it job board logo
  • Home
  • Find IT Jobs
  • Register CV
  • Register as Employer
  • Contact us
  • Career Advice
  • Recruiting? Post a job
  • Sign in
  • Sign up
  • Home
  • Find IT Jobs
  • Register CV
  • Register as Employer
  • Contact us
  • Career Advice
Sorry, that job is no longer available. Here are some results that may be similar to the job you were looking for.

28 jobs found

Email me jobs like this
Refine Search
Current Search
security engineer ii network firewall security
Lead BizOps Engineer
CYNET Systems Saint Louis, Missouri
Pay Range: $50.00hr - $55.00hr Job Overview: The mission is to protect, provide for, and progress the software and systems behind all of the organization's services with an ever-watchful eye on their availability, latency, performance, integration, and capacity to ensure the ultimate customer experience. Requirements: Must possess strong documentation and communication skills. Demonstrate working knowledge of automation principles. Intermediate understanding of core technical concepts. Hands-on intermediate knowledge of primary skills and subjects, with advanced proficiency in at least one discipline: ITIL/ITSM Principles and Practice; Software Development Lifecycle (SDLC); Infrastructure (Unix, Windows, Mainframe) Administration; Network Architecture (Layer 1 to Layer 3); Middleware & Runtime Environments (such as J2EE/.NET/etc); Load balancers and application firewalls (WAFs); Logging and Monitoring methods, standards and tools; DevOps Concepts & Tooling; Resiliency, High Availability & Business Continuity Planning/Management; Caching Concepts & Content Delivery Networks; Configuration Management (& Infrastructure as Code); Cloud Concepts, Architecture and Platform as a Service (PaaS) Concepts. Advanced understanding of Role Based Access Controls (RBAC) and Access Management (SAML, LTPA, SSO, OAuth). Self-driven with the ability to execute necessary tasks and duties independently. Strong analytical and critical thinking skills. Advanced knowledge of Internet architecture and project delivery. Intermediate knowledge of network troubleshooting. Foundational knowledge of cryptographic services (HSMs/Certificates). Mindset and Behavior Guidelines: Sense of urgency. Customer-focused mindset with a deep understanding of key customer journeys and user experience. Effective communication across all technical and managerial levels. Curiosity and a drive for continuous learning and continuous improvement. Ability to coach and mentor team members. Willingness to embrace risk and seek simplicity. Dedication to knowledge sharing and technical writing. Strong multi-tasking abilities and comfort handling difficult conversations. Benefits: Our Benefits Include: Medical, Dental, and Vision Insurance 401(k) Retirement Plan Health Savings Account (HSA) Disability Insurance (Short-Term and Long-Term) Life and AD&D Insurance Paid Sick Leave (where required by applicable state or local law) Supplemental Insurance Plans Identity Theft Protection Pet Insurance Employee Wellness Programs Employee Assistance Program (EAP) Career Growth and Professional Development Opportunities Disclaimer: Benefits eligibility, accrual rates, and usage limits may vary based on employment status, length of service, and work location. Paid Sick Leave is provided in strict accordance with applicable state and municipal mandates. Cynet Systems Inc. reserves the right to modify, amend, or terminate any benefit plans at any time in accordance with applicable laws. About Cynet Systems Founded in 2010 and headquartered in the Washington, DC metro area, Cynet Systems Inc. is a leading technology staffing and workforce solutions company serving Fortune 500 companies, government agencies, and enterprise organizations across the United States and Canada. We deliver agile, scalable talent solutions across IT, engineering, life sciences, clinical, and professional staffing, powered by a high-performing recruitment engine operating across North America and Asia. As a nationally and locally certified Minority Business Enterprise (MBE), Cynet Systems is committed to helping organizations build high-performing teams while empowering professionals to grow rewarding careers. Our organization is certified to ISO 9001, ISO 14001, ISO 27001, and SOC 2 Type II standards, reflecting our commitment to quality, security, operational excellence, and customer success.
11/13/2026
Full time
Pay Range: $50.00hr - $55.00hr Job Overview: The mission is to protect, provide for, and progress the software and systems behind all of the organization's services with an ever-watchful eye on their availability, latency, performance, integration, and capacity to ensure the ultimate customer experience. Requirements: Must possess strong documentation and communication skills. Demonstrate working knowledge of automation principles. Intermediate understanding of core technical concepts. Hands-on intermediate knowledge of primary skills and subjects, with advanced proficiency in at least one discipline: ITIL/ITSM Principles and Practice; Software Development Lifecycle (SDLC); Infrastructure (Unix, Windows, Mainframe) Administration; Network Architecture (Layer 1 to Layer 3); Middleware & Runtime Environments (such as J2EE/.NET/etc); Load balancers and application firewalls (WAFs); Logging and Monitoring methods, standards and tools; DevOps Concepts & Tooling; Resiliency, High Availability & Business Continuity Planning/Management; Caching Concepts & Content Delivery Networks; Configuration Management (& Infrastructure as Code); Cloud Concepts, Architecture and Platform as a Service (PaaS) Concepts. Advanced understanding of Role Based Access Controls (RBAC) and Access Management (SAML, LTPA, SSO, OAuth). Self-driven with the ability to execute necessary tasks and duties independently. Strong analytical and critical thinking skills. Advanced knowledge of Internet architecture and project delivery. Intermediate knowledge of network troubleshooting. Foundational knowledge of cryptographic services (HSMs/Certificates). Mindset and Behavior Guidelines: Sense of urgency. Customer-focused mindset with a deep understanding of key customer journeys and user experience. Effective communication across all technical and managerial levels. Curiosity and a drive for continuous learning and continuous improvement. Ability to coach and mentor team members. Willingness to embrace risk and seek simplicity. Dedication to knowledge sharing and technical writing. Strong multi-tasking abilities and comfort handling difficult conversations. Benefits: Our Benefits Include: Medical, Dental, and Vision Insurance 401(k) Retirement Plan Health Savings Account (HSA) Disability Insurance (Short-Term and Long-Term) Life and AD&D Insurance Paid Sick Leave (where required by applicable state or local law) Supplemental Insurance Plans Identity Theft Protection Pet Insurance Employee Wellness Programs Employee Assistance Program (EAP) Career Growth and Professional Development Opportunities Disclaimer: Benefits eligibility, accrual rates, and usage limits may vary based on employment status, length of service, and work location. Paid Sick Leave is provided in strict accordance with applicable state and municipal mandates. Cynet Systems Inc. reserves the right to modify, amend, or terminate any benefit plans at any time in accordance with applicable laws. About Cynet Systems Founded in 2010 and headquartered in the Washington, DC metro area, Cynet Systems Inc. is a leading technology staffing and workforce solutions company serving Fortune 500 companies, government agencies, and enterprise organizations across the United States and Canada. We deliver agile, scalable talent solutions across IT, engineering, life sciences, clinical, and professional staffing, powered by a high-performing recruitment engine operating across North America and Asia. As a nationally and locally certified Minority Business Enterprise (MBE), Cynet Systems is committed to helping organizations build high-performing teams while empowering professionals to grow rewarding careers. Our organization is certified to ISO 9001, ISO 14001, ISO 27001, and SOC 2 Type II standards, reflecting our commitment to quality, security, operational excellence, and customer success.
Network Administrator
Enhanced Computing Solutions Sparks, Nevada
Job description OVERVIEWThe Network Administrator II provides advanced network engineering and systems infrastructure support to the Service Delivery Team. This position handles escalated network infrastructure requests, complex systems administration issues, network design and implementation projects, and proactive monitoring of client environments. The Network Administrator II must possess strong networking expertise combined with solid systems administration knowledge to resolve complex infrastructure challenges spanning both domains. This role collaborates with the Engineering Team for strategic guidance and works closely with project teams to deliver enterprise-grade solutions. Additionally, this position supports and mentors junior technical staff by providing technical guidance and helping others develop their skills.RESPONSIBILITIES & TASKSHELPDESK ESCALATIONS & SUPPORT Handle escalated tickets from the helpdesk team on complex network and systems issues Provide advanced troubleshooting for network infrastructure problems affecting client operations Resolve technical issues related to servers, operating systems, applications, and network connectivity Mentor junior technicians by answering high-level technical questions and providing guidance Assist other team members with network troubleshooting and onsite challenges TICKETING SYSTEM & DOCUMENTATION Use ConnectWise Manage Ticketing System to work on and resolve Helpdesk Tickets & Service Requests Manage and record all work in the ticketing system with accurate billing time and notes Maintain documentation of network designs, configurations, and procedures in ITBoost Create and update Standard Operating Procedures (SOPs) for network operations and maintenance Ensure all network changes and incidents are properly documented and communicated Split tickets with multiple issues into individual tickets for proper tracking PROJECT WORK Support the project team with network design and implementation for client deployments Support network upgrades, migrations, and infrastructure optimization initiatives Collaborate on complex multi-site and hybrid network projects COMMUNICATION, REPORTING & RISK Create and maintain documentation for on-site processes Escalate tickets requiring Service Delivery Manager support Communicate ticket status to clients at every step of the way Notify clients of any changes or outages related to their issues Identify, communicate, and mitigate potential risks to the Service Delivery Manager and clients TEAM WORK Follow the schedule provided by the Service Delivery Manager or Service Coordinator Adhere to all company security procedures and maintain vigilance for security issues Identify opportunities for improvement and make constructive suggestions for change Contribute to innovative process improvements SKILLS & ATTRIBUTESDESIRED 2+ years of hands-on experience in high-level network maintenance, configuration, and administration Great communication skills, founded in being a good listener Strong systems administration knowledge and experience with Windows Server and Azure environments Advanced knowledge of network design principles and enterprise network architectures Strong experience with SonicWall firewalls and network security appliances Experience and knowledge of working with the Microsoft 365 Platform Experience working with vendors for expedited troubleshooting of hardware and software systems Proven experience configuring and troubleshooting VPN technologies Advanced TCP/IP networking knowledge and network troubleshooting methodology Ability to communicate complex technical concepts clearly to both technical and non-technical stakeholders Exceptional attention to detail with strong organizational skills Ability to keep up with and adapt to the fast-paced IT world Ability to answer and explain high-level technical networking and systems questions clearly Experience supporting Microsoft 365 or other cloud platforms from a network and systems perspective NICE TO HAVE Experience using ticketing systems, RMM tools, and PSA software (ConnectWise Manager) Experience providing support via remote tools (Screen Connect) Experience handling technical service tickets Professional IT Certifications such as CompTIA Network+ and Security+ Client experience certifications such as Helpdesk Habits Experience working on a helpdesk or for a Managed Service Provider (MSP) / IT Support Business WHAT WE OFFER Competitive health, dental, and vision coverage An easy-going environment and culture (we all enjoy what we do) Subscription to Cybrary.it for ongoing professional development Company laptop and necessary equipment Flexible work-from-home arrangements after 90-day probationary period 401(k) retirement plan COMPENSATION $80,000 - $85,000 (commensurate with experience)
11/13/2026
Full time
Job description OVERVIEWThe Network Administrator II provides advanced network engineering and systems infrastructure support to the Service Delivery Team. This position handles escalated network infrastructure requests, complex systems administration issues, network design and implementation projects, and proactive monitoring of client environments. The Network Administrator II must possess strong networking expertise combined with solid systems administration knowledge to resolve complex infrastructure challenges spanning both domains. This role collaborates with the Engineering Team for strategic guidance and works closely with project teams to deliver enterprise-grade solutions. Additionally, this position supports and mentors junior technical staff by providing technical guidance and helping others develop their skills.RESPONSIBILITIES & TASKSHELPDESK ESCALATIONS & SUPPORT Handle escalated tickets from the helpdesk team on complex network and systems issues Provide advanced troubleshooting for network infrastructure problems affecting client operations Resolve technical issues related to servers, operating systems, applications, and network connectivity Mentor junior technicians by answering high-level technical questions and providing guidance Assist other team members with network troubleshooting and onsite challenges TICKETING SYSTEM & DOCUMENTATION Use ConnectWise Manage Ticketing System to work on and resolve Helpdesk Tickets & Service Requests Manage and record all work in the ticketing system with accurate billing time and notes Maintain documentation of network designs, configurations, and procedures in ITBoost Create and update Standard Operating Procedures (SOPs) for network operations and maintenance Ensure all network changes and incidents are properly documented and communicated Split tickets with multiple issues into individual tickets for proper tracking PROJECT WORK Support the project team with network design and implementation for client deployments Support network upgrades, migrations, and infrastructure optimization initiatives Collaborate on complex multi-site and hybrid network projects COMMUNICATION, REPORTING & RISK Create and maintain documentation for on-site processes Escalate tickets requiring Service Delivery Manager support Communicate ticket status to clients at every step of the way Notify clients of any changes or outages related to their issues Identify, communicate, and mitigate potential risks to the Service Delivery Manager and clients TEAM WORK Follow the schedule provided by the Service Delivery Manager or Service Coordinator Adhere to all company security procedures and maintain vigilance for security issues Identify opportunities for improvement and make constructive suggestions for change Contribute to innovative process improvements SKILLS & ATTRIBUTESDESIRED 2+ years of hands-on experience in high-level network maintenance, configuration, and administration Great communication skills, founded in being a good listener Strong systems administration knowledge and experience with Windows Server and Azure environments Advanced knowledge of network design principles and enterprise network architectures Strong experience with SonicWall firewalls and network security appliances Experience and knowledge of working with the Microsoft 365 Platform Experience working with vendors for expedited troubleshooting of hardware and software systems Proven experience configuring and troubleshooting VPN technologies Advanced TCP/IP networking knowledge and network troubleshooting methodology Ability to communicate complex technical concepts clearly to both technical and non-technical stakeholders Exceptional attention to detail with strong organizational skills Ability to keep up with and adapt to the fast-paced IT world Ability to answer and explain high-level technical networking and systems questions clearly Experience supporting Microsoft 365 or other cloud platforms from a network and systems perspective NICE TO HAVE Experience using ticketing systems, RMM tools, and PSA software (ConnectWise Manager) Experience providing support via remote tools (Screen Connect) Experience handling technical service tickets Professional IT Certifications such as CompTIA Network+ and Security+ Client experience certifications such as Helpdesk Habits Experience working on a helpdesk or for a Managed Service Provider (MSP) / IT Support Business WHAT WE OFFER Competitive health, dental, and vision coverage An easy-going environment and culture (we all enjoy what we do) Subscription to Cybrary.it for ongoing professional development Company laptop and necessary equipment Flexible work-from-home arrangements after 90-day probationary period 401(k) retirement plan COMPENSATION $80,000 - $85,000 (commensurate with experience)
Systems Infrastructure Engineer - JobID-0300
Innovative Defense Technologies Fall River, Massachusetts
Job Description Job Description Description About The Role: Innovative Defense Technologies (IDT), a leading defense technology company, is seeking a Systems Infrastructure Engineer to be a part of our Undersea Warfare team based out of our Fall River, MA location. We are looking for a highly capable engineer who excels in virtualization, hardware integration, and enterprise Linux management. If you have a passion for bare-metal deployments, managing complex hypervisors, and optimizing datacenter performance, this role offers a hands-on opportunity to support highly available, bare-metal systems in a fast-paced setting. Clearance & Location Requirements: All applicants must be able to obtain/maintain an active Secret U.S. Security Clearance. This is a fully on-site position, based out of our Fall River, MA location. Key Responsibilities What You Will Do: Private Cloud & Virtualization: Deploy, manage, and troubleshoot enterprise-grade virtualization platforms (VMware/ESXi), ensuring high availability and seamless resource scaling for private cloud clusters. OS & Hardware Integration: Maintain and optimize Linux-based operating systems (specifically RHEL) running on enterprise hardware like Dell PowerEdge servers, including kernel tuning, bootloaders, and system initialization. Infrastructure Networking: Configure and support physical and virtual networking components, utilizing Cisco hardware for routing, switching, VLANs, and firewall management. Systematic Debugging: Diagnose hardware, hypervisor, and OS-level issues across the stack to maintain continuous operational readiness. Security Implementation: Apply robust security configurations, ensuring compliance with required frameworks across all deployed nodes. Technical Documentation: Create clear architectural diagrams and actionable engineering plans for cross-functional project teams. Skills, Knowledge & Expertise Who You Are (Required): Bachelor's degree in Information Technology, Information Systems, Computer Science, Computer Engineering, or a related field or equivalent full-time professional experience. 3+ years of demonstrated professional or advanced practical experience configuring bare-metal servers, hypervisors, and Linux operating systems. Technical Foundation: Strong command of enterprise virtualization and datacenter infrastructure configuration and management. Agility: Demonstrated ability to pivot between multiple projects and adapt to shifting priorities in an agile environment. Communication: Excellence in conveying technical details to both engineering peers and non-technical stakeholders. Domain Knowledge: In-depth knowledge of the Submarine Warfare Federated Tactical Systems (SWFTS) architecture, including legacy integration, with advanced, detailed expertise in the AN/BYG-1 combat control subsystem and BYG virtualization environments. Ability to travel up to 10% What Makes You Stand Out: Advanced experience with VMware ESXi, vCenter, and Red Hat Enterprise Linux. Hands-on knowledge of Cisco networking architectures and Software-Defined Networking (SDN). Familiarity with automation and scripting (Shell scripting, Python, Ansible). Familiarity with DISA STIGs or other Risk Management Frameworks (RMF). Encouraged Certifications: VMware, Red Hat, Cisco, and/or Security+ (or equivalent IAT Level II). If you see yourself reflected in this role and are excited about the impact you could make, we encourage you to apply! If you know someone who may be a great fit, please feel free to share this opportunity with your network. Pay Range : $90,000 - $150,000 or $114,000 - $184,000 This amount may not be reflective of actual compensation that may be earned as pay is dependent on a candidate's experience, skills, and education. The posted range does not include bonuses, commissions, tips, or other benefits. IDT is often looking to place multiple candidates at various levels. Therefore, more than one pay range has been included, commensurate with experience. Job Benefits Why Work at Innovative Defense Technologies (IDT): We pride ourselves on a work environment where hard work is balanced with camaraderie and a strong team spirit. Our infrastructure and engineering teams thrive on mutual support, creative problem-solving, and a shared commitment to technical excellence. We are serious about our deliverables, but we believe a positive, vibrant workplace is essential to getting the best out of our people. IDT is a growing company with a vibrant, entrepreneurial culture. We are headquartered in Arlington, VA with additional offices in Fall River, MA; Mount Laurel, NJ; and San Diego, CA. At each location, our employees work together in a modern, snack-filled, and social office space, designing innovative solutions for our defense industry customers. We offer employees competitive pay and benefits including: Generous benefits package Competitive PTO Paid holidays 401(k) with immediate vesting and matching 9/80 optional schedule (2nd and 4th Friday off every month) Tuition Assistance Reimbursement Program Professional Development Resources Pre-Tax Commuter Benefits Organization-Wide Monthly Tech Connect Events Annual Employee Recognition Awards Regular Social Events and Catered Lunches EEO Statement: IDT is an Equal Opportunity employer.
