Job Description Job Description CyberLinx Solutions is seeking a highly experienced Senior Systems Engineer (Primary Technical Lead) to serve as the primary technical lead for our IT infrastructure. This role is responsible for designing, implementing, and maintaining enterprise systems, leading complex projects, and providing Tier 3 support for escalated issues. The ideal candidate is a hands-on engineer with deep expertise in servers, virtualization, networking, cloud technologies, and security. Key Responsibilities Serve as the primary technical lead for infrastructure projects and daily operations Design, implement, and optimize enterprise systems and networks Manage Windows Server environments (e.g., Microsoft Windows Server) and virtualization platforms such as VMware vSphere or Microsoft Hyper-V Configure and maintain enterprise firewalls, switches, and routers (e.g., Cisco Systems, Fortinet, Palo Alto Networks) Oversee cloud and hybrid environments (e.g., Microsoft Azure, Amazon Web Services) Implement and maintain security, backup, and disaster recovery strategies Troubleshoot complex Tier 3 incidents and perform root cause analysis Mentor junior engineers and provide technical guidance Document systems, processes, and standard operating procedures
11/12/2026
Full time
Job Description Job Description CyberLinx Solutions is seeking a highly experienced Senior Systems Engineer (Primary Technical Lead) to serve as the primary technical lead for our IT infrastructure. This role is responsible for designing, implementing, and maintaining enterprise systems, leading complex projects, and providing Tier 3 support for escalated issues. The ideal candidate is a hands-on engineer with deep expertise in servers, virtualization, networking, cloud technologies, and security. Key Responsibilities Serve as the primary technical lead for infrastructure projects and daily operations Design, implement, and optimize enterprise systems and networks Manage Windows Server environments (e.g., Microsoft Windows Server) and virtualization platforms such as VMware vSphere or Microsoft Hyper-V Configure and maintain enterprise firewalls, switches, and routers (e.g., Cisco Systems, Fortinet, Palo Alto Networks) Oversee cloud and hybrid environments (e.g., Microsoft Azure, Amazon Web Services) Implement and maintain security, backup, and disaster recovery strategies Troubleshoot complex Tier 3 incidents and perform root cause analysis Mentor junior engineers and provide technical guidance Document systems, processes, and standard operating procedures
Raleigh-Durham Airport Authority
Raleigh, North Carolina
Job Description Job Description About us: Welcome to the Raleigh-Durham Airport Authority, where we operate RDU International Airport, a vital hub connecting North Carolina to the world. In 2024, our teamwork helped us serve 15.5 million passengers, generate a $24.1 billion economic impact, and our dedication to excellence has been recognized with a Top Five passenger satisfaction ranking in North America. We're a tight-knit team of over 400 employees where accountability and collaboration are our guiding principles, and safety is our top priority. Whether your role is indoors or outdoors, you'll be part of a supportive environment that values your contributions. We believe in investing in our people, offering competitive benefits and professional development to help your career take flight. About You: You embody core values that will play a pivotal role in connecting our community to places and the people who matter most. Your commitment to continuous learning will drive innovation and growth, while your unwavering integrity ensures that our brand remains trustworthy and reputable. Your respect for colleagues and clients alike fosters a collaborative and positive environment. Your dedication to excellence in every task you undertake will elevate our brand's standards. Lastly, your team spirit will unite our efforts and amplify our collective success. About the Role: We're looking for an experienced network professional who can keep our airport's technology running smoothly and our operations cleared for takeoff! As a Senior Systems Engineer, you'll tackle complex service requests, keep critical systems up to date, and serve as a trusted mentor to fellow engineers, administrators, and technicians. Working alongside your team, you'll help chart the course for smarter processes and innovative solutions that strengthen reliability, enhance security, and keep our technology operating at cruising altitude. Your expertise will help keep our entire operation connected, secure, and ready for takeoff! Compensation: Maximum - Based on experience Minimum - $95,082.00 What You'll Do: Designs, implements, and maintains enterprise network and systems architecture, configurations, connectivity, and technical documentation in accordance with Authority standards. Develops and improves procedures for monitoring, administration, maintenance, capacity planning, and lifecycle management of infrastructure services. Serves as the senior technical lead for complex routing, switching, wireless, and network connectivity initiatives, coordinating implementation and resolving integration issues. Leads technical design and implementation of compute and virtualization solutions, including server platforms, resource allocation, and performance optimization. Evaluates, tests, and recommends emerging technologies and services; develops technical requirements and implementation plans for approved solutions. Maintains core infrastructure services, including DNS, DHCP, directory services, and identity integrations, and resolves complex service disruptions. Evaluates, tests, and recommends emerging technologies and services; develops technical requirements and implementation plans for approved solutions. What You Need: Education Required: Bachelor's degree in computer science, information systems, computer engineering, or related field or equivalent related experience Preferred: Master's degree in computer science, information systems, computer engineering, or related field or equivalent related experience Experience Required: 5 years of experience in Systems Engineering or combination of Systems Engineering or Systems Administration with elevating levels of responsibility Licenses or Certifications Preferred: Juniper JNCIS or higher or Cisco CCNP (R&S, Wireless, Voice, or Datacenter) VMware VCP-DSV or higher Pure Flash Storage Array Professional Okta Certified Professional Dell PowerEdge v2 Microsoft Certified: Azure Administrator Associate Microsoft Certified Solutions AssociatePalo Alto Networks Certified Cybersecurity Associate Palo Alto Networks Certified Network Security Administrator Red Hat Certified System Administrator Red Hat Certified Engineer Dynatrace Associate Certification RDU Benefits: At the Authority, we appreciate you and care about your health, happiness, and future. Our benefits start on day one , including medical, dental, vision, tuition assistance, employee discounts, and perks like an on-site gym, a dedicated wellness team, and frequent company and team outings. For a full list of benefit offerings, check out the Careers Page
11/12/2026
Full time
Job Description Job Description About us: Welcome to the Raleigh-Durham Airport Authority, where we operate RDU International Airport, a vital hub connecting North Carolina to the world. In 2024, our teamwork helped us serve 15.5 million passengers, generate a $24.1 billion economic impact, and our dedication to excellence has been recognized with a Top Five passenger satisfaction ranking in North America. We're a tight-knit team of over 400 employees where accountability and collaboration are our guiding principles, and safety is our top priority. Whether your role is indoors or outdoors, you'll be part of a supportive environment that values your contributions. We believe in investing in our people, offering competitive benefits and professional development to help your career take flight. About You: You embody core values that will play a pivotal role in connecting our community to places and the people who matter most. Your commitment to continuous learning will drive innovation and growth, while your unwavering integrity ensures that our brand remains trustworthy and reputable. Your respect for colleagues and clients alike fosters a collaborative and positive environment. Your dedication to excellence in every task you undertake will elevate our brand's standards. Lastly, your team spirit will unite our efforts and amplify our collective success. About the Role: We're looking for an experienced network professional who can keep our airport's technology running smoothly and our operations cleared for takeoff! As a Senior Systems Engineer, you'll tackle complex service requests, keep critical systems up to date, and serve as a trusted mentor to fellow engineers, administrators, and technicians. Working alongside your team, you'll help chart the course for smarter processes and innovative solutions that strengthen reliability, enhance security, and keep our technology operating at cruising altitude. Your expertise will help keep our entire operation connected, secure, and ready for takeoff! Compensation: Maximum - Based on experience Minimum - $95,082.00 What You'll Do: Designs, implements, and maintains enterprise network and systems architecture, configurations, connectivity, and technical documentation in accordance with Authority standards. Develops and improves procedures for monitoring, administration, maintenance, capacity planning, and lifecycle management of infrastructure services. Serves as the senior technical lead for complex routing, switching, wireless, and network connectivity initiatives, coordinating implementation and resolving integration issues. Leads technical design and implementation of compute and virtualization solutions, including server platforms, resource allocation, and performance optimization. Evaluates, tests, and recommends emerging technologies and services; develops technical requirements and implementation plans for approved solutions. Maintains core infrastructure services, including DNS, DHCP, directory services, and identity integrations, and resolves complex service disruptions. Evaluates, tests, and recommends emerging technologies and services; develops technical requirements and implementation plans for approved solutions. What You Need: Education Required: Bachelor's degree in computer science, information systems, computer engineering, or related field or equivalent related experience Preferred: Master's degree in computer science, information systems, computer engineering, or related field or equivalent related experience Experience Required: 5 years of experience in Systems Engineering or combination of Systems Engineering or Systems Administration with elevating levels of responsibility Licenses or Certifications Preferred: Juniper JNCIS or higher or Cisco CCNP (R&S, Wireless, Voice, or Datacenter) VMware VCP-DSV or higher Pure Flash Storage Array Professional Okta Certified Professional Dell PowerEdge v2 Microsoft Certified: Azure Administrator Associate Microsoft Certified Solutions AssociatePalo Alto Networks Certified Cybersecurity Associate Palo Alto Networks Certified Network Security Administrator Red Hat Certified System Administrator Red Hat Certified Engineer Dynatrace Associate Certification RDU Benefits: At the Authority, we appreciate you and care about your health, happiness, and future. Our benefits start on day one , including medical, dental, vision, tuition assistance, employee discounts, and perks like an on-site gym, a dedicated wellness team, and frequent company and team outings. For a full list of benefit offerings, check out the Careers Page
POSITION SUMMARY: The Senior Manager, Network Infrastructure & Services is responsible for the strategy, architecture, security, availability, and lifecycle management of all network and connectivity services supporting LBCT's critical business and terminal operations. This position provides leadership and oversight for enterprise networking, telecommunications, wireless infrastructure, operational technology (OT) connectivity, carrier services, network security platforms, and managed service providers. The Senior Manager oversees Cisco networking, Fortinet and Palo Alto security platforms, enterprise wireless infrastructure, network segmentation, carrier services, and managed service provider governance. The role ensures highly available, secure, and resilient network services capable of supporting 24x7 marine terminal operations. The Senior Manager develops technology roadmaps, establishes engineering standards, manages vendor relationships, and drives continuous improvement through automation, analytics, and emerging technologies. This position works closely with Cyber Security, Systems Administration, Operations, and business stakeholders to ensure infrastructure services meet operational and strategic business requirements. ESSENTIAL DUTIES AND RESPONSIBILITIES Maintain a safe and secure working environment while promoting IT Operational excellence throughout the organization. Develop and maintain the terminal's network architecture, standards, technology roadmap, and lifecycle strategy. Architect highly available LAN, WAN, wireless, Internet, data center, cloud, and remote-access connectivity. Design networks for environments requiring extremely high availability and rapid recovery from infrastructure failures. Establish architecture and engineering standards for enterprise and outdoor wireless infrastructure. Establish network segmentation and security architectures separating corporate IT, OT, vendors, Internet-facing systems, and other security zones. Develop standards for switching, routing, firewalls, wireless, IP addressing, DNS/DHCP, network access control, and connectivity services. Evaluate emerging technologies and determine their applicability to terminal operations. Ensure infrastructure capacity supports growth in automation, IoT/OT devices, video, telemetry, mobile equipment, and cloud services. Participate in operational change management to minimize disruption to terminal activities. Provide technical leadership and governance for the terminal's Cisco environment. Maintain configuration, architecture, lifecycle, and resilience standards across the network environment. Lead network-security architecture and operations using technologies including Fortinet and Palo Alto Networks, as applicable. Maintain compliance with industry regulations and standards, including those specific to maritime and port operations. Partner with cybersecurity team to implement Zero Trust principles and strengthen protection of critical IT and operational infrastructure. Assist cyber team with regular security audits and vulnerability assessments. Own the performance and governance of network-related managed service providers, telecommunications carriers, contractors, and technology vendors. Maintain appropriate records of vendor issues, decisions, commitments, and outstanding actions. Enforce and monitor contractual service level agreements (SLAs) with IT vendors and assigned independent contractors. Foster a culture of accountability, technical excellence, continuous improvement, and customer service. With other IT management, contribute to the development and implementation of the IT strategy for the terminal. Perform other related duties as assigned. REQUIRED KNOWLEDGE, SKILLS, AND ABILITIES : Strong managerial, supervisory, and decision-making skills to achieve department and company goals. Excellent interpersonal skills. Ability to interact with a variety of people throughout the corporation. Ability to remain calm and professional during confrontational situations. Effective public speaking and presentation skills. Be able to present and defend a point of view. Possess excellent communication, written, oral, and interpersonal and teamwork skills, communicate constructively and confidently, listen openly, and collaborate well with staff and others in different groups. Ability to relate information from a multitude of sources. Capability to turn theoretical information into practical applications. Convey a professional and positive attitude with action/results orientation to problem solving and elimination of backlogs. Proven ability and experience in exercising good judgment and discretion in handling confidential materials and matters. Possess strong organizational and analytical skills in managing daily, weekly, monthly, quarterly, or annual deadlines, but flexible to a changing list of priorities, sometimes daily. Excellent attention to detail with a high degree of accuracy. Ability to handle multiple demands; prioritize workloads; establish and maintain positive, cooperative, and productive working relationships. Advanced understanding and familiarity with Microsoft: Server, SQL, Office Suite, Azure, Active Directory, and DNS. Advanced understanding of and familiarity with VMWare and Dell EMC storage solutions. Experience with vulnerability scanning solutions. Familiarity with the NIST Cybersecurity Framework, CIS Controls, and relevant cybersecurity frameworks. In-depth knowledge of Routing and switching, TCP/IP, BGP and OSPF, VLANs and VRFs, Wireless networking, Firewalls, VPN technologies, Network segmentation, DNS/DHCP, Network monitoring, and High-availability architecture. Network automation using APIs, scripting, orchestration platforms, or infrastructure as code. Knowledge of marine terminal technology is highly desirable, including Terminal Operating Systems, Gate systems, OCR, RFID, GPS/location technologies, and truck appointment systems (NAVIS experience a plus). Stay informed about emerging technologies and trends and make recommendations for future IT investments. EDUCATION AND/OR EXPERIENCE Bachelor's degree in Information Technology, Computer Science, Engineering, or a related field. Seven (7+) years of progressive experience in network engineering, telecommunications, or infrastructure operations. Five (5+) years of leadership experience managing technical teams or critical infrastructure services. Advanced experience with Cisco networking technologies. Significant experience with enterprise firewall and security technologies, Palo Alto and/or Fortinet preferred. Experience in a marine container terminal or similar industrial environment is preferred Experience working in a unionized environment, a plus. PHYSICAL REQUIREMENTS The ability to work any days or hours, including weekends and holidays. The ability to walk and stand for extended periods of time. The ability to use a computer and keyboard. The ability to sit and work at a desk and/or computer for extended periods of time. The ability to lift 30-50 pounds with or without assistance. The ability to drive a company owned pickup truck. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions of the position. WORKING ENVIRONMENT The work is performed both inside and outside at LBCT sites, various marine terminal locations, in temporary offices and in classrooms. Position is based in Long Beach, CA; work assignments may require travel to other marine terminal sites or travel to other offices. TWIC: You will be required to apply and successfully obtain a TWIC (Transportation Worker's Identification Credential). NOTE: This job description is not all-inclusive. An Employee may perform other related duties as required to meet the ongoing needs of LBCT LLC. LBCT LLC is an equal opportunity employer committed to equity and inclusion in the workplace. Compensation details: 00 Yearly Salary PI62cec5-
11/12/2026
Full time
