementation plans, testing procedures, validation criteria, and rollback documentation. Maintain risk assessments, decision registers, dependency tracking documents, technical standards, and runbooks. Produce as-built documentation and operational transition packages. What you will bring: Bachelor's degree or equivalent experience with 12+ years of relevant experience, or Master's degree with 10+ years of experience. Specific experience, education, and training may be considered in lieu of a degree. Active DoD Secret security clearance. Current DoD 8140/8570 IAT Level II certification or higher. Significant experience designing and implementing network security architecture in complex, large-scale enterprise environments. Experience serving as a senior technical lead directing network and security engineers, administrators, analysts, or implementation teams. Experience leading security engineering projects from planning through implementation. Hands-on engineering experience with: Next-generation firewalls Intrusion detection and prevention systems Proxies and TLS inspection solutions VPN and encryption services Network access control platforms Experience with network segmentation and secure connectivity initiatives. Experience with data-flow analysis, firewall policy reviews, ACL management, security-zone design, stakeholder coordination, and implementation planning. Strong knowledge of: TCP/IP Routing protocols Switching VLANs DNS/DHCP/IPAM NAT QoS Software-defined networking Cloud-connected environments Hands-on experience with two or more of the following technologies: Palo Alto Cisco Aruba Dell Infoblox Brocade Working knowledge of: NIST FedRAMP FISMA RMF DISA STIGs DoD cybersecurity requirements Demonstrated ability to manage competing priorities and deliver complex technical initiatives. Experience documenting network and security architectures using Visio, PowerPoint, Cameo, or similar tools. Excellent written and verbal communication skills. Experience briefing senior leadership, cybersecurity authorities, stakeholders, and approval boards. Experience with wireless security and authentication, including WPA2/WPA3, 802.1X, RADIUS, and enterprise NAC platforms. Experience integrating wireless infrastructure with enterprise networking services, including DNS, DHCP, NTP, routing, and monitoring platforms. Experience developing and executing engineering designs, implementation plans, migration procedures, test plans, and production deployments. Strong troubleshooting and analytical skills with the ability to resolve complex wireless connectivity, authentication, and network performance issues. Strong written and verbal communication skills.
Job Description Job Description Grow, innovate, and generate progress: Harness your expertise to solve challenges and celebrate success! Job Summary JCS Solutions is seeking a Principal Network Engineer specializing in Routing and Switching to serve as the senior technical authority for a large-scale enterprise network supporting a Department of Defense environment. This role is responsible for advancing network innovation through strategic design, modernization, and implementation efforts that improve network security, scalability, resiliency, and performance. The successful candidate will provide architectural leadership across core, distribution, access, WAN, and data center environments while defining enterprise standards for routing, switching, segmentation, resiliency, and network modernization initiatives. This individual will serve as the final technical escalation point for complex networking challenges and will provide oversight and direction to engineering teams executing enterprise network initiatives. This role requires deep technical expertise, strong leadership skills, and the ability to communicate complex architectural decisions and implementation strategies to government stakeholders, technical leadership, and approval boards. Location: Ft. Meade, MD Clearance: Secret Salary: $104,000.00 - $149,000.00 Certification: Active DoD 8140/8570 IAT Level II certification. What's in it for you: Join a premier technology firm specializing in innovative solutions. Be part of a collaborative, inclusive, and innovative work culture. Enjoy tremendous growth potential in a high-performing team environment. A robust benefits package: Health, dental, and vision insurance Life insurance Short-and-long term disability Paid time off (PTO) 401k retirement plan with employer match Annual Professional Development Reimbursement Program And more! What you will do: Architecture and Design Authority Own the enterprise routing and switching architecture, including core, distribution, access, WAN edge, and data center interconnect designs. Define routing architecture and policy standards across BGP, OSPF, EIGRP, and static routing environments. Develop addressing strategies, route filtering and summarization standards, redistribution