11/13/2026
Full time
Job Description Job Description Description About The Role: Innovative Defense Technologies (IDT), a leading defense technology company, is seeking a Systems Infrastructure Engineer to be a part of our Undersea Warfare team based out of our Fall River, MA location. We are looking for a highly capable engineer who excels in virtualization, hardware integration, and enterprise Linux management. If you have a passion for bare-metal deployments, managing complex hypervisors, and optimizing datacenter performance, this role offers a hands-on opportunity to support highly available, bare-metal systems in a fast-paced setting. Clearance & Location Requirements: All applicants must be able to obtain/maintain an active Secret U.S. Security Clearance. This is a fully on-site position, based out of our Fall River, MA location. Key Responsibilities What You Will Do: Private Cloud & Virtualization: Deploy, manage, and troubleshoot enterprise-grade virtualization platforms (VMware/ESXi), ensuring high availability and seamless resource scaling for private cloud clusters. OS & Hardware Integration: Maintain and optimize Linux-based operating systems (specifically RHEL) running on enterprise hardware like Dell PowerEdge servers, including kernel tuning, bootloaders, and system initialization. Infrastructure Networking: Configure and support physical and virtual networking components, utilizing Cisco hardware for routing, switching, VLANs, and firewall management. Systematic Debugging: Diagnose hardware, hypervisor, and OS-level issues across the stack to maintain continuous operational readiness. Security Implementation: Apply robust security configurations, ensuring compliance with required frameworks across all deployed nodes. Technical Documentation: Create clear architectural diagrams and actionable engineering plans for cross-functional project teams. Skills, Knowledge & Expertise Who You Are (Required): Bachelor's degree in Information Technology, Information Systems, Computer Science, Computer Engineering, or a related field or equivalent full-time professional experience. 3+ years of demonstrated professional or advanced practical experience configuring bare-metal servers, hypervisors, and Linux operating systems. Technical Foundation: Strong command of enterprise virtualization and datacenter infrastructure configuration and management. Agility: Demonstrated ability to pivot between multiple projects and adapt to shifting priorities in an agile environment. Communication: Excellence in conveying technical details to both engineering peers and non-technical stakeholders. Domain Knowledge: In-depth knowledge of the Submarine Warfare Federated Tactical Systems (SWFTS) architecture, including legacy integration, with advanced, detailed expertise in the AN/BYG-1 combat control subsystem and BYG virtualization environments. Ability to travel up to 10% What Makes You Stand Out: Advanced experience with VMware ESXi, vCenter, and Red Hat Enterprise Linux. Hands-on knowledge of Cisco networking architectures and Software-Defined Networking (SDN). Familiarity with automation and scripting (Shell scripting, Python, Ansible). Familiarity with DISA STIGs or other Risk Management Frameworks (RMF). Encouraged Certifications: VMware, Red Hat, Cisco, and/or Security+ (or equivalent IAT Level II). If you see yourself reflected in this role and are excited about the impact you could make, we encourage you to apply! If you know someone who may be a great fit, please feel free to share this opportunity with your network. Pay Range : $90,000 - $150,000 or $114,000 - $184,000 This amount may not be reflective of actual compensation that may be earned as pay is dependent on a candidate's experience, skills, and education. The posted range does not include bonuses, commissions, tips, or other benefits. IDT is often looking to place multiple candidates at various levels. Therefore, more than one pay range has been included, commensurate with experience. Job Benefits Why Work at Innovative Defense Technologies (IDT): We pride ourselves on a work environment where hard work is balanced with camaraderie and a strong team spirit. Our infrastructure and engineering teams thrive on mutual support, creative problem-solving, and a shared commitment to technical excellence. We are serious about our deliverables, but we believe a positive, vibrant workplace is essential to getting the best out of our people. IDT is a growing company with a vibrant, entrepreneurial culture. We are headquartered in Arlington, VA with additional offices in Fall River, MA; Mount Laurel, NJ; and San Diego, CA. At each location, our employees work together in a modern, snack-filled, and social office space, designing innovative solutions for our defense industry customers. We offer employees competitive pay and benefits including: Generous benefits package Competitive PTO Paid holidays 401(k) with immediate vesting and matching 9/80 optional schedule (2nd and 4th Friday off every month) Tuition Assistance Reimbursement Program Professional Development Resources Pre-Tax Commuter Benefits Organization-Wide Monthly Tech Connect Events Annual Employee Recognition Awards Regular Social Events and Catered Lunches EEO Statement: IDT is an Equal Opportunity employer.
Leidos
Junior Transport Network Specialist
Leidos Fort Shafter, Hawaii
Leidos seeks a Jr. Transport Network Specialist to support mission-critical networks for government and commercial clients. In this role, you will assist with the design, configuration, and monitoring of transport network infrastructure, including routing, switching, and carrier services. You'll troubleshoot performance issues, document configurations, and support upgrades in secure, high-availability environments. Working within a collaborative, mission-driven culture, you'll gain mentorship, professional development, and the opportunity to contribute to impactful national security and digital modernization projects. Responsibilities Support design, configuration, and maintenance of transport network infrastructure for government and commercial clients Monitor network performance, troubleshoot issues, and escalate complex incidents to senior engineers Assist in implementing changes, upgrades, and patches in accordance with security and compliance standards Document network configurations, procedures, and incident resolutions for knowledge sharing Collaborate with cross-functional teams to support mission-critical, highly available systems Participate in on-call or shift rotations to ensure 24/7 network reliability, as required Required Skills IP networking (TCP/IP, routing, switching) MPLS and transport technologies (DWDM, SONET, Ethernet) Network monitoring tools (Solar Winds, Splunk, or similar) Firewalls and basic security concepts Configuration of routers and switches (Cisco, Juniper, etc.) Troubleshooting network latency and connectivity issues Network documentation and diagramming (Visio or similar) Linux/Windows network administration fundamentals Change management processes and ITIL concepts Scripting or automation basics (Python, Power Shell)
11/07/2026
Full time
Leidos seeks a Jr. Transport Network Specialist to support mission-critical networks for government and commercial clients. In this role, you will assist with the design, configuration, and monitoring of transport network infrastructure, including routing, switching, and carrier services. You'll troubleshoot performance issues, document configurations, and support upgrades in secure, high-availability environments. Working within a collaborative, mission-driven culture, you'll gain mentorship, professional development, and the opportunity to contribute to impactful national security and digital modernization projects. Responsibilities Support design, configuration, and maintenance of transport network infrastructure for government and commercial clients Monitor network performance, troubleshoot issues, and escalate complex incidents to senior engineers Assist in implementing changes, upgrades, and patches in accordance with security and compliance standards Document network configurations, procedures, and incident resolutions for knowledge sharing Collaborate with cross-functional teams to support mission-critical, highly available systems Participate in on-call or shift rotations to ensure 24/7 network reliability, as required Required Skills IP networking (TCP/IP, routing, switching) MPLS and transport technologies (DWDM, SONET, Ethernet) Network monitoring tools (Solar Winds, Splunk, or similar) Firewalls and basic security concepts Configuration of routers and switches (Cisco, Juniper, etc.) Troubleshooting network latency and connectivity issues Network documentation and diagramming (Visio or similar) Linux/Windows network administration fundamentals Change management processes and ITIL concepts Scripting or automation basics (Python, Power Shell)
Enterprise Network Architect
AGE solutions Columbus, Ohio
Job Description Job Description About Us AGE Solutions is a premier technology and professional services company, providing in-depth consulting, advanced technology solutions, and essential services throughout the U.S. government, defense, and intelligence sectors. Prioritizing innovation and client-focused solutions, we assist major agencies in addressing intricate issues and ensuring a more secure future. We are seeking a CCIE-certified Enterprise Network Architect to provide technical leadership, guidance, and design expertise to a team supporting a DoD agency's WAN as well as emerging technology initiatives as related to network engineering. Provides enterprise-level network architecture, technical strategy, and engineering leadership for network infrastructure. Develops architectural solutions and modernization strategies that improve network security, interoperability, scalability, and operational performance. Responsibilities Include: Develop enterprise network architectures, technical designs, and infrastructure modernization roadmaps. Provide senior technical guidance to network engineers, cybersecurity personnel, and Government leadership. Evaluate existing network architecture and recommend improvements to performance, security, availability, and resilience. Design solutions integrating Cisco routing and switching, Check Point firewalls, and enterprise telecommunications technologies. Assess interoperability between agency classified and unclassified networks as well as with NIPRNet, SIPRNet, and cloud-hosted environments. Lead technical assessments of emerging network technologies, platforms, and architectures. Develop high-level and detailed network designs, engineering specifications, and implementation strategies. Support architectural planning for IPv6, MPLS, multicast, QoS, and enterprise network segmentation. Evaluate hardware and software acquisitions for architectural compatibility, lifecycle suitability, and security compliance. Provide architectural guidance for enterprise cloud connectivity, SCCA integration, and application delivery. Review engineering changes, technical proposals, and major network modernization initiatives. Develop technology assessments, analyses of alternatives, and technical recommendations for Government stakeholders. Support laboratory evaluations, proof-of-concept testing, and technical design validation. Provide expert technical support for complex network performance, interoperability, and security issues. Ensure proposed architectures comply with applicable DoD, DISA, and agency technical and security standards. Advise on selection of technological purchases with regards to processing, data storage, data access, and applications development. Advises of feasibility of potential future projects to management. Required Skills, Qualifications and Experience: Experience: Eight years of relevant experience including experience with network WAN/LAN hardware and software and firewalls. Education: High School Diploma. Citizenship and Clearance: US Citizenship is required. DoD Top Secret clearance or Secret clearance with favorably adjudicated Tier 5/SSBI investigation. Certification: DoD 8570/8140: IAT Level III baseline certification such as CASP+, CCNP Security, CISA, CISSP, GCED, or GCIH. CCIE Enterprise Infrastructure certification. Location: Work will be primarily performed from a contractor-owned facility near Fort Belvoir, VA and customer locations. Candidates may work onsite/reside within commuting distance of one of the following: Fort Belvoir, VA ( highly preferred ) Battle Creek, MI Columbus, OH Dayton, OH New Cumberland, PA Ogden, UT Philadelphia, PA Richmond, VA Anniston, AL San Diego, CA Fort Bragg, NC Robins AFB, GA Tobyhanna, PA. Preferred Qualifications: Check Point Certified Security Administrator (CCSA) or higher certification. AWS, Microsoft Azure, Google Cloud, or Cloud+ certification. Work Environment and Physical Demand: Must be able to work for extended hours at a computer in an office environment as well as work from comm closets and warehouse spaces as needed. The projected salary range for this position is $190,000+ annually. Final compensation will be determined based on factors including years of relevant experience, active security clearance level, certifications, technical skillset, contract requirements, and overall qualifications. At AGE Solutions, we reward performance, invest in growth, and share success. Our benefits support the whole person, professionally, financially, and personally. 26 Days Paid Leave: Includes vacation, sick, personal time, and holidays. You choose how to use it. Performance Bonuses: Performance bonuses are awarded based on individual contributions and company-wide results, aligning recognition with impact. 401(k) with Match: We match 3% of your contributions with immediate vesting. Financial Protection: Company-paid life insurance up to $300K and options for additional coverage for you and your dependents. Health Benefits: Multiple medical plans, dental, vision, FSA and HSA options to fit your needs. Parental Leave: 15 days of fully paid leave for new parents, because family matters. Military Differential Pay: We bridge the gap for employees on active duty, so they don't take a financial hit while serving. Professional Growth: Paid training and certifications, tuition reimbursement, and the tools and tech to get the job done right. Shared Success: In the event of a company sale, our CEO has committed to returning 80% of net proceeds to employees. This ensures our team shares in the long term value they help create. At AGE, you'll do work that matters, supported by a company that delivers for its people.
11/05/2026
Full time
Job Description Job Description About Us AGE Solutions is a premier technology and professional services company, providing in-depth consulting, advanced technology solutions, and essential services throughout the U.S. government, defense, and intelligence sectors. Prioritizing innovation and client-focused solutions, we assist major agencies in addressing intricate issues and ensuring a more secure future. We are seeking a CCIE-certified Enterprise Network Architect to provide technical leadership, guidance, and design expertise to a team supporting a DoD agency's WAN as well as emerging technology initiatives as related to network engineering. Provides enterprise-level network architecture, technical strategy, and engineering leadership for network infrastructure. Develops architectural solutions and modernization strategies that improve network security, interoperability, scalability, and operational performance. Responsibilities Include: Develop enterprise network architectures, technical designs, and infrastructure modernization roadmaps. Provide senior technical guidance to network engineers, cybersecurity personnel, and Government leadership. Evaluate existing network architecture and recommend improvements to performance, security, availability, and resilience. Design solutions integrating Cisco routing and switching, Check Point firewalls, and enterprise telecommunications technologies. Assess interoperability between agency classified and unclassified networks as well as with NIPRNet, SIPRNet, and cloud-hosted environments. Lead technical assessments of emerging network technologies, platforms, and architectures. Develop high-level and detailed network designs, engineering specifications, and implementation strategies. Support architectural planning for IPv6, MPLS, multicast, QoS, and enterprise network segmentation. Evaluate hardware and software acquisitions for architectural compatibility, lifecycle suitability, and security compliance. Provide architectural guidance for enterprise cloud connectivity, SCCA integration, and application delivery. Review engineering changes, technical proposals, and major network modernization initiatives. Develop technology assessments, analyses of alternatives, and technical recommendations for Government stakeholders. Support laboratory evaluations, proof-of-concept testing, and technical design validation. Provide expert technical support for complex network performance, interoperability, and security issues. Ensure proposed architectures comply with applicable DoD, DISA, and agency technical and security standards. Advise on selection of technological purchases with regards to processing, data storage, data access, and applications development. Advises of feasibility of potential future projects to management. Required Skills, Qualifications and Experience: Experience: Eight years of relevant experience including experience with network WAN/LAN hardware and software and firewalls. Education: High School Diploma. Citizenship and Clearance: US Citizenship is required. DoD Top Secret clearance or Secret clearance with favorably adjudicated Tier 5/SSBI investigation. Certification: DoD 8570/8140: IAT Level III baseline certification such as CASP+, CCNP Security, CISA, CISSP, GCED, or GCIH. CCIE Enterprise Infrastructure certification. Location: Work will be primarily performed from a contractor-owned facility near Fort Belvoir, VA and customer locations. Candidates may work onsite/reside within commuting distance of one of the following: Fort Belvoir, VA ( highly preferred ) Battle Creek, MI Columbus, OH Dayton, OH New Cumberland, PA Ogden, UT Philadelphia, PA Richmond, VA Anniston, AL San Diego, CA Fort Bragg, NC Robins AFB, GA Tobyhanna, PA. Preferred Qualifications: Check Point Certified Security Administrator (CCSA) or higher certification. AWS, Microsoft Azure, Google Cloud, or Cloud+ certification. Work Environment and Physical Demand: Must be able to work for extended hours at a computer in an office environment as well as work from comm closets and warehouse spaces as needed. The projected salary range for this position is $190,000+ annually. Final compensation will be determined based on factors including years of relevant experience, active security clearance level, certifications, technical skillset, contract requirements, and overall qualifications. At AGE Solutions, we reward performance, invest in growth, and share success. Our benefits support the whole person, professionally, financially, and personally. 26 Days Paid Leave: Includes vacation, sick, personal time, and holidays. You choose how to use it. Performance Bonuses: Performance bonuses are awarded based on individual contributions and company-wide results, aligning recognition with impact. 401(k) with Match: We match 3% of your contributions with immediate vesting. Financial Protection: Company-paid life insurance up to $300K and options for additional coverage for you and your dependents. Health Benefits: Multiple medical plans, dental, vision, FSA and HSA options to fit your needs. Parental Leave: 15 days of fully paid leave for new parents, because family matters. Military Differential Pay: We bridge the gap for employees on active duty, so they don't take a financial hit while serving. Professional Growth: Paid training and certifications, tuition reimbursement, and the tools and tech to get the job done right. Shared Success: In the event of a company sale, our CEO has committed to returning 80% of net proceeds to employees. This ensures our team shares in the long term value they help create. At AGE, you'll do work that matters, supported by a company that delivers for its people.
Enterprise Network Architect
AGE solutions New Cumberland, Pennsylvania
Job Description Job Description About Us AGE Solutions is a premier technology and professional services company, providing in-depth consulting, advanced technology solutions, and essential services throughout the U.S. government, defense, and intelligence sectors. Prioritizing innovation and client-focused solutions, we assist major agencies in addressing intricate issues and ensuring a more secure future. We are seeking a CCIE-certified Enterprise Network Architect to provide technical leadership, guidance, and design expertise to a team supporting a DoD agency's WAN as well as emerging technology initiatives as related to network engineering. Provides enterprise-level network architecture, technical strategy, and engineering leadership for network infrastructure. Develops architectural solutions and modernization strategies that improve network security, interoperability, scalability, and operational performance. Responsibilities Include: Develop enterprise network architectures, technical designs, and infrastructure modernization roadmaps. Provide senior technical guidance to network engineers, cybersecurity personnel, and Government leadership. Evaluate existing network architecture and recommend improvements to performance, security, availability, and resilience. Design solutions integrating Cisco routing and switching, Check Point firewalls, and enterprise telecommunications technologies. Assess interoperability between agency classified and unclassified networks as well as with NIPRNet, SIPRNet, and cloud-hosted environments. Lead technical assessments of emerging network technologies, platforms, and architectures. Develop high-level and detailed network designs, engineering specifications, and implementation strategies. Support architectural planning for IPv6, MPLS, multicast, QoS, and enterprise network segmentation. Evaluate hardware and software acquisitions for architectural compatibility, lifecycle suitability, and security compliance. Provide architectural guidance for enterprise cloud connectivity, SCCA integration, and application delivery. Review engineering changes, technical proposals, and major network modernization initiatives. Develop technology assessments, analyses of alternatives, and technical recommendations for Government stakeholders. Support laboratory evaluations, proof-of-concept testing, and technical design validation. Provide expert technical support for complex network performance, interoperability, and security issues. Ensure proposed architectures comply with applicable DoD, DISA, and agency technical and security standards. Advise on selection of technological purchases with regards to processing, data storage, data access, and applications development. Advises of feasibility of potential future projects to management. Required Skills, Qualifications and Experience: Experience: Eight years of relevant experience including experience with network WAN/LAN hardware and software and firewalls. Education: High School Diploma. Citizenship and Clearance: US Citizenship is required. DoD Top Secret clearance or Secret clearance with favorably adjudicated Tier 5/SSBI investigation. Certification: DoD 8570/8140: IAT Level III baseline certification such as CASP+, CCNP Security, CISA, CISSP, GCED, or GCIH. CCIE Enterprise Infrastructure certification. Location: Work will be primarily performed from a contractor-owned facility near Fort Belvoir, VA and customer locations. Candidates may work onsite/reside within commuting distance of one of the following: Fort Belvoir, VA ( highly preferred ) Battle Creek, MI Columbus, OH Dayton, OH New Cumberland, PA Ogden, UT Philadelphia, PA Richmond, VA Anniston, AL San Diego, CA Fort Bragg, NC Robins AFB, GA Tobyhanna, PA. Preferred Qualifications: Check Point Certified Security Administrator (CCSA) or higher certification. AWS, Microsoft Azure, Google Cloud, or Cloud+ certification. Work Environment and Physical Demand: Must be able to work for extended hours at a computer in an office environment as well as work from comm closets and warehouse spaces as needed. The projected salary range for this position is $190,000+ annually. Final compensation will be determined based on factors including years of relevant experience, active security clearance level, certifications, technical skillset, contract requirements, and overall qualifications. At AGE Solutions, we reward performance, invest in growth, and share success. Our benefits support the whole person, professionally, financially, and personally. 26 Days Paid Leave: Includes vacation, sick, personal time, and holidays. You choose how to use it. Performance Bonuses: Performance bonuses are awarded based on individual contributions and company-wide results, aligning recognition with impact. 401(k) with Match: We match 3% of your contributions with immediate vesting. Financial Protection: Company-paid life insurance up to $300K and options for additional coverage for you and your dependents. Health Benefits: Multiple medical plans, dental, vision, FSA and HSA options to fit your needs. Parental Leave: 15 days of fully paid leave for new parents, because family matters. Military Differential Pay: We bridge the gap for employees on active duty, so they don't take a financial hit while serving. Professional Growth: Paid training and certifications, tuition reimbursement, and the tools and tech to get the job done right. Shared Success: In the event of a company sale, our CEO has committed to returning 80% of net proceeds to employees. This ensures our team shares in the long term value they help create. At AGE, you'll do work that matters, supported by a company that delivers for its people.