POSITION SUMMARY: The Senior Manager, Network Infrastructure & Services is responsible for the strategy, architecture, security, availability, and lifecycle management of all network and connectivity services supporting LBCT's critical business and terminal operations. This position provides leadership and oversight for enterprise networking, telecommunications, wireless infrastructure, operational technology (OT) connectivity, carrier services, network security platforms, and managed service providers. The Senior Manager oversees Cisco networking, Fortinet and Palo Alto security platforms, enterprise wireless infrastructure, network segmentation, carrier services, and managed service provider governance. The role ensures highly available, secure, and resilient network services capable of supporting 24x7 marine terminal operations. The Senior Manager develops technology roadmaps, establishes engineering standards, manages vendor relationships, and drives continuous improvement through automation, analytics, and emerging technologies. This position works closely with Cyber Security, Systems Administration, Operations, and business stakeholders to ensure infrastructure services meet operational and strategic business requirements. ESSENTIAL DUTIES AND RESPONSIBILITIES Maintain a safe and secure working environment while promoting IT Operational excellence throughout the organization. Develop and maintain the terminal's network architecture, standards, technology roadmap, and lifecycle strategy. Architect highly available LAN, WAN, wireless, Internet, data center, cloud, and remote-access connectivity. Design networks for environments requiring extremely high availability and rapid recovery from infrastructure failures. Establish architecture and engineering standards for enterprise and outdoor wireless infrastructure. Establish network segmentation and security architectures separating corporate IT, OT, vendors, Internet-facing systems, and other security zones. Develop standards for switching, routing, firewalls, wireless, IP addressing, DNS/DHCP, network access control, and connectivity services. Evaluate emerging technologies and determine their applicability to terminal operations. Ensure infrastructure capacity supports growth in automation, IoT/OT devices, video, telemetry, mobile equipment, and cloud services. Participate in operational change management to minimize disruption to terminal activities. Provide technical leadership and governance for the terminal's Cisco environment. Maintain configuration, architecture, lifecycle, and resilience standards across the network environment. Lead network-security architecture and operations using technologies including Fortinet and Palo Alto Networks, as applicable. Maintain compliance with industry regulations and standards, including those specific to maritime and port operations. Partner with cybersecurity team to implement Zero Trust principles and strengthen protection of critical IT and operational infrastructure. Assist cyber team with regular security audits and vulnerability assessments. Own the performance and governance of network-related managed service providers, telecommunications carriers, contractors, and technology vendors. Maintain appropriate records of vendor issues, decisions, commitments, and outstanding actions. Enforce and monitor contractual service level agreements (SLAs) with IT vendors and assigned independent contractors. Foster a culture of accountability, technical excellence, continuous improvement, and customer service. With other IT management, contribute to the development and implementation of the IT strategy for the terminal. Perform other related duties as assigned. REQUIRED KNOWLEDGE, SKILLS, AND ABILITIES : Strong managerial, supervisory, and decision-making skills to achieve department and company goals. Excellent interpersonal skills. Ability to interact with a variety of people throughout the corporation. Ability to remain calm and professional during confrontational situations. Effective public speaking and presentation skills. Be able to present and defend a point of view. Possess excellent communication, written, oral, and interpersonal and teamwork skills, communicate constructively and confidently, listen openly, and collaborate well with staff and others in different groups. Ability to relate information from a multitude of sources. Capability to turn theoretical information into practical applications. Convey a professional and positive attitude with action/results orientation to problem solving and elimination of backlogs. Proven ability and experience in exercising good judgment and discretion in handling confidential materials and matters. Possess strong organizational and analytical skills in managing daily, weekly, monthly, quarterly, or annual deadlines, but flexible to a changing list of priorities, sometimes daily. Excellent attention to detail with a high degree of accuracy. Ability to handle multiple demands; prioritize workloads; establish and maintain positive, cooperative, and productive working relationships. Advanced understanding and familiarity with Microsoft: Server, SQL, Office Suite, Azure, Active Directory, and DNS. Advanced understanding of and familiarity with VMWare and Dell EMC storage solutions. Experience with vulnerability scanning solutions. Familiarity with the NIST Cybersecurity Framework, CIS Controls, and relevant cybersecurity frameworks. In-depth knowledge of Routing and switching, TCP/IP, BGP and OSPF, VLANs and VRFs, Wireless networking, Firewalls, VPN technologies, Network segmentation, DNS/DHCP, Network monitoring, and High-availability architecture. Network automation using APIs, scripting, orchestration platforms, or infrastructure as code. Knowledge of marine terminal technology is highly desirable, including Terminal Operating Systems, Gate systems, OCR, RFID, GPS/location technologies, and truck appointment systems (NAVIS experience a plus). Stay informed about emerging technologies and trends and make recommendations for future IT investments. EDUCATION AND/OR EXPERIENCE Bachelor's degree in Information Technology, Computer Science, Engineering, or a related field. Seven (7+) years of progressive experience in network engineering, telecommunications, or infrastructure operations. Five (5+) years of leadership experience managing technical teams or critical infrastructure services. Advanced experience with Cisco networking technologies. Significant experience with enterprise firewall and security technologies, Palo Alto and/or Fortinet preferred. Experience in a marine container terminal or similar industrial environment is preferred Experience working in a unionized environment, a plus. PHYSICAL REQUIREMENTS The ability to work any days or hours, including weekends and holidays. The ability to walk and stand for extended periods of time. The ability to use a computer and keyboard. The ability to sit and work at a desk and/or computer for extended periods of time. The ability to lift 30-50 pounds with or without assistance. The ability to drive a company owned pickup truck. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions of the position. WORKING ENVIRONMENT The work is performed both inside and outside at LBCT sites, various marine terminal locations, in temporary offices and in classrooms. Position is based in Long Beach, CA; work assignments may require travel to other marine terminal sites or travel to other offices. TWIC: You will be required to apply and successfully obtain a TWIC (Transportation Worker's Identification Credential). NOTE: This job description is not all-inclusive. An Employee may perform other related duties as required to meet the ongoing needs of LBCT LLC. LBCT LLC is an equal opportunity employer committed to equity and inclusion in the workplace. Compensation details: 00 Yearly Salary PI62cec5-
Job Description Job Description About Us: At Austin Capital Bank, we create financial products and services that do good by enhancing our customers' financial well-being. Our commitment to creating meaningful user experiences drives everything we do, and we're rapidly growing while keeping that start-up spirit alive. Austin Capital Bank is one of the fastest-growing companies in the nation, receiving recognition on the Inc. 5000 five years in a row. Austin Business Journal also recognized Austin Capital Bank on its Fast 50 list for the fastest-growing companies in Central Texas. We ranked in companies with over $10 million per year in revenue. We think and act like an entrepreneurially driven start-up BUT one that is profitable-the best of all worlds. Using our bank as a platform, we're growing quickly and expanding into new digital markets and product categories at a rapid pace. With all this opportunity and growth, we need exceptional individuals to join our team and enable our vision. Why You'll Love Working Here: 100% Employer-paid Medical, Dental, & Vision Insurance - Full coverage for employee-only plans, with affordable options to add your family. Generous Paid Time Off (PTO) - Start with 16 days per year and grow to 30 days as your tenure increases. Paid Holidays - 11+ paid holidays in a year so you can enjoy your time off. 401(k) with 4% Employer Match - Build your future with company-matched retirement savings. Monthly Chair Massages - Relax and recharge on us. Consistent Schedules & Work-Life Balance - No evenings, weekends, or weird hours-just the work-life balance of a normal human. Opportunities to Grow - Career development, tuition assistance, and the ability to explore roles across the bank. A Team That Feels Like a Team - Supportive coworkers, positive environment, and leadership that actually listens. Our Core Values: We are nice folks, but unapologetically fierce competitors in the marketplace who work as a team. Every member of our team embodies our core values. We work, hire, fire, and promote by these values. Take Initiative - A bias to action No Big Egos - Self-confidence with humility Honesty - Respectful and direct forthright communication Wicked Smart - Intellectually and emotionally self-aware If you're someone who is always ready to take initiative and isn't afraid to roll up their sleeves, you'll fit right in. We're big on humility here, cherishing honesty, and embracing emotional intelligence and self-awareness. At Austin Capital Bank, we're all about amplifying teamwork and basking in shared victories. About The Role Senior infrastructure engineering role serving as one of the Bank's primary engineering resources. Responsible for cloud platforms, infrastructure, identity, security, virtualization, backup and recovery, networking, and endpoint technologies supporting a mixed Windows and macOS environment. What You'll Do Infrastructure Engineering Design, implement, administer, and support enterprise infrastructure supporting critical banking operations Share ownership of Microsoft 365, Microsoft Azure, Active Directory, Microsoft Entra ID, Windows Server, virtualization platforms, storage systems, enterprise networking infrastructure, and disaster recovery solutions Administer and maintain VMware vSphere and Microsoft Hyper-V environments supporting production, test, and disaster recovery workloads Monitor infrastructure performance, availability, capacity, and reliability Perform advanced troubleshooting, root-cause analysis, and remediation of complex infrastructure, networking, server, virtualization, and cloud-related issues Develop infrastructure standards, operational procedures, and technical documentation Evaluate and implement technology improvements focused on scalability, resiliency, and operational efficiency Automate administrative processes and workflows using PowerShell and other automation technologies Participate in architecture reviews, modernization initiatives, and long-term technology planning Provide technical leadership during migrations, implementations, maintenance activities, and major incidents Cloud & Microsoft Platforms Administer Microsoft 365, Azure, Entra ID, Exchange Online, SharePoint Online, Teams, MFA, Conditional Access, and hybrid identity solutions Identity & Privileged Access Management Administer Microsoft Entra ID as the primary identity platform for SaaS applications and cloud services Configure and support SSO, MFA, Conditional Access, identity governance, and access review processes Manage SaaS integrations and lifecycle provisioning/deprovisioning Administer BeyondTrust Endpoint Privilege Management policies governing elevation, local administrator rights, and application control Support least-privilege access models and privileged access management initiatives Backup, Recovery & Business Continuity Administer and maintain Veeam Backup & Replication infrastructure supporting servers, virtual machines, and business-critical workloads Monitor backup success rates, retention policies, capacity utilization, and recovery objectives Participate in disaster recovery planning, testing, documentation, and recovery validation exercises Support audit requests related to backup controls, disaster recovery, and business continuity Endpoint Management Support Windows and macOS environments using Intune, Jamf Pro, NinjaOne, and Apple Business Manager What You Bring Required Qualifications 7+ years of systems or infrastructure engineering experience Strong experience with Microsoft 365, Azure, Entra ID, Active Directory, Windows Server, VMware vSphere, Hyper-V, Veeam Backup & Replication, and PowerShell. Experience supporting identity management, SSO, MFA, Conditional Access, and endpoint management platforms Experience supporting business continuity and disaster recovery initiatives Preferred Qualifications Experience with managing infrastructure in cloud environments Experience with enterprise networking - Cisco Meraki and Palo Alto Networks Experience with BeyondTrust Endpoint Privilege Management Experience with enterprise macOS administration via Jamf Pro Banking or regulated-industry experience Equal Opportunity Employer Austin Capital Bank is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or protected veteran status. Note: This job description is not intended to be an exhaustive list of all duties, responsibilities, or qualifications associated with the position. Duties and responsibilities may change at any time with or without notice. This is an in-office position at 3305 Steck Ave., Suite 275, Austin TX, 78757 Human Resources: Powered by JazzHR alFX5551sa
11/12/2026
Full time
Job Description Job Description About Us: At Austin Capital Bank, we create financial products and services that do good by enhancing our customers' financial well-being. Our commitment to creating meaningful user experiences drives everything we do, and we're rapidly growing while keeping that start-up spirit alive. Austin Capital Bank is one of the fastest-growing companies in the nation, receiving recognition on the Inc. 5000 five years in a row. Austin Business Journal also recognized Austin Capital Bank on its Fast 50 list for the fastest-growing companies in Central Texas. We ranked in companies with over $10 million per year in revenue. We think and act like an entrepreneurially driven start-up BUT one that is profitable-the best of all worlds. Using our bank as a platform, we're growing quickly and expanding into new digital markets and product categories at a rapid pace. With all this opportunity and growth, we need exceptional individuals to join our team and enable our vision. Why You'll Love Working Here: 100% Employer-paid Medical, Dental, & Vision Insurance - Full coverage for employee-only plans, with affordable options to add your family. Generous Paid Time Off (PTO) - Start with 16 days per year and grow to 30 days as your tenure increases. Paid Holidays - 11+ paid holidays in a year so you can enjoy your time off. 401(k) with 4% Employer Match - Build your future with company-matched retirement savings. Monthly Chair Massages - Relax and recharge on us. Consistent Schedules & Work-Life Balance - No evenings, weekends, or weird hours-just the work-life balance of a normal human. Opportunities to Grow - Career development, tuition assistance, and the ability to explore roles across the bank. A Team That Feels Like a Team - Supportive coworkers, positive environment, and leadership that actually listens. Our Core Values: We are nice folks, but unapologetically fierce competitors in the marketplace who work as a team. Every member of our team embodies our core values. We work, hire, fire, and promote by these values. Take Initiative - A bias to action No Big Egos - Self-confidence with humility Honesty - Respectful and direct forthright communication Wicked Smart - Intellectually and emotionally self-aware If you're someone who is always ready to take initiative and isn't afraid to roll up their sleeves, you'll fit right in. We're big on humility here, cherishing honesty, and embracing emotional intelligence and self-awareness. At Austin Capital Bank, we're all about amplifying teamwork and basking in shared victories. About The Role Senior infrastructure engineering role serving as one of the Bank's primary engineering resources. Responsible for cloud platforms, infrastructure, identity, security, virtualization, backup and recovery, networking, and endpoint technologies supporting a mixed Windows and macOS environment. What You'll Do Infrastructure Engineering Design, implement, administer, and support enterprise infrastructure supporting critical banking operations Share ownership of Microsoft 365, Microsoft Azure, Active Directory, Microsoft Entra ID, Windows Server, virtualization platforms, storage systems, enterprise networking infrastructure, and disaster recovery solutions Administer and maintain VMware vSphere and Microsoft Hyper-V environments supporting production, test, and disaster recovery workloads Monitor infrastructure performance, availability, capacity, and reliability Perform advanced troubleshooting, root-cause analysis, and remediation of complex infrastructure, networking, server, virtualization, and cloud-related issues Develop infrastructure standards, operational procedures, and technical documentation Evaluate and implement technology improvements focused on scalability, resiliency, and operational efficiency Automate administrative processes and workflows using PowerShell and other automation technologies Participate in architecture reviews, modernization initiatives, and long-term technology planning Provide technical leadership during migrations, implementations, maintenance activities, and major incidents Cloud & Microsoft Platforms Administer Microsoft 365, Azure, Entra ID, Exchange Online, SharePoint Online, Teams, MFA, Conditional Access, and hybrid identity solutions Identity & Privileged Access Management Administer Microsoft Entra ID as the primary identity platform for SaaS applications and cloud services Configure and support SSO, MFA, Conditional Access, identity governance, and access review processes Manage SaaS integrations and lifecycle provisioning/deprovisioning Administer BeyondTrust Endpoint Privilege Management policies governing elevation, local administrator rights, and application control Support least-privilege access models and privileged access management initiatives Backup, Recovery & Business Continuity Administer and maintain Veeam Backup & Replication infrastructure supporting servers, virtual machines, and business-critical workloads Monitor backup success rates, retention policies, capacity utilization, and recovery objectives Participate in disaster recovery planning, testing, documentation, and recovery validation exercises Support audit requests related to backup controls, disaster recovery, and business continuity Endpoint Management Support Windows and macOS environments using Intune, Jamf Pro, NinjaOne, and Apple Business Manager What You Bring Required Qualifications 7+ years of systems or infrastructure engineering experience Strong experience with Microsoft 365, Azure, Entra ID, Active Directory, Windows Server, VMware vSphere, Hyper-V, Veeam Backup & Replication, and PowerShell. Experience supporting identity management, SSO, MFA, Conditional Access, and endpoint management platforms Experience supporting business continuity and disaster recovery initiatives Preferred Qualifications Experience with managing infrastructure in cloud environments Experience with enterprise networking - Cisco Meraki and Palo Alto Networks Experience with BeyondTrust Endpoint Privilege Management Experience with enterprise macOS administration via Jamf Pro Banking or regulated-industry experience Equal Opportunity Employer Austin Capital Bank is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or protected veteran status. Note: This job description is not intended to be an exhaustive list of all duties, responsibilities, or qualifications associated with the position. Duties and responsibilities may change at any time with or without notice. This is an in-office position at 3305 Steck Ave., Suite 275, Austin TX, 78757 Human Resources: Powered by JazzHR alFX5551sa