boundaries, convergence targets, and path-selection policies. Define Layer 2 and high-availability architectures, including VLAN strategy, spanning-tree design, link aggregation, VRFs, multicast, segmentation, redundancy models, and QoS policies. Evaluate current network architectures and identify opportunities to improve performance, scalability, resiliency, and operational efficiency. Establish and enforce network design standards, configuration baselines, and architectural patterns. Project Execution Lead network engineering projects from planning through implementation. Perform architecture reviews, requirements analysis, dependency identification, implementation planning, execution oversight, validation, and operational transition activities. Develop implementation plans, schedules, cutover procedures, rollback plans, contingency procedures, and validation methodologies. Lead network modernization initiatives involving segmentation, IPv4/IPv6 transition, network optimization, lifecycle replacement, connectivity consolidation, automation, and software-defined networking adoption. Coordinate maintenance windows, testing events, deployment activities, and rollback execution for mission-critical network changes. Collaborate with network architects, cybersecurity teams, operations personnel, project managers, and technical subject matter experts to deliver complex infrastructure initiatives. Technical Leadership Serve as the final escalation point for complex routing, switching, transport, convergence, and network performance issues. Provide technical direction, mentoring, and day-to-day guidance to network engineers, administrators, and analysts. Review engineering designs and implementation activities to ensure technical quality and architectural compliance. Manage competing priorities and concurrent engineering efforts while maintaining accountability for successful delivery. Improve engineering processes, implementation playbooks, runbooks, technical standards, documentation practices, and operational transition procedures. Documentation Develop and maintain logical and physical network architecture diagrams. Create routing standards, policy documentation, address plans, and configuration baselines. Develop implementation plans, testing procedures, validation criteria, and rollback documentation. Maintain risk assessments, decision registers, dependency tracking documents, technical standards, and runbooks. Produce as-built documentation and operational transition packages. What you will bring: Bachelor's degree or equivalent experience with 12+ years of relevant experience, or Master's degree with 10+ years of experience. Specific experience, education, and training may be considered in lieu of a degree. Active DoD Secret security clearance. Current DoD 8140/8570 IAT Level II certification or higher. Significant experience designing and implementing network security architecture in complex, large-scale enterprise environments. Experience serving as a senior technical lead directing network and security engineers, administrators, analysts, or implementation teams. Experience leading security engineering projects from planning through implementation. Hands-on engineering experience with: Next-generation firewalls Intrusion detection and prevention systems Proxies and TLS inspection solutions VPN and encryption services Network access control platforms Experience with network segmentation and secure connectivity initiatives. Experience with data-flow analysis, firewall policy reviews, ACL management, security-zone design, stakeholder coordination, and implementation planning. Strong knowledge of: TCP/IP Routing protocols Switching VLANs DNS/DHCP/IPAM NAT QoS Software-defined networking Cloud-connected environments Hands-on experience with two or more of the following technologies: Palo Alto Cisco Aruba Dell Infoblox Brocade Working knowledge of: NIST FedRAMP FISMA RMF DISA STIGs DoD cybersecurity requirements Demonstrated ability to manage competing priorities and deliver complex technical initiatives. Experience documenting network and security architectures using Visio, PowerPoint, Cameo, or similar tools. Excellent written and verbal communication skills. Experience briefing senior leadership, cybersecurity authorities, stakeholders, and approval boards. Experience with wireless security and authentication, including WPA2/WPA3, 802.1X, RADIUS, and enterprise NAC platforms. Experience integrating wireless infrastructure with enterprise networking services, including DNS, DHCP, NTP, routing, and monitoring platforms. Experience developing and executing engineering designs, implementation plans, migration procedures, test plans, and production deployments. Strong troubleshooting and analytical skills with the ability to resolve complex wireless connectivity, authentication, and network performance issues. Strong written and verbal communication skills.