11/02/2026
Full time
Job Description Job Description About Us AGE Solutions is a premier technology and professional services company, providing in-depth consulting, advanced technology solutions, and essential services throughout the U.S. government, defense, and intelligence sectors. Prioritizing innovation and client-focused solutions, we assist major agencies in addressing intricate issues and ensuring a more secure future. We are seeking a CCIE-certified Enterprise Network Architect to provide technical leadership, guidance, and design expertise to a team supporting a DoD agency's WAN as well as emerging technology initiatives as related to network engineering. Provides enterprise-level network architecture, technical strategy, and engineering leadership for network infrastructure. Develops architectural solutions and modernization strategies that improve network security, interoperability, scalability, and operational performance. Responsibilities Include: Develop enterprise network architectures, technical designs, and infrastructure modernization roadmaps. Provide senior technical guidance to network engineers, cybersecurity personnel, and Government leadership. Evaluate existing network architecture and recommend improvements to performance, security, availability, and resilience. Design solutions integrating Cisco routing and switching, Check Point firewalls, and enterprise telecommunications technologies. Assess interoperability between agency classified and unclassified networks as well as with NIPRNet, SIPRNet, and cloud-hosted environments. Lead technical assessments of emerging network technologies, platforms, and architectures. Develop high-level and detailed network designs, engineering specifications, and implementation strategies. Support architectural planning for IPv6, MPLS, multicast, QoS, and enterprise network segmentation. Evaluate hardware and software acquisitions for architectural compatibility, lifecycle suitability, and security compliance. Provide architectural guidance for enterprise cloud connectivity, SCCA integration, and application delivery. Review engineering changes, technical proposals, and major network modernization initiatives. Develop technology assessments, analyses of alternatives, and technical recommendations for Government stakeholders. Support laboratory evaluations, proof-of-concept testing, and technical design validation. Provide expert technical support for complex network performance, interoperability, and security issues. Ensure proposed architectures comply with applicable DoD, DISA, and agency technical and security standards. Advise on selection of technological purchases with regards to processing, data storage, data access, and applications development. Advises of feasibility of potential future projects to management. Required Skills, Qualifications and Experience: Experience: Eight years of relevant experience including experience with network WAN/LAN hardware and software and firewalls. Education: High School Diploma. Citizenship and Clearance: US Citizenship is required. DoD Top Secret clearance or Secret clearance with favorably adjudicated Tier 5/SSBI investigation. Certification: DoD 8570/8140: IAT Level III baseline certification such as CASP+, CCNP Security, CISA, CISSP, GCED, or GCIH. CCIE Enterprise Infrastructure certification. Location: Work will be primarily performed from a contractor-owned facility near Fort Belvoir, VA and customer locations. Candidates may work onsite/reside within commuting distance of one of the following: Fort Belvoir, VA ( highly preferred ) Battle Creek, MI Columbus, OH Dayton, OH New Cumberland, PA Ogden, UT Philadelphia, PA Richmond, VA Anniston, AL San Diego, CA Fort Bragg, NC Robins AFB, GA Tobyhanna, PA. Preferred Qualifications: Check Point Certified Security Administrator (CCSA) or higher certification. AWS, Microsoft Azure, Google Cloud, or Cloud+ certification. Work Environment and Physical Demand: Must be able to work for extended hours at a computer in an office environment as well as work from comm closets and warehouse spaces as needed. The projected salary range for this position is $190,000+ annually. Final compensation will be determined based on factors including years of relevant experience, active security clearance level, certifications, technical skillset, contract requirements, and overall qualifications. At AGE Solutions, we reward performance, invest in growth, and share success. Our benefits support the whole person, professionally, financially, and personally. 26 Days Paid Leave: Includes vacation, sick, personal time, and holidays. You choose how to use it. Performance Bonuses: Performance bonuses are awarded based on individual contributions and company-wide results, aligning recognition with impact. 401(k) with Match: We match 3% of your contributions with immediate vesting. Financial Protection: Company-paid life insurance up to $300K and options for additional coverage for you and your dependents. Health Benefits: Multiple medical plans, dental, vision, FSA and HSA options to fit your needs. Parental Leave: 15 days of fully paid leave for new parents, because family matters. Military Differential Pay: We bridge the gap for employees on active duty, so they don't take a financial hit while serving. Professional Growth: Paid training and certifications, tuition reimbursement, and the tools and tech to get the job done right. Shared Success: In the event of a company sale, our CEO has committed to returning 80% of net proceeds to employees. This ensures our team shares in the long term value they help create. At AGE, you'll do work that matters, supported by a company that delivers for its people.
Palo Alto Firewall Engineer
System One Springfield, Virginia
Job Description Job Description Job Title: Palo Alto Firewall Engineer Location: Springfield, VA Type: Contract To Hire Compensation: $80/hr. W2 Benefits available Conversion Salary: $150,000 annually plus benefits Work Model: Onsite Security Clearance: Active TS/SCI clearance and the ability to successfully pass and maintain a U.S. Government polygraph Responsibilities Lead the design, requirements analysis, testing, integration, and implementation of secure network architectures centered on the Palo Alto Networks ecosystem. Serve as the lead technical authority for administering, configuring, and troubleshooting Palo Alto Networks Next-Generation Firewalls (NGFWs) across a hybrid enterprise environment. Engineer and implement solutions for customer Change Requests (CRQs); assess impacts on enterprise transport and security activities and provide technically sound recommendations. Serve as the technical representative for assigned projects and coordinate issues with the appropriate owners, organizations, contract leadership, and customer leadership. Manage the full lifecycle of Palo Alto hardware and software, including complex hardware refreshes, PAN-OS upgrades, legacy-platform sustainment, physical troubleshooting, and line-card replacements. Develop, oversee, and maintain configuration-management processes, network architecture diagrams, technical documentation, integration and test plans, and Standard Operating Procedures (SOPs) for Palo Alto security platforms. Use Panorama for centralized policy management, including templates, device groups, inheritance, and consistent configuration across a diverse fleet of physical and virtual firewalls. Configure and maintain advanced security capabilities and profiles, including App-ID, User-ID, Content-ID, SSL Decryption, WildFire, NAT, IPSec VPNs, and threat prevention. Oversee security-incident reporting, documentation, investigation, and corrective-action development. Act as a liaison to contract/customer management and the government Designated Approving Authority (DAA) regarding network-security status, policies, procedures, and risks. Evaluate and report on new and emerging network-security and communications technologies to improve network capacity, performance, reliability, standardization, and security. Provide mentorship and technical oversight to junior engineers and serve as an escalation point for complex troubleshooting. Follow all customer network-security processes and procedures, maintain compliance with Government and QA standards, and ensure service-performance indicators are met or exceeded. Requirements Security Clearance: Active TS/SCI clearance and the ability to successfully pass and maintain a U.S. Government polygraph. A minimum of 7+ years of hands-on experience administering, configuring, and troubleshooting Palo Alto Networks NGFWs in large-scale enterprise/global environments. Active Palo Alto Networks Certified Network Security Engineer (PCNSE) certification. DoD 8140.01 and DoD 8570.01-M IAT Level II compliance (for example, Security+ CE). Ability to obtain and maintain a CSSP Infrastructure Support certification within 120 days of the start date. Deep practical knowledge of legacy Gen 2/Gen 3 Palo Alto hardware, including PA-3000 and PA-5000 series platforms, legacy CLI, hardware troubleshooting, and line-card replacements. Experience deploying and managing modern PAN-OS architectures, including Prisma Access (SASE), Prisma SD-WAN, and VM-Series virtual firewalls in cloud environments such as AWS, Azure, GCP, or private-cloud. Proven expertise with Panorama for centralized policy management, template/device-group inheritance, and configuration deployment across a hybrid firewall fleet. Advanced understanding of BGP, OSPF, IPSec VPNs, NAT, TLS/SSL, mutual TLS (mTLS), HTTP, SAML, OAuth, OCSP revocation, DoD PKI, Kerberos, LDAP, and Active Directory. Experience with F5 technologies, including APM, AFM, and SSL Orchestrator (SSLO), and troubleshooting TLS/SSL handshake/connection issues. Strong network design, engineering, implementation, and troubleshooting skills, including ROM equipment lists and cost estimates. Knowledge of DISA and Intelligence Community security standards and requirements. Excellent interpersonal skills and technical judgment with the ability to work independently and support weekend/evening work if needed. Bachelor's degree in IT, Cybersecurity, Computer Science, or a related field, with additional relevant experience considered in lieu of a degree. Desired Qualifications Active Palo Alto Networks Certified Network Security Consultant (PCNSC) or Prisma Certified SASE Professional (PCSAE). F5 Networks Certified Technology Specialist (CTS). Cisco CCNP, CCVP, CCNA, CCDP, or equivalent. ITIL v3 Foundations and/or ISC2 CISSP Certification. Proficiency in Python and automation tools such as Ansible, Terraform, or Palo Alto XML/REST APIs. Hands-on experience with Cortex XDR or Cortex XSOAR. Experience with Palo Alto Networks Expedition for migration and rule consolidation. Knowledge of Zero Trust Network Access (ZTNA) architectures and additional security platforms (e.g., Juniper SRX, Cisco FTD/ASA). Master's degree in related fields is a plus. System One, and its subsidiaries including Joulé and Mountain Ltd., are leaders in delivering outsourced services and workforce solutions across North America. We help clients get work done more efficiently and economically, without compromising quality. System One not only serves as a valued partner for our clients, but we offer eligible employees health and welfare benefits coverage options including medical, dental, vision, spending accounts, life insurance, voluntary plans, as well as participation in a 401(k) plan. System One is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, age, national origin, disability, family care or medical leave status, genetic information, veteran status, marital status, or any other characteristic protected by applicable federal, state, or local law. Ref: Baltimore
10/07/2026
Full time
Job Description Job Description Job Title: Palo Alto Firewall Engineer Location: Springfield, VA Type: Contract To Hire Compensation: $80/hr. W2 Benefits available Conversion Salary: $150,000 annually plus benefits Work Model: Onsite Security Clearance: Active TS/SCI clearance and the ability to successfully pass and maintain a U.S. Government polygraph Responsibilities Lead the design, requirements analysis, testing, integration, and implementation of secure network architectures centered on the Palo Alto Networks ecosystem. Serve as the lead technical authority for administering, configuring, and troubleshooting Palo Alto Networks Next-Generation Firewalls (NGFWs) across a hybrid enterprise environment. Engineer and implement solutions for customer Change Requests (CRQs); assess impacts on enterprise transport and security activities and provide technically sound recommendations. Serve as the technical representative for assigned projects and coordinate issues with the appropriate owners, organizations, contract leadership, and customer leadership. Manage the full lifecycle of Palo Alto hardware and software, including complex hardware refreshes, PAN-OS upgrades, legacy-platform sustainment, physical troubleshooting, and line-card replacements. Develop, oversee, and maintain configuration-management processes, network architecture diagrams, technical documentation, integration and test plans, and Standard Operating Procedures (SOPs) for Palo Alto security platforms. Use Panorama for centralized policy management, including templates, device groups, inheritance, and consistent configuration across a diverse fleet of physical and virtual firewalls. Configure and maintain advanced security capabilities and profiles, including App-ID, User-ID, Content-ID, SSL Decryption, WildFire, NAT, IPSec VPNs, and threat prevention. Oversee security-incident reporting, documentation, investigation, and corrective-action development. Act as a liaison to contract/customer management and the government Designated Approving Authority (DAA) regarding network-security status, policies, procedures, and risks. Evaluate and report on new and emerging network-security and communications technologies to improve network capacity, performance, reliability, standardization, and security. Provide mentorship and technical oversight to junior engineers and serve as an escalation point for complex troubleshooting. Follow all customer network-security processes and procedures, maintain compliance with Government and QA standards, and ensure service-performance indicators are met or exceeded. Requirements Security Clearance: Active TS/SCI clearance and the ability to successfully pass and maintain a U.S. Government polygraph. A minimum of 7+ years of hands-on experience administering, configuring, and troubleshooting Palo Alto Networks NGFWs in large-scale enterprise/global environments. Active Palo Alto Networks Certified Network Security Engineer (PCNSE) certification. DoD 8140.01 and DoD 8570.01-M IAT Level II compliance (for example, Security+ CE). Ability to obtain and maintain a CSSP Infrastructure Support certification within 120 days of the start date. Deep practical knowledge of legacy Gen 2/Gen 3 Palo Alto hardware, including PA-3000 and PA-5000 series platforms, legacy CLI, hardware troubleshooting, and line-card replacements. Experience deploying and managing modern PAN-OS architectures, including Prisma Access (SASE), Prisma SD-WAN, and VM-Series virtual firewalls in cloud environments such as AWS, Azure, GCP, or private-cloud. Proven expertise with Panorama for centralized policy management, template/device-group inheritance, and configuration deployment across a hybrid firewall fleet. Advanced understanding of BGP, OSPF, IPSec VPNs, NAT, TLS/SSL, mutual TLS (mTLS), HTTP, SAML, OAuth, OCSP revocation, DoD PKI, Kerberos, LDAP, and Active Directory. Experience with F5 technologies, including APM, AFM, and SSL Orchestrator (SSLO), and troubleshooting TLS/SSL handshake/connection issues. Strong network design, engineering, implementation, and troubleshooting skills, including ROM equipment lists and cost estimates. Knowledge of DISA and Intelligence Community security standards and requirements. Excellent interpersonal skills and technical judgment with the ability to work independently and support weekend/evening work if needed. Bachelor's degree in IT, Cybersecurity, Computer Science, or a related field, with additional relevant experience considered in lieu of a degree. Desired Qualifications Active Palo Alto Networks Certified Network Security Consultant (PCNSC) or Prisma Certified SASE Professional (PCSAE). F5 Networks Certified Technology Specialist (CTS). Cisco CCNP, CCVP, CCNA, CCDP, or equivalent. ITIL v3 Foundations and/or ISC2 CISSP Certification. Proficiency in Python and automation tools such as Ansible, Terraform, or Palo Alto XML/REST APIs. Hands-on experience with Cortex XDR or Cortex XSOAR. Experience with Palo Alto Networks Expedition for migration and rule consolidation. Knowledge of Zero Trust Network Access (ZTNA) architectures and additional security platforms (e.g., Juniper SRX, Cisco FTD/ASA). Master's degree in related fields is a plus. System One, and its subsidiaries including Joulé and Mountain Ltd., are leaders in delivering outsourced services and workforce solutions across North America. We help clients get work done more efficiently and economically, without compromising quality. System One not only serves as a valued partner for our clients, but we offer eligible employees health and welfare benefits coverage options including medical, dental, vision, spending accounts, life insurance, voluntary plans, as well as participation in a 401(k) plan. System One is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, age, national origin, disability, family care or medical leave status, genetic information, veteran status, marital status, or any other characteristic protected by applicable federal, state, or local law. Ref: Baltimore
Cybersecurity Network Engineer
Addison Group Grapeland, Texas
Job Description Job Description Role: Cybersecurity / Network Engineer Location: Houston, TX (Hybrid) Pay Range: $120,000 - $125,000 / year Benefits: This position is eligible for medical, dental, vision and 401(k) About the Role We are seeking a Cybersecurity / Network Engineer to take ownership of a growing enterprise network and help shape the organization's long-term infrastructure and security strategy. This role combines hands-on network engineering with cybersecurity oversight, making it an excellent opportunity for someone who enjoys building secure, scalable environments while proactively identifying opportunities for improvement. The ideal candidate has experience managing enterprise network infrastructure, strengthening security posture, and partnering with third-party security providers to protect business operations. This position is best suited for someone who takes initiative, thinks strategically, and is comfortable serving as the technical owner of a complex network environment. Primary Responsibilities Manage, maintain, and optimize enterprise network infrastructure across multiple locations. Design, implement, and support secure networking solutions including firewalls, VPNs, wireless networks, and SD-WAN connectivity. Administer and support Cisco Meraki and Fortinet network environments. Partner with third-party security vendors to monitor, investigate, and respond to cybersecurity events. Lead vulnerability remediation efforts and support ongoing risk reduction initiatives. Develop and enhance security policies, standards, and best practices to strengthen the organization's cybersecurity posture. Support compliance initiatives including NIST and CMMC frameworks. Perform regular security assessments, identify infrastructure risks, and recommend improvements. Administer core Microsoft infrastructure including Active Directory, DNS, DHCP, and Group Policy. Troubleshoot network, server, and infrastructure issues across both on-premises and cloud environments. Maintain accurate network diagrams, technical documentation, and system inventories. Provide Tier II/III infrastructure support and collaborate with internal teams on technology initiatives. Participate in infrastructure planning, capacity management, and continuous improvement efforts. Required Background 5+ years of experience in Network Engineering, Cybersecurity, or Infrastructure Engineering. Experience administering Cisco Meraki networking environments. Hands-on experience managing Fortinet/FortiGate firewalls. Strong understanding of enterprise networking including routing, switching, VPNs, wireless networking, and SD-WAN. Experience supporting Microsoft Active Directory, DNS, DHCP, and Group Policy. Knowledge of cybersecurity frameworks such as NIST and/or CMMC. Experience working through a cybersecurity incident, including investigation, remediation, and recovery efforts. Experience coordinating with third-party security vendors or managed security providers. Strong troubleshooting skills across network and infrastructure technologies. Skills & Qualifications Strong understanding of network architecture, cybersecurity principles, and infrastructure best practices. Ability to proactively identify risks and implement long-term technical improvements. Excellent problem-solving and analytical skills. Strong verbal and written communication skills. Ability to work independently while collaborating with cross-functional teams. Experience with VMware, SAN/NAS storage, or cloud infrastructure is a plus. Familiarity with endpoint security platforms, vulnerability management, SIEM solutions, or email security tools is preferred. Comfortable supporting multiple locations and occasional travel to local data center facilities as needed. Self-motivated with a strong sense of ownership and accountability. Addison Group is an Equal Opportunity Employer. Addison Group provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, gender, sexual orientation, national origin, age, disability, genetic information, marital status, amnesty, or status as a covered veteran in accordance with applicable federal, state and local laws. Addison Group complies with applicable state and local laws governing non-discrimination in employment in every location in which the company has facilities. Reasonable accommodation is available for qualified individuals with disabilities, upon request. IND 005-009
10/07/2026
Full time
Job Description Job Description Role: Cybersecurity / Network Engineer Location: Houston, TX (Hybrid) Pay Range: $120,000 - $125,000 / year Benefits: This position is eligible for medical, dental, vision and 401(k) About the Role We are seeking a Cybersecurity / Network Engineer to take ownership of a growing enterprise network and help shape the organization's long-term infrastructure and security strategy. This role combines hands-on network engineering with cybersecurity oversight, making it an excellent opportunity for someone who enjoys building secure, scalable environments while proactively identifying opportunities for improvement. The ideal candidate has experience managing enterprise network infrastructure, strengthening security posture, and partnering with third-party security providers to protect business operations. This position is best suited for someone who takes initiative, thinks strategically, and is comfortable serving as the technical owner of a complex network environment. Primary Responsibilities Manage, maintain, and optimize enterprise network infrastructure across multiple locations. Design, implement, and support secure networking solutions including firewalls, VPNs, wireless networks, and SD-WAN connectivity. Administer and support Cisco Meraki and Fortinet network environments. Partner with third-party security vendors to monitor, investigate, and respond to cybersecurity events. Lead vulnerability remediation efforts and support ongoing risk reduction initiatives. Develop and enhance security policies, standards, and best practices to strengthen the organization's cybersecurity posture. Support compliance initiatives including NIST and CMMC frameworks. Perform regular security assessments, identify infrastructure risks, and recommend improvements. Administer core Microsoft infrastructure including Active Directory, DNS, DHCP, and Group Policy. Troubleshoot network, server, and infrastructure issues across both on-premises and cloud environments. Maintain accurate network diagrams, technical documentation, and system inventories. Provide Tier II/III infrastructure support and collaborate with internal teams on technology initiatives. Participate in infrastructure planning, capacity management, and continuous improvement efforts. Required Background 5+ years of experience in Network Engineering, Cybersecurity, or Infrastructure Engineering. Experience administering Cisco Meraki networking environments. Hands-on experience managing Fortinet/FortiGate firewalls. Strong understanding of enterprise networking including routing, switching, VPNs, wireless networking, and SD-WAN. Experience supporting Microsoft Active Directory, DNS, DHCP, and Group Policy. Knowledge of cybersecurity frameworks such as NIST and/or CMMC. Experience working through a cybersecurity incident, including investigation, remediation, and recovery efforts. Experience coordinating with third-party security vendors or managed security providers. Strong troubleshooting skills across network and infrastructure technologies. Skills & Qualifications Strong understanding of network architecture, cybersecurity principles, and infrastructure best practices. Ability to proactively identify risks and implement long-term technical improvements. Excellent problem-solving and analytical skills. Strong verbal and written communication skills. Ability to work independently while collaborating with cross-functional teams. Experience with VMware, SAN/NAS storage, or cloud infrastructure is a plus. Familiarity with endpoint security platforms, vulnerability management, SIEM solutions, or email security tools is preferred. Comfortable supporting multiple locations and occasional travel to local data center facilities as needed. Self-motivated with a strong sense of ownership and accountability. Addison Group is an Equal Opportunity Employer. Addison Group provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, gender, sexual orientation, national origin, age, disability, genetic information, marital status, amnesty, or status as a covered veteran in accordance with applicable federal, state and local laws. Addison Group complies with applicable state and local laws governing non-discrimination in employment in every location in which the company has facilities. Reasonable accommodation is available for qualified individuals with disabilities, upon request. IND 005-009