Job Description Job Description Company Description As a leader in Medicare health insurance distribution, Spring Venture Group guides people through one of their most important life decisions - finding the right insurance coverage. We are on a mission to be the most trusted partner for our customers and our people, enabling empowered decisions along the journey to health and financial well-being. Spring Venture Group offers incredible culture, benefits, and fantastic income potential in a stable and successful work environment at a Medicare agency. This starts with a workplace that empowers people to do their best work. Come build a rewarding career and make a meaningful impact on peoples' lives in an environment that values your determination. Join our diverse, inclusive team and get ready to crush your goals! Job Description OVERVIEW We are seeking a player-coach, Systems Engineer Manager, to lead a small, high-impact team of system engineers while actively executing on core technical initiatives. This role requires a 60% hands-on engineering / 40% team management split. The ideal candidate will possess a strong technical background, proven leadership abilities, and a passion for delivering innovative solutions. REPORTS TO The Systems Engineer Manager reports to the Director, Technology Operations in the Technology department. The ideal candidate is a deeply technical practitioner who thrives on solving complex system engineering challenges, driving backlog execution, and modernizing legacy systems into cloud-first, AI-augmented solutions. You will own our identity boundaries, endpoint management pipelines, workspace infrastructure, and edge services, while serving as a champion for AI-driven IT operations. ESSENTIAL DUTIES The essential duties for this role include, but are not limited to: Team Management & Operational Leadership (40%) Team Management: Lead, mentor, and manage a team of 2-3 system engineers, ensuring the highest standards of quality and efficiency. Agile/Kanban Delivery & Metrics: Manage team backlog using Agile/Kanban best practices to establish clear priorities, maximize throughput, and maintain predictable delivery schedules. Track and maintain key operational metrics for monthly leadership reporting and capacity planning. Cross-Functional Partnership: Collaborate with leaders across Service Desk, Enterprise Applications, and DevOps to execute multi-departmental technical initiatives, establish seamless escalation paths, and drive shared operational efficiencies. Vendor Management & Managed Services Oversight: Direct operational and contract management for primary IT infrastructure partners-specifically YellowDog Networks (co-managed office networking, Palo Alto firewalls, switches) and core endpoint/identity vendors (e.g., Okta, JAMF, NinjaOne). Track vendor SLA compliance, oversee change validation protocols, manage contract renewals, and optimize licensing spend. Hands-On Technical Execution (60%) Identity & Access Control (IAM): Architect, deploy, and maintain identity infrastructure across Active Directory (ADUC/GPO), Azure hybrid environments, Okta (SSO, Workflows, SAML, MFA), and Google Workspace (GSuite, Gemini access controls, Vault, GCP,GAM, API integrations) to enforce strict, HIPAA-compliant RBAC and zero-trust access controls. Endpoint & Workspace Systems Engineering: Own the lifecycle, system design, and security of physical and virtual endpoints (Windows and macOS) using NinjaOne, JAMF, PDQ SmartDeploy, WSUS, and AWS WorkSpaces. Modernize legacy deployment workflows into cloud-first solutions. AI-First Automation & Modernization: Actively write and maintain scripts (PowerShell, Bash, Python) using AI-assisted development platforms (e.g., Cursor) to eliminate manual IT toil, automate patch pipelines, and refactor legacy administrative processes. Network Access & Infrastructure Administration: Administer user-facing access policies and services, including Active Directory-integrated Radius Auth, GlobalProtect VPN user provisioning/client software, internal DNS, PKI/Certificate Authorities, AWS FSx / AWS File Gateway local storage, and Cisco voice/Jabber services. Partner with managed network providers (YellowDog Networks) to review, test, and validate global office network and Palo Alto firewall updates. Systemic Security & Vulnerability Remediation: Execute workstation endpoint encryption (BitLocker/JAMF) and proactively remediate endpoint OS and application vulnerabilities in close coordination with Information Security. Complex Cross-System Troubleshooting: Act as a primary technical escalation point. Lead root-cause analysis and resolution for complex, heavily integrated multi-departmental systems to minimize operational downtime. Qualifications Technical Expertise 8+ years of hands-on experience in systems engineering, endpoint management, and identity infrastructure, with at least 2 years in a management or lead capacity. Identity & Directory Services: Deep expertise in Active Directory, GPO, Azure AD Sync, Okta (SAML, Workflows, MFA), and Google Workspace Administration (OU management, Vault,GCP, GAM, security configurations, and user provisioning for enterprise tools like Gemini). Endpoint & VDI: Proven experience managing Windows and macOS environments at scale using JAMF, NinjaOne, PDQ SmartDeploy, and AWS WorkSpaces. Scripting & AI Tooling: Strong proficiency in PowerShell, Bash, Python or similar scripting languages, with demonstrated experience using AI-assisted coding platforms (e.g., Cursor, GitHub Copilot) to accelerate scripting and automation. Network & Storage: Solid understanding of DNS, PKI/Certificate Authorities, AWS FSx, AWS File Gateway, and core networking principles. Leadership & Soft Skills Proven ability to operate effectively as a player-coach on a small team, balancing high-level planning with direct technical execution. Strong commitment to emotional intelligence, transparent communication, and collaborative problem-solving across teams. Experience managing IT projects via Jira/Confluence using Agile or Kanban frameworks. Preferred Qualifications Certifications in relevant technologies (e.g., Okta Certified Administrator, Jamf Certified Admin, AWS Certified Solutions Architect, Microsoft Certified: Identity and Access Administrator). Experience in healthcare or regulated environments subject to HIPAA compliance. Additional Information Competitive compensation Medical, Dental and Vision benefits after a short waiting period 401k matching program Generous paid time off program with an additional company break during the holidays Annual Volunteer Time Off (VTO) and a donation matching program Life Insurance Employee Assistance Program (health & well-being on and off the job) Rewards and Recognition Maternity and Parental Leave Training program and ongoing support throughout your entire Spring Venture Group career Diverse, inclusive & welcoming culture Optional enrollment options include HSA/FSA, AD&D, Spousal/Dependent life insurance, Short Term/Long Term Disability, Travel Assist, and Legal plans Spring Venture Group is an Equal Opportunity Employer Spring Venture Group is an Equal Opportunity Employer
11/12/2026
Full time
Job Description Job Description Company Description As a leader in Medicare health insurance distribution, Spring Venture Group guides people through one of their most important life decisions - finding the right insurance coverage. We are on a mission to be the most trusted partner for our customers and our people, enabling empowered decisions along the journey to health and financial well-being. Spring Venture Group offers incredible culture, benefits, and fantastic income potential in a stable and successful work environment at a Medicare agency. This starts with a workplace that empowers people to do their best work. Come build a rewarding career and make a meaningful impact on peoples' lives in an environment that values your determination. Join our diverse, inclusive team and get ready to crush your goals! Job Description OVERVIEW We are seeking a player-coach, Systems Engineer Manager, to lead a small, high-impact team of system engineers while actively executing on core technical initiatives. This role requires a 60% hands-on engineering / 40% team management split. The ideal candidate will possess a strong technical background, proven leadership abilities, and a passion for delivering innovative solutions. REPORTS TO The Systems Engineer Manager reports to the Director, Technology Operations in the Technology department. The ideal candidate is a deeply technical practitioner who thrives on solving complex system engineering challenges, driving backlog execution, and modernizing legacy systems into cloud-first, AI-augmented solutions. You will own our identity boundaries, endpoint management pipelines, workspace infrastructure, and edge services, while serving as a champion for AI-driven IT operations. ESSENTIAL DUTIES The essential duties for this role include, but are not limited to: Team Management & Operational Leadership (40%) Team Management: Lead, mentor, and manage a team of 2-3 system engineers, ensuring the highest standards of quality and efficiency. Agile/Kanban Delivery & Metrics: Manage team backlog using Agile/Kanban best practices to establish clear priorities, maximize throughput, and maintain predictable delivery schedules. Track and maintain key operational metrics for monthly leadership reporting and capacity planning. Cross-Functional Partnership: Collaborate with leaders across Service Desk, Enterprise Applications, and DevOps to execute multi-departmental technical initiatives, establish seamless escalation paths, and drive shared operational efficiencies. Vendor Management & Managed Services Oversight: Direct operational and contract management for primary IT infrastructure partners-specifically YellowDog Networks (co-managed office networking, Palo Alto firewalls, switches) and core endpoint/identity vendors (e.g., Okta, JAMF, NinjaOne). Track vendor SLA compliance, oversee change validation protocols, manage contract renewals, and optimize licensing spend. Hands-On Technical Execution (60%) Identity & Access Control (IAM): Architect, deploy, and maintain identity infrastructure across Active Directory (ADUC/GPO), Azure hybrid environments, Okta (SSO, Workflows, SAML, MFA), and Google Workspace (GSuite, Gemini access controls, Vault, GCP,GAM, API integrations) to enforce strict, HIPAA-compliant RBAC and zero-trust access controls. Endpoint & Workspace Systems Engineering: Own the lifecycle, system design, and security of physical and virtual endpoints (Windows and macOS) using NinjaOne, JAMF, PDQ SmartDeploy, WSUS, and AWS WorkSpaces. Modernize legacy deployment workflows into cloud-first solutions. AI-First Automation & Modernization: Actively write and maintain scripts (PowerShell, Bash, Python) using AI-assisted development platforms (e.g., Cursor) to eliminate manual IT toil, automate patch pipelines, and refactor legacy administrative processes. Network Access & Infrastructure Administration: Administer user-facing access policies and services, including Active Directory-integrated Radius Auth, GlobalProtect VPN user provisioning/client software, internal DNS, PKI/Certificate Authorities, AWS FSx / AWS File Gateway local storage, and Cisco voice/Jabber services. Partner with managed network providers (YellowDog Networks) to review, test, and validate global office network and Palo Alto firewall updates. Systemic Security & Vulnerability Remediation: Execute workstation endpoint encryption (BitLocker/JAMF) and proactively remediate endpoint OS and application vulnerabilities in close coordination with Information Security. Complex Cross-System Troubleshooting: Act as a primary technical escalation point. Lead root-cause analysis and resolution for complex, heavily integrated multi-departmental systems to minimize operational downtime. Qualifications Technical Expertise 8+ years of hands-on experience in systems engineering, endpoint management, and identity infrastructure, with at least 2 years in a management or lead capacity. Identity & Directory Services: Deep expertise in Active Directory, GPO, Azure AD Sync, Okta (SAML, Workflows, MFA), and Google Workspace Administration (OU management, Vault,GCP, GAM, security configurations, and user provisioning for enterprise tools like Gemini). Endpoint & VDI: Proven experience managing Windows and macOS environments at scale using JAMF, NinjaOne, PDQ SmartDeploy, and AWS WorkSpaces. Scripting & AI Tooling: Strong proficiency in PowerShell, Bash, Python or similar scripting languages, with demonstrated experience using AI-assisted coding platforms (e.g., Cursor, GitHub Copilot) to accelerate scripting and automation. Network & Storage: Solid understanding of DNS, PKI/Certificate Authorities, AWS FSx, AWS File Gateway, and core networking principles. Leadership & Soft Skills Proven ability to operate effectively as a player-coach on a small team, balancing high-level planning with direct technical execution. Strong commitment to emotional intelligence, transparent communication, and collaborative problem-solving across teams. Experience managing IT projects via Jira/Confluence using Agile or Kanban frameworks. Preferred Qualifications Certifications in relevant technologies (e.g., Okta Certified Administrator, Jamf Certified Admin, AWS Certified Solutions Architect, Microsoft Certified: Identity and Access Administrator). Experience in healthcare or regulated environments subject to HIPAA compliance. Additional Information Competitive compensation Medical, Dental and Vision benefits after a short waiting period 401k matching program Generous paid time off program with an additional company break during the holidays Annual Volunteer Time Off (VTO) and a donation matching program Life Insurance Employee Assistance Program (health & well-being on and off the job) Rewards and Recognition Maternity and Parental Leave Training program and ongoing support throughout your entire Spring Venture Group career Diverse, inclusive & welcoming culture Optional enrollment options include HSA/FSA, AD&D, Spousal/Dependent life insurance, Short Term/Long Term Disability, Travel Assist, and Legal plans Spring Venture Group is an Equal Opportunity Employer Spring Venture Group is an Equal Opportunity Employer
Job Description Job Description POSITION SUMMARY: The Senior Manager, Network Infrastructure & Services is responsible for the strategy, architecture, security, availability, and lifecycle management of all network and connectivity services supporting LBCT's critical business and terminal operations. This position provides leadership and oversight for enterprise networking, telecommunications, wireless infrastructure, operational technology (OT) connectivity, carrier services, network security platforms, and managed service providers. The Senior Manager oversees Cisco networking, Fortinet and Palo Alto security platforms, enterprise wireless infrastructure, network segmentation, carrier services, and managed service provider governance. The role ensures highly available, secure, and resilient network services capable of supporting 24x7 marine terminal operations. The Senior Manager develops technology roadmaps, establishes engineering standards, manages vendor relationships, and drives continuous improvement through automation, analytics, and emerging technologies. This position works closely with Cyber Security, Systems Administration, Operations, and business stakeholders to ensure infrastructure services meet operational and strategic business requirements. ESSENTIAL DUTIES AND RESPONSIBILITIES Maintain a safe and secure working environment while promoting IT Operational excellence throughout the organization. Develop and maintain the terminal's network architecture, standards, technology roadmap, and lifecycle strategy. Architect highly available LAN, WAN, wireless, Internet, data center, cloud, and remote-access connectivity. Design networks for environments requiring extremely high availability and rapid recovery from infrastructure failures. Establish architecture and engineering standards for enterprise and outdoor wireless infrastructure. Establish network segmentation and security architectures separating corporate IT, OT, vendors, Internet-facing systems, and other security zones. Develop standards for switching, routing, firewalls, wireless, IP addressing, DNS/DHCP, network access control, and connectivity services. Evaluate emerging technologies and determine their applicability to terminal operations. Ensure infrastructure capacity supports growth in automation, IoT/OT devices, video, telemetry, mobile equipment, and cloud services. Participate in operational change management to minimize disruption to terminal activities. Provide technical leadership and governance for the terminal's Cisco environment. Maintain configuration, architecture, lifecycle, and resilience standards across the network environment. Lead network-security architecture and operations using technologies including Fortinet and Palo Alto Networks, as applicable. Maintain compliance with industry regulations and standards, including those specific to maritime and port operations. Partner with cybersecurity team to implement Zero Trust principles and strengthen protection of critical IT and operational infrastructure. Assist cyber team with regular security audits and vulnerability assessments. Own the performance and governance of network-related managed service providers, telecommunications carriers, contractors, and technology vendors. Maintain appropriate records of vendor issues, decisions, commitments, and outstanding actions. Enforce and monitor contractual service level agreements (SLAs) with IT vendors and assigned independent contractors. Foster a culture of accountability, technical excellence, continuous improvement, and customer service. With other IT management, contribute to the development and implementation of the IT strategy for the terminal. Perform other related duties as assigned. REQUIRED KNOWLEDGE, SKILLS, AND ABILITIES : Strong managerial, supervisory, and decision-making skills to achieve department and company goals. Excellent interpersonal skills. Ability to interact with a variety of people throughout the corporation. Ability to remain calm and professional during confrontational situations. Effective public speaking and presentation skills. Be able to present and defend a point of view. Possess excellent communication, written, oral, and interpersonal and teamwork skills, communicate constructively and confidently, listen openly, and collaborate well with staff and others in different groups. Ability to relate information from a multitude of sources. Capability to turn theoretical information into practical applications. Convey a professional and positive attitude with action/results orientation to problem solving and elimination of backlogs. Proven ability and experience in exercising good judgment and discretion in handling confidential materials and matters. Possess strong organizational and analytical skills in managing daily, weekly, monthly, quarterly, or annual deadlines, but flexible to a changing list of priorities, sometimes daily. Excellent attention to detail with a high degree of accuracy. Ability to handle multiple demands; prioritize workloads; establish and maintain positive, cooperative, and productive working relationships. Advanced understanding and familiarity with Microsoft: Server, SQL, Office Suite, Azure, Active Directory, and DNS. Advanced understanding of and familiarity with VMWare and Dell EMC storage solutions. Experience with vulnerability scanning solutions. Familiarity with the NIST Cybersecurity Framework, CIS Controls, and relevant cybersecurity frameworks. In-depth knowledge of Routing and switching, TCP/IP, BGP and OSPF, VLANs and VRFs, Wireless networking, Firewalls, VPN technologies, Network segmentation, DNS/DHCP, Network monitoring, and High-availability architecture. Network automation using APIs, scripting, orchestration platforms, or infrastructure as code. Knowledge of marine terminal technology is highly desirable, including Terminal Operating Systems, Gate systems, OCR, RFID, GPS/location technologies, and truck appointment systems (NAVIS experience a plus). Stay informed about emerging technologies and trends and make recommendations for future IT investments. EDUCATION AND/OR EXPERIENCE Bachelor's degree in Information Technology, Computer Science, Engineering, or a related field. Seven (7+) years of progressive experience in network engineering, telecommunications, or infrastructure operations. Five (5+) years of leadership experience managing technical teams or critical infrastructure services. Advanced experience with Cisco networking technologies. Significant experience with enterprise firewall and security technologies, Palo Alto and/or Fortinet preferred. Experience in a marine container terminal or similar industrial environment is preferred Experience working in a unionized environment, a plus. PHYSICAL REQUIREMENTS The ability to work any days or hours, including weekends and holidays. The ability to walk and stand for extended periods of time. The ability to use a computer and keyboard. The ability to sit and work at a desk and/or computer for extended periods of time. The ability to lift 30-50 pounds with or without assistance. The ability to drive a company owned pickup truck. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions of the position. WORKING ENVIRONMENT The work is performed both inside and outside at LBCT sites, various marine terminal locations, in temporary offices and in classrooms. Position is based in Long Beach, CA; work assignments may require travel to other marine terminal sites or travel to other offices. TWIC: You will be required to apply and successfully obtain a TWIC (Transportation Worker's Identification Credential). NOTE: This job description is not all-inclusive. An Employee may perform other related duties as required to meet the ongoing needs of LBCT LLC. LBCT LLC is an equal opportunity employer committed to equity and inclusion in the workplace. Compensation details: 00 Yearly Salary PI8967c5-
11/11/2026
Full time