JCS Solutions LLC
Fort George G Meade, Maryland
Job Description Job Description Grow, innovate, and generate progress: Harness your expertise to solve challenges and celebrate success! Job Summary JCS Solutions is seeking a Principal Network Security Engineer to design, engineer, and implement enterprise network security capabilities across a large, distributed Department of Defense network environment. This role serves as a senior technical leader responsible for advancing network security architecture through strategic engineering efforts that strengthen segmentation, access control, zero-trust initiatives, resiliency, and enterprise-wide security posture. The successful candidate will assess current network security architectures, identify capability gaps, develop implementation strategies, and lead engineering teams through complex modernization efforts. This position requires expertise in network security architecture, firewall technologies, intrusion prevention, network access control, segmentation, encryption, and secure connectivity across enterprise environments. This role requires a hands-on engineer capable of developing solutions, directing technical teams, communicating with stakeholders and approval authorities, and delivering secure, scalable, and sustainable network security capabilities. Location: Ft. Meade, MD Clearance: Secret Salary: $104,000.00 - $149,000.00 Certification: Active DoD 8140/8570 IAT Level II certification. What's in it for you: Join a premier technology firm specializing in innovative solutions. Be part of a collaborative, inclusive, and innovative work culture. Enjoy tremendous growth potential in a high-performing team environment. A robust benefits package: Health, dental, and vision insurance Life insurance Short-and-long term disability Paid time off (PTO) 401k retirement plan with employer match Annual Professional Development Reimbursement Program And more! What you will do: Network Security Engineering and Architecture Design, engineer, and implement enterprise network security architectures spanning next-generation firewalls, intrusion detection and prevention systems, web and TLS proxies, VPN and encryption services, network access control, DNS security, and east-west security controls. Evaluate existing network security architecture and identify security gaps, improvement opportunities, risks, and implementation approaches. Lead network segmentation and secure connectivity initiatives, including data-flow mapping, security-zone design, enclave development, firewall rule review, ACL rationalization, and routing coordination. Design and implement network access control and device-posture enforcement solutions, including identity validation, device authentication, policy enforcement, remediation workflows, and phased implementation strategies. Advance zero-trust networking principles, least-privilege access, micro-segmentation, and encrypted communications strategies. Evaluate and recommend emerging security technologies to improve enterprise security capabilities. Engineer secure connectivity between on-premises, cloud, and remote environments utilizing VPN, TLS, IPsec, cloud interconnects, and boundary protection technologies. Optimize security controls to reduce false positives, improve visibility, strengthen enforcement capabilities, and maintain network performance. Project Execution Lead network security projects from concept through implementation. Perform requirements analysis, dependency identification, architecture review, design coordination, planning, validation, and operational transition activities. Develop implementation plans, cutover strategies, rollback plans, validation procedures, and stakeholder communication plans. Coordinate maintenance windows, testing efforts, change activities, and contingency planning for security infrastructure modifications. Collaborate with network engineering, cybersecurity, operations, project management, and subject matter experts to successfully deliver network security initiatives. Support security accreditation, compliance, STIG implementation, vulnerability remediation, POA&M activities, and authorization requirements. Technical Leadership Serve as the senior technical authority for network security architecture and design decisions. Provide technical direction, mentoring, and engineering guidance to network engineers, security engineers, administrators, and analysts. Manage multiple concurrent technical efforts and maintain accountability against project schedules. Present security architecture recommendations, implementation strategies, risks, and technical decisions to government leadership, cybersecurity authorities, and approval boards. Improve engineering processes, documentation standards, implementation playbooks, migration runbooks, and operational handoff procedures. Documentation Develop and maintain network security architecture diagrams and logical/physical design documentation. Create data-flow diagrams, segmentation models, security-zone designs, and secure connectivity documentation. Maintain firewall policy standards, ACL documentation, and rule-set baselines. Develop implementation plans, rollback procedures, test plans, validation packages, risk registers, and dependency documentation. Create accreditation artifacts, technical standards, SOPs, runbooks, as-built documentation, and transition-to-operations documentation. What you will bring: Bachelor's degree or equivalent experience with 12+ years of relevant experience, or Master's degree with 10+ years of experience. Specific experience, education, and training may be considered in lieu of a degree. Active DoD Secret security clearance. Current DoD 8140/8570 IAT Level II certification or higher. Significant experience designing and implementing network security architecture in complex, large-scale