Palo Alto Firewall Engineer
System One Springfield, Virginia
Job Description Job Description Job Title: Palo Alto Firewall Engineer Location: Springfield, VA Type: Contract To Hire Compensation: $80/hr. W2 Benefits available Conversion Salary: $150,000 annually plus benefits Work Model: Onsite Security Clearance: Active TS/SCI clearance and the ability to successfully pass and maintain a U.S. Government polygraph Responsibilities Lead the design, requirements analysis, testing, integration, and implementation of secure network architectures centered on the Palo Alto Networks ecosystem. Serve as the lead technical authority for administering, configuring, and troubleshooting Palo Alto Networks Next-Generation Firewalls (NGFWs) across a hybrid enterprise environment. Engineer and implement solutions for customer Change Requests (CRQs); assess impacts on enterprise transport and security activities and provide technically sound recommendations. Serve as the technical representative for assigned projects and coordinate issues with the appropriate owners, organizations, contract leadership, and customer leadership. Manage the full lifecycle of Palo Alto hardware and software, including complex hardware refreshes, PAN-OS upgrades, legacy-platform sustainment, physical troubleshooting, and line-card replacements. Develop, oversee, and maintain configuration-management processes, network architecture diagrams, technical documentation, integration and test plans, and Standard Operating Procedures (SOPs) for Palo Alto security platforms. Use Panorama for centralized policy management, including templates, device groups, inheritance, and consistent configuration across a diverse fleet of physical and virtual firewalls. Configure and maintain advanced security capabilities and profiles, including App-ID, User-ID, Content-ID, SSL Decryption, WildFire, NAT, IPSec VPNs, and threat prevention. Oversee security-incident reporting, documentation, investigation, and corrective-action development. Act as a liaison to contract/customer management and the government Designated Approving Authority (DAA) regarding network-security status, policies, procedures, and risks. Evaluate and report on new and emerging network-security and communications technologies to improve network capacity, performance, reliability, standardization, and security. Provide mentorship and technical oversight to junior engineers and serve as an escalation point for complex troubleshooting. Follow all customer network-security processes and procedures, maintain compliance with Government and QA standards, and ensure service-performance indicators are met or exceeded. Requirements Security Clearance: Active TS/SCI clearance and the ability to successfully pass and maintain a U.S. Government polygraph. A minimum of 7+ years of hands-on experience administering, configuring, and troubleshooting Palo Alto Networks NGFWs in large-scale enterprise/global environments. Active Palo Alto Networks Certified Network Security Engineer (PCNSE) certification. DoD 8140.01 and DoD 8570.01-M IAT Level II compliance (for example, Security+ CE). Ability to obtain and maintain a CSSP Infrastructure Support certification within 120 days of the start date. Deep practical knowledge of legacy Gen 2/Gen 3 Palo Alto hardware, including PA-3000 and PA-5000 series platforms, legacy CLI, hardware troubleshooting, and line-card replacements. Experience deploying and managing modern PAN-OS architectures, including Prisma Access (SASE), Prisma SD-WAN, and VM-Series virtual firewalls in cloud environments such as AWS, Azure, GCP, or private-cloud. Proven expertise with Panorama for centralized policy management, template/device-group inheritance, and configuration deployment across a hybrid firewall fleet. Advanced understanding of BGP, OSPF, IPSec VPNs, NAT, TLS/SSL, mutual TLS (mTLS), HTTP, SAML, OAuth, OCSP revocation, DoD PKI, Kerberos, LDAP, and Active Directory. Experience with F5 technologies, including APM, AFM, and SSL Orchestrator (SSLO), and troubleshooting TLS/SSL handshake/connection issues. Strong network design, engineering, implementation, and troubleshooting skills, including ROM equipment lists and cost estimates. Knowledge of DISA and Intelligence Community security standards and requirements. Excellent interpersonal skills and technical judgment with the ability to work independently and support weekend/evening work if needed. Bachelor's degree in IT, Cybersecurity, Computer Science, or a related field, with additional relevant experience considered in lieu of a degree. Desired Qualifications Active Palo Alto Networks Certified Network Security Consultant (PCNSC) or Prisma Certified SASE Professional (PCSAE). F5 Networks Certified Technology Specialist (CTS). Cisco CCNP, CCVP, CCNA, CCDP, or equivalent. ITIL v3 Foundations and/or ISC2 CISSP Certification. Proficiency in Python and automation tools such as Ansible, Terraform, or Palo Alto XML/REST APIs. Hands-on experience with Cortex XDR or Cortex XSOAR. Experience with Palo Alto Networks Expedition for migration and rule consolidation. Knowledge of Zero Trust Network Access (ZTNA) architectures and additional security platforms (e.g., Juniper SRX, Cisco FTD/ASA). Master's degree in related fields is a plus. System One, and its subsidiaries including Joulé and Mountain Ltd., are leaders in delivering outsourced services and workforce solutions across North America. We help clients get work done more efficiently and economically, without compromising quality. System One not only serves as a valued partner for our clients, but we offer eligible employees health and welfare benefits coverage options including medical, dental, vision, spending accounts, life insurance, voluntary plans, as well as participation in a 401(k) plan. System One is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, age, national origin, disability, family care or medical leave status, genetic information, veteran status, marital status, or any other characteristic protected by applicable federal, state, or local law. Ref: Baltimore
09/30/2026
Full time
Job Description Job Description Job Title: Palo Alto Firewall Engineer Location: Springfield, VA Type: Contract To Hire Compensation: $80/hr. W2 Benefits available Conversion Salary: $150,000 annually plus benefits Work Model: Onsite Security Clearance: Active TS/SCI clearance and the ability to successfully pass and maintain a U.S. Government polygraph Responsibilities Lead the design, requirements analysis, testing, integration, and implementation of secure network architectures centered on the Palo Alto Networks ecosystem. Serve as the lead technical authority for administering, configuring, and troubleshooting Palo Alto Networks Next-Generation Firewalls (NGFWs) across a hybrid enterprise environment. Engineer and implement solutions for customer Change Requests (CRQs); assess impacts on enterprise transport and security activities and provide technically sound recommendations. Serve as the technical representative for assigned projects and coordinate issues with the appropriate owners, organizations, contract leadership, and customer leadership. Manage the full lifecycle of Palo Alto hardware and software, including complex hardware refreshes, PAN-OS upgrades, legacy-platform sustainment, physical troubleshooting, and line-card replacements. Develop, oversee, and maintain configuration-management processes, network architecture diagrams, technical documentation, integration and test plans, and Standard Operating Procedures (SOPs) for Palo Alto security platforms. Use Panorama for centralized policy management, including templates, device groups, inheritance, and consistent configuration across a diverse fleet of physical and virtual firewalls. Configure and maintain advanced security capabilities and profiles, including App-ID, User-ID, Content-ID, SSL Decryption, WildFire, NAT, IPSec VPNs, and threat prevention. Oversee security-incident reporting, documentation, investigation, and corrective-action development. Act as a liaison to contract/customer management and the government Designated Approving Authority (DAA) regarding network-security status, policies, procedures, and risks. Evaluate and report on new and emerging network-security and communications technologies to improve network capacity, performance, reliability, standardization, and security. Provide mentorship and technical oversight to junior engineers and serve as an escalation point for complex troubleshooting. Follow all customer network-security processes and procedures, maintain compliance with Government and QA standards, and ensure service-performance indicators are met or exceeded. Requirements Security Clearance: Active TS/SCI clearance and the ability to successfully pass and maintain a U.S. Government polygraph. A minimum of 7+ years of hands-on experience administering, configuring, and troubleshooting Palo Alto Networks NGFWs in large-scale enterprise/global environments. Active Palo Alto Networks Certified Network Security Engineer (PCNSE) certification. DoD 8140.01 and DoD 8570.01-M IAT Level II compliance (for example, Security+ CE). Ability to obtain and maintain a CSSP Infrastructure Support certification within 120 days of the start date. Deep practical knowledge of legacy Gen 2/Gen 3 Palo Alto hardware, including PA-3000 and PA-5000 series platforms, legacy CLI, hardware troubleshooting, and line-card replacements. Experience deploying and managing modern PAN-OS architectures, including Prisma Access (SASE), Prisma SD-WAN, and VM-Series virtual firewalls in cloud environments such as AWS, Azure, GCP, or private-cloud. Proven expertise with Panorama for centralized policy management, template/device-group inheritance, and configuration deployment across a hybrid firewall fleet. Advanced understanding of BGP, OSPF, IPSec VPNs, NAT, TLS/SSL, mutual TLS (mTLS), HTTP, SAML, OAuth, OCSP revocation, DoD PKI, Kerberos, LDAP, and Active Directory. Experience with F5 technologies, including APM, AFM, and SSL Orchestrator (SSLO), and troubleshooting TLS/SSL handshake/connection issues. Strong network design, engineering, implementation, and troubleshooting skills, including ROM equipment lists and cost estimates. Knowledge of DISA and Intelligence Community security standards and requirements. Excellent interpersonal skills and technical judgment with the ability to work independently and support weekend/evening work if needed. Bachelor's degree in IT, Cybersecurity, Computer Science, or a related field, with additional relevant experience considered in lieu of a degree. Desired Qualifications Active Palo Alto Networks Certified Network Security Consultant (PCNSC) or Prisma Certified SASE Professional (PCSAE). F5 Networks Certified Technology Specialist (CTS). Cisco CCNP, CCVP, CCNA, CCDP, or equivalent. ITIL v3 Foundations and/or ISC2 CISSP Certification. Proficiency in Python and automation tools such as Ansible, Terraform, or Palo Alto XML/REST APIs. Hands-on experience with Cortex XDR or Cortex XSOAR. Experience with Palo Alto Networks Expedition for migration and rule consolidation. Knowledge of Zero Trust Network Access (ZTNA) architectures and additional security platforms (e.g., Juniper SRX, Cisco FTD/ASA). Master's degree in related fields is a plus. System One, and its subsidiaries including Joulé and Mountain Ltd., are leaders in delivering outsourced services and workforce solutions across North America. We help clients get work done more efficiently and economically, without compromising quality. System One not only serves as a valued partner for our clients, but we offer eligible employees health and welfare benefits coverage options including medical, dental, vision, spending accounts, life insurance, voluntary plans, as well as participation in a 401(k) plan. System One is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, age, national origin, disability, family care or medical leave status, genetic information, veteran status, marital status, or any other characteristic protected by applicable federal, state, or local law. Ref: Baltimore
Cybersecurity Network Engineer
Addison Group Grapeland, Texas
Job Description Job Description Role: Cybersecurity / Network Engineer Location: Houston, TX (Hybrid) Pay Range: $120,000 - $125,000 / year Benefits: This position is eligible for medical, dental, vision and 401(k) About the Role We are seeking a Cybersecurity / Network Engineer to take ownership of a growing enterprise network and help shape the organization's long-term infrastructure and security strategy. This role combines hands-on network engineering with cybersecurity oversight, making it an excellent opportunity for someone who enjoys building secure, scalable environments while proactively identifying opportunities for improvement. The ideal candidate has experience managing enterprise network infrastructure, strengthening security posture, and partnering with third-party security providers to protect business operations. This position is best suited for someone who takes initiative, thinks strategically, and is comfortable serving as the technical owner of a complex network environment. Primary Responsibilities Manage, maintain, and optimize enterprise network infrastructure across multiple locations. Design, implement, and support secure networking solutions including firewalls, VPNs, wireless networks, and SD-WAN connectivity. Administer and support Cisco Meraki and Fortinet network environments. Partner with third-party security vendors to monitor, investigate, and respond to cybersecurity events. Lead vulnerability remediation efforts and support ongoing risk reduction initiatives. Develop and enhance security policies, standards, and best practices to strengthen the organization's cybersecurity posture. Support compliance initiatives including NIST and CMMC frameworks. Perform regular security assessments, identify infrastructure risks, and recommend improvements. Administer core Microsoft infrastructure including Active Directory, DNS, DHCP, and Group Policy. Troubleshoot network, server, and infrastructure issues across both on-premises and cloud environments. Maintain accurate network diagrams, technical documentation, and system inventories. Provide Tier II/III infrastructure support and collaborate with internal teams on technology initiatives. Participate in infrastructure planning, capacity management, and continuous improvement efforts. Required Background 5+ years of experience in Network Engineering, Cybersecurity, or Infrastructure Engineering. Experience administering Cisco Meraki networking environments. Hands-on experience managing Fortinet/FortiGate firewalls. Strong understanding of enterprise networking including routing, switching, VPNs, wireless networking, and SD-WAN. Experience supporting Microsoft Active Directory, DNS, DHCP, and Group Policy. Knowledge of cybersecurity frameworks such as NIST and/or CMMC. Experience working through a cybersecurity incident, including investigation, remediation, and recovery efforts. Experience coordinating with third-party security vendors or managed security providers. Strong troubleshooting skills across network and infrastructure technologies. Skills & Qualifications Strong understanding of network architecture, cybersecurity principles, and infrastructure best practices. Ability to proactively identify risks and implement long-term technical improvements. Excellent problem-solving and analytical skills. Strong verbal and written communication skills. Ability to work independently while collaborating with cross-functional teams. Experience with VMware, SAN/NAS storage, or cloud infrastructure is a plus. Familiarity with endpoint security platforms, vulnerability management, SIEM solutions, or email security tools is preferred. Comfortable supporting multiple locations and occasional travel to local data center facilities as needed. Self-motivated with a strong sense of ownership and accountability. Addison Group is an Equal Opportunity Employer. Addison Group provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, gender, sexual orientation, national origin, age, disability, genetic information, marital status, amnesty, or status as a covered veteran in accordance with applicable federal, state and local laws. Addison Group complies with applicable state and local laws governing non-discrimination in employment in every location in which the company has facilities. Reasonable accommodation is available for qualified individuals with disabilities, upon request. IND 005-009
09/30/2026
Full time
Job Description Job Description Role: Cybersecurity / Network Engineer Location: Houston, TX (Hybrid) Pay Range: $120,000 - $125,000 / year Benefits: This position is eligible for medical, dental, vision and 401(k) About the Role We are seeking a Cybersecurity / Network Engineer to take ownership of a growing enterprise network and help shape the organization's long-term infrastructure and security strategy. This role combines hands-on network engineering with cybersecurity oversight, making it an excellent opportunity for someone who enjoys building secure, scalable environments while proactively identifying opportunities for improvement. The ideal candidate has experience managing enterprise network infrastructure, strengthening security posture, and partnering with third-party security providers to protect business operations. This position is best suited for someone who takes initiative, thinks strategically, and is comfortable serving as the technical owner of a complex network environment. Primary Responsibilities Manage, maintain, and optimize enterprise network infrastructure across multiple locations. Design, implement, and support secure networking solutions including firewalls, VPNs, wireless networks, and SD-WAN connectivity. Administer and support Cisco Meraki and Fortinet network environments. Partner with third-party security vendors to monitor, investigate, and respond to cybersecurity events. Lead vulnerability remediation efforts and support ongoing risk reduction initiatives. Develop and enhance security policies, standards, and best practices to strengthen the organization's cybersecurity posture. Support compliance initiatives including NIST and CMMC frameworks. Perform regular security assessments, identify infrastructure risks, and recommend improvements. Administer core Microsoft infrastructure including Active Directory, DNS, DHCP, and Group Policy. Troubleshoot network, server, and infrastructure issues across both on-premises and cloud environments. Maintain accurate network diagrams, technical documentation, and system inventories. Provide Tier II/III infrastructure support and collaborate with internal teams on technology initiatives. Participate in infrastructure planning, capacity management, and continuous improvement efforts. Required Background 5+ years of experience in Network Engineering, Cybersecurity, or Infrastructure Engineering. Experience administering Cisco Meraki networking environments. Hands-on experience managing Fortinet/FortiGate firewalls. Strong understanding of enterprise networking including routing, switching, VPNs, wireless networking, and SD-WAN. Experience supporting Microsoft Active Directory, DNS, DHCP, and Group Policy. Knowledge of cybersecurity frameworks such as NIST and/or CMMC. Experience working through a cybersecurity incident, including investigation, remediation, and recovery efforts. Experience coordinating with third-party security vendors or managed security providers. Strong troubleshooting skills across network and infrastructure technologies. Skills & Qualifications Strong understanding of network architecture, cybersecurity principles, and infrastructure best practices. Ability to proactively identify risks and implement long-term technical improvements. Excellent problem-solving and analytical skills. Strong verbal and written communication skills. Ability to work independently while collaborating with cross-functional teams. Experience with VMware, SAN/NAS storage, or cloud infrastructure is a plus. Familiarity with endpoint security platforms, vulnerability management, SIEM solutions, or email security tools is preferred. Comfortable supporting multiple locations and occasional travel to local data center facilities as needed. Self-motivated with a strong sense of ownership and accountability. Addison Group is an Equal Opportunity Employer. Addison Group provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, gender, sexual orientation, national origin, age, disability, genetic information, marital status, amnesty, or status as a covered veteran in accordance with applicable federal, state and local laws. Addison Group complies with applicable state and local laws governing non-discrimination in employment in every location in which the company has facilities. Reasonable accommodation is available for qualified individuals with disabilities, upon request. IND 005-009
Palo Alto Firewall Engineer / SME (PCNSE)
RISA Springfield, Virginia
Job Description Job Description Palo Alto Firewall Engineer / SME (PCNSE) Cyber Security Engineering Specialist III - Firewall Services Location: Springfield, VA - on site Time Type: Full time, Exempt Clearance Required to Start: Active TS/SCI (U.S. citizenship required) Additional Requirement: Must be able to obtain and maintain a U.S. Government polygraph Travel: Up to 15%, local and CONUS Salary Range: $117,000 - $128,000 Own the Palo Alto estate - legacy iron through Prisma and Panorama. RISA is hiring a Palo Alto SME to be the focal point for every Palo Alto task, operation, and project on the Network Security Services team supporting an Intelligence Community customer. The work spans both ends of the estate: PA-3000 and PA-5000 hardware refreshes and legacy CLI on one side, Prisma Access, VM-Series, and Cortex on the other. You will talk to the owner here, not a recruiting queue. What You Will Do Serve as the lead technical authority for administering, configuring, and troubleshooting Palo Alto NGFWs across a hybrid enterprise. Lead the design, analysis, testing, and implementation of secure network architectures on the Palo Alto stack. Manage the full hardware and software lifecycle, including complex refreshes and PAN-OS upgrades on legacy platforms. Run Panorama for centralized policy management across a fleet of physical and virtual firewalls. Configure master-level security profiles - App-ID, User-ID, Content-ID, SSL Decryption, and WildFire. Own configuration management processes and SOPs for all Palo Alto platforms. Mentor junior engineers and act as the escalation point for complex troubleshooting. Liaise with contract, customer, and government DAA on network security status, policies, and procedures. What You'll Bring S. citizenship and an active TS/SCI. Ability to successfully obtain and maintain a U.S. Government polygraph. Education and experience, per the contract labor category criteria: Bachelor's degree in a field applicable to the position plus 6 years of relevant experience. Equivalents accepted - Master's plus 4, Associate's plus 8, or High School diploma/GED plus 10. 7+ years hands-on administering, configuring, and troubleshooting Palo Alto NGFWs in large-scale enterprise or global environments. Active PCNSE certification. DoD 8140.01 and 8570.01-M IAT Level II (e.g. Security+ CE), and CSSP Infrastructure Support within 120 days of start. Deep practical knowledge of legacy Gen 2/Gen 3 hardware - PA-3000 and PA-5000 series, legacy CLI, physical troubleshooting, line-card replacement. Prisma Access (SASE), Prisma SD-WAN, and VM-Series in AWS, Azure, or GCP. Panorama template and device-group inheritance across a hybrid fleet. Advanced BGP, OSPF, IPSec VPN, and NAT. Nice to Have PCNSC or Prisma Certified SASE Professional (PCSAE). Python, plus firewall automation with Ansible, Terraform, or the Palo Alto XML/REST APIs. Cortex XDR or XSOAR; Expedition for legacy rule migration to App-ID policy. Zero Trust Network Access architecture; F5 (APM, AFM), Juniper SRX, or Cisco FTD/ASA. About RISA Rolston Information Systems Assurance (RISA) is a Service-Disabled Veteran-Owned Small Business that has supported federal defense and intelligence cybersecurity missions for more than seventeen years. We are small on purpose: direct access to leadership, a real say in how the work gets done, and none of the layers that slow large primes down. Benefits Medical, dental, and vision insurance; 401(k) and Roth; Paid Time Off; and 11 paid Federal Holidays. RISA is an Equal Opportunity Employer. Upon receiving an offer of employment, all applicants will be required to do a background check, including a criminal record check and employment/education verification.