Job Description Job Description POSITION SUMMARY: The Senior Manager, Network Infrastructure & Services is responsible for the strategy, architecture, security, availability, and lifecycle management of all network and connectivity services supporting LBCT's critical business and terminal operations. This position provides leadership and oversight for enterprise networking, telecommunications, wireless infrastructure, operational technology (OT) connectivity, carrier services, network security platforms, and managed service providers. The Senior Manager oversees Cisco networking, Fortinet and Palo Alto security platforms, enterprise wireless infrastructure, network segmentation, carrier services, and managed service provider governance. The role ensures highly available, secure, and resilient network services capable of supporting 24x7 marine terminal operations. The Senior Manager develops technology roadmaps, establishes engineering standards, manages vendor relationships, and drives continuous improvement through automation, analytics, and emerging technologies. This position works closely with Cyber Security, Systems Administration, Operations, and business stakeholders to ensure infrastructure services meet operational and strategic business requirements. ESSENTIAL DUTIES AND RESPONSIBILITIES Maintain a safe and secure working environment while promoting IT Operational excellence throughout the organization. Develop and maintain the terminal's network architecture, standards, technology roadmap, and lifecycle strategy. Architect highly available LAN, WAN, wireless, Internet, data center, cloud, and remote-access connectivity. Design networks for environments requiring extremely high availability and rapid recovery from infrastructure failures. Establish architecture and engineering standards for enterprise and outdoor wireless infrastructure. Establish network segmentation and security architectures separating corporate IT, OT, vendors, Internet-facing systems, and other security zones. Develop standards for switching, routing, firewalls, wireless, IP addressing, DNS/DHCP, network access control, and connectivity services. Evaluate emerging technologies and determine their applicability to terminal operations. Ensure infrastructure capacity supports growth in automation, IoT/OT devices, video, telemetry, mobile equipment, and cloud services. Participate in operational change management to minimize disruption to terminal activities. Provide technical leadership and governance for the terminal's Cisco environment. Maintain configuration, architecture, lifecycle, and resilience standards across the network environment. Lead network-security architecture and operations using technologies including Fortinet and Palo Alto Networks, as applicable. Maintain compliance with industry regulations and standards, including those specific to maritime and port operations. Partner with cybersecurity team to implement Zero Trust principles and strengthen protection of critical IT and operational infrastructure. Assist cyber team with regular security audits and vulnerability assessments. Own the performance and governance of network-related managed service providers, telecommunications carriers, contractors, and technology vendors. Maintain appropriate records of vendor issues, decisions, commitments, and outstanding actions. Enforce and monitor contractual service level agreements (SLAs) with IT vendors and assigned independent contractors. Foster a culture of accountability, technical excellence, continuous improvement, and customer service. With other IT management, contribute to the development and implementation of the IT strategy for the terminal. Perform other related duties as assigned. REQUIRED KNOWLEDGE, SKILLS, AND ABILITIES : Strong managerial, supervisory, and decision-making skills to achieve department and company goals. Excellent interpersonal skills. Ability to interact with a variety of people throughout the corporation. Ability to remain calm and professional during confrontational situations. Effective public speaking and presentation skills. Be able to present and defend a point of view. Possess excellent communication, written, oral, and interpersonal and teamwork skills, communicate constructively and confidently, listen openly, and collaborate well with staff and others in different groups. Ability to relate information from a multitude of sources. Capability to turn theoretical information into practical applications. Convey a professional and positive attitude with action/results orientation to problem solving and elimination of backlogs. Proven ability and experience in exercising good judgment and discretion in handling confidential materials and matters. Possess strong organizational and analytical skills in managing daily, weekly, monthly, quarterly, or annual deadlines, but flexible to a changing list of priorities, sometimes daily. Excellent attention to detail with a high degree of accuracy. Ability to handle multiple demands; prioritize workloads; establish and maintain positive, cooperative, and productive working relationships. Advanced understanding and familiarity with Microsoft: Server, SQL, Office Suite, Azure, Active Directory, and DNS. Advanced understanding of and familiarity with VMWare and Dell EMC storage solutions. Experience with vulnerability scanning solutions. Familiarity with the NIST Cybersecurity Framework, CIS Controls, and relevant cybersecurity frameworks. In-depth knowledge of Routing and switching, TCP/IP, BGP and OSPF, VLANs and VRFs, Wireless networking, Firewalls, VPN technologies, Network segmentation, DNS/DHCP, Network monitoring, and High-availability architecture. Network automation using APIs, scripting, orchestration platforms, or infrastructure as code. Knowledge of marine terminal technology is highly desirable, including Terminal Operating Systems, Gate systems, OCR, RFID, GPS/location technologies, and truck appointment systems (NAVIS experience a plus). Stay informed about emerging technologies and trends and make recommendations for future IT investments. EDUCATION AND/OR EXPERIENCE Bachelor's degree in Information Technology, Computer Science, Engineering, or a related field. Seven (7+) years of progressive experience in network engineering, telecommunications, or infrastructure operations. Five (5+) years of leadership experience managing technical teams or critical infrastructure services. Advanced experience with Cisco networking technologies. Significant experience with enterprise firewall and security technologies, Palo Alto and/or Fortinet preferred. Experience in a marine container terminal or similar industrial environment is preferred Experience working in a unionized environment, a plus. PHYSICAL REQUIREMENTS The ability to work any days or hours, including weekends and holidays. The ability to walk and stand for extended periods of time. The ability to use a computer and keyboard. The ability to sit and work at a desk and/or computer for extended periods of time. The ability to lift 30-50 pounds with or without assistance. The ability to drive a company owned pickup truck. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions of the position. WORKING ENVIRONMENT The work is performed both inside and outside at LBCT sites, various marine terminal locations, in temporary offices and in classrooms. Position is based in Long Beach, CA; work assignments may require travel to other marine terminal sites or travel to other offices. TWIC: You will be required to apply and successfully obtain a TWIC (Transportation Worker's Identification Credential). NOTE: This job description is not all-inclusive. An Employee may perform other related duties as required to meet the ongoing needs of LBCT LLC. LBCT LLC is an equal opportunity employer committed to equity and inclusion in the workplace. Compensation details: 00 Yearly Salary PI8967c5-
Job Description Senior Systems & Network Engineer is a highly skilled Tier 3 Technician to serve as the top escalation point for our helpdesk and NOC teams. This is an onsite position and requires the employee to work from our Boise, Idaho location. This role is for a deep technical expert who thrives on solving complex, ambiguous problems that Tier 1 and Tier 2 staff cannot resolve. You will own the hardest tickets, drive root cause analysis, and play a key role in mentoring junior staff and improving our technical processes. Key Responsibilities Serve as the final escalation point for complex infrastructure, networking, and systems issues Perform root cause analysis and document findings to reduce repeat incidents Design, implement, and support advanced solutions across networking, server, and cloud environments Lead troubleshooting of enterprise-level issues involving multi-vendor environments Collaborate with vendors and third parties on escalated cases and hardware/software issues Contribute to internal knowledge base articles, runbooks, and technical documentation Mentor Tier 1 and Tier 2 technicians through knowledge transfer and hands-on coaching Participate in architecture and engineering discussions for new client deployments or infrastructure changes Support change management processes and assist with after-hours maintenance windows as needed Required Qualifications 5+ years of hands-on experience in IT infrastructure support or systems/network engineering Advanced troubleshooting skills across the following: Networking: Firewalls (Fortinet, Cisco, Palo Alto, SonicWall), switching, routing, VPNs, VLANs, Wi-Fi Windows Server: Active Directory, Group Policy, DNS, DHCP, DFS, RDS Virtualization: VMware vSphere/ESXi or Microsoft Hyper-V Microsoft 365: Exchange Online, Teams, SharePoint, Intune, Conditional Access Experience with backup and disaster recovery solutions (Veeam, Datto, Acronis, or similar) Strong diagnostic and analytical skills with the ability to work independently on complex problems Excellent written communication for documentation and ticket notes Preferred Qualifications CCNP, MCSE, VCP, or equivalent advanced certifications Experience in an MSP or multi-client support environment Exposure to Azure or AWS (IaaS/PaaS administration, not just SaaS) Scripting/automation experience (PowerShell strongly preferred) Familiarity with SIEM tools, endpoint security, and basic cybersecurity concepts Experience with RMM tools (ConnectWise Automate, NinjaRMM, Kaseya, etc.) Experience leveraging AI tools in a technical context - prompt engineering, AI-assisted troubleshooting, automation with LLM APIs, or deploying/managing local AI models Active homelab practice - candidates who self-host, test new technologies, and experiment outside of work hours bring a level of curiosity and depth that translates directly to this role Other Requirements: Physical demands include sits, squats, bends, lifts and moves during working hours. Responsibilities may change from time to time. Allied Business Solutions reserves the right to add or delete duties and responsibilities at the discretion of ABS and its executives. This job description is intended to describe the general level of work being performed. It is not intended to be all-inclusive.
11/11/2026
Full time
Job Description Senior Systems & Network Engineer is a highly skilled Tier 3 Technician to serve as the top escalation point for our helpdesk and NOC teams. This is an onsite position and requires the employee to work from our Boise, Idaho location. This role is for a deep technical expert who thrives on solving complex, ambiguous problems that Tier 1 and Tier 2 staff cannot resolve. You will own the hardest tickets, drive root cause analysis, and play a key role in mentoring junior staff and improving our technical processes. Key Responsibilities Serve as the final escalation point for complex infrastructure, networking, and systems issues Perform root cause analysis and document findings to reduce repeat incidents Design, implement, and support advanced solutions across networking, server, and cloud environments Lead troubleshooting of enterprise-level issues involving multi-vendor environments Collaborate with vendors and third parties on escalated cases and hardware/software issues Contribute to internal knowledge base articles, runbooks, and technical documentation Mentor Tier 1 and Tier 2 technicians through knowledge transfer and hands-on coaching Participate in architecture and engineering discussions for new client deployments or infrastructure changes Support change management processes and assist with after-hours maintenance windows as needed Required Qualifications 5+ years of hands-on experience in IT infrastructure support or systems/network engineering Advanced troubleshooting skills across the following: Networking: Firewalls (Fortinet, Cisco, Palo Alto, SonicWall), switching, routing, VPNs, VLANs, Wi-Fi Windows Server: Active Directory, Group Policy, DNS, DHCP, DFS, RDS Virtualization: VMware vSphere/ESXi or Microsoft Hyper-V Microsoft 365: Exchange Online, Teams, SharePoint, Intune, Conditional Access Experience with backup and disaster recovery solutions (Veeam, Datto, Acronis, or similar) Strong diagnostic and analytical skills with the ability to work independently on complex problems Excellent written communication for documentation and ticket notes Preferred Qualifications CCNP, MCSE, VCP, or equivalent advanced certifications Experience in an MSP or multi-client support environment Exposure to Azure or AWS (IaaS/PaaS administration, not just SaaS) Scripting/automation experience (PowerShell strongly preferred) Familiarity with SIEM tools, endpoint security, and basic cybersecurity concepts Experience with RMM tools (ConnectWise Automate, NinjaRMM, Kaseya, etc.) Experience leveraging AI tools in a technical context - prompt engineering, AI-assisted troubleshooting, automation with LLM APIs, or deploying/managing local AI models Active homelab practice - candidates who self-host, test new technologies, and experiment outside of work hours bring a level of curiosity and depth that translates directly to this role Other Requirements: Physical demands include sits, squats, bends, lifts and moves during working hours. Responsibilities may change from time to time. Allied Business Solutions reserves the right to add or delete duties and responsibilities at the discretion of ABS and its executives. This job description is intended to describe the general level of work being performed. It is not intended to be all-inclusive.
Leidos is seeking a Computer Network Architect to design and optimize secure, high-performance networks supporting mission-critical national security, health, and engineering programs. In this role, you will architect enterprise and cloud network solutions, select and implement routing, switching, firewall, and VPN technologies, and ensure compliance with rigorous security and reliability standards. You will collaborate closely with cybersecurity, systems, and application teams to modernize infrastructures, troubleshoot complex issues, and drive innovation in a mission-driven, highly collaborative, and flexible work environment. Responsibilities Design and architect secure, scalable enterprise and cloud network solutions Evaluate and select networking technologies, tools, and standards Implement and configure routers, switches, firewalls, and load balancers Optimize network performance, capacity, and resilience for mission-critical systems Ensure network security compliance with federal and industry standards Troubleshoot complex network issues and perform root-cause analysis Collaborate with cybersecurity, systems engineering, and software teams Document architectures, designs, and configurations for stakeholders Support network modernization, migration, and integration initiatives Mentor junior engineers and contribute to technical best practices Required Skills Network architecture design Enterprise routing and switching (e.g., BGP, OSPF, EIGRP) Firewall and VPN configuration (e.g., Cisco, Palo Alto) Network security and segmentation Cloud networking (AWS/Azure/GCP) Load balancing and high availability Network performance monitoring and optimization Network automation and scripting (e.g., Python, Ansible) TCP/IP and network protocols Documentation and network diagramming (e.g., Visio)
11/08/2026
Full time
Leidos is seeking a Computer Network Architect to design and optimize secure, high-performance networks supporting mission-critical national security, health, and engineering programs. In this role, you will architect enterprise and cloud network solutions, select and implement routing, switching, firewall, and VPN technologies, and ensure compliance with rigorous security and reliability standards. You will collaborate closely with cybersecurity, systems, and application teams to modernize infrastructures, troubleshoot complex issues, and drive innovation in a mission-driven, highly collaborative, and flexible work environment. Responsibilities Design and architect secure, scalable enterprise and cloud network solutions Evaluate and select networking technologies, tools, and standards Implement and configure routers, switches, firewalls, and load balancers Optimize network performance, capacity, and resilience for mission-critical systems Ensure network security compliance with federal and industry standards Troubleshoot complex network issues and perform root-cause analysis Collaborate with cybersecurity, systems engineering, and software teams Document architectures, designs, and configurations for stakeholders Support network modernization, migration, and integration initiatives Mentor junior engineers and contribute to technical best practices Required Skills Network architecture design Enterprise routing and switching (e.g., BGP, OSPF, EIGRP) Firewall and VPN configuration (e.g., Cisco, Palo Alto) Network security and segmentation Cloud networking (AWS/Azure/GCP) Load balancing and high availability Network performance monitoring and optimization Network automation and scripting (e.g., Python, Ansible) TCP/IP and network protocols Documentation and network diagramming (e.g., Visio)
Job Description Overview: At Zebra, we are a community of innovators who come together to create new ways of working. United by curiosity and a culture of caring, we develop smart solutions that anticipate our customer's and partner's needs and solve their challenges. Being part of Zebra Nation means you are seen, heard, valued, and respected. Drawing from our unique perspectives, we collaborate to deliver on our purpose. Here you are part of a team pushing boundaries today to redefine the work of tomorrow for organizations, their employees, and those they serve. You'll have opportunities to learn and lead in a forward-thinking environment, defining your path to a fulfilling career while channeling your skills toward causes you care about-locally and globally. Come make an impact every day at Zebra. What We're Looking For: As an Advanced Network Engineer at Zebra Technologies, you will be a vital leader within our Global IT Network Team. In this role, you won't just keep things running-you will serve as the technical spearhead for complex, global network implementations. You will help shape the future of Zebra's infrastructure by establishing network architecture standards and directing the deployment of innovative solutions. If you are passionate about driving enterprise-level IT infrastructure forward, collaborating seamlessly across a global IT landscape, and mentoring junior engineers to reach their full potential, we want you on our team. What You Will Do: Architecture, Design & Strategy Architect the Future: Lead the research, design, and planning of our enterprise network and network security architecture. Evaluate & Innovate: Perform advanced technology evaluations and Proof of Concept (PoC) testing. Develop network security solutions, including financial analysis of alternatives, to meet evolving business needs. Set the Standard: Develop, review, and approve installation requirements across LAN, WAN, VPN, firewalls, routers, and related network devices. M&A Integration: Lead network assessments for Mergers and Acquisitions (M&A). Analyze pre-built environments and develop project timelines to establish standardization. Security, Resilience & Compliance Ensure Business Continuity: Design and implement robust network infrastructure to support critical Disaster Recovery and Cyber Recovery exercises. Strengthen Posture: Continuously review system network security measures and implement necessary enhancements while strictly adhering to change control processes. Maintain Compliance: Ensure all network operations comply with applicable policies, procedures, and industry best practices, while providing Level 3 validation of network security changes. Operations, Support & Leadership Act as the Expert: Serve as the Subject Matter Expert (SME) and provide strategic consulting support to business stakeholders. Level 3 Escalation: Respond to complex Network Security and Operations incidents, providing advanced troubleshooting, thorough post-event analysis, and participating in an on-call rotation. Drive Project Delivery: Independently manage projects, deliverables, and timelines for ongoing system upgrades. Empower the Team: Champion "shift-left" opportunities by producing detailed High-Level Designs (HLD), Low-Level Designs (LLD), standard operating procedures (SOPs), and knowledge base articles. Core Networking, Cloud & Security Expertise Deep Networking Knowledge: Master-level understanding of data networking theory, advanced routing (BGP, OSPF), TCP/IP fundamentals, directory services, and complex LAN/WAN switching topologies. WAN & Cloud Infrastructure: Proven hands-on experience manipulating routing metrics for WAN protocols. Thorough understanding of cloud networks (AWS/Azure/GCP), specifically designing intra- and inter-cloud secure routing utilizing native cloud technologies alongside enterprise firewalls. Advanced Security Foundation: Deep knowledge of security protocols, cryptography, and zero-trust concepts. Strong understanding of how systems are compromised based on known vulnerabilities to proactively secure the network. Leadership & Business Acumen Technical Mentorship: A natural leader who provides clear direction, guides cross-functional teams on standardized technology integration, and leads junior technical staff by example. Global & Customer-Centric Mindset: Demonstrates strong empathy for global cultural differences and a highly customer-centric approach to IT support. Analytical Problem Solving: Top-tier troubleshooting and root-cause analysis skills under pressure, paired with excellent communication skills to consult with cross-functional stakeholders. Minimum Qualifications: Bachelor's degree in Computer Science, Information Technology, Engineering, or a related technical field. Minimum of 8+ years of progressive, proven experience in enterprise-level network engineering, network security, and infrastructure architecture. Demonstrated experience operating within a large, complex, global IT environment. Zscaler Zero Trust Ecosystem: Deep familiarity with Zscaler Internet Access (ZIA), Zscaler Private Access (ZPA), Zscaler Digital Experience (ZDX), and Zscaler Branch Connectors (ZTB). Data Center Automation & Visibility: Hands-on experience utilizing Cisco Nexus Dashboard for centralized fabric management, proactive network monitoring, and operational automation across complex data center environments. Enterprise Wireless & Edge: Proficiency in HPE Mist Wireless, Cisco Meraki, and Cisco Enterprise Wireless technologies. Next-Generation Firewalls: Extensive experience with Palo Alto Firewalls, supported by an active Palo Alto Networks Certified Network Security Engineer (PCNSE) or Administrator (PCNSA) certification to validate deep expertise in designing, deploying, and managing enterprise firewall. Travel Requirements: Willingness and ability to travel up to 10% globally or domestically as needed for major project implementations or M&A integrations.architectures. Preferred Qualifications: CCNP/CCIE (Enterprise and/or Data Center) JNCIP-MistAI Zscaler Digital Transformation Engineer (ZDTE) CISSP or PCNSE Equal Opportunity Employer: Zebra is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability and protected veteran status, or any other basis prohibited by law. If you are an individual with a disability and need assistance in applying for a position, please contact us at . Know Your Rights: - 10/EEOC_KnowYourRights_screen_reader_10_20.pdf Conozca sus Derechos: -_EEOC_KnowYourRightsSp_10_20.pdf We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation at . Pay Range: $108,960.00 - $163,440.00 Annual Incentive Compensation: In addition to base pay, Zebra offers this role the opportunity to earn a performance-based annual cash incentive, at a target equal to 12% of base pay, in accordance with the terms of the applicable incentive plan. Zebra Total Rewards: Zebra Total Rewards includes more than just pay and is structured to meet the needs of our changing global business and evolving talent. We are committed to providing our employees with a benefits program that is comprehensive and competitive - including healthcare, wellness, inclusion networks, and continued learning and development offerings. We offer community service days, in addition to the traditional insurances, compensation, parental leave, employee assistance program and paid time off offerings depending on the country where you work. Salary offered will vary depending on your location, job-related skills, knowledge, and experience. Additionally, all Zebra roles are eligible for cash incentive programs. For example, sales roles have additional opportunity to earn substantial variable compensation tied to quota achievement. In most other roles, the Zebra annual cash incentive program links Company and individual performance together. Some roles may also be eligible for long-term incentive equity awards. Benefits: We understand the importance of work-life balance and wellbeing, which is why we offer flexibility for our teams including: hybrid work, adaptable hours, Summer Flex Fridays, Focus Fridays, and an annual companywide well-being day to promote revitalization and success. Job Posting Statement: To protect candidates from falling victim to online fraudulent activity involving fake job postings and employment offers, please be aware our recruiters will always connect with you email accounts. Applications are only accepted through our applicant tracking system and only accept personal identifying information through that system. Our Talent Acquisition team will not ask for you to provide personal identifying information via e-mail or outside of the system . click apply for full job details