enterprise environments. Experience serving as a senior technical lead directing network and security engineers, administrators, analysts, or implementation teams. Experience leading security engineering projects from planning through implementation. Hands-on engineering experience with: Next-generation firewalls Intrusion detection and prevention systems Proxies and TLS inspection solutions VPN and encryption services Network access control platforms Experience with network segmentation and secure connectivity initiatives. Experience with data-flow analysis, firewall policy reviews, ACL management, security-zone design, stakeholder coordination, and implementation planning. Strong knowledge of: TCP/IP Routing protocols Switching VLANs DNS/DHCP/IPAM NAT QoS Software-defined networking Cloud-connected environments Hands-on experience with two or more of the following technologies: Palo Alto Cisco Aruba Dell Infoblox Brocade Working knowledge of: NIST FedRAMP FISMA RMF DISA STIGs DoD cybersecurity requirements Demonstrated ability to manage competing priorities and deliver complex technical initiatives. Experience documenting network and security architectures using Visio, PowerPoint, Cameo, or similar tools. Excellent written and verbal communication skills. Experience briefing senior leadership, cybersecurity authorities, stakeholders, and approval boards. Experience with wireless security and authentication, including WPA2/WPA3, 802.1X, RADIUS, and enterprise NAC platforms. Experience integrating wireless infrastructure with enterprise networking services, including DNS, DHCP, NTP, routing, and monitoring platforms. Experience developing and executing engineering designs, implementation plans, migration procedures, test plans, and production deployments. Strong troubleshooting and analytical skills with the ability to resolve complex wireless connectivity, authentication, and network performance issues. Strong written and verbal communication skills. Experience providing technical guidance and developing engineering documentation. Must meet applicable cybersecurity workforce qualification requirements for the assigned position. How you will wow us: CISSP, Palo Alto PCNSE, Cisco CCNP Security, or equivalent advanced security certification. Experience implementing Comply-to-Connect, 802.1X, or comparable network access control and device-posture enforcement solutions at enterprise scale. Experience with zero-trust architecture, micro-segmentation, SASE, or secure cloud connectivity designs. Experience integrating network security platforms with SIEM, SOAR, ITSM, and analytics platforms. Experience utilizing Python, Ansible, REST APIs, or similar technologies for security automation and infrastructure-as-code initiatives. Experience with automated firewall policy management. Experience supporting enterprise certificate management, PKI environments, encrypted-traffic inspection, and key management services.
Job Description Job Description Grow, innovate, and generate progress: Harness your expertise to solve challenges and celebrate success! Job Summary JCS Solutions is seeking a Principal Network Security Engineer to design, engineer, and implement enterprise network security capabilities across a large, distributed Department of Defense network environment. This role serves as a senior technical leader responsible for advancing network security architecture through strategic engineering efforts that strengthen segmentation, access control, zero-trust initiatives, resiliency, and enterprise-wide security posture. The successful candidate will assess current network security architectures, identify capability gaps, develop implementation strategies, and lead engineering teams through complex modernization efforts. This position requires expertise in network security architecture, firewall technologies, intrusion prevention, network access control, segmentation, encryption, and secure connectivity across enterprise environments. This role requires a hands-on engineer capable of developing solutions, directing technical teams, communicating with stakeholders and approval authorities, and delivering secure, scalable, and sustainable network security capabilities. Location: Ft. Meade, MD Clearance: Secret Salary: $104,000.00 - $149,000.00 Certification: Active DoD 8140/8570 IAT Level II certification. What's in it for you: Join a premier technology firm specializing in innovative solutions. Be part of a collaborative, inclusive, and innovative work culture. Enjoy tremendous growth potential in a high-performing team environment. A robust benefits package: Health, dental, and vision insurance Life insurance Short-and-long term disability Paid time off (PTO) 401k retirement plan with employer match Annual Professional Development Reimbursement Program And more! What you will do: Network Security Engineering and Architecture Design, engineer, and implement enterprise network security architectures spanning next-generation firewalls, intrusion detection and prevention systems, web and TLS proxies, VPN and encryption services, network access control, DNS security, and east-west security controls. Evaluate existing network security architecture and identify security gaps, improvement opportunities, risks, and implementation approaches. Lead network segmentation and secure connectivity initiatives, including data-flow mapping, security-zone design, enclave development, firewall rule review, ACL rationalization, and routing coordination. Design and implement network access control and device-posture enforcement solutions, including identity validation, device authentication, policy enforcement, remediation workflows, and phased implementation strategies. Advance zero-trust networking principles, least-privilege access, micro-segmentation, and encrypted communications