09/30/2026
Full time
Job Description Job Description Palo Alto Firewall Engineer / SME (PCNSE) Cyber Security Engineering Specialist III - Firewall Services Location: Springfield, VA - on site Time Type: Full time, Exempt Clearance Required to Start: Active TS/SCI (U.S. citizenship required) Additional Requirement: Must be able to obtain and maintain a U.S. Government polygraph Travel: Up to 15%, local and CONUS Salary Range: $117,000 - $128,000 Own the Palo Alto estate - legacy iron through Prisma and Panorama. RISA is hiring a Palo Alto SME to be the focal point for every Palo Alto task, operation, and project on the Network Security Services team supporting an Intelligence Community customer. The work spans both ends of the estate: PA-3000 and PA-5000 hardware refreshes and legacy CLI on one side, Prisma Access, VM-Series, and Cortex on the other. You will talk to the owner here, not a recruiting queue. What You Will Do Serve as the lead technical authority for administering, configuring, and troubleshooting Palo Alto NGFWs across a hybrid enterprise. Lead the design, analysis, testing, and implementation of secure network architectures on the Palo Alto stack. Manage the full hardware and software lifecycle, including complex refreshes and PAN-OS upgrades on legacy platforms. Run Panorama for centralized policy management across a fleet of physical and virtual firewalls. Configure master-level security profiles - App-ID, User-ID, Content-ID, SSL Decryption, and WildFire. Own configuration management processes and SOPs for all Palo Alto platforms. Mentor junior engineers and act as the escalation point for complex troubleshooting. Liaise with contract, customer, and government DAA on network security status, policies, and procedures. What You'll Bring S. citizenship and an active TS/SCI. Ability to successfully obtain and maintain a U.S. Government polygraph. Education and experience, per the contract labor category criteria: Bachelor's degree in a field applicable to the position plus 6 years of relevant experience. Equivalents accepted - Master's plus 4, Associate's plus 8, or High School diploma/GED plus 10. 7+ years hands-on administering, configuring, and troubleshooting Palo Alto NGFWs in large-scale enterprise or global environments. Active PCNSE certification. DoD 8140.01 and 8570.01-M IAT Level II (e.g. Security+ CE), and CSSP Infrastructure Support within 120 days of start. Deep practical knowledge of legacy Gen 2/Gen 3 hardware - PA-3000 and PA-5000 series, legacy CLI, physical troubleshooting, line-card replacement. Prisma Access (SASE), Prisma SD-WAN, and VM-Series in AWS, Azure, or GCP. Panorama template and device-group inheritance across a hybrid fleet. Advanced BGP, OSPF, IPSec VPN, and NAT. Nice to Have PCNSC or Prisma Certified SASE Professional (PCSAE). Python, plus firewall automation with Ansible, Terraform, or the Palo Alto XML/REST APIs. Cortex XDR or XSOAR; Expedition for legacy rule migration to App-ID policy. Zero Trust Network Access architecture; F5 (APM, AFM), Juniper SRX, or Cisco FTD/ASA. About RISA Rolston Information Systems Assurance (RISA) is a Service-Disabled Veteran-Owned Small Business that has supported federal defense and intelligence cybersecurity missions for more than seventeen years. We are small on purpose: direct access to leadership, a real say in how the work gets done, and none of the layers that slow large primes down. Benefits Medical, dental, and vision insurance; 401(k) and Roth; Paid Time Off; and 11 paid Federal Holidays. RISA is an Equal Opportunity Employer. Upon receiving an offer of employment, all applicants will be required to do a background check, including a criminal record check and employment/education verification.
Specialist, Information System Security III (SISS3)
Armada Ltd Philadelphia, Pennsylvania
Job Description Job Description Type: Full Time Location: Philadelphia, PA Overtime Exempt: Exempt Reports To: ARMADA HQ Travel Required: Yes Security Clearance Required: Active Secret Security Clearance CONTINGENT UPON AWARD Duties & Responsibilities: Specialist, Information System Security III (SISS3) will conduct risk and vulnerability assessments of planned and installed systems to identify vulnerabilities, risks and protection needs; conduct systems security evaluation, audits, and reviews; determine the residual risk of a package based on package content and assessment results and documenting for the Security Controls Assessor's (SCA) and higher level review. Execute Security Assessment Plans (SAPs) by conducting on-site testing for afloat and PIT ashore systems. Examples include executing STIGs, SRGs, ACAS scanning, and applying patches assets to obtain cybersecurity compliance and remediate vulnerabilities. Specialist, Information System Security III (SISS3) will conduct systems security reviews, audits, or evaluations, as appropriate, to ensure accreditation documents are accurate and represent the current risk posture of the system. Perform analysis of logs, events, and reporting of various data collections tools including: vulnerability monitoring via Assured Compliance Assessment System (ACAS) and related tools, Host Based Security Systems (HBSS), web content filters, Security Information and event management (SIEM), firewall systems, network devices, server devices, workstations, and intrusion detection and prevention systems (ID/PS). Specialist, Information System Security III (SISS3) will assess impacts from observed risks and report via the Cybersecurity Program chain of command. Executing Security Assessment Plans (SAPs) by conducting on-site testing for afloat and PIT ashore systems. Examples include executing STIGs, SRGs, ACAS scanning, and applying patches assets to obtain cybersecurity compliance and remediate vulnerabilities. Perform the evaluation of system administrator, security engineer, and/or system owner proposed corrections to ensure compliance and best-fit solution. Specialist, Information System Security III (SISS3) will present and submit data to management, develop reports, and produce procedural documentation in a comprehensive and cohesive manner. Perform risk management and security engineering for Research, Development, Testing, and Evaluation (RDT&E) RMF Afloat systems include Information Assurance Vulnerability Management (IAVM) support, remediation, patching, scanning and associated boundary maintenance. Specialist, Information System Security III (SISS3) will document residual risks in a plan of actions and milestones formatted in compliance with the current package system, currently eMASS. Specialist, Information System Security III (SISS3) will maintain current vulnerability scan data and residual risk plan of actions and milestones in Vulnerability Remediation Asset Manager (VRAM). Manage, attend, and support configuration control board practices. Create and verify the accuracy of POA&Ms/RARs as identified by vulnerability actual test results. Specialist, Information System Security III (SISS3) shall write technical documentation such as user manuals, reports, documentation, policies, presentations, Plan of Action and Milestones (POA&Ms), risk assessments, proposals, outlines, and summaries in support of both ashore and afloat systems across multiple platforms. Support developing of technical documents across multiple platforms including configuration management, milestone, issue tracking, web site content management and RMF documentation. Specialist, Information System Security III (SISS3) may be required to travel CONUS (any state in USA) and OCONUS (primarily Japan, and any country in Europe). The estimated number of trips is 14 per year (estimated 25%-30% travel). Other duties as assigned. Knowledge, Skills, and Abilities (KSAs): Ability to travel CONUS (any state in USA) and OCONUS (primarily Japan, and any country in Europe). Proficient in Microsoft Windows Operating System Administration, including Windows 11, Windows 10, Windows 7, and Windows XP (at a minimum). Ability to work as a team member, communicate, perform office functions and use office tools, customer focused and deliver exceptional performance. Possess excellent organizational and file management skills and the ability to plan and execute administrative work with little supervision. Possess excellent oral and written communication skills. Required Certifications: Minimum of one (1) IAT Level II listed certificate required: CompTIA Security+ (CE) CompTIA CySA+ GIAC Security Essentials (GSEC) ISC SSCP (Systems Security Certified Practitioner) Minimum/General Experience: Five (5) years of experience in the following: Cybersecurity, Engineering, Test and Evaluation (T&E) or Authorization and Assessment (A&A) (formerly C&A) related field. Information Assurance tools such as Defense Information Systems Agency (DISA) Enterprise Mission Assurance Support Service (eMASS), Assured Compliance Assessment Solution (ACAS). Command line interface, PowerShell, and performing automated tasking through use of code. Minimum Education: College degree in any technical discipline from an accredited college or university. Disclaimer: The above information has been designed to indicate the general nature and level of work to be performed. It is not designed to contain or be interpreted as a comprehensive inventory of all duties, responsibilities, and qualifications required of the contractor assigned to this position. Applying: If you feel you have the knowledge, skills and abilities for this position visit our careers page at . Special Notes: Relocation is not available for these jobs ARMADA provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, gender, sexual orientation, gender identity or expression, national origin, age, disability, genetic information, marital status, amnesty, or status as a covered veteran in accordance with applicable federal, state and local laws. ARMADA complies with applicable state and local laws governing non-discrimination in employment in every location in which the company has facilities. This policy applies to all terms and conditions of employment, including, but not limited to, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation, and training. Must be able to successfully pass a background check, and pre-employment drug testing. Job offers are contingent upon results of background check and drug testing.
09/29/2026
Full time
Job Description Job Description Type: Full Time Location: Philadelphia, PA Overtime Exempt: Exempt Reports To: ARMADA HQ Travel Required: Yes Security Clearance Required: Active Secret Security Clearance CONTINGENT UPON AWARD Duties & Responsibilities: Specialist, Information System Security III (SISS3) will conduct risk and vulnerability assessments of planned and installed systems to identify vulnerabilities, risks and protection needs; conduct systems security evaluation, audits, and reviews; determine the residual risk of a package based on package content and assessment results and documenting for the Security Controls Assessor's (SCA) and higher level review. Execute Security Assessment Plans (SAPs) by conducting on-site testing for afloat and PIT ashore systems. Examples include executing STIGs, SRGs, ACAS scanning, and applying patches assets to obtain cybersecurity compliance and remediate vulnerabilities. Specialist, Information System Security III (SISS3) will conduct systems security reviews, audits, or evaluations, as appropriate, to ensure accreditation documents are accurate and represent the current risk posture of the system. Perform analysis of logs, events, and reporting of various data collections tools including: vulnerability monitoring via Assured Compliance Assessment System (ACAS) and related tools, Host Based Security Systems (HBSS), web content filters, Security Information and event management (SIEM), firewall systems, network devices, server devices, workstations, and intrusion detection and prevention systems (ID/PS). Specialist, Information System Security III (SISS3) will assess impacts from observed risks and report via the Cybersecurity Program chain of command. Executing Security Assessment Plans (SAPs) by conducting on-site testing for afloat and PIT ashore systems. Examples include executing STIGs, SRGs, ACAS scanning, and applying patches assets to obtain cybersecurity compliance and remediate vulnerabilities. Perform the evaluation of system administrator, security engineer, and/or system owner proposed corrections to ensure compliance and best-fit solution. Specialist, Information System Security III (SISS3) will present and submit data to management, develop reports, and produce procedural documentation in a comprehensive and cohesive manner. Perform risk management and security engineering for Research, Development, Testing, and Evaluation (RDT&E) RMF Afloat systems include Information Assurance Vulnerability Management (IAVM) support, remediation, patching, scanning and associated boundary maintenance. Specialist, Information System Security III (SISS3) will document residual risks in a plan of actions and milestones formatted in compliance with the current package system, currently eMASS. Specialist, Information System Security III (SISS3) will maintain current vulnerability scan data and residual risk plan of actions and milestones in Vulnerability Remediation Asset Manager (VRAM). Manage, attend, and support configuration control board practices. Create and verify the accuracy of POA&Ms/RARs as identified by vulnerability actual test results. Specialist, Information System Security III (SISS3) shall write technical documentation such as user manuals, reports, documentation, policies, presentations, Plan of Action and Milestones (POA&Ms), risk assessments, proposals, outlines, and summaries in support of both ashore and afloat systems across multiple platforms. Support developing of technical documents across multiple platforms including configuration management, milestone, issue tracking, web site content management and RMF documentation. Specialist, Information System Security III (SISS3) may be required to travel CONUS (any state in USA) and OCONUS (primarily Japan, and any country in Europe). The estimated number of trips is 14 per year (estimated 25%-30% travel). Other duties as assigned. Knowledge, Skills, and Abilities (KSAs): Ability to travel CONUS (any state in USA) and OCONUS (primarily Japan, and any country in Europe). Proficient in Microsoft Windows Operating System Administration, including Windows 11, Windows 10, Windows 7, and Windows XP (at a minimum). Ability to work as a team member, communicate, perform office functions and use office tools, customer focused and deliver exceptional performance. Possess excellent organizational and file management skills and the ability to plan and execute administrative work with little supervision. Possess excellent oral and written communication skills. Required Certifications: Minimum of one (1) IAT Level II listed certificate required: CompTIA Security+ (CE) CompTIA CySA+ GIAC Security Essentials (GSEC) ISC SSCP (Systems Security Certified Practitioner) Minimum/General Experience: Five (5) years of experience in the following: Cybersecurity, Engineering, Test and Evaluation (T&E) or Authorization and Assessment (A&A) (formerly C&A) related field. Information Assurance tools such as Defense Information Systems Agency (DISA) Enterprise Mission Assurance Support Service (eMASS), Assured Compliance Assessment Solution (ACAS). Command line interface, PowerShell, and performing automated tasking through use of code. Minimum Education: College degree in any technical discipline from an accredited college or university. Disclaimer: The above information has been designed to indicate the general nature and level of work to be performed. It is not designed to contain or be interpreted as a comprehensive inventory of all duties, responsibilities, and qualifications required of the contractor assigned to this position. Applying: If you feel you have the knowledge, skills and abilities for this position visit our careers page at . Special Notes: Relocation is not available for these jobs ARMADA provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, gender, sexual orientation, gender identity or expression, national origin, age, disability, genetic information, marital status, amnesty, or status as a covered veteran in accordance with applicable federal, state and local laws. ARMADA complies with applicable state and local laws governing non-discrimination in employment in every location in which the company has facilities. This policy applies to all terms and conditions of employment, including, but not limited to, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation, and training. Must be able to successfully pass a background check, and pre-employment drug testing. Job offers are contingent upon results of background check and drug testing.