11/06/2026
Full time
Job Description Overview: At Zebra, we are a community of innovators who come together to create new ways of working. United by curiosity and a culture of caring, we develop smart solutions that anticipate our customer's and partner's needs and solve their challenges. Being part of Zebra Nation means you are seen, heard, valued, and respected. Drawing from our unique perspectives, we collaborate to deliver on our purpose. Here you are part of a team pushing boundaries today to redefine the work of tomorrow for organizations, their employees, and those they serve. You'll have opportunities to learn and lead in a forward-thinking environment, defining your path to a fulfilling career while channeling your skills toward causes you care about-locally and globally. Come make an impact every day at Zebra. What We're Looking For: As an Advanced Network Engineer at Zebra Technologies, you will be a vital leader within our Global IT Network Team. In this role, you won't just keep things running-you will serve as the technical spearhead for complex, global network implementations. You will help shape the future of Zebra's infrastructure by establishing network architecture standards and directing the deployment of innovative solutions. If you are passionate about driving enterprise-level IT infrastructure forward, collaborating seamlessly across a global IT landscape, and mentoring junior engineers to reach their full potential, we want you on our team. What You Will Do: Architecture, Design & Strategy Architect the Future: Lead the research, design, and planning of our enterprise network and network security architecture. Evaluate & Innovate: Perform advanced technology evaluations and Proof of Concept (PoC) testing. Develop network security solutions, including financial analysis of alternatives, to meet evolving business needs. Set the Standard: Develop, review, and approve installation requirements across LAN, WAN, VPN, firewalls, routers, and related network devices. M&A Integration: Lead network assessments for Mergers and Acquisitions (M&A). Analyze pre-built environments and develop project timelines to establish standardization. Security, Resilience & Compliance Ensure Business Continuity: Design and implement robust network infrastructure to support critical Disaster Recovery and Cyber Recovery exercises. Strengthen Posture: Continuously review system network security measures and implement necessary enhancements while strictly adhering to change control processes. Maintain Compliance: Ensure all network operations comply with applicable policies, procedures, and industry best practices, while providing Level 3 validation of network security changes. Operations, Support & Leadership Act as the Expert: Serve as the Subject Matter Expert (SME) and provide strategic consulting support to business stakeholders. Level 3 Escalation: Respond to complex Network Security and Operations incidents, providing advanced troubleshooting, thorough post-event analysis, and participating in an on-call rotation. Drive Project Delivery: Independently manage projects, deliverables, and timelines for ongoing system upgrades. Empower the Team: Champion "shift-left" opportunities by producing detailed High-Level Designs (HLD), Low-Level Designs (LLD), standard operating procedures (SOPs), and knowledge base articles. Core Networking, Cloud & Security Expertise Deep Networking Knowledge: Master-level understanding of data networking theory, advanced routing (BGP, OSPF), TCP/IP fundamentals, directory services, and complex LAN/WAN switching topologies. WAN & Cloud Infrastructure: Proven hands-on experience manipulating routing metrics for WAN protocols. Thorough understanding of cloud networks (AWS/Azure/GCP), specifically designing intra- and inter-cloud secure routing utilizing native cloud technologies alongside enterprise firewalls. Advanced Security Foundation: Deep knowledge of security protocols, cryptography, and zero-trust concepts. Strong understanding of how systems are compromised based on known vulnerabilities to proactively secure the network. Leadership & Business Acumen Technical Mentorship: A natural leader who provides clear direction, guides cross-functional teams on standardized technology integration, and leads junior technical staff by example. Global & Customer-Centric Mindset: Demonstrates strong empathy for global cultural differences and a highly customer-centric approach to IT support. Analytical Problem Solving: Top-tier troubleshooting and root-cause analysis skills under pressure, paired with excellent communication skills to consult with cross-functional stakeholders. Minimum Qualifications: Bachelor's degree in Computer Science, Information Technology, Engineering, or a related technical field. Minimum of 8+ years of progressive, proven experience in enterprise-level network engineering, network security, and infrastructure architecture. Demonstrated experience operating within a large, complex, global IT environment. Zscaler Zero Trust Ecosystem: Deep familiarity with Zscaler Internet Access (ZIA), Zscaler Private Access (ZPA), Zscaler Digital Experience (ZDX), and Zscaler Branch Connectors (ZTB). Data Center Automation & Visibility: Hands-on experience utilizing Cisco Nexus Dashboard for centralized fabric management, proactive network monitoring, and operational automation across complex data center environments. Enterprise Wireless & Edge: Proficiency in HPE Mist Wireless, Cisco Meraki, and Cisco Enterprise Wireless technologies. Next-Generation Firewalls: Extensive experience with Palo Alto Firewalls, supported by an active Palo Alto Networks Certified Network Security Engineer (PCNSE) or Administrator (PCNSA) certification to validate deep expertise in designing, deploying, and managing enterprise firewall. Travel Requirements: Willingness and ability to travel up to 10% globally or domestically as needed for major project implementations or M&A integrations.architectures. Preferred Qualifications: CCNP/CCIE (Enterprise and/or Data Center) JNCIP-MistAI Zscaler Digital Transformation Engineer (ZDTE) CISSP or PCNSE Equal Opportunity Employer: Zebra is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability and protected veteran status, or any other basis prohibited by law. If you are an individual with a disability and need assistance in applying for a position, please contact us at . Know Your Rights: - 10/EEOC_KnowYourRights_screen_reader_10_20.pdf Conozca sus Derechos: -_EEOC_KnowYourRightsSp_10_20.pdf We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation at . Pay Range: $108,960.00 - $163,440.00 Annual Incentive Compensation: In addition to base pay, Zebra offers this role the opportunity to earn a performance-based annual cash incentive, at a target equal to 12% of base pay, in accordance with the terms of the applicable incentive plan. Zebra Total Rewards: Zebra Total Rewards includes more than just pay and is structured to meet the needs of our changing global business and evolving talent. We are committed to providing our employees with a benefits program that is comprehensive and competitive - including healthcare, wellness, inclusion networks, and continued learning and development offerings. We offer community service days, in addition to the traditional insurances, compensation, parental leave, employee assistance program and paid time off offerings depending on the country where you work. Salary offered will vary depending on your location, job-related skills, knowledge, and experience. Additionally, all Zebra roles are eligible for cash incentive programs. For example, sales roles have additional opportunity to earn substantial variable compensation tied to quota achievement. In most other roles, the Zebra annual cash incentive program links Company and individual performance together. Some roles may also be eligible for long-term incentive equity awards. Benefits: We understand the importance of work-life balance and wellbeing, which is why we offer flexibility for our teams including: hybrid work, adaptable hours, Summer Flex Fridays, Focus Fridays, and an annual companywide well-being day to promote revitalization and success. Job Posting Statement: To protect candidates from falling victim to online fraudulent activity involving fake job postings and employment offers, please be aware our recruiters will always connect with you email accounts. Applications are only accepted through our applicant tracking system and only accept personal identifying information through that system. Our Talent Acquisition team will not ask for you to provide personal identifying information via e-mail or outside of the system . click apply for full job details
Job Description Job Description In Person Only interview. This job is Hybrid Mechanicsville, VA 23116. Our direct client has an opening for an Senior Network Security Engineer (807471) This position is up to 12 months, with the option of extension, 9120 Lockwood Boulevard Mechanicsville, VA 23116. Please send rates and a resume. Corp to Corp or w2 allowed. Enterprise Networking (Required 8 Years) Enterprise Security (Required 5 Years) Azure Networking (Required 3 Years) WAF/NGFW (Required 3 Years) Supporting environments with 300+ Network Devices (Desired 3 Years) Candidate must have experience in the following areas: Incident response, Security investigations, Log analysis, Threat intelligence, Security monitor (Required) Candidate must have experience with the SIEM products (e.g. Splunk, Microsoft Sentinel) (Required) Candidate must have experience in vulnerability management and remediation tracking as well as vulnerability scanning tools (e.g. Nessus, Tenable, Def Required. Candidate must have experience in the following areas: Active Directory, MFA, Conditional Access, Certificates Required. Candidate must have experience with; SEC530, CIS Benchmarks, NIST CSF, NIST 800-53, Zero Trust principles (Required) Candidate must have experience with the following: Cisco ISE, NAC, 802.1X, RADIUS, TACACS Required. Candidate must have experience with the following products: Palo Alto, F5 Distributed Cloud, Azure WAF, Cisco VPN, Global Protect, F5 BIG-IP (Required) Candidate must have experience working in highly regulated environments and leading technical troubleshooting during outages. (Required) Candidate must have ability to communicate technical issues to technical and executive audiences and an ability to mentor junior engineers. (Required) Candidate should have achieved or ability to achieve the following certifications: Azure Security Engineer (AZ-500), Azure Network Engineer (AZ-700).(Required)
10/07/2026
Full time
Job Description Job Description In Person Only interview. This job is Hybrid Mechanicsville, VA 23116. Our direct client has an opening for an Senior Network Security Engineer (807471) This position is up to 12 months, with the option of extension, 9120 Lockwood Boulevard Mechanicsville, VA 23116. Please send rates and a resume. Corp to Corp or w2 allowed. Enterprise Networking (Required 8 Years) Enterprise Security (Required 5 Years) Azure Networking (Required 3 Years) WAF/NGFW (Required 3 Years) Supporting environments with 300+ Network Devices (Desired 3 Years) Candidate must have experience in the following areas: Incident response, Security investigations, Log analysis, Threat intelligence, Security monitor (Required) Candidate must have experience with the SIEM products (e.g. Splunk, Microsoft Sentinel) (Required) Candidate must have experience in vulnerability management and remediation tracking as well as vulnerability scanning tools (e.g. Nessus, Tenable, Def Required. Candidate must have experience in the following areas: Active Directory, MFA, Conditional Access, Certificates Required. Candidate must have experience with; SEC530, CIS Benchmarks, NIST CSF, NIST 800-53, Zero Trust principles (Required) Candidate must have experience with the following: Cisco ISE, NAC, 802.1X, RADIUS, TACACS Required. Candidate must have experience with the following products: Palo Alto, F5 Distributed Cloud, Azure WAF, Cisco VPN, Global Protect, F5 BIG-IP (Required) Candidate must have experience working in highly regulated environments and leading technical troubleshooting during outages. (Required) Candidate must have ability to communicate technical issues to technical and executive audiences and an ability to mentor junior engineers. (Required) Candidate should have achieved or ability to achieve the following certifications: Azure Security Engineer (AZ-500), Azure Network Engineer (AZ-700).(Required)
Job Description Job Description Job Title: Palo Alto Firewall Engineer Location: Springfield, VA Type: Contract To Hire Compensation: $80/hr. W2 Benefits available Conversion Salary: $150,000 annually plus benefits Work Model: Onsite Security Clearance: Active TS/SCI clearance and the ability to successfully pass and maintain a U.S. Government polygraph Responsibilities Lead the design, requirements analysis, testing, integration, and implementation of secure network architectures centered on the Palo Alto Networks ecosystem. Serve as the lead technical authority for administering, configuring, and troubleshooting Palo Alto Networks Next-Generation Firewalls (NGFWs) across a hybrid enterprise environment. Engineer and implement solutions for customer Change Requests (CRQs); assess impacts on enterprise transport and security activities and provide technically sound recommendations. Serve as the technical representative for assigned projects and coordinate issues with the appropriate owners, organizations, contract leadership, and customer leadership. Manage the full lifecycle of Palo Alto hardware and software, including complex hardware refreshes, PAN-OS upgrades, legacy-platform sustainment, physical troubleshooting, and line-card replacements. Develop, oversee, and maintain configuration-management processes, network architecture diagrams, technical documentation, integration and test plans, and Standard Operating Procedures (SOPs) for Palo Alto security platforms. Use Panorama for centralized policy management, including templates, device groups, inheritance, and consistent configuration across a diverse fleet of physical and virtual firewalls. Configure and maintain advanced security capabilities and profiles, including App-ID, User-ID, Content-ID, SSL Decryption, WildFire, NAT, IPSec VPNs, and threat prevention. Oversee security-incident reporting, documentation, investigation, and corrective-action development. Act as a liaison to contract/customer management and the government Designated Approving Authority (DAA) regarding network-security status, policies, procedures, and risks. Evaluate and report on new and emerging network-security and communications technologies to improve network capacity, performance, reliability, standardization, and security. Provide mentorship and technical oversight to junior engineers and serve as an escalation point for complex troubleshooting. Follow all customer network-security processes and procedures, maintain compliance with Government and QA standards, and ensure service-performance indicators are met or exceeded. Requirements Security Clearance: Active TS/SCI clearance and the ability to successfully pass and maintain a U.S. Government polygraph. A minimum of 7+ years of hands-on experience administering, configuring, and troubleshooting Palo Alto Networks NGFWs in large-scale enterprise/global environments. Active Palo Alto Networks Certified Network Security Engineer (PCNSE) certification. DoD 8140.01 and DoD 8570.01-M IAT Level II compliance (for example, Security+ CE). Ability to obtain and maintain a CSSP Infrastructure Support certification within 120 days of the start date. Deep practical knowledge of legacy Gen 2/Gen 3 Palo Alto hardware, including PA-3000 and PA-5000 series platforms, legacy CLI, hardware troubleshooting, and line-card replacements. Experience deploying and managing modern PAN-OS architectures, including Prisma Access (SASE), Prisma SD-WAN, and VM-Series virtual firewalls in cloud environments such as AWS, Azure, GCP, or private-cloud. Proven expertise with Panorama for centralized policy management, template/device-group inheritance, and configuration deployment across a hybrid firewall fleet. Advanced understanding of BGP, OSPF, IPSec VPNs, NAT, TLS/SSL, mutual TLS (mTLS), HTTP, SAML, OAuth, OCSP revocation, DoD PKI, Kerberos, LDAP, and Active Directory. Experience with F5 technologies, including APM, AFM, and SSL Orchestrator (SSLO), and troubleshooting TLS/SSL handshake/connection issues. Strong network design, engineering, implementation, and troubleshooting skills, including ROM equipment lists and cost estimates. Knowledge of DISA and Intelligence Community security standards and requirements. Excellent interpersonal skills and technical judgment with the ability to work independently and support weekend/evening work if needed. Bachelor's degree in IT, Cybersecurity, Computer Science, or a related field, with additional relevant experience considered in lieu of a degree. Desired Qualifications Active Palo Alto Networks Certified Network Security Consultant (PCNSC) or Prisma Certified SASE Professional (PCSAE). F5 Networks Certified Technology Specialist (CTS). Cisco CCNP, CCVP, CCNA, CCDP, or equivalent. ITIL v3 Foundations and/or ISC2 CISSP Certification. Proficiency in Python and automation tools such as Ansible, Terraform, or Palo Alto XML/REST APIs. Hands-on experience with Cortex XDR or Cortex XSOAR. Experience with Palo Alto Networks Expedition for migration and rule consolidation. Knowledge of Zero Trust Network Access (ZTNA) architectures and additional security platforms (e.g., Juniper SRX, Cisco FTD/ASA). Master's degree in related fields is a plus. System One, and its subsidiaries including Joulé and Mountain Ltd., are leaders in delivering outsourced services and workforce solutions across North America. We help clients get work done more efficiently and economically, without compromising quality. System One not only serves as a valued partner for our clients, but we offer eligible employees health and welfare benefits coverage options including medical, dental, vision, spending accounts, life insurance, voluntary plans, as well as participation in a 401(k) plan. System One is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, age, national origin, disability, family care or medical leave status, genetic information, veteran status, marital status, or any other characteristic protected by applicable federal, state, or local law. Ref: Baltimore
10/07/2026
Full time