strategies. Evaluate and recommend emerging security technologies to improve enterprise security capabilities. Engineer secure connectivity between on-premises, cloud, and remote environments utilizing VPN, TLS, IPsec, cloud interconnects, and boundary protection technologies. Optimize security controls to reduce false positives, improve visibility, strengthen enforcement capabilities, and maintain network performance. Project Execution Lead network security projects from concept through implementation. Perform requirements analysis, dependency identification, architecture review, design coordination, planning, validation, and operational transition activities. Develop implementation plans, cutover strategies, rollback plans, validation procedures, and stakeholder communication plans. Coordinate maintenance windows, testing efforts, change activities, and contingency planning for security infrastructure modifications. Collaborate with network engineering, cybersecurity, operations, project management, and subject matter experts to successfully deliver network security initiatives. Support security accreditation, compliance, STIG implementation, vulnerability remediation, POA&M activities, and authorization requirements. Technical Leadership Serve as the senior technical authority for network security architecture and design decisions. Provide technical direction, mentoring, and engineering guidance to network engineers, security engineers, administrators, and analysts. Manage multiple concurrent technical efforts and maintain accountability against project schedules. Present security architecture recommendations, implementation strategies, risks, and technical decisions to government leadership, cybersecurity authorities, and approval boards. Improve engineering processes, documentation standards, implementation playbooks, migration runbooks, and operational handoff procedures. Documentation Develop and maintain network security architecture diagrams and logical/physical design documentation. Create data-flow diagrams, segmentation models, security-zone designs, and secure connectivity documentation. Maintain firewall policy standards, ACL documentation, and rule-set baselines. Develop implementation plans, rollback procedures, test plans, validation packages, risk registers, and dependency documentation. Create accreditation artifacts, technical standards, SOPs, runbooks, as-built documentation, and transition-to-operations documentation. What you will bring: Bachelor's degree or equivalent experience with 12+ years of relevant experience, or Master's degree with 10+ years of experience. Specific experience, education, and training may be considered in lieu of a degree. Active DoD Secret security clearance. Current DoD 8140/8570 IAT Level II certification or higher. Significant experience designing and implementing network security architecture in complex, large-scale enterprise environments. Experience serving as a senior technical lead directing network and security engineers, administrators, analysts, or implementation teams. Experience leading security engineering projects from planning through implementation. Hands-on engineering experience with: Next-generation firewalls Intrusion detection and prevention systems Proxies and TLS inspection solutions VPN and encryption services Network access control platforms Experience with network segmentation and secure connectivity initiatives. Experience with data-flow analysis, firewall policy reviews, ACL management, security-zone design, stakeholder coordination, and implementation planning. Strong knowledge of: TCP/IP Routing protocols Switching VLANs DNS/DHCP/IPAM NAT QoS Software-defined networking Cloud-connected environments Hands-on experience with two or more of the following technologies: Palo Alto Cisco Aruba Dell Infoblox Brocade Working knowledge of: NIST FedRAMP FISMA RMF DISA STIGs DoD cybersecurity requirements Demonstrated ability to manage competing priorities and deliver complex technical initiatives. Experience documenting network and security architectures using Visio, PowerPoint, Cameo, or similar tools. Excellent written and verbal communication skills. Experience briefing senior leadership, cybersecurity authorities, stakeholders, and approval boards. Experience with wireless security and authentication, including WPA2/WPA3, 802.1X, RADIUS, and enterprise NAC platforms. Experience integrating wireless infrastructure with enterprise networking services, including DNS, DHCP, NTP, routing, and monitoring platforms. Experience developing and executing engineering designs, implementation plans, migration procedures, test plans, and production deployments. Strong troubleshooting and analytical skills with the ability to resolve complex wireless connectivity, authentication, and network performance issues. Strong written and verbal communication skills. Experience providing technical guidance and developing engineering documentation. Must meet applicable cybersecurity workforce qualification requirements for the assigned position. How you will wow us: CISSP, Palo Alto PCNSE, Cisco CCNP Security, or equivalent advanced security certification. Experience implementing Comply-to-Connect, 802.1X, or comparable network access control and device-posture enforcement solutions at enterprise scale. Experience with zero-trust architecture, micro-segmentation, SASE, or secure cloud connectivity designs. Experience integrating network security platforms with SIEM, SOAR, ITSM, and analytics platforms. Experience utilizing Python, Ansible, REST APIs, or similar technologies for security automation and infrastructure-as-code initiatives. Experience with automated firewall policy management. Experience supporting enterprise certificate management, PKI environments, encrypted-traffic inspection, and key management services.