Network Security Engineer II
Hyundai Autoever America Irvine, California
Job Description Job Description Network Security Engineer II Location - Onsite, Irvine, CA Grade: 8 Company Overview Hyundai AutoEver America (HAEA), the dynamic IT powerhouse behind Hyundai Motor Corporation, a Fortune 500 global leader in the automotive industry. As a key affiliate, we provide cutting-edge IT services and support to top brands including Kia, Genesis, Hyundai Translead, Hyundai Mobis, Hyundai Capital, and Glovis. HAEA offers a truly global and collaborative environment. Here, you'll drive innovation, boost operational efficiency, and help shape the future of mobility for the Hyundai Motor Group. At HAEA, we understand that IT is the cornerstone of today's fast-evolving digital world. By uniting all IT resources under one roof, we deliver consistent, top-quality solutions while serving as the crucial information link between Hyundai's Global Headquarters and North American operations. If you're passionate about technology and eager to make a real impact at a world-class company, Hyundai AutoEver America is the place to grow your career. Join us and be part of the transformation that's driving the future of automotive innovation. What You Will Be Doing The Security Architecture and Engineering team within the CISO organization is seeking a Network Security Engineer II to help design, implement, operate, and continuously improve enterprise network security controls. This role will focus on technologies including Web Application Firewalls, Network Access Control, IDS, and IPS, while partnering closely with the IT Networking team to ensure secure, reliable, and scalable network services. This is an onsite role, five days per week, based in our Irvine office. The key responsibilities of this role are as described below: The Network Security Engineer II will be responsible for supporting and maintaining critical network security platforms across the enterprise. Responsibilities include: Administer, monitor, and optimize Web Application Firewall platforms to protect internet-facing and internal applications. Support and maintain Network Access Control technologies, including device profiling, policy enforcement, segmentation support, and exception handling. Operate and tune Intrusion Detection and Intrusion Prevention Systems to improve detection accuracy and reduce false positives. Partner with the IT Networking team on secure network design, routing, switching, firewall, segmentation, and connectivity initiatives. Assist other Security and IT teams by reviewing security events, alerts, logs, and traffic patterns to identify potential threats or misconfigurations. Assist with the implementation of network security architecture standards, hardening guidelines, and secure configuration baselines. Participate in incident response activities related to network-based threats, unauthorized access, or suspicious traffic. Develop and maintain documentation, including network security diagrams, platform runbooks, standard operating procedures, and change records. Support vulnerability remediation efforts related to network infrastructure, application exposure, and security control gaps. Perform policy reviews and rulebase hygiene for WAF, NAC, IDS, and IPS technologies. Participate in change management activities, including risk assessment, implementation planning, testing, and post-change validation. Collaborate with security operations, infrastructure, application, and compliance teams to support business and regulatory requirements. Assist with lifecycle management for network security tools, including upgrades, patching, certificate management, integrations, and capacity planning. Provide technical recommendations to improve visibility, segmentation, access control, and threat prevention across the environment. Basic Qualifications: Experience: 8+ years of network security, infrastructure security, and/or security engineering. Practical and demonstrated experience working Web Application Firewalls, Network Access Control platforms, IDS/IPS technologies, Firewalls or secure network gateways in platforms by Cisco, Palo Alto, Trend Micro, Gigamon, Trellix, etc. Education: Bachelor's degree in Cybersecurity, Information Technology, Computer science or a related field. Technical Expertise: Advanced level knowledge of networking concepts, including TCP/IP, DNS, DHCP, VLANs, routing, switching, NAT, VPNs, and network segmentation. Experience analyzing logs, packet captures, alerts, and network traffic to troubleshoot issues or investigate security events. Familiarity with common network and application-layer attack techniques. Experience supporting production environments and following change management processes. Strong troubleshooting, documentation, and communication skills. Language Skills: Excellent stakeholder management and communication skills. Proficient in English for effective communication and coordination. Schedule: This is an onsite position requiring presence in the Irvine office five days per week. Some after-hours or weekend work may be required for planned maintenance, incident response, or critical security changes. Preferred Qualifications: Experience: Experience with enterprise WAF policy tuning, bot protection, API protection, or application security rule sets. Experience with NAC deployment models, including 802.1X, MAC authentication bypass, posture assessment, guest access, and device profiling. Familiarity with SIEM, SOAR, vulnerability management, endpoint security, or cloud security tools. Scripting or automation experience using Python, PowerShell, APIs, or infrastructure-as-code tools. Education and Certifications: Masters degree in Cybersecurity, Information Technology, Computer Science or a related discipline is preferred. Industry-recognized credentials such as Security+, Network+, CCNA, CCNP Security, PCNSE, CISSP, GSEC, GCIH, or vendor-specific certifications. Language Skills: Bi-lingual in English and Korean language proficiency is preferred to support global coordination and communication. Team Culture: The team fosters a high-performance, collaborative environment centered around proactive technology risk management and excellent customer service. Members are expected to lead with accountability, communicate effectively across functions, and adapt to dynamic challenges. The culture values technical excellence, continuous improvement, and global coordination, ensuring technology risks are well managed. Base Salary Range: $100,000 - 130,000 Powered by JazzHR FgOdYKZ9EK
09/28/2026
Full time
Job Description Job Description Network Security Engineer II Location - Onsite, Irvine, CA Grade: 8 Company Overview Hyundai AutoEver America (HAEA), the dynamic IT powerhouse behind Hyundai Motor Corporation, a Fortune 500 global leader in the automotive industry. As a key affiliate, we provide cutting-edge IT services and support to top brands including Kia, Genesis, Hyundai Translead, Hyundai Mobis, Hyundai Capital, and Glovis. HAEA offers a truly global and collaborative environment. Here, you'll drive innovation, boost operational efficiency, and help shape the future of mobility for the Hyundai Motor Group. At HAEA, we understand that IT is the cornerstone of today's fast-evolving digital world. By uniting all IT resources under one roof, we deliver consistent, top-quality solutions while serving as the crucial information link between Hyundai's Global Headquarters and North American operations. If you're passionate about technology and eager to make a real impact at a world-class company, Hyundai AutoEver America is the place to grow your career. Join us and be part of the transformation that's driving the future of automotive innovation. What You Will Be Doing The Security Architecture and Engineering team within the CISO organization is seeking a Network Security Engineer II to help design, implement, operate, and continuously improve enterprise network security controls. This role will focus on technologies including Web Application Firewalls, Network Access Control, IDS, and IPS, while partnering closely with the IT Networking team to ensure secure, reliable, and scalable network services. This is an onsite role, five days per week, based in our Irvine office. The key responsibilities of this role are as described below: The Network Security Engineer II will be responsible for supporting and maintaining critical network security platforms across the enterprise. Responsibilities include: Administer, monitor, and optimize Web Application Firewall platforms to protect internet-facing and internal applications. Support and maintain Network Access Control technologies, including device profiling, policy enforcement, segmentation support, and exception handling. Operate and tune Intrusion Detection and Intrusion Prevention Systems to improve detection accuracy and reduce false positives. Partner with the IT Networking team on secure network design, routing, switching, firewall, segmentation, and connectivity initiatives. Assist other Security and IT teams by reviewing security events, alerts, logs, and traffic patterns to identify potential threats or misconfigurations. Assist with the implementation of network security architecture standards, hardening guidelines, and secure configuration baselines. Participate in incident response activities related to network-based threats, unauthorized access, or suspicious traffic. Develop and maintain documentation, including network security diagrams, platform runbooks, standard operating procedures, and change records. Support vulnerability remediation efforts related to network infrastructure, application exposure, and security control gaps. Perform policy reviews and rulebase hygiene for WAF, NAC, IDS, and IPS technologies. Participate in change management activities, including risk assessment, implementation planning, testing, and post-change validation. Collaborate with security operations, infrastructure, application, and compliance teams to support business and regulatory requirements. Assist with lifecycle management for network security tools, including upgrades, patching, certificate management, integrations, and capacity planning. Provide technical recommendations to improve visibility, segmentation, access control, and threat prevention across the environment. Basic Qualifications: Experience: 8+ years of network security, infrastructure security, and/or security engineering. Practical and demonstrated experience working Web Application Firewalls, Network Access Control platforms, IDS/IPS technologies, Firewalls or secure network gateways in platforms by Cisco, Palo Alto, Trend Micro, Gigamon, Trellix, etc. Education: Bachelor's degree in Cybersecurity, Information Technology, Computer science or a related field. Technical Expertise: Advanced level knowledge of networking concepts, including TCP/IP, DNS, DHCP, VLANs, routing, switching, NAT, VPNs, and network segmentation. Experience analyzing logs, packet captures, alerts, and network traffic to troubleshoot issues or investigate security events. Familiarity with common network and application-layer attack techniques. Experience supporting production environments and following change management processes. Strong troubleshooting, documentation, and communication skills. Language Skills: Excellent stakeholder management and communication skills. Proficient in English for effective communication and coordination. Schedule: This is an onsite position requiring presence in the Irvine office five days per week. Some after-hours or weekend work may be required for planned maintenance, incident response, or critical security changes. Preferred Qualifications: Experience: Experience with enterprise WAF policy tuning, bot protection, API protection, or application security rule sets. Experience with NAC deployment models, including 802.1X, MAC authentication bypass, posture assessment, guest access, and device profiling. Familiarity with SIEM, SOAR, vulnerability management, endpoint security, or cloud security tools. Scripting or automation experience using Python, PowerShell, APIs, or infrastructure-as-code tools. Education and Certifications: Masters degree in Cybersecurity, Information Technology, Computer Science or a related discipline is preferred. Industry-recognized credentials such as Security+, Network+, CCNA, CCNP Security, PCNSE, CISSP, GSEC, GCIH, or vendor-specific certifications. Language Skills: Bi-lingual in English and Korean language proficiency is preferred to support global coordination and communication. Team Culture: The team fosters a high-performance, collaborative environment centered around proactive technology risk management and excellent customer service. Members are expected to lead with accountability, communicate effectively across functions, and adapt to dynamic challenges. The culture values technical excellence, continuous improvement, and global coordination, ensuring technology risks are well managed. Base Salary Range: $100,000 - 130,000 Powered by JazzHR FgOdYKZ9EK
GNOSC Watch Officer/Network Engineer
LAUNCHTECH Colorado Springs, Colorado
Job Description Job Description Location: Schriever Space Force Base, Colorado Springs, CO Clearance Required: Active DoW Secret Security Clearance Travel Required: Up to 10% of the time LaunchTech is a veteran-owned company that prides itself on delivering service before self and excellence in all we do. We are seeking dynamic professionals who embody our core values of Integrity, Commitment, and Excellence to join our growing Crew in support of our customers across the federal, state, and commercial markets. We are seeking a GNOSC Watch Officer/Network Engineer to support the Missile Defense Agency (MDA) on the Integrated Research and Development for Enterprise Solutions (IRES) contract. What You'll Be Doing Be responsible for all facets of a continuous 24/7 Global Network Operations and Security Center. Execute network, system, and cloud systems monitoring/surveillance, environmental monitoring, incident management and MDA Cybersecurity. Support and service maintenance activities to include Change Management coordination during the assigned quarterly rotating shift day/night shifts. Be responsible for all aspects of IT incident management and escalation, ensuring that incidents are effectively escalated, managed and resolved with full communication of status, plans, and actions provided to executive management and the Government customer. The successful candidate will: Have excellent communication skills, verbal and written, at both technical and senior/Executive management levels. Understand Command level Management. Be able to speak clearly to diverse cultural audiences, VIPs, and dignitaries. Be able to perform as a section trainer and create lesson plans. Be able to operate within a stressful high speed Operational environment and be able to multi-task. What You Bring Basic Requirements: Must have 1, or more, years of IT experience Must have a current DoD 8570.01 IAT Level II Certification such as CompTIA Security+ CE Certification or higher. Must have an active DoW Secret Security Clearance Desired Requirements: Have experience in metrics-based IT Operations and Maintenance (O&M) teams. Have experience with Remedy and SNMP monitoring tools (e.g., SolarWinds and StruxureWare Datacenter Expert). Have education or experience with ITIL framework and ITIL-based processes, to include continual service improvement, change management, and problem investigation. Have previous work experience as a Windows/Linux System Administrator supporting a large Enterprise with knowledge of Microsoft Active Directory, Windows 2008/2012, Linux/UNIX Operating Systems, EMC Storage, Symantec NetBackup and SCCM Patch Management solutions. Have previous work experience as a network engineer, including hands-on experience designing, implementing and managing network components including switches, routers, firewalls, and cryptographic devices. Have experience with Cyber-defense or information assurance, including experience with DISA mandated security tools to include Assured Compliance Assessment Solution (ACAS), Host Based Security System (HBSS), analyze results and create reports Have knowledge of IT Network Operations and connectivity devices that inter-relate with Public Key Infrastructure authentication and Information Security practices. Have Network Operations experience in a network operations center or other 24x7x365 IT Operations environment. Have knowledge of Cybersecurity principles and how to execute system/network security analysis. Have a working knowledge of Tier III Information Assurance practices, IT security governance, security administration, project management, logistics, and Cybersecurity compliance requirements. Have Quality Assurance/Quality Control Inspection process knowledge. Why LaunchTech? LaunchTech is built on a single standard: Excellence, Period. This role places you at the operational heart of a 24/7 enterprise network operations center defending the nation's missile defense infrastructure around the clock. We offer: Medical, Dental, and Vision coverage 401(k) with company match Paid Time Off (PTO) Mission-driven work with opportunities to grow And more Ready to Join the LaunchTech Crew? LaunchTech is an Equal Opportunity Employer. We prohibit discrimination and harassment of any kind. All qualified applicants will receive consideration for employment without regard to race, protected veteran status, color, sex, religion, sexual orientation, national origin, disability, genetic information, age, pregnancy, or any other status protected under federal, state, or local law. Visit to learn more about how we deliver Excellence, Period. Powered by JazzHR NYRvODyGdv
09/28/2026
Full time
Job Description Job Description Location: Schriever Space Force Base, Colorado Springs, CO Clearance Required: Active DoW Secret Security Clearance Travel Required: Up to 10% of the time LaunchTech is a veteran-owned company that prides itself on delivering service before self and excellence in all we do. We are seeking dynamic professionals who embody our core values of Integrity, Commitment, and Excellence to join our growing Crew in support of our customers across the federal, state, and commercial markets. We are seeking a GNOSC Watch Officer/Network Engineer to support the Missile Defense Agency (MDA) on the Integrated Research and Development for Enterprise Solutions (IRES) contract. What You'll Be Doing Be responsible for all facets of a continuous 24/7 Global Network Operations and Security Center. Execute network, system, and cloud systems monitoring/surveillance, environmental monitoring, incident management and MDA Cybersecurity. Support and service maintenance activities to include Change Management coordination during the assigned quarterly rotating shift day/night shifts. Be responsible for all aspects of IT incident management and escalation, ensuring that incidents are effectively escalated, managed and resolved with full communication of status, plans, and actions provided to executive management and the Government customer. The successful candidate will: Have excellent communication skills, verbal and written, at both technical and senior/Executive management levels. Understand Command level Management. Be able to speak clearly to diverse cultural audiences, VIPs, and dignitaries. Be able to perform as a section trainer and create lesson plans. Be able to operate within a stressful high speed Operational environment and be able to multi-task. What You Bring Basic Requirements: Must have 1, or more, years of IT experience Must have a current DoD 8570.01 IAT Level II Certification such as CompTIA Security+ CE Certification or higher. Must have an active DoW Secret Security Clearance Desired Requirements: Have experience in metrics-based IT Operations and Maintenance (O&M) teams. Have experience with Remedy and SNMP monitoring tools (e.g., SolarWinds and StruxureWare Datacenter Expert). Have education or experience with ITIL framework and ITIL-based processes, to include continual service improvement, change management, and problem investigation. Have previous work experience as a Windows/Linux System Administrator supporting a large Enterprise with knowledge of Microsoft Active Directory, Windows 2008/2012, Linux/UNIX Operating Systems, EMC Storage, Symantec NetBackup and SCCM Patch Management solutions. Have previous work experience as a network engineer, including hands-on experience designing, implementing and managing network components including switches, routers, firewalls, and cryptographic devices. Have experience with Cyber-defense or information assurance, including experience with DISA mandated security tools to include Assured Compliance Assessment Solution (ACAS), Host Based Security System (HBSS), analyze results and create reports Have knowledge of IT Network Operations and connectivity devices that inter-relate with Public Key Infrastructure authentication and Information Security practices. Have Network Operations experience in a network operations center or other 24x7x365 IT Operations environment. Have knowledge of Cybersecurity principles and how to execute system/network security analysis. Have a working knowledge of Tier III Information Assurance practices, IT security governance, security administration, project management, logistics, and Cybersecurity compliance requirements. Have Quality Assurance/Quality Control Inspection process knowledge. Why LaunchTech? LaunchTech is built on a single standard: Excellence, Period. This role places you at the operational heart of a 24/7 enterprise network operations center defending the nation's missile defense infrastructure around the clock. We offer: Medical, Dental, and Vision coverage 401(k) with company match Paid Time Off (PTO) Mission-driven work with opportunities to grow And more Ready to Join the LaunchTech Crew? LaunchTech is an Equal Opportunity Employer. We prohibit discrimination and harassment of any kind. All qualified applicants will receive consideration for employment without regard to race, protected veteran status, color, sex, religion, sexual orientation, national origin, disability, genetic information, age, pregnancy, or any other status protected under federal, state, or local law. Visit to learn more about how we deliver Excellence, Period. Powered by JazzHR NYRvODyGdv
CSfC Sr. Network Engineer
TekSynap Aiea, Hawaii
Job Description Job Description Overview We are seeking a CSfC Senior Network Engineer to join our team supporting Network Enterprise Technology Command (NETCOM) in Honolulu, HI. TekSynap is a fast growing high-tech company that understands both the pace of technology today and the need to have a comprehensive well planned information management environment. "Technology moving at the speed of thought" embodies these principles - the need to nimbly utilize the best that information technology offers to meet the business needs of our Federal Government customers. We offer our full-time employees a competitive benefits package to include health, dental, vision, 401K, life insurance, short-term and long-term disability plans, vacation time and holidays. Visit us at . Apply now to explore jobs with us! The safety and health of our employees is of the utmost importance. Employees are required to comply with any vaccination requirements mandated by contract, applicable law or regulation. By applying to a role at TekSynap you are providing consent to receive text messages regarding your interview and employment status. If at any time you would like to opt out of text messaging, respond "STOP". As part of the application process, you agree that TekSynap Corporation may retain and use your name, e-mail, and contact information for purposes related to employment consideration. Responsibilities RESPONSIBILITIES Assists the PM in the day-to-day management of leading Network Engineers. Must have an in-depth understanding of advanced networking O&M Commercial Solutions for Classified (CSfC) concepts and processes and experience applying these with little to no guidance. Must be able to provide guidance to others. Must be able to perform successfully in complex, unstructured situations. Must be proficient in multivendor networking environments in configuring firewalls, Intrusion Prevention/Detection systems, VPN gateways, routers, and switches (Cisco, Aruba, Juniper, Cisco ASA, etc.) Be able to develop and modify system scripts. Write standardized system documentation, including configuration guides, test procedures, test results, and training materials. Provide onsite training to technical and non-technical users on the daily use, management, and troubleshooting of the solution after installation. Support all Cross-Domain solution requirements Collaborate with other operations departments to design approved infrastructure Serve as the escalation contact during large outages for Tier 2 and 3 systems. Author network Engineering Design Packages to include detailed implementation project plans and procedures. Configures network, software, and hardware components to meet NSA CSfC, NIAP, and DoD requirements Performs network design and systems integration Designs, develops, implements, tests, and maintains complex secure communications networks Configuring/managing PKI Certificate Authorities for CSfC solutions Familiarity with Certificate Authority configuration (ISC CertAgent/MS Windows Server/Red Hat Certificate systems) Document configuration, test procedure, results, and training materials Preparing test reports and configuration documentation according to customer standards. Providing customer on-site training on solution daily use, management, and troubleshooting Provide tier 2 and 3 support as part of a technical team. Identify and recommend hardware and support solutions based on research and analysis of new technologies, interfacing with customers and vendors. Enhance department and organization reputation by accepting ownership for accomplishing new and different requests; exploring opportunities to add value to the company. Apply DoD STIGs and IAVAs Perform special projects and other duties as assigned. REQUIRED QUALIFICATIONS Top Secret OR Higher OR Secret Clearance level with completed T5 investigation Active Professional Network certification (CCNP-Security, CCNA, HPE Aruba Networking Certified Professional - Switching, etc.) Must have experience with one or more networking vendors: Cisco, Aruba, Juniper, etc. One of the following DoD8140 Certifications : SecurityX/CASP+ CCNA CCNP Security CCSP (Certified Cloud Security Professional) GCED (GIAC Certified Enterprise Defender) GCIA (GIAC Certified Intrusion Analyst) GCLD (GIAC Cloud Security Essentials) GDSA (GIAC Defensible Security Architecture) GFACT (GIAC Foundational Cybersecurity Technologies) 10 or more years of experience in engineering MA/MS= 10 years; BS=12 years Qualifications WORK ENVIRONMENT AND PHYSICAL DEMANDS The work environment characteristics described here are representative of those an employee encounters while performing the essential functions of the job. Reasonable accommodation may be made to enable individuals with disabilities to perform the essential functions. Location: Honolulu, HI Type of environment: Office Noise level: Low Work schedule: CONUS Schedule is day shift Monday - Friday. May be requested to work evenings and weekends to meet program and contract needs. Amount of Travel: Less than 20% PHYSICAL DEMANDS The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions. While performing the duties of this job, the employee is regularly required to use hands to handle, feel, touch; reach with hands and arms; talk and hear. The employee is regularly required to stand; walk; sit; climb or balance; and stoop, kneel, crouch, or crawl. The employee is regularly required to lift up to 10 pounds. The employee is frequently required to lift up to 25 pounds; and up to 50 pounds. The vision requirements include close vision, distance vision, peripheral vision, depth perception, and ability to adjust focus. WORK AUTHORIZATION/SECURITY CLEARANCE United States Citizenship Top Secret Clearance requirement WAGE INFORMATION Target salary range: $133,000.00 - $165,000.00. The salary range displayed is an estimate only and is not a guarantee of compensation or salary, and will be determined on several factors regarding the individual's particular combination of education, knowledge, skills, competencies and experience, as well as contract parameters and organizational requirements. The displayed salary is one component of the total compensation package for employees. OTHER INFORMATION Please note this job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for this job. Duties, responsibilities and activities may change at any time with or without notice. TekSynap is a drug-free workplace. We reserve the right to conduct drug testing in accordance with federal, state, and local laws. All employees and candidates may be subject to drug screening if deemed necessary to ensure a safe and compliant working environment. Many positions require specific certifications and/or the ability to obtain a security clearance. Security clearances may only be granted to U.S. citizens. Applicants who accept an offer of employment may be subject to investigations performed by TekSynap and/or the Government to verify the candidate meets the required qualifications and other eligibility requirements. EQUAL EMPLOYMENT OPPORTUNITY In order to provide equal employment and advancement opportunities to all individuals, employment decisions will be based on merit, qualifications, and abilities. TekSynap does not discriminate against any person because of race, color, creed, religion, sex, national origin, disability, age, genetic information or any other characteristic protected by law (referred to as "protected status"). This nondiscrimination policy extends to all terms, conditions, and privileges of employment as well as the use of all company facilities, participation in all company-sponsored activities, and all employment actions such as promotions, compensation, benefits, and termination of employment.