Job Description Job Description Job Title: Palo Alto Firewall Engineer Location: Springfield, VA Type: Contract To Hire Compensation: $80/hr. W2 Benefits available Conversion Salary: $150,000 annually plus benefits Work Model: Onsite Security Clearance: Active TS/SCI clearance and the ability to successfully pass and maintain a U.S. Government polygraph Responsibilities Lead the design, requirements analysis, testing, integration, and implementation of secure network architectures centered on the Palo Alto Networks ecosystem. Serve as the lead technical authority for administering, configuring, and troubleshooting Palo Alto Networks Next-Generation Firewalls (NGFWs) across a hybrid enterprise environment. Engineer and implement solutions for customer Change Requests (CRQs); assess impacts on enterprise transport and security activities and provide technically sound recommendations. Serve as the technical representative for assigned projects and coordinate issues with the appropriate owners, organizations, contract leadership, and customer leadership. Manage the full lifecycle of Palo Alto hardware and software, including complex hardware refreshes, PAN-OS upgrades, legacy-platform sustainment, physical troubleshooting, and line-card replacements. Develop, oversee, and maintain configuration-management processes, network architecture diagrams, technical documentation, integration and test plans, and Standard Operating Procedures (SOPs) for Palo Alto security platforms. Use Panorama for centralized policy management, including templates, device groups, inheritance, and consistent configuration across a diverse fleet of physical and virtual firewalls. Configure and maintain advanced security capabilities and profiles, including App-ID, User-ID, Content-ID, SSL Decryption, WildFire, NAT, IPSec VPNs, and threat prevention. Oversee security-incident reporting, documentation, investigation, and corrective-action development. Act as a liaison to contract/customer management and the government Designated Approving Authority (DAA) regarding network-security status, policies, procedures, and risks. Evaluate and report on new and emerging network-security and communications technologies to improve network capacity, performance, reliability, standardization, and security. Provide mentorship and technical oversight to junior engineers and serve as an escalation point for complex troubleshooting. Follow all customer network-security processes and procedures, maintain compliance with Government and QA standards, and ensure service-performance indicators are met or exceeded. Requirements Security Clearance: Active TS/SCI clearance and the ability to successfully pass and maintain a U.S. Government polygraph. A minimum of 7+ years of hands-on experience administering, configuring, and troubleshooting Palo Alto Networks NGFWs in large-scale enterprise/global environments. Active Palo Alto Networks Certified Network Security Engineer (PCNSE) certification. DoD 8140.01 and DoD 8570.01-M IAT Level II compliance (for example, Security+ CE). Ability to obtain and maintain a CSSP Infrastructure Support certification within 120 days of the start date. Deep practical knowledge of legacy Gen 2/Gen 3 Palo Alto hardware, including PA-3000 and PA-5000 series platforms, legacy CLI, hardware troubleshooting, and line-card replacements. Experience deploying and managing modern PAN-OS architectures, including Prisma Access (SASE), Prisma SD-WAN, and VM-Series virtual firewalls in cloud environments such as AWS, Azure, GCP, or private-cloud. Proven expertise with Panorama for centralized policy management, template/device-group inheritance, and configuration deployment across a hybrid firewall fleet. Advanced understanding of BGP, OSPF, IPSec VPNs, NAT, TLS/SSL, mutual TLS (mTLS), HTTP, SAML, OAuth, OCSP revocation, DoD PKI, Kerberos, LDAP, and Active Directory. Experience with F5 technologies, including APM, AFM, and SSL Orchestrator (SSLO), and troubleshooting TLS/SSL handshake/connection issues. Strong network design, engineering, implementation, and troubleshooting skills, including ROM equipment lists and cost estimates. Knowledge of DISA and Intelligence Community security standards and requirements. Excellent interpersonal skills and technical judgment with the ability to work independently and support weekend/evening work if needed. Bachelor's degree in IT, Cybersecurity, Computer Science, or a related field, with additional relevant experience considered in lieu of a degree. Desired Qualifications Active Palo Alto Networks Certified Network Security Consultant (PCNSC) or Prisma Certified SASE Professional (PCSAE). F5 Networks Certified Technology Specialist (CTS). Cisco CCNP, CCVP, CCNA, CCDP, or equivalent. ITIL v3 Foundations and/or ISC2 CISSP Certification. Proficiency in Python and automation tools such as Ansible, Terraform, or Palo Alto XML/REST APIs. Hands-on experience with Cortex XDR or Cortex XSOAR. Experience with Palo Alto Networks Expedition for migration and rule consolidation. Knowledge of Zero Trust Network Access (ZTNA) architectures and additional security platforms (e.g., Juniper SRX, Cisco FTD/ASA). Master's degree in related fields is a plus. System One, and its subsidiaries including Joulé and Mountain Ltd., are leaders in delivering outsourced services and workforce solutions across North America. We help clients get work done more efficiently and economically, without compromising quality. System One not only serves as a valued partner for our clients, but we offer eligible employees health and welfare benefits coverage options including medical, dental, vision, spending accounts, life insurance, voluntary plans, as well as participation in a 401(k) plan. System One is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, age, national origin, disability, family care or medical leave status, genetic information, veteran status, marital status, or any other characteristic protected by applicable federal, state, or local law. Ref: Baltimore
Job Description Job Description Job Title: Palo Alto Firewall Engineer Location: Springfield, VA Type: Contract To Hire Compensation: $80/hr. W2 Benefits available Conversion Salary: $150,000 annually plus benefits Work Model: Onsite Security Clearance: Active TS/SCI clearance and the ability to successfully pass and maintain a U.S. Government polygraph Responsibilities Lead the design, requirements analysis, testing, integration, and implementation of secure network architectures centered on the Palo Alto Networks ecosystem. Serve as the lead technical authority for administering, configuring, and troubleshooting Palo Alto Networks Next-Generation Firewalls (NGFWs) across a hybrid enterprise environment. Engineer and implement solutions for customer Change Requests (CRQs); assess impacts on enterprise transport and security activities and provide technically sound recommendations. Serve as the technical representative for assigned projects and coordinate issues with the appropriate owners, organizations, contract leadership, and customer leadership. Manage the full lifecycle of Palo Alto hardware and software, including complex hardware refreshes, PAN-OS upgrades, legacy-platform sustainment, physical troubleshooting, and line-card replacements. Develop, oversee, and maintain configuration-management processes, network architecture diagrams, technical documentation, integration and test plans, and Standard Operating Procedures (SOPs) for Palo Alto security platforms. Use Panorama for centralized policy management, including templates, device groups, inheritance, and consistent configuration across a diverse fleet of physical and virtual firewalls. Configure and maintain advanced security capabilities and profiles, including App-ID, User-ID, Content-ID, SSL Decryption, WildFire, NAT, IPSec VPNs, and threat prevention. Oversee security-incident reporting, documentation, investigation, and corrective-action development. Act as a liaison to contract/customer management and the government Designated Approving Authority (DAA) regarding network-security status, policies, procedures, and risks. Evaluate and report on new and emerging network-security and communications technologies to improve network capacity, performance, reliability, standardization, and security. Provide mentorship and technical oversight to junior engineers and serve as an escalation point for complex troubleshooting. Follow all customer network-security processes and procedures, maintain compliance with Government and QA standards, and ensure service-performance indicators are met or exceeded. Requirements Security Clearance: Active TS/SCI clearance and the ability to successfully pass and maintain a U.S. Government polygraph. A minimum of 7+ years of hands-on experience administering, configuring, and troubleshooting Palo Alto Networks NGFWs in large-scale enterprise/global environments. Active Palo Alto Networks Certified Network Security Engineer (PCNSE) certification. DoD 8140.01 and DoD 8570.01-M IAT Level II compliance (for example, Security+ CE). Ability to obtain and maintain a CSSP Infrastructure Support certification within 120 days of the start date. Deep practical knowledge of legacy Gen 2/Gen 3 Palo Alto hardware, including PA-3000 and PA-5000 series platforms, legacy CLI, hardware troubleshooting, and line-card replacements. Experience deploying and managing modern PAN-OS architectures, including Prisma Access (SASE), Prisma SD-WAN, and VM-Series virtual firewalls in cloud environments such as AWS, Azure, GCP, or private-cloud. Proven expertise with Panorama for centralized policy management, template/device-group inheritance, and configuration deployment across a hybrid firewall fleet. Advanced understanding of BGP, OSPF, IPSec VPNs, NAT, TLS/SSL, mutual TLS (mTLS), HTTP, SAML, OAuth, OCSP revocation, DoD PKI, Kerberos, LDAP, and Active Directory. Experience with F5 technologies, including APM, AFM, and SSL Orchestrator (SSLO), and troubleshooting TLS/SSL handshake/connection issues. Strong network design, engineering, implementation, and troubleshooting skills, including ROM equipment lists and cost estimates. Knowledge of DISA and Intelligence Community security standards and requirements. Excellent interpersonal skills and technical judgment with the ability to work independently and support weekend/evening work if needed. Bachelor's degree in IT, Cybersecurity, Computer Science, or a related field, with additional relevant experience considered in lieu of a degree. Desired Qualifications Active Palo Alto Networks Certified Network Security Consultant (PCNSC) or Prisma Certified SASE Professional (PCSAE). F5 Networks Certified Technology Specialist (CTS). Cisco CCNP, CCVP, CCNA, CCDP, or equivalent. ITIL v3 Foundations and/or ISC2 CISSP Certification. Proficiency in Python and automation tools such as Ansible, Terraform, or Palo Alto XML/REST APIs. Hands-on experience with Cortex XDR or Cortex XSOAR. Experience with Palo Alto Networks Expedition for migration and rule consolidation. Knowledge of Zero Trust Network Access (ZTNA) architectures and additional security platforms (e.g., Juniper SRX, Cisco FTD/ASA). Master's degree in related fields is a plus. System One, and its subsidiaries including Joulé and Mountain Ltd., are leaders in delivering outsourced services and workforce solutions across North America. We help clients get work done more efficiently and economically, without compromising quality. System One not only serves as a valued partner for our clients, but we offer eligible employees health and welfare benefits coverage options including medical, dental, vision, spending accounts, life insurance, voluntary plans, as well as participation in a 401(k) plan. System One is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, age, national origin, disability, family care or medical leave status, genetic information, veteran status, marital status, or any other characteristic protected by applicable federal, state, or local law. Ref: Baltimore
09/30/2026
Full time
Job Description Job Description Job Title: Palo Alto Firewall Engineer Location: Springfield, VA Type: Contract To Hire Compensation: $80/hr. W2 Benefits available Conversion Salary: $150,000 annually plus benefits Work Model: Onsite Security Clearance: Active TS/SCI clearance and the ability to successfully pass and maintain a U.S. Government polygraph Responsibilities Lead the design, requirements analysis, testing, integration, and implementation of secure network architectures centered on the Palo Alto Networks ecosystem. Serve as the lead technical authority for administering, configuring, and troubleshooting Palo Alto Networks Next-Generation Firewalls (NGFWs) across a hybrid enterprise environment. Engineer and implement solutions for customer Change Requests (CRQs); assess impacts on enterprise transport and security activities and provide technically sound recommendations. Serve as the technical representative for assigned projects and coordinate issues with the appropriate owners, organizations, contract leadership, and customer leadership. Manage the full lifecycle of Palo Alto hardware and software, including complex hardware refreshes, PAN-OS upgrades, legacy-platform sustainment, physical troubleshooting, and line-card replacements. Develop, oversee, and maintain configuration-management processes, network architecture diagrams, technical documentation, integration and test plans, and Standard Operating Procedures (SOPs) for Palo Alto security platforms. Use Panorama for centralized policy management, including templates, device groups, inheritance, and consistent configuration across a diverse fleet of physical and virtual firewalls. Configure and maintain advanced security capabilities and profiles, including App-ID, User-ID, Content-ID, SSL Decryption, WildFire, NAT, IPSec VPNs, and threat prevention. Oversee security-incident reporting, documentation, investigation, and corrective-action development. Act as a liaison to contract/customer management and the government Designated Approving Authority (DAA) regarding network-security status, policies, procedures, and risks. Evaluate and report on new and emerging network-security and communications technologies to improve network capacity, performance, reliability, standardization, and security. Provide mentorship and technical oversight to junior engineers and serve as an escalation point for complex troubleshooting. Follow all customer network-security processes and procedures, maintain compliance with Government and QA standards, and ensure service-performance indicators are met or exceeded. Requirements Security Clearance: Active TS/SCI clearance and the ability to successfully pass and maintain a U.S. Government polygraph. A minimum of 7+ years of hands-on experience administering, configuring, and troubleshooting Palo Alto Networks NGFWs in large-scale enterprise/global environments. Active Palo Alto Networks Certified Network Security Engineer (PCNSE) certification. DoD 8140.01 and DoD 8570.01-M IAT Level II compliance (for example, Security+ CE). Ability to obtain and maintain a CSSP Infrastructure Support certification within 120 days of the start date. Deep practical knowledge of legacy Gen 2/Gen 3 Palo Alto hardware, including PA-3000 and PA-5000 series platforms, legacy CLI, hardware troubleshooting, and line-card replacements. Experience deploying and managing modern PAN-OS architectures, including Prisma Access (SASE), Prisma SD-WAN, and VM-Series virtual firewalls in cloud environments such as AWS, Azure, GCP, or private-cloud. Proven expertise with Panorama for centralized policy management, template/device-group inheritance, and configuration deployment across a hybrid firewall fleet. Advanced understanding of BGP, OSPF, IPSec VPNs, NAT, TLS/SSL, mutual TLS (mTLS), HTTP, SAML, OAuth, OCSP revocation, DoD PKI, Kerberos, LDAP, and Active Directory. Experience with F5 technologies, including APM, AFM, and SSL Orchestrator (SSLO), and troubleshooting TLS/SSL handshake/connection issues. Strong network design, engineering, implementation, and troubleshooting skills, including ROM equipment lists and cost estimates. Knowledge of DISA and Intelligence Community security standards and requirements. Excellent interpersonal skills and technical judgment with the ability to work independently and support weekend/evening work if needed. Bachelor's degree in IT, Cybersecurity, Computer Science, or a related field, with additional relevant experience considered in lieu of a degree. Desired Qualifications Active Palo Alto Networks Certified Network Security Consultant (PCNSC) or Prisma Certified SASE Professional (PCSAE). F5 Networks Certified Technology Specialist (CTS). Cisco CCNP, CCVP, CCNA, CCDP, or equivalent. ITIL v3 Foundations and/or ISC2 CISSP Certification. Proficiency in Python and automation tools such as Ansible, Terraform, or Palo Alto XML/REST APIs. Hands-on experience with Cortex XDR or Cortex XSOAR. Experience with Palo Alto Networks Expedition for migration and rule consolidation. Knowledge of Zero Trust Network Access (ZTNA) architectures and additional security platforms (e.g., Juniper SRX, Cisco FTD/ASA). Master's degree in related fields is a plus. System One, and its subsidiaries including Joulé and Mountain Ltd., are leaders in delivering outsourced services and workforce solutions across North America. We help clients get work done more efficiently and economically, without compromising quality. System One not only serves as a valued partner for our clients, but we offer eligible employees health and welfare benefits coverage options including medical, dental, vision, spending accounts, life insurance, voluntary plans, as well as participation in a 401(k) plan. System One is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, age, national origin, disability, family care or medical leave status, genetic information, veteran status, marital status, or any other characteristic protected by applicable federal, state, or local law. Ref: Baltimore
Job Description Job Description In Person Only interview. This job is Hybrid Mechanicsville, VA 23116 Our direct client has an opening for an Senior Network Security Engineer (807471). This position is up to 12 months, with the option of extension, 9120 Lockwood Boulevard Mechanicsville, VA 23116. Please send rates and a resume. Corp to Corp or w2 allowed. Requirements: Enterprise Networking - Required 8 Years. Enterprise Security - Required 5 Years. Azure Networking - Required 3 Years. WAF/NGFW - Required 3 Years. Supporting environments with 300+ Network Devices - Desired 3 Years. Candidate must have experience in the following areas: Incident response, Security investigations, Log analysis, Threat intelligence, Security monitor - Required. Candidate must have experience with the SIEM products (e.g. Splunk, Microsoft Sentinel) - Required. Candidate must have experience in vulnerability management and remediation tracking as well as vulnerability scanning tools (e.g. Nessus, Tenable, Def - Required. Candidate must have experience in the following areas: Active Directory, MFA, Conditional Access, Certificates - Required. Candidate must have experience with; SEC530, CIS Benchmarks, NIST CSF, NIST 800-53, Zero Trust principles - Required. Candidate must have experience with the following: Cisco ISE, NAC, 802.1X, RADIUS, TACACS - Required. Candidate must have experience with the following products: Palo Alto, F5 Distributed Cloud, Azure WAF, Cisco VPN, Global Protect, F5 BIG-IP - Required. Candidate must have experience working in highly regulated environments and leading technical troubleshooting during outages - Required. Candidate must have ability to communicate technical issues to technical and executive audiences and an ability to mentor junior engineers - Required. Candidate should have achieved or ability to achieve the following certifications: Azure Security Engineer (AZ-500), Azure Network Engineer (AZ-700) - Required.
09/30/2026
Full time
Job Description Job Description In Person Only interview. This job is Hybrid Mechanicsville, VA 23116 Our direct client has an opening for an Senior Network Security Engineer (807471). This position is up to 12 months, with the option of extension, 9120 Lockwood Boulevard Mechanicsville, VA 23116. Please send rates and a resume. Corp to Corp or w2 allowed. Requirements: Enterprise Networking - Required 8 Years. Enterprise Security - Required 5 Years. Azure Networking - Required 3 Years. WAF/NGFW - Required 3 Years. Supporting environments with 300+ Network Devices - Desired 3 Years. Candidate must have experience in the following areas: Incident response, Security investigations, Log analysis, Threat intelligence, Security monitor - Required. Candidate must have experience with the SIEM products (e.g. Splunk, Microsoft Sentinel) - Required. Candidate must have experience in vulnerability management and remediation tracking as well as vulnerability scanning tools (e.g. Nessus, Tenable, Def - Required. Candidate must have experience in the following areas: Active Directory, MFA, Conditional Access, Certificates - Required. Candidate must have experience with; SEC530, CIS Benchmarks, NIST CSF, NIST 800-53, Zero Trust principles - Required. Candidate must have experience with the following: Cisco ISE, NAC, 802.1X, RADIUS, TACACS - Required. Candidate must have experience with the following products: Palo Alto, F5 Distributed Cloud, Azure WAF, Cisco VPN, Global Protect, F5 BIG-IP - Required. Candidate must have experience working in highly regulated environments and leading technical troubleshooting during outages - Required. Candidate must have ability to communicate technical issues to technical and executive audiences and an ability to mentor junior engineers - Required. Candidate should have achieved or ability to achieve the following certifications: Azure Security Engineer (AZ-500), Azure Network Engineer (AZ-700) - Required.
Job Description Job Description Palo Alto Firewall Engineer / SME (PCNSE) Cyber Security Engineering Specialist III - Firewall Services Location: Springfield, VA - on site Time Type: Full time, Exempt Clearance Required to Start: Active TS/SCI (U.S. citizenship required) Additional Requirement: Must be able to obtain and maintain a U.S. Government polygraph Travel: Up to 15%, local and CONUS Salary Range: $117,000 - $128,000 Own the Palo Alto estate - legacy iron through Prisma and Panorama. RISA is hiring a Palo Alto SME to be the focal point for every Palo Alto task, operation, and project on the Network Security Services team supporting an Intelligence Community customer. The work spans both ends of the estate: PA-3000 and PA-5000 hardware refreshes and legacy CLI on one side, Prisma Access, VM-Series, and Cortex on the other. You will talk to the owner here, not a recruiting queue. What You Will Do Serve as the lead technical authority for administering, configuring, and troubleshooting Palo Alto NGFWs across a hybrid enterprise. Lead the design, analysis, testing, and implementation of secure network architectures on the Palo Alto stack. Manage the full hardware and software lifecycle, including complex refreshes and PAN-OS upgrades on legacy platforms. Run Panorama for centralized policy management across a fleet of physical and virtual firewalls. Configure master-level security profiles - App-ID, User-ID, Content-ID, SSL Decryption, and WildFire. Own configuration management processes and SOPs for all Palo Alto platforms. Mentor junior engineers and act as the escalation point for complex troubleshooting. Liaise with contract, customer, and government DAA on network security status, policies, and procedures. What You'll Bring S. citizenship and an active TS/SCI. Ability to successfully obtain and maintain a U.S. Government polygraph. Education and experience, per the contract labor category criteria: Bachelor's degree in a field applicable to the position plus 6 years of relevant experience. Equivalents accepted - Master's plus 4, Associate's plus 8, or High School diploma/GED plus 10. 7+ years hands-on administering, configuring, and troubleshooting Palo Alto NGFWs in large-scale enterprise or global environments. Active PCNSE certification. DoD 8140.01 and 8570.01-M IAT Level II (e.g. Security+ CE), and CSSP Infrastructure Support within 120 days of start. Deep practical knowledge of legacy Gen 2/Gen 3 hardware - PA-3000 and PA-5000 series, legacy CLI, physical troubleshooting, line-card replacement. Prisma Access (SASE), Prisma SD-WAN, and VM-Series in AWS, Azure, or GCP. Panorama template and device-group inheritance across a hybrid fleet. Advanced BGP, OSPF, IPSec VPN, and NAT. Nice to Have PCNSC or Prisma Certified SASE Professional (PCSAE). Python, plus firewall automation with Ansible, Terraform, or the Palo Alto XML/REST APIs. Cortex XDR or XSOAR; Expedition for legacy rule migration to App-ID policy. Zero Trust Network Access architecture; F5 (APM, AFM), Juniper SRX, or Cisco FTD/ASA. About RISA Rolston Information Systems Assurance (RISA) is a Service-Disabled Veteran-Owned Small Business that has supported federal defense and intelligence cybersecurity missions for more than seventeen years. We are small on purpose: direct access to leadership, a real say in how the work gets done, and none of the layers that slow large primes down. Benefits Medical, dental, and vision insurance; 401(k) and Roth; Paid Time Off; and 11 paid Federal Holidays. RISA is an Equal Opportunity Employer. Upon receiving an offer of employment, all applicants will be required to do a background check, including a criminal record check and employment/education verification.
09/30/2026
Full time
Job Description Job Description Palo Alto Firewall Engineer / SME (PCNSE) Cyber Security Engineering Specialist III - Firewall Services Location: Springfield, VA - on site Time Type: Full time, Exempt Clearance Required to Start: Active TS/SCI (U.S. citizenship required) Additional Requirement: Must be able to obtain and maintain a U.S. Government polygraph Travel: Up to 15%, local and CONUS Salary Range: $117,000 - $128,000 Own the Palo Alto estate - legacy iron through Prisma and Panorama. RISA is hiring a Palo Alto SME to be the focal point for every Palo Alto task, operation, and project on the Network Security Services team supporting an Intelligence Community customer. The work spans both ends of the estate: PA-3000 and PA-5000 hardware refreshes and legacy CLI on one side, Prisma Access, VM-Series, and Cortex on the other. You will talk to the owner here, not a recruiting queue. What You Will Do Serve as the lead technical authority for administering, configuring, and troubleshooting Palo Alto NGFWs across a hybrid enterprise. Lead the design, analysis, testing, and implementation of secure network architectures on the Palo Alto stack. Manage the full hardware and software lifecycle, including complex refreshes and PAN-OS upgrades on legacy platforms. Run Panorama for centralized policy management across a fleet of physical and virtual firewalls. Configure master-level security profiles - App-ID, User-ID, Content-ID, SSL Decryption, and WildFire. Own configuration management processes and SOPs for all Palo Alto platforms. Mentor junior engineers and act as the escalation point for complex troubleshooting. Liaise with contract, customer, and government DAA on network security status, policies, and procedures. What You'll Bring S. citizenship and an active TS/SCI. Ability to successfully obtain and maintain a U.S. Government polygraph. Education and experience, per the contract labor category criteria: Bachelor's degree in a field applicable to the position plus 6 years of relevant experience. Equivalents accepted - Master's plus 4, Associate's plus 8, or High School diploma/GED plus 10. 7+ years hands-on administering, configuring, and troubleshooting Palo Alto NGFWs in large-scale enterprise or global environments. Active PCNSE certification. DoD 8140.01 and 8570.01-M IAT Level II (e.g. Security+ CE), and CSSP Infrastructure Support within 120 days of start. Deep practical knowledge of legacy Gen 2/Gen 3 hardware - PA-3000 and PA-5000 series, legacy CLI, physical troubleshooting, line-card replacement. Prisma Access (SASE), Prisma SD-WAN, and VM-Series in AWS, Azure, or GCP. Panorama template and device-group inheritance across a hybrid fleet. Advanced BGP, OSPF, IPSec VPN, and NAT. Nice to Have PCNSC or Prisma Certified SASE Professional (PCSAE). Python, plus firewall automation with Ansible, Terraform, or the Palo Alto XML/REST APIs. Cortex XDR or XSOAR; Expedition for legacy rule migration to App-ID policy. Zero Trust Network Access architecture; F5 (APM, AFM), Juniper SRX, or Cisco FTD/ASA. About RISA Rolston Information Systems Assurance (RISA) is a Service-Disabled Veteran-Owned Small Business that has supported federal defense and intelligence cybersecurity missions for more than seventeen years. We are small on purpose: direct access to leadership, a real say in how the work gets done, and none of the layers that slow large primes down. Benefits Medical, dental, and vision insurance; 401(k) and Roth; Paid Time Off; and 11 paid Federal Holidays. RISA is an Equal Opportunity Employer. Upon receiving an offer of employment, all applicants will be required to do a background check, including a criminal record check and employment/education verification.
Job Description Job Description Overview Join a team where innovation meets mission. Our AI, cloud, cyber, and modernization solutions save agencies thousands of hours, safeguard national security, and strengthen health and humanitarian missions worldwide. With more than 1,700+ team members, 1,500+ AI & data experts, and 100+ prime contracts, we deliver at scale and with purpose. We've been recognized as a Top Workplace by The Washington Post for six consecutive years and named to the Inc. 5000 list of Fastest-Growing Private Companies in 13 of the past 14 years. Credence is a welcoming environment for those looking to grow and make a meaningful impact. We encourage employees to push boundaries and help solve critical, world-changing federal challenges. Position Summary Credence has an immediate opening for a Network Security Engineer to join our internal IT team. This individual will own enterprise network and security infrastructure across physical and cloud-hosted environments, administer multi-vendor firewalls, and maintain compliance-aligned controls within a CMMC Level 2 and SOC 2 audit environment. The role carries meaningful responsibility for SSP accuracy, ISSO support functions, and GCP organization-level governance. The ideal candidate combines deep network security expertise with documentation discipline and a proactive, compliance-first mindset Responsibilities:Network Infrastructure & Operations Provide technical ownership of the corporate WAN, LAN, and wireless infrastructure, including planning, implementation, expansion, and lifecycle management. Monitor and maintain network performance and reliability, ensuring a minimum of 99% uptime for corporate systems, phone systems, and connectivity. Configure and manage routing, switching, firewalls, and VPNs across Palo Alto NGFW (HQ and branch), Palo Alto VM-Series (AWS Commercial), and FortiGate VM (Azure Government). Serve as primary administrator across all firewall platforms, including policy management, rule additions and modifications, allow-list maintenance, and configuration backups; maintain privileged access under a documented change-controlled process. Oversee network configuration management and backups to ensure recoverability and business continuity. Analyze and resolve escalated Tier 2+ network support tickets. Administer enterprise wireless infrastructure across multiple vendor platforms including Cisco, Aruba, and Ubiquiti; manage access point provisioning Security & Compliance Identify, assess, and mitigate network vulnerabilities through proactive monitoring and remediation. Implement and manage network security controls including firewalls, intrusion detection/prevention systems, antivirus, and secure access solutions. Collaborate with Systems Administrators on vulnerability scanning, patch management, and remediation efforts (e.g., Nessus scan results, OS hardening). Support audit readiness and compliance for CMMC Level 2 and SOC 2, including maintaining network-layer controls in the System Security Plan (SSP), providing firewall and network evidence for assessments, and contributing to ISSO functions as needed. Coordinate firewall rule changes and network modifications through a documented change management process, maintaining an audit-ready record of all changes for SOC 2 and CMMC assessment cycles. Collaboration & Support Work in coordination with Systems and Security administrators to ensure smooth systems and network integration across on-prem and cloud environments. Provide training, documentation, and knowledge sharing to IT staff on new network technologies and processes. Assist in disaster recovery planning and implementation of secure, redundant connectivity solutions. Write and maintain technical documentation, including network diagrams, cabling layouts, and internal knowledge base articles. Contribute to internal IT automation and tooling initiatives, including scripting, infrastructure-as-code, and network-layer input on expanding internal platforms and dashboards. Cloud Infrastructure & GCP Governance Serve as the GCP organization owner, maintaining folder hierarchy, org policies, IAM governance, and network configurations across all projects and access boundaries. Administer cloud-hosted network infrastructure including Palo Alto VM-Series in AWS Commercial and FortiGate VM in Azure Government; design and maintain hybrid connectivity patterns across cloud environments. Support GCP cloud networking operations including Cloud NCC hub-and-spoke architecture, HA-VPN with BGP over IKEv2, Cloud Router, and Cloud NAT. Requirements Must be a U.S. Citizenship Bachelor's degree in Computer Science, Information Technology, or a related field (or equivalent experience). Must have a minimum of 5+ years of hands-on working experience in network engineering, IT administration, or a related technical role. Must have a strong knowledge of Windows operating systems and enterprise networking fundamentals. Hands-on experience with enterprise firewall administration; Palo Alto NGFW experience and Cisco or equivalent routing and switching experience required. Must be proficient in managing network security tools (firewalls, IDS/IPS, VPNs, antivirus). Must be familiar with configuration management, monitoring, and documentation tools. Must have 5+years of demonstrated ability to maintain and update network security documentation including firewall rule baselines, network diagrams, and SSP network control contributions. Must have the ability to troubleshoot complex issues and communicate effectively with both technical and non-technical staff. Preferred Qualifications Certifications such as Palo Alto PCNSE, FortiGate NSE 4 or higher, CCNA, CCNP, Security+, or equivalent. FortiGate experience, including FortiGate VM in Azure Government, preferred; candidates with strong enterprise firewall experience may ramp up on FortiGate with internal support. Experience supporting Microsoft 365, Azure Government (GCC High), AWS Commercial, and GCP environments; familiarity with compliance boundaries specific to Azure Gov and GCC High preferred. Familiarity with VoIP, secure mail flow, and endpoint management integration. Experience contributing to IT/security-related project initiatives. Prior experience in an ISSO or ISSO support role, or familiarity with SSP documentation and NIST 800-171 network control mapping. Experience administering cloud-hosted firewall VMs (Palo Alto VM-Series or FortiGate VM) in AWS or Azure environments. Experience with network monitoring and management platforms such as PRTG Network Monitor, network documentation tools such as NetBox, and network automation and configuration management tools such as Ansible. Experience with Workload Identity Federation (WIF) and OIDC-based service account authentication in GCP; ability to audit and migrate from key-based service accounts. GCP Professional Cloud Network Engineer certification or equivalent demonstrated experience. Familiar with GCP organization-level governance including IAM, org policies, and folder hierarchy. Experience in a federal contractor environment or familiarity with government compliance frameworks (CMMC, FedRAMP) preferred. Comfort with scripting languages (Python, Bash) or infrastructure automation tools for network configuration and operational tasks. Salary Range: $130,000.00 to $155,000.00 annually. Actual compensation will be determined based on the selected candidate's experience, education, skills, and overall qualifications. Please join us, as together we build a better world one mission at a time powered by Technology and its People! Benefits Health Care Plan (Medical, Dental & Vision) Retirement Plan (401k, IRA) Life Insurance (Basic, Voluntary & AD&D) Paid Time Off (Vacation, Sick & Public Holidays) Family Leave (Maternity, Paternity) Short Term & Long Term Disability Training & Development Wellness Resources
09/29/2026
Full time
Job Description Job Description Overview Join a team where innovation meets mission. Our AI, cloud, cyber, and modernization solutions save agencies thousands of hours, safeguard national security, and strengthen health and humanitarian missions worldwide. With more than 1,700+ team members, 1,500+ AI & data experts, and 100+ prime contracts, we deliver at scale and with purpose. We've been recognized as a Top Workplace by The Washington Post for six consecutive years and named to the Inc. 5000 list of Fastest-Growing Private Companies in 13 of the past 14 years. Credence is a welcoming environment for those looking to grow and make a meaningful impact. We encourage employees to push boundaries and help solve critical, world-changing federal challenges. Position Summary Credence has an immediate opening for a Network Security Engineer to join our internal IT team. This individual will own enterprise network and security infrastructure across physical and cloud-hosted environments, administer multi-vendor firewalls, and maintain compliance-aligned controls within a CMMC Level 2 and SOC 2 audit environment. The role carries meaningful responsibility for SSP accuracy, ISSO support functions, and GCP organization-level governance. The ideal candidate combines deep network security expertise with documentation discipline and a proactive, compliance-first mindset Responsibilities:Network Infrastructure & Operations Provide technical ownership of the corporate WAN, LAN, and wireless infrastructure, including planning, implementation, expansion, and lifecycle management. Monitor and maintain network performance and reliability, ensuring a minimum of 99% uptime for corporate systems, phone systems, and connectivity. Configure and manage routing, switching, firewalls, and VPNs across Palo Alto NGFW (HQ and branch), Palo Alto VM-Series (AWS Commercial), and FortiGate VM (Azure Government). Serve as primary administrator across all firewall platforms, including policy management, rule additions and modifications, allow-list maintenance, and configuration backups; maintain privileged access under a documented change-controlled process. Oversee network configuration management and backups to ensure recoverability and business continuity. Analyze and resolve escalated Tier 2+ network support tickets. Administer enterprise wireless infrastructure across multiple vendor platforms including Cisco, Aruba, and Ubiquiti; manage access point provisioning Security & Compliance Identify, assess, and mitigate network vulnerabilities through proactive monitoring and remediation. Implement and manage network security controls including firewalls, intrusion detection/prevention systems, antivirus, and secure access solutions. Collaborate with Systems Administrators on vulnerability scanning, patch management, and remediation efforts (e.g., Nessus scan results, OS hardening). Support audit readiness and compliance for CMMC Level 2 and SOC 2, including maintaining network-layer controls in the System Security Plan (SSP), providing firewall and network evidence for assessments, and contributing to ISSO functions as needed. Coordinate firewall rule changes and network modifications through a documented change management process, maintaining an audit-ready record of all changes for SOC 2 and CMMC assessment cycles. Collaboration & Support Work in coordination with Systems and Security administrators to ensure smooth systems and network integration across on-prem and cloud environments. Provide training, documentation, and knowledge sharing to IT staff on new network technologies and processes. Assist in disaster recovery planning and implementation of secure, redundant connectivity solutions. Write and maintain technical documentation, including network diagrams, cabling layouts, and internal knowledge base articles. Contribute to internal IT automation and tooling initiatives, including scripting, infrastructure-as-code, and network-layer input on expanding internal platforms and dashboards. Cloud Infrastructure & GCP Governance Serve as the GCP organization owner, maintaining folder hierarchy, org policies, IAM governance, and network configurations across all projects and access boundaries. Administer cloud-hosted network infrastructure including Palo Alto VM-Series in AWS Commercial and FortiGate VM in Azure Government; design and maintain hybrid connectivity patterns across cloud environments. Support GCP cloud networking operations including Cloud NCC hub-and-spoke architecture, HA-VPN with BGP over IKEv2, Cloud Router, and Cloud NAT. Requirements Must be a U.S. Citizenship Bachelor's degree in Computer Science, Information Technology, or a related field (or equivalent experience). Must have a minimum of 5+ years of hands-on working experience in network engineering, IT administration, or a related technical role. Must have a strong knowledge of Windows operating systems and enterprise networking fundamentals. Hands-on experience with enterprise firewall administration; Palo Alto NGFW experience and Cisco or equivalent routing and switching experience required. Must be proficient in managing network security tools (firewalls, IDS/IPS, VPNs, antivirus). Must be familiar with configuration management, monitoring, and documentation tools. Must have 5+years of demonstrated ability to maintain and update network security documentation including firewall rule baselines, network diagrams, and SSP network control contributions. Must have the ability to troubleshoot complex issues and communicate effectively with both technical and non-technical staff. Preferred Qualifications Certifications such as Palo Alto PCNSE, FortiGate NSE 4 or higher, CCNA, CCNP, Security+, or equivalent. FortiGate experience, including FortiGate VM in Azure Government, preferred; candidates with strong enterprise firewall experience may ramp up on FortiGate with internal support. Experience supporting Microsoft 365, Azure Government (GCC High), AWS Commercial, and GCP environments; familiarity with compliance boundaries specific to Azure Gov and GCC High preferred. Familiarity with VoIP, secure mail flow, and endpoint management integration. Experience contributing to IT/security-related project initiatives. Prior experience in an ISSO or ISSO support role, or familiarity with SSP documentation and NIST 800-171 network control mapping. Experience administering cloud-hosted firewall VMs (Palo Alto VM-Series or FortiGate VM) in AWS or Azure environments. Experience with network monitoring and management platforms such as PRTG Network Monitor, network documentation tools such as NetBox, and network automation and configuration management tools such as Ansible. Experience with Workload Identity Federation (WIF) and OIDC-based service account authentication in GCP; ability to audit and migrate from key-based service accounts. GCP Professional Cloud Network Engineer certification or equivalent demonstrated experience. Familiar with GCP organization-level governance including IAM, org policies, and folder hierarchy. Experience in a federal contractor environment or familiarity with government compliance frameworks (CMMC, FedRAMP) preferred. Comfort with scripting languages (Python, Bash) or infrastructure automation tools for network configuration and operational tasks. Salary Range: $130,000.00 to $155,000.00 annually. Actual compensation will be determined based on the selected candidate's experience, education, skills, and overall qualifications. Please join us, as together we build a better world one mission at a time powered by Technology and its People! Benefits Health Care Plan (Medical, Dental & Vision) Retirement Plan (401k, IRA) Life Insurance (Basic, Voluntary & AD&D) Paid Time Off (Vacation, Sick & Public Holidays) Family Leave (Maternity, Paternity) Short Term & Long Term Disability Training & Development Wellness Resources