09/28/2026
Full time
Job Description Job Description Overview We are seeking a CSfC Senior Network Engineer to join our team supporting Network Enterprise Technology Command (NETCOM) in Honolulu, HI. TekSynap is a fast growing high-tech company that understands both the pace of technology today and the need to have a comprehensive well planned information management environment. "Technology moving at the speed of thought" embodies these principles - the need to nimbly utilize the best that information technology offers to meet the business needs of our Federal Government customers. We offer our full-time employees a competitive benefits package to include health, dental, vision, 401K, life insurance, short-term and long-term disability plans, vacation time and holidays. Visit us at . Apply now to explore jobs with us! The safety and health of our employees is of the utmost importance. Employees are required to comply with any vaccination requirements mandated by contract, applicable law or regulation. By applying to a role at TekSynap you are providing consent to receive text messages regarding your interview and employment status. If at any time you would like to opt out of text messaging, respond "STOP". As part of the application process, you agree that TekSynap Corporation may retain and use your name, e-mail, and contact information for purposes related to employment consideration. Responsibilities RESPONSIBILITIES Assists the PM in the day-to-day management of leading Network Engineers. Must have an in-depth understanding of advanced networking O&M Commercial Solutions for Classified (CSfC) concepts and processes and experience applying these with little to no guidance. Must be able to provide guidance to others. Must be able to perform successfully in complex, unstructured situations. Must be proficient in multivendor networking environments in configuring firewalls, Intrusion Prevention/Detection systems, VPN gateways, routers, and switches (Cisco, Aruba, Juniper, Cisco ASA, etc.) Be able to develop and modify system scripts. Write standardized system documentation, including configuration guides, test procedures, test results, and training materials. Provide onsite training to technical and non-technical users on the daily use, management, and troubleshooting of the solution after installation. Support all Cross-Domain solution requirements Collaborate with other operations departments to design approved infrastructure Serve as the escalation contact during large outages for Tier 2 and 3 systems. Author network Engineering Design Packages to include detailed implementation project plans and procedures. Configures network, software, and hardware components to meet NSA CSfC, NIAP, and DoD requirements Performs network design and systems integration Designs, develops, implements, tests, and maintains complex secure communications networks Configuring/managing PKI Certificate Authorities for CSfC solutions Familiarity with Certificate Authority configuration (ISC CertAgent/MS Windows Server/Red Hat Certificate systems) Document configuration, test procedure, results, and training materials Preparing test reports and configuration documentation according to customer standards. Providing customer on-site training on solution daily use, management, and troubleshooting Provide tier 2 and 3 support as part of a technical team. Identify and recommend hardware and support solutions based on research and analysis of new technologies, interfacing with customers and vendors. Enhance department and organization reputation by accepting ownership for accomplishing new and different requests; exploring opportunities to add value to the company. Apply DoD STIGs and IAVAs Perform special projects and other duties as assigned. REQUIRED QUALIFICATIONS Top Secret OR Higher OR Secret Clearance level with completed T5 investigation Active Professional Network certification (CCNP-Security, CCNA, HPE Aruba Networking Certified Professional - Switching, etc.) Must have experience with one or more networking vendors: Cisco, Aruba, Juniper, etc. One of the following DoD8140 Certifications : SecurityX/CASP+ CCNA CCNP Security CCSP (Certified Cloud Security Professional) GCED (GIAC Certified Enterprise Defender) GCIA (GIAC Certified Intrusion Analyst) GCLD (GIAC Cloud Security Essentials) GDSA (GIAC Defensible Security Architecture) GFACT (GIAC Foundational Cybersecurity Technologies) 10 or more years of experience in engineering MA/MS= 10 years; BS=12 years Qualifications WORK ENVIRONMENT AND PHYSICAL DEMANDS The work environment characteristics described here are representative of those an employee encounters while performing the essential functions of the job. Reasonable accommodation may be made to enable individuals with disabilities to perform the essential functions. Location: Honolulu, HI Type of environment: Office Noise level: Low Work schedule: CONUS Schedule is day shift Monday - Friday. May be requested to work evenings and weekends to meet program and contract needs. Amount of Travel: Less than 20% PHYSICAL DEMANDS The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions. While performing the duties of this job, the employee is regularly required to use hands to handle, feel, touch; reach with hands and arms; talk and hear. The employee is regularly required to stand; walk; sit; climb or balance; and stoop, kneel, crouch, or crawl. The employee is regularly required to lift up to 10 pounds. The employee is frequently required to lift up to 25 pounds; and up to 50 pounds. The vision requirements include close vision, distance vision, peripheral vision, depth perception, and ability to adjust focus. WORK AUTHORIZATION/SECURITY CLEARANCE United States Citizenship Top Secret Clearance requirement WAGE INFORMATION Target salary range: $133,000.00 - $165,000.00. The salary range displayed is an estimate only and is not a guarantee of compensation or salary, and will be determined on several factors regarding the individual's particular combination of education, knowledge, skills, competencies and experience, as well as contract parameters and organizational requirements. The displayed salary is one component of the total compensation package for employees. OTHER INFORMATION Please note this job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for this job. Duties, responsibilities and activities may change at any time with or without notice. TekSynap is a drug-free workplace. We reserve the right to conduct drug testing in accordance with federal, state, and local laws. All employees and candidates may be subject to drug screening if deemed necessary to ensure a safe and compliant working environment. Many positions require specific certifications and/or the ability to obtain a security clearance. Security clearances may only be granted to U.S. citizens. Applicants who accept an offer of employment may be subject to investigations performed by TekSynap and/or the Government to verify the candidate meets the required qualifications and other eligibility requirements. EQUAL EMPLOYMENT OPPORTUNITY In order to provide equal employment and advancement opportunities to all individuals, employment decisions will be based on merit, qualifications, and abilities. TekSynap does not discriminate against any person because of race, color, creed, religion, sex, national origin, disability, age, genetic information or any other characteristic protected by law (referred to as "protected status"). This nondiscrimination policy extends to all terms, conditions, and privileges of employment as well as the use of all company facilities, participation in all company-sponsored activities, and all employment actions such as promotions, compensation, benefits, and termination of employment.
System Engineer III, Firewalls - Network Infrastructure and Security Engineering/Information Solutio
MUSC Adams Run, South Carolina
Job Description Job Description Job Description Summary The System Engineer III, Firewalls, reports to the Manager, Network Infrastructure and Security Engineering in support of MUSC's academic, research and healthcare missions. Areas of expertise include firewall administration, patching, VPN configuration, address translation, routing, IP address management, network segmentation, security group tags, SDWAN, dynamic routing protocols, SSO, certificate management, and advanced troubleshooting. This position serves as a subject matter expert for network security services, evaluates and resolves complex technical issues and demonstrates strong analytical and communication skills to maximize the benefit of services the team provides for Information Solutions. Generates appropriate documentation, communications, processes, and educational plans to identify and remove obstacles to, and mitigate the disruption of change related to the design, management, implementation, and operations of the network; is responsible for the timely resolution of network issues; takes a lead role in projects; participates in team and project meetings and provides input on solutions to improve efficiency. The position coaches and transfers knowledge to peers and staff, maintains high professional standards, and exhibits excellent customer service skills while performing assigned tasks. Entity MUSC Community Physicians (MCP) Worker Type Employee Worker Sub-Type Regular Cost Center CC006134 MCP - Information Solutions Pay Rate Type Salary Pay Grade Health-30 Scheduled Weekly Hours 40 Work Shift Job Description The System Engineer III, Firewalls, reports to the Manager, Network Infrastructure and Security Engineering in support of MUSC's academic, research and healthcare missions. Areas of expertise include firewall administration, patching, VPN configuration, address translation, routing, IP address management, network segmentation, security group tags, SDWAN, dynamic routing protocols, SSO, certificate management, and advanced troubleshooting. This position serves as a subject matter expert for network security services, evaluates and resolves complex technical issues and demonstrates strong analytical and communication skills to maximize the benefit of services the team provides for Information Solutions. Generates appropriate documentation, communications, processes, and educational plans to identify and remove obstacles to, and mitigate the disruption of change related to the design, management, implementation, and operations of the network; is responsible for the timely resolution of network issues; takes a lead role in projects; participates in team and project meetings and provides input on solutions to improve efficiency. The position coaches and transfers knowledge to peers and staff, maintains high professional standards, and exhibits excellent customer service skills while performing assigned tasks. Additional Job Description Requirements (Education, Work Experience, Licensure, Registry &/or Certifications) A bachelor's degree and five years directly related experience; or a high school diploma and nine years directly related experience; or a Masters' degree and 3 years directly related experience required. 7+ years of Network experience is preferred. Must possess strong interpersonal, project management, analytical and communication skills. Experience in implementing, administering, and troubleshooting network security devices, including: firewalls, network access control, and monitoring applications. Knowledge of communication or information systems. Knowledge and technical expertise in networking protocols, security, and wireless communications. If you like working with energetic enthusiastic individuals, you will enjoy your career with us! The Medical University of South Carolina is an Equal Opportunity Employer. MUSC does not discriminate on the basis of race, color, religion or belief, age, sex, national origin, gender identity, sexual orientation, disability, protected veteran status, family or parental status, or any other status protected by state laws and/or federal regulations. All qualified applicants are encouraged to apply and will receive consideration for employment based upon applicable qualifications, merit and business need. Medical University of South Carolina participates in the federal E-Verify program to confirm the identity and employment authorization of all newly hired employees. For further information about the E-Verify program, please click here: -verify/employees
09/28/2026
Full time
Job Description Job Description Job Description Summary The System Engineer III, Firewalls, reports to the Manager, Network Infrastructure and Security Engineering in support of MUSC's academic, research and healthcare missions. Areas of expertise include firewall administration, patching, VPN configuration, address translation, routing, IP address management, network segmentation, security group tags, SDWAN, dynamic routing protocols, SSO, certificate management, and advanced troubleshooting. This position serves as a subject matter expert for network security services, evaluates and resolves complex technical issues and demonstrates strong analytical and communication skills to maximize the benefit of services the team provides for Information Solutions. Generates appropriate documentation, communications, processes, and educational plans to identify and remove obstacles to, and mitigate the disruption of change related to the design, management, implementation, and operations of the network; is responsible for the timely resolution of network issues; takes a lead role in projects; participates in team and project meetings and provides input on solutions to improve efficiency. The position coaches and transfers knowledge to peers and staff, maintains high professional standards, and exhibits excellent customer service skills while performing assigned tasks. Entity MUSC Community Physicians (MCP) Worker Type Employee Worker Sub-Type Regular Cost Center CC006134 MCP - Information Solutions Pay Rate Type Salary Pay Grade Health-30 Scheduled Weekly Hours 40 Work Shift Job Description The System Engineer III, Firewalls, reports to the Manager, Network Infrastructure and Security Engineering in support of MUSC's academic, research and healthcare missions. Areas of expertise include firewall administration, patching, VPN configuration, address translation, routing, IP address management, network segmentation, security group tags, SDWAN, dynamic routing protocols, SSO, certificate management, and advanced troubleshooting. This position serves as a subject matter expert for network security services, evaluates and resolves complex technical issues and demonstrates strong analytical and communication skills to maximize the benefit of services the team provides for Information Solutions. Generates appropriate documentation, communications, processes, and educational plans to identify and remove obstacles to, and mitigate the disruption of change related to the design, management, implementation, and operations of the network; is responsible for the timely resolution of network issues; takes a lead role in projects; participates in team and project meetings and provides input on solutions to improve efficiency. The position coaches and transfers knowledge to peers and staff, maintains high professional standards, and exhibits excellent customer service skills while performing assigned tasks. Additional Job Description Requirements (Education, Work Experience, Licensure, Registry &/or Certifications) A bachelor's degree and five years directly related experience; or a high school diploma and nine years directly related experience; or a Masters' degree and 3 years directly related experience required. 7+ years of Network experience is preferred. Must possess strong interpersonal, project management, analytical and communication skills. Experience in implementing, administering, and troubleshooting network security devices, including: firewalls, network access control, and monitoring applications. Knowledge of communication or information systems. Knowledge and technical expertise in networking protocols, security, and wireless communications. If you like working with energetic enthusiastic individuals, you will enjoy your career with us! The Medical University of South Carolina is an Equal Opportunity Employer. MUSC does not discriminate on the basis of race, color, religion or belief, age, sex, national origin, gender identity, sexual orientation, disability, protected veteran status, family or parental status, or any other status protected by state laws and/or federal regulations. All qualified applicants are encouraged to apply and will receive consideration for employment based upon applicable qualifications, merit and business need. Medical University of South Carolina participates in the federal E-Verify program to confirm the identity and employment authorization of all newly hired employees. For further information about the E-Verify program, please click here: -verify/employees
Lead Firewall Engineer
SITEC Consulting Springfield, Virginia
Job Description Job Description Lead Firewall EngineerClearance: Active TS/SCIExperience: 8+ yearsLead an enterprise boundary security team responsible for firewall operations, engineering, compliance, and modernization. You will provide technical direction, oversee complex troubleshooting, and support secure, reliable network performance.What You Will DoLead daily firewall operations, maintenance, troubleshooting, and project execution.Design and implement solutions using Palo Alto, Juniper SRX, and F5 technologies.Review network changes and assess operational and security impacts.Maintain secure configuration baselines, architecture diagrams, inventories, procedures, and technical documentation.Monitor performance, logs, software versions, and configuration drift.Lead compliance reviews, technical evaluations, and modernization efforts.Brief stakeholders and mentor engineering personnel.What You BringActive TS/SCI clearance with the ability to obtain and maintain a CI polygraph.At least eight years of network security experience, including five years supporting large enterprise networks.Experience leading a firewall or boundary security team.Advanced experience with Palo Alto, Juniper SRX, and F5 platforms.Strong knowledge of firewall policy, TLS/SSL, PKI, Kerberos, LDAP, Active Directory, SAML, OAuth, and network architecture.Experience with network design, implementation, cost estimates, and labor estimates.Current DoD 8140/8570 IAT Level II certification.Ability to obtain CSSP Infrastructure Support certification within 120 days.Availability for occasional evening or weekend work.Preferred QualificationsBachelor 's or master's degree in computer science, cybersecurity, network security, or a related field.F5, Juniper, or Palo Alto professional certification. Job Posted by ApplicantPro
09/28/2026
Full time
Job Description Job Description Lead Firewall EngineerClearance: Active TS/SCIExperience: 8+ yearsLead an enterprise boundary security team responsible for firewall operations, engineering, compliance, and modernization. You will provide technical direction, oversee complex troubleshooting, and support secure, reliable network performance.What You Will DoLead daily firewall operations, maintenance, troubleshooting, and project execution.Design and implement solutions using Palo Alto, Juniper SRX, and F5 technologies.Review network changes and assess operational and security impacts.Maintain secure configuration baselines, architecture diagrams, inventories, procedures, and technical documentation.Monitor performance, logs, software versions, and configuration drift.Lead compliance reviews, technical evaluations, and modernization efforts.Brief stakeholders and mentor engineering personnel.What You BringActive TS/SCI clearance with the ability to obtain and maintain a CI polygraph.At least eight years of network security experience, including five years supporting large enterprise networks.Experience leading a firewall or boundary security team.Advanced experience with Palo Alto, Juniper SRX, and F5 platforms.Strong knowledge of firewall policy, TLS/SSL, PKI, Kerberos, LDAP, Active Directory, SAML, OAuth, and network architecture.Experience with network design, implementation, cost estimates, and labor estimates.Current DoD 8140/8570 IAT Level II certification.Ability to obtain CSSP Infrastructure Support certification within 120 days.Availability for occasional evening or weekend work.Preferred QualificationsBachelor 's or master's degree in computer science, cybersecurity, network security, or a related field.F5, Juniper, or Palo Alto professional certification. Job Posted by ApplicantPro
Network Engineer/Architect
Career Listings Fort Belvoir, Virginia
Job Description Job Description Benefits: 401(k) 401(k) matching Dental insurance Health insurance Paid time off Profit sharing Training & development Tuition assistance Vision insurance Job Description SarelaTech is seeking an experienced Network Engineer (SME) to join our Integrated Information Technology Support Services (I3TS) team, who will support an extensive digital modernization program critical to Defense Threat Reduction Agency (DTRA) in Fort Belvoir, VA. The Network Engineer will work closely with the Leidos and Government technical leadership team to help drive innovation, growth, and efficiencies within the I3TS portfolio. Primary Responsibilities: The Commercial Solutions for Classified (CSfC) Network & Security Engineer will architect and operate secure, dual-layer cryptographic boundaries utilizing Cisco and Aruba IPsec/SSL VPNs and dynamic routing (BGP/OSPF) in strict compliance with NSA Capability Packages. In this role, you will author and tune Palo Alto NGFW security policies and IDS/IPS threat prevention signatures, implement enterprise network access control and 802.1X policies via Cisco ISE and Aruba ClearPass, integrate enterprise PKI/OCSP services and hardened NTP, and generate key engineering artifacts required for NSA CSfC PMO registration and compliance auditing. Architect, deploy, and maintain CSfC infrastructure operating within Black/Gray/Red networks. Design, configure, and maintain multi-layered Commercial Solutions for Classified (CSfC) architectures in alignment with NSA Mobile Access (MA), Multi-Sight (MSC) Capability Packages, with Campus Wireless LAN (WLAN) experience a bonus. Ensure strict compliance with vendor diversity and dual-tunnel encryption mandates. Understanding of NIAP approved list and monitors for changes Design, configure, and maintain multi-layered Commercial Solutions for Classified (CSfC) architectures in alignment with NSA Capability Packages (MSC, MA, and CWLAN). Ensure strict compliance with vendor diversity and dual-tunnel encryption mandates. Implement enterprise routing protocols (BGP, OSPF) alongside redundant outer and inner IPsec VPN tunnels across Cisco and Aruba appliances. Configure remote access SSL VPNs and ensure end-to-end traffic separation. Author, optimize, and audit Palo Alto Next-Generation Firewall (NGFW) security policies, App-ID, User-ID, and URL filtering. Configure and tune Palo Alto IDS/IPS threat signatures, anti-spyware, and vulnerability protection. Architect and manage Cisco Identity Services Engine (ISE) and Aruba ClearPass policy managers for 802.1X network access control, RADIUS/TACACS+ administration, posture assessment, and endpoint profiling. Integrate enterprise Public Key Infrastructure (PKI) components, managing X.509 certificate lifecycles, Certificate Authorities (CAs), CRL/OCSP validation, and hardened, authenticated Network Time Protocol (NTP) infrastructure. Prepare CSfC compliance artifacts, Key Management Plans (KMPs), Continuous Monitoring Plans (CMPs), and registration packages for NSA CSfC PMO submission. Required Qualifications: Bachelor's degree or higher in Computer Science, Information Technology, Engineering, Engineering Management, Management Information Systems, or related STEM degree program, and 12-15 years of relevant experience. Specific experience, education and training may be considered in lieu of degree. 12+ years of progressive network engineering experience within DoD/DoW, federal, or defense contractor enterprise environments Active TS/SCI Clearance Active DoD 8570.01-M / DoD 8140 IAT Level II or III baseline certification (e.g., Security+ CE, CySA+, CASP+, or CISSP). Active Computing Environment certification, including one or more of: Cisco CCNA, CCNP, Aruba ACSA or ACSP Proven expertise configuring Cisco (IOS-XE/ASR) and Aruba (Mobility Controllers/Gateways) IPsec and SSL VPNs, including IKEv2, Suite B/CNSA cryptography, and dynamic routing (BGP, OSPF). Demonstrated engineering experience with Palo Alto Networks firewalls (PAN-OS), Panorama central management, and advanced IDS/IPS inspection profiles. Hands-on deployment experience with both Cisco ISE and/or Aruba ClearPass implementing 802.1X, EAP-TLS authentication, and role-based access policies. Strong working knowledge of X.509 certificates, CA hierarchy integration, certificate revocation lists (CRLs), OCSP, and secure NTP stratum synchronization. Direct prior experience preparing and successfully registering NSA CSfC Capability Package solutions (Mobile Access, Multi-Site Connectivity, or Campus WLAN). Deep understanding of Commercial National Security Algorithm (CNSA) Suite requirements, post-quantum readiness considerations, and hardware security modules (HSMs). Familiarity with Ansible, for automating network device configuration backups, policy compliance checks, and certificate rotations. Certified in any of the following - Cisco CCNP/CCIE (Security or Enterprise), Palo Alto PCNSE, Aruba Certified ClearPass Expert (ACCX), or Aruba Certified Mobility Expert (ACMX).
09/28/2026
Full time
Job Description Job Description Benefits: 401(k) 401(k) matching Dental insurance Health insurance Paid time off Profit sharing Training & development Tuition assistance Vision insurance Job Description SarelaTech is seeking an experienced Network Engineer (SME) to join our Integrated Information Technology Support Services (I3TS) team, who will support an extensive digital modernization program critical to Defense Threat Reduction Agency (DTRA) in Fort Belvoir, VA. The Network Engineer will work closely with the Leidos and Government technical leadership team to help drive innovation, growth, and efficiencies within the I3TS portfolio. Primary Responsibilities: The Commercial Solutions for Classified (CSfC) Network & Security Engineer will architect and operate secure, dual-layer cryptographic boundaries utilizing Cisco and Aruba IPsec/SSL VPNs and dynamic routing (BGP/OSPF) in strict compliance with NSA Capability Packages. In this role, you will author and tune Palo Alto NGFW security policies and IDS/IPS threat prevention signatures, implement enterprise network access control and 802.1X policies via Cisco ISE and Aruba ClearPass, integrate enterprise PKI/OCSP services and hardened NTP, and generate key engineering artifacts required for NSA CSfC PMO registration and compliance auditing. Architect, deploy, and maintain CSfC infrastructure operating within Black/Gray/Red networks. Design, configure, and maintain multi-layered Commercial Solutions for Classified (CSfC) architectures in alignment with NSA Mobile Access (MA), Multi-Sight (MSC) Capability Packages, with Campus Wireless LAN (WLAN) experience a bonus. Ensure strict compliance with vendor diversity and dual-tunnel encryption mandates. Understanding of NIAP approved list and monitors for changes Design, configure, and maintain multi-layered Commercial Solutions for Classified (CSfC) architectures in alignment with NSA Capability Packages (MSC, MA, and CWLAN). Ensure strict compliance with vendor diversity and dual-tunnel encryption mandates. Implement enterprise routing protocols (BGP, OSPF) alongside redundant outer and inner IPsec VPN tunnels across Cisco and Aruba appliances. Configure remote access SSL VPNs and ensure end-to-end traffic separation. Author, optimize, and audit Palo Alto Next-Generation Firewall (NGFW) security policies, App-ID, User-ID, and URL filtering. Configure and tune Palo Alto IDS/IPS threat signatures, anti-spyware, and vulnerability protection. Architect and manage Cisco Identity Services Engine (ISE) and Aruba ClearPass policy managers for 802.1X network access control, RADIUS/TACACS+ administration, posture assessment, and endpoint profiling. Integrate enterprise Public Key Infrastructure (PKI) components, managing X.509 certificate lifecycles, Certificate Authorities (CAs), CRL/OCSP validation, and hardened, authenticated Network Time Protocol (NTP) infrastructure. Prepare CSfC compliance artifacts, Key Management Plans (KMPs), Continuous Monitoring Plans (CMPs), and registration packages for NSA CSfC PMO submission. Required Qualifications: Bachelor's degree or higher in Computer Science, Information Technology, Engineering, Engineering Management, Management Information Systems, or related STEM degree program, and 12-15 years of relevant experience. Specific experience, education and training may be considered in lieu of degree. 12+ years of progressive network engineering experience within DoD/DoW, federal, or defense contractor enterprise environments Active TS/SCI Clearance Active DoD 8570.01-M / DoD 8140 IAT Level II or III baseline certification (e.g., Security+ CE, CySA+, CASP+, or CISSP). Active Computing Environment certification, including one or more of: Cisco CCNA, CCNP, Aruba ACSA or ACSP Proven expertise configuring Cisco (IOS-XE/ASR) and Aruba (Mobility Controllers/Gateways) IPsec and SSL VPNs, including IKEv2, Suite B/CNSA cryptography, and dynamic routing (BGP, OSPF). Demonstrated engineering experience with Palo Alto Networks firewalls (PAN-OS), Panorama central management, and advanced IDS/IPS inspection profiles. Hands-on deployment experience with both Cisco ISE and/or Aruba ClearPass implementing 802.1X, EAP-TLS authentication, and role-based access policies. Strong working knowledge of X.509 certificates, CA hierarchy integration, certificate revocation lists (CRLs), OCSP, and secure NTP stratum synchronization. Direct prior experience preparing and successfully registering NSA CSfC Capability Package solutions (Mobile Access, Multi-Site Connectivity, or Campus WLAN). Deep understanding of Commercial National Security Algorithm (CNSA) Suite requirements, post-quantum readiness considerations, and hardware security modules (HSMs). Familiarity with Ansible, for automating network device configuration backups, policy compliance checks, and certificate rotations. Certified in any of the following - Cisco CCNP/CCIE (Security or Enterprise), Palo Alto PCNSE, Aruba Certified ClearPass Expert (ACCX), or Aruba Certified Mobility Expert (ACMX).
Firewall Operations Engineer Secret Clearance
Conceras Beltsville, Maryland
Job Description Job Description Network Operations - Firewall Operations Engineer Position Description Description This is an opening for a Firewall Engineer to support a Department of State (DoS) Bureau of Diplomatic Technology (DT) program. This program provides transparent, interconnected systems and security supporting the DoS in successfully carrying out its U.S. foreign policy mission. DT provides enterprise architecture design, engineering, operations and maintenance support services for servers, networks, firewalls, and enterprise applications across the Department. This is a firewall engineer position, providing general Tier 2 monitoring, configuration, and support to multiple firewalls and perimeter security systems. The position directly supports DoS on-site to provide perimeter security protection to over 80,000 customers globally. This is a hybrid position based out of Beltsville, MD with 3 days on-site. Shift is Day's (7:00am-3:30pm), Tuesday-Saturday after training. During the 6-8-week training period, it will be 5 days on-site Mon-Fri (7:00am-3:30pm). Your responsibilities will include: Provides Tier 2 support in the monitoring, management, and troubleshooting of perimeter devices to include firewalls, proxies, and mail transport agents. Monitor Service Now application for Firewall Operations (FWOPS) incident and service requests. Implements firewall rules and policies, perform troubleshooting of firewalls (Palo Alto, Cloud Palo Alto, and FortiGate), CISCO Email Security Appliance (ESA), A10 (load balancer), Proxy platforms, URL filtering across platforms, and analyzing network traffic captures. Escalates issues as required to Tier 3 staff and monitors issues throughout a problem's life cycle. Performs recurring maintenance activities such as device reboots and software upgrades on all devices underneath the Firewall Operations Team. Records and reports on firewall operations, utilization, and maintenance. Collaborate across Bureaus and Agencies to implement and repair network changes as they relate to perimeter security devices. Support Diplomatic Security Computer Incident Response Team (CIRT) by implementing block requests for IP's, Websites, and Email addresses. Update architecture diagrams using Visio. Monitor and perform health checks on multiple perimeter security devices. Draft, coordinate and publish outage notifications as required. Update shift logs and provide reports to leadership as needed. Maintain standard operating procedures (SOP), work instructions, and other working documents. Attend calls requiring a FWOPS team to attend, to include troubleshooting calls. Required Education & Experience: BA degree and 2-4 years of experience, may accept additional experience in lieu of degree. In Depth experience using Palo Alto Firewalls and Panorama monitoring tools to troubleshoot and configure a Firewall infrastructure. Strong understanding of networking, proxy, and packet filtering technologies. Minimum 3-5 years of IT Customer Support experience (Tier I and/or Tier II). First-hand experience with supporting the monitoring and configuration of Firewall/DMZ infrastructure including Network and Application Firewall Packet Filtering technologies (Palo Alto, Palo Alto virtual FW (cloud), FortiGate, Azure Firewall, Cloudflare, Cisco Email Security Appliances (ESA), A10 (Load Balancer), and proxy devices. CLI experience preferred. Experienced in utilizing network monitoring tools such as NeuralStar. Experienced with TCP/IP network implementation and troubleshooting. Required Clearance US Citizenship. An Interim Secret clearance is required to start work and requires eligibility to obtain a Top-Secret clearance. Powered by JazzHR 2IrLa6mmdU
09/28/2026
Full time
Job Description Job Description Network Operations - Firewall Operations Engineer Position Description Description This is an opening for a Firewall Engineer to support a Department of State (DoS) Bureau of Diplomatic Technology (DT) program. This program provides transparent, interconnected systems and security supporting the DoS in successfully carrying out its U.S. foreign policy mission. DT provides enterprise architecture design, engineering, operations and maintenance support services for servers, networks, firewalls, and enterprise applications across the Department. This is a firewall engineer position, providing general Tier 2 monitoring, configuration, and support to multiple firewalls and perimeter security systems. The position directly supports DoS on-site to provide perimeter security protection to over 80,000 customers globally. This is a hybrid position based out of Beltsville, MD with 3 days on-site. Shift is Day's (7:00am-3:30pm), Tuesday-Saturday after training. During the 6-8-week training period, it will be 5 days on-site Mon-Fri (7:00am-3:30pm). Your responsibilities will include: Provides Tier 2 support in the monitoring, management, and troubleshooting of perimeter devices to include firewalls, proxies, and mail transport agents. Monitor Service Now application for Firewall Operations (FWOPS) incident and service requests. Implements firewall rules and policies, perform troubleshooting of firewalls (Palo Alto, Cloud Palo Alto, and FortiGate), CISCO Email Security Appliance (ESA), A10 (load balancer), Proxy platforms, URL filtering across platforms, and analyzing network traffic captures. Escalates issues as required to Tier 3 staff and monitors issues throughout a problem's life cycle. Performs recurring maintenance activities such as device reboots and software upgrades on all devices underneath the Firewall Operations Team. Records and reports on firewall operations, utilization, and maintenance. Collaborate across Bureaus and Agencies to implement and repair network changes as they relate to perimeter security devices. Support Diplomatic Security Computer Incident Response Team (CIRT) by implementing block requests for IP's, Websites, and Email addresses. Update architecture diagrams using Visio. Monitor and perform health checks on multiple perimeter security devices. Draft, coordinate and publish outage notifications as required. Update shift logs and provide reports to leadership as needed. Maintain standard operating procedures (SOP), work instructions, and other working documents. Attend calls requiring a FWOPS team to attend, to include troubleshooting calls. Required Education & Experience: BA degree and 2-4 years of experience, may accept additional experience in lieu of degree. In Depth experience using Palo Alto Firewalls and Panorama monitoring tools to troubleshoot and configure a Firewall infrastructure. Strong understanding of networking, proxy, and packet filtering technologies. Minimum 3-5 years of IT Customer Support experience (Tier I and/or Tier II). First-hand experience with supporting the monitoring and configuration of Firewall/DMZ infrastructure including Network and Application Firewall Packet Filtering technologies (Palo Alto, Palo Alto virtual FW (cloud), FortiGate, Azure Firewall, Cloudflare, Cisco Email Security Appliances (ESA), A10 (Load Balancer), and proxy devices. CLI experience preferred. Experienced in utilizing network monitoring tools such as NeuralStar. Experienced with TCP/IP network implementation and troubleshooting. Required Clearance US Citizenship. An Interim Secret clearance is required to start work and requires eligibility to obtain a Top-Secret clearance. Powered by JazzHR 2IrLa6mmdU
GNOSC Watch Officer/Network Engineer
IQUASAR LLC Colorado Springs, Colorado
Job Description Job Description Benefits: 401(k) Competitive salary Dental insurance Health insurance Paid time off Vision insurance Cimarron is seeking a GNOSC Watch Officer/Network Engineer to support the Missile Defense Agency (MDA) on the Integrated Research and Development for Enterprise Solutions (IRES) contract at Schriever Space Force Base in the Colorado Springs, CO area. Key Duties: Responsible for all facets of a continuous 24/7 Global Network Operations and Security Center. Execute network, system, and cloud systems monitoring/surveillance, environmental monitoring, incident management and MDA Cybersecurity. Be responsible for all aspects of IT incident management and escalation, ensuring that incidents are effectively escalated, managed and resolved with full communication of status, plans, and actions provided to executive management and the Government customer. Support and service maintenance activities to include Change Management coordination during the assigned quarterly rotating shift day/night shifts. Required Skills, Experience, and Education: Due to facility security requirements, only U.S. citizens are eligible for consideration at this time. Ability to complete a pre-employment background check and drug screening, which will include, but is not limited to, testing for marijuana use. This position requires access to federal facilities. Candidates must possess a valid, unexpired Real ID-compliant driver's license or state-issued identification card at the time of hire. If you are unsure whether your ID is Real ID-compliant, please check for the star symbol in the upper portion of your driver's license or state ID. Active Secret Clearance. Current DoD 8570 IAT Level II certification (ex., Security + CE, CySA, etc.). 1 or more years of IT experience. Excellent communication skills, verbal and written, at both technical and senior/Executive management levels. Understanding of Command level Management. Able to speak clearly to diverse cultural audiences, VIPs, and dignitaries. Able to perform as a section trainer and create lesson plans. Able to operate within a stressful high speed Operational environment and be able to multi-task. Desired Skills, Experience, and Education: Experience in metrics-based IT Operations and Maintenance (O&M) teams. Experience with Remedy and SNMP monitoring tools (e.g., SolarWinds and StruxureWare Datacenter Expert). Have education or experience with ITIL framework and ITIL-based processes, to include continual service improvement, change management, and problem investigation. Previous work experience as a Windows/Linux System Administrator supporting a large Enterprise with knowledge of Microsoft Active Directory, Windows 2008/2012, Linux/UNIX Operating Systems, EMC Storage, Symantec NetBackup and SCCM Patch Management solutions. Previous work experience as a network engineer, including hands-on experience designing, implementing and managing network components including switches, routers, firewalls, and cryptographic devices. Experience with Cyber-defense or information assurance, including experience with DISA mandated security tools to include Assured Compliance Assessment Solution (ACAS), Host Based Security System (HBSS), analyze results and create reports Knowledge of IT Network Operations and connectivity devices that inter-relate with Public Key Infrastructure authentication and Information Security practices. Network Operations experience in a network operations center or other 24x7x365 IT Operations environment. Knowledge of Cybersecurity principles and how to execute system/network security analysis. Have a working knowledge of Tier III Information Assurance practices, IT security governance, security administration, project management, logistics, and Cybersecurity compliance requirements. Quality Assurance/Quality Control Inspection process knowledge.
09/28/2026
Full time
Job Description Job Description Benefits: 401(k) Competitive salary Dental insurance Health insurance Paid time off Vision insurance Cimarron is seeking a GNOSC Watch Officer/Network Engineer to support the Missile Defense Agency (MDA) on the Integrated Research and Development for Enterprise Solutions (IRES) contract at Schriever Space Force Base in the Colorado Springs, CO area. Key Duties: Responsible for all facets of a continuous 24/7 Global Network Operations and Security Center. Execute network, system, and cloud systems monitoring/surveillance, environmental monitoring, incident management and MDA Cybersecurity. Be responsible for all aspects of IT incident management and escalation, ensuring that incidents are effectively escalated, managed and resolved with full communication of status, plans, and actions provided to executive management and the Government customer. Support and service maintenance activities to include Change Management coordination during the assigned quarterly rotating shift day/night shifts. Required Skills, Experience, and Education: Due to facility security requirements, only U.S. citizens are eligible for consideration at this time. Ability to complete a pre-employment background check and drug screening, which will include, but is not limited to, testing for marijuana use. This position requires access to federal facilities. Candidates must possess a valid, unexpired Real ID-compliant driver's license or state-issued identification card at the time of hire. If you are unsure whether your ID is Real ID-compliant, please check for the star symbol in the upper portion of your driver's license or state ID. Active Secret Clearance. Current DoD 8570 IAT Level II certification (ex., Security + CE, CySA, etc.). 1 or more years of IT experience. Excellent communication skills, verbal and written, at both technical and senior/Executive management levels. Understanding of Command level Management. Able to speak clearly to diverse cultural audiences, VIPs, and dignitaries. Able to perform as a section trainer and create lesson plans. Able to operate within a stressful high speed Operational environment and be able to multi-task. Desired Skills, Experience, and Education: Experience in metrics-based IT Operations and Maintenance (O&M) teams. Experience with Remedy and SNMP monitoring tools (e.g., SolarWinds and StruxureWare Datacenter Expert). Have education or experience with ITIL framework and ITIL-based processes, to include continual service improvement, change management, and problem investigation. Previous work experience as a Windows/Linux System Administrator supporting a large Enterprise with knowledge of Microsoft Active Directory, Windows 2008/2012, Linux/UNIX Operating Systems, EMC Storage, Symantec NetBackup and SCCM Patch Management solutions. Previous work experience as a network engineer, including hands-on experience designing, implementing and managing network components including switches, routers, firewalls, and cryptographic devices. Experience with Cyber-defense or information assurance, including experience with DISA mandated security tools to include Assured Compliance Assessment Solution (ACAS), Host Based Security System (HBSS), analyze results and create reports Knowledge of IT Network Operations and connectivity devices that inter-relate with Public Key Infrastructure authentication and Information Security practices. Network Operations experience in a network operations center or other 24x7x365 IT Operations environment. Knowledge of Cybersecurity principles and how to execute system/network security analysis. Have a working knowledge of Tier III Information Assurance practices, IT security governance, security administration, project management, logistics, and Cybersecurity compliance requirements. Quality Assurance/Quality Control Inspection process knowledge.

Modal Window

  • Home
  • Contact
  • About Us
  • FAQs
  • Terms & Conditions
  • Privacy
  • Employer
  • Post a Job
  • Search Resumes
  • Sign in
  • Job Seeker
  • Find Jobs
  • Create Resume
  • Sign in
  • IT blog
  • Facebook
  • Twitter
  • LinkedIn
  • Youtube
© 2008-2026 IT Job Board