Job Description Job Description In Person Only interview. This job is Hybrid Mechanicsville, VA 23116 Our direct client has an opening for an Senior Network Security Engineer (807471) This position is up to 12 months, with the option of extension, 9120 Lockwood Boulevard Mechanicsville, VA 23116 Please send rates and a resume. Corp to Corp or w2 allowed. Enterprise Networking Required 8 Years Enterprise Security Required 5 Years Azure Networking Required 3 Years WAF/NGFW Required 3 Years Supporting environments with 300+ Network Devices Desired 3 Years Candidate must have experience in the following areas: Incident response, Security investigations, Log analysis, Threat intelligence, Security monitor Required Candidate must have experience with the SIEM products (e.g. Splunk, Microsoft Sentinel) Required Candidate must have experience in vulnerability management and remediation tracking as well as vulnerability scanning tools (e.g. Nessus, Tenable, Def Required Candidate must have experience in the following areas: Active Directory, MFA, Conditional Access, Certificates Required Candidate must have experience with; SEC530, CIS Benchmarks, NIST CSF, NIST 800-53, Zero Trust principles Required Candidate must have experience with the following: Cisco ISE, NAC, 802.1X, RADIUS, TACACS Required Candidate must have experience with the following products: Palo Alto, F5 Distributed Cloud, Azure WAF, Cisco VPN, Global Protect, F5 BIG-IP Required Candidate must have experience working in highly regulated environments and leading technical troubleshooting during outages Required Candidate must have ability to communicate technical issues to technical and executive audiences and an ability to mentor junior engineers. Required Candidate should have achieved or ability to achieve the following certifications: Azure Security Engineer (AZ-500), Azure Network Engineer (AZ-700), Required
09/28/2026
Full time
Job Description Job Description In Person Only interview. This job is Hybrid Mechanicsville, VA 23116 Our direct client has an opening for an Senior Network Security Engineer (807471) This position is up to 12 months, with the option of extension, 9120 Lockwood Boulevard Mechanicsville, VA 23116 Please send rates and a resume. Corp to Corp or w2 allowed. Enterprise Networking Required 8 Years Enterprise Security Required 5 Years Azure Networking Required 3 Years WAF/NGFW Required 3 Years Supporting environments with 300+ Network Devices Desired 3 Years Candidate must have experience in the following areas: Incident response, Security investigations, Log analysis, Threat intelligence, Security monitor Required Candidate must have experience with the SIEM products (e.g. Splunk, Microsoft Sentinel) Required Candidate must have experience in vulnerability management and remediation tracking as well as vulnerability scanning tools (e.g. Nessus, Tenable, Def Required Candidate must have experience in the following areas: Active Directory, MFA, Conditional Access, Certificates Required Candidate must have experience with; SEC530, CIS Benchmarks, NIST CSF, NIST 800-53, Zero Trust principles Required Candidate must have experience with the following: Cisco ISE, NAC, 802.1X, RADIUS, TACACS Required Candidate must have experience with the following products: Palo Alto, F5 Distributed Cloud, Azure WAF, Cisco VPN, Global Protect, F5 BIG-IP Required Candidate must have experience working in highly regulated environments and leading technical troubleshooting during outages Required Candidate must have ability to communicate technical issues to technical and executive audiences and an ability to mentor junior engineers. Required Candidate should have achieved or ability to achieve the following certifications: Azure Security Engineer (AZ-500), Azure Network Engineer (AZ-700), Required
Job Description Job Description The Elevator Pitch Are you ready to own the network and cybersecurity backbone of a company that's redefining security technology? Do you thrive at the intersection of network engineering, cybersecurity operations, and compliance-where your work directly reduces risk and keeps the business resilient against an ever-changing threat landscape? Evolv is seeking a Network & Cybersecurity Engineer to design, implement, and defend our network infrastructure and security tooling. You'll be the technical owner of Evolv's network and security posture-from firewalls and access control to identity governance and threat detection-reporting to the Senior Director of Cybersecurity & Technology. This is a pivotal role in maturing Evolv's security program to meet the evolving demands of the business and our growing compliance obligations. You'll partner closely with the Systems Engineer and the rest of the IT team, and serve as the subject matter expert on networking, enterprise cybersecurity, and compliance tooling. If you're energized by staying ahead of emerging threats and building durable, well-governed security controls, this role is for you. Success in the Role: What are performance outcomes over the first 6-12 months you will work toward completing? In the first 30 days, you will: Get to know the IT and security team and the tools/platforms currently in use Start building relationships with key stakeholders across the company, especially R&D and Legal/Compliance Learn Evolv's compliance commitments and ongoing authorization efforts, and how best to support them Gain familiarity with the current network/security toolstack: firewalls (Palo Alto), switching (Cisco/Meraki), NAC, VPN/ZTNA, identity platforms (Okta, Entra ID), SIEM/EDR/DLP tooling, and the MDR relationship Within 3 months, you will: Begin implementing or improving network and security controls that measurably reduce risk Build trust-based relationships with peers in IT and stakeholders across business units Become the established subject matter expert on network security and compliance tooling at Evolv Take ownership of the MDR relationship and escalated detection response By the end of the first year, you will: Be recognized as the trusted subject matter expert across network infrastructure, and security operations Have driven measurable improvements to Evolv's security posture and compliance readiness Successfully supported compliance requirements and audit readiness, partnering closely with Legal/Compliance and R&D Documented network and security architecture, processes, and runbooks that reduce single points of failure Be seen as the go-to resource for network security questions, escalations, and best-practice guidance The Work: What type of work will you be doing? What assignments, requirements, or skills will you be performing on a regular basis? Infrastructure, Security & Compliance: Design, implement, and maintain network infrastructure: firewalls (Palo Alto), switching (Cisco/Meraki), NAC, and VPN/ZTNA solutions Administer identity and access: Okta/Entra ID, Conditional Access policies, MFA enforcement, identity lifecycle management, and IGA Own security tooling and controls: SIEM, EDR, DLP, and vulnerability management, aligned to CIS Controls, NIST CSF, and other relevant compliance frameworks Manage the MDR relationship and respond to escalated detections Drive the IT process and policy redesign required to meet current compliance requirements, and to support additional frameworks as those efforts come online, in partnership with Legal/Compliance Harden AWS/Azure environments from a security perspective: IAM least-privilege, VPC/network security, Azure Policy Provide front-line escalation support and mentoring to IT teammates; maintain runbooks and documentation Assess technology and network risk across the company and recommend remediations Leadership, Team Structure & Culture You will join the IT organization as a direct report to the Senior Director of Cybersecurity & Technology, working alongside a Systems Engineer peer who owns day-to-day systems and endpoint operations. This is a hands-on, collaborative team that takes security and operational excellence seriously. This is a senior individual contributor role focused on deep technical impact-your job is to own and mature Evolv's network security and cybersecurity posture through the systems, controls, and automation you build. You'll have meaningful autonomy over how you approach problems and are actively encouraged to bring creative solutions, identify improvement opportunities, and advocate for better ways of working. You'll work alongside teammates who share your drive for continuous improvement, and you'll have a manager who values initiative, trusts the team to execute, and wants to hear your ideas. Where is the role located? This role is based out of Evolv HQ in Waltham, Massachusetts. This is a hybrid role with an expectation of 3 days per week on-site. Fully remote candidates will not be considered. Compensation and Transparency Statement The base salary range for this full-time position is $102,000-$166,000. In addition to base salary, this role offers a competitive target bonus, equity, and a comprehensive benefits package. This range reflects our commitment to pay transparency and equity, in alignment with applicable state laws. Our compensation ranges are determined based on factors such as role, level, location, market benchmarks, and internal equity. The posted range represents the good-faith estimate of what we expect to pay for this role across U.S. locations. Actual compensation within the range will be based on the candidate's skills, experience, education, and geographic location. In accordance with state and local pay transparency laws-including those in California, Colorado, Massachusetts, New York, New Jersey, and others-we disclose salary ranges in all job postings and provide additional information upon request. During the hiring process, your recruiter will share: •The specific salary range for your preferred location •A general overview of our benefits and equity offerings •Insights into how compensation decisions are made, including factors that influence starting pay We are committed to fair pay practices, and we regularly review our compensation programs to ensure they are competitive, equitable, and aligned with our values. Benefits At Evolv, we're on a mission to help make public spaces safer through innovative security technology. So, we're looking for future teammates who embody our values, people who: Do the right thing, always; Put people first' Own it; Win together; and continue to Be bold, stay curious. Our Benefits Include : Equity as part of your total compensation package Medical, dental, and vision insurance Health Savings Account (HSA) A 401(k) plan (and 2% company match) Flexible Paid Time Off (PTO)- take the time you need to recharge, with manager approval and business needs in mind Quarterly stipend for perks and benefits that matter most to you Tuition reimbursement to support your ongoing learning and development Subscription to Calm Evolv Technology ("Evolv") is an Equal Opportunity Employer and prohibits discrimination and harassment of any kind. We welcome and encourage diversity in the workplace, and all employment decisions are made without regard to race, color, religion, national, social or ethnic origin, sex (including pregnancy), age, disability, HIV Status, sexual orientation, gender identity and/or expression, veteran status, or any other status protected by law in the locations where we operate. Evolv will not tolerate discrimination or harassment based on any of these characteristics. Evolv is committed to offering an inclusive and accessible experience for all job seekers, including individuals with disabilities. If you need a reasonable accommodation as part of the job application process, please connect with us at . Evolv participates in E-verify for all employees after the completion of Form I-9.
09/28/2026
Full time
Job Description Job Description The Elevator Pitch Are you ready to own the network and cybersecurity backbone of a company that's redefining security technology? Do you thrive at the intersection of network engineering, cybersecurity operations, and compliance-where your work directly reduces risk and keeps the business resilient against an ever-changing threat landscape? Evolv is seeking a Network & Cybersecurity Engineer to design, implement, and defend our network infrastructure and security tooling. You'll be the technical owner of Evolv's network and security posture-from firewalls and access control to identity governance and threat detection-reporting to the Senior Director of Cybersecurity & Technology. This is a pivotal role in maturing Evolv's security program to meet the evolving demands of the business and our growing compliance obligations. You'll partner closely with the Systems Engineer and the rest of the IT team, and serve as the subject matter expert on networking, enterprise cybersecurity, and compliance tooling. If you're energized by staying ahead of emerging threats and building durable, well-governed security controls, this role is for you. Success in the Role: What are performance outcomes over the first 6-12 months you will work toward completing? In the first 30 days, you will: Get to know the IT and security team and the tools/platforms currently in use Start building relationships with key stakeholders across the company, especially R&D and Legal/Compliance Learn Evolv's compliance commitments and ongoing authorization efforts, and how best to support them Gain familiarity with the current network/security toolstack: firewalls (Palo Alto), switching (Cisco/Meraki), NAC, VPN/ZTNA, identity platforms (Okta, Entra ID), SIEM/EDR/DLP tooling, and the MDR relationship Within 3 months, you will: Begin implementing or improving network and security controls that measurably reduce risk Build trust-based relationships with peers in IT and stakeholders across business units Become the established subject matter expert on network security and compliance tooling at Evolv Take ownership of the MDR relationship and escalated detection response By the end of the first year, you will: Be recognized as the trusted subject matter expert across network infrastructure, and security operations Have driven measurable improvements to Evolv's security posture and compliance readiness Successfully supported compliance requirements and audit readiness, partnering closely with Legal/Compliance and R&D Documented network and security architecture, processes, and runbooks that reduce single points of failure Be seen as the go-to resource for network security questions, escalations, and best-practice guidance The Work: What type of work will you be doing? What assignments, requirements, or skills will you be performing on a regular basis? Infrastructure, Security & Compliance: Design, implement, and maintain network infrastructure: firewalls (Palo Alto), switching (Cisco/Meraki), NAC, and VPN/ZTNA solutions Administer identity and access: Okta/Entra ID, Conditional Access policies, MFA enforcement, identity lifecycle management, and IGA Own security tooling and controls: SIEM, EDR, DLP, and vulnerability management, aligned to CIS Controls, NIST CSF, and other relevant compliance frameworks Manage the MDR relationship and respond to escalated detections Drive the IT process and policy redesign required to meet current compliance requirements, and to support additional frameworks as those efforts come online, in partnership with Legal/Compliance Harden AWS/Azure environments from a security perspective: IAM least-privilege, VPC/network security, Azure Policy Provide front-line escalation support and mentoring to IT teammates; maintain runbooks and documentation Assess technology and network risk across the company and recommend remediations Leadership, Team Structure & Culture You will join the IT organization as a direct report to the Senior Director of Cybersecurity & Technology, working alongside a Systems Engineer peer who owns day-to-day systems and endpoint operations. This is a hands-on, collaborative team that takes security and operational excellence seriously. This is a senior individual contributor role focused on deep technical impact-your job is to own and mature Evolv's network security and cybersecurity posture through the systems, controls, and automation you build. You'll have meaningful autonomy over how you approach problems and are actively encouraged to bring creative solutions, identify improvement opportunities, and advocate for better ways of working. You'll work alongside teammates who share your drive for continuous improvement, and you'll have a manager who values initiative, trusts the team to execute, and wants to hear your ideas. Where is the role located? This role is based out of Evolv HQ in Waltham, Massachusetts. This is a hybrid role with an expectation of 3 days per week on-site. Fully remote candidates will not be considered. Compensation and Transparency Statement The base salary range for this full-time position is $102,000-$166,000. In addition to base salary, this role offers a competitive target bonus, equity, and a comprehensive benefits package. This range reflects our commitment to pay transparency and equity, in alignment with applicable state laws. Our compensation ranges are determined based on factors such as role, level, location, market benchmarks, and internal equity. The posted range represents the good-faith estimate of what we expect to pay for this role across U.S. locations. Actual compensation within the range will be based on the candidate's skills, experience, education, and geographic location. In accordance with state and local pay transparency laws-including those in California, Colorado, Massachusetts, New York, New Jersey, and others-we disclose salary ranges in all job postings and provide additional information upon request. During the hiring process, your recruiter will share: •The specific salary range for your preferred location •A general overview of our benefits and equity offerings •Insights into how compensation decisions are made, including factors that influence starting pay We are committed to fair pay practices, and we regularly review our compensation programs to ensure they are competitive, equitable, and aligned with our values. Benefits At Evolv, we're on a mission to help make public spaces safer through innovative security technology. So, we're looking for future teammates who embody our values, people who: Do the right thing, always; Put people first' Own it; Win together; and continue to Be bold, stay curious. Our Benefits Include : Equity as part of your total compensation package Medical, dental, and vision insurance Health Savings Account (HSA) A 401(k) plan (and 2% company match) Flexible Paid Time Off (PTO)- take the time you need to recharge, with manager approval and business needs in mind Quarterly stipend for perks and benefits that matter most to you Tuition reimbursement to support your ongoing learning and development Subscription to Calm Evolv Technology ("Evolv") is an Equal Opportunity Employer and prohibits discrimination and harassment of any kind. We welcome and encourage diversity in the workplace, and all employment decisions are made without regard to race, color, religion, national, social or ethnic origin, sex (including pregnancy), age, disability, HIV Status, sexual orientation, gender identity and/or expression, veteran status, or any other status protected by law in the locations where we operate. Evolv will not tolerate discrimination or harassment based on any of these characteristics. Evolv is committed to offering an inclusive and accessible experience for all job seekers, including individuals with disabilities. If you need a reasonable accommodation as part of the job application process, please connect with us at . Evolv participates in E-verify for all employees after the completion of Form I-9.
Job Description Job Description Network Operations - Firewall Operations Engineer Position Description Description This is an opening for a Firewall Engineer to support a Department of State (DoS) Bureau of Diplomatic Technology (DT) program. This program provides transparent, interconnected systems and security supporting the DoS in successfully carrying out its U.S. foreign policy mission. DT provides enterprise architecture design, engineering, operations and maintenance support services for servers, networks, firewalls, and enterprise applications across the Department. This is a firewall engineer position, providing general Tier 2 monitoring, configuration, and support to multiple firewalls and perimeter security systems. The position directly supports DoS on-site to provide perimeter security protection to over 80,000 customers globally. This is a hybrid position based out of Beltsville, MD with 3 days on-site. Shift is Day's (7:00am-3:30pm), Tuesday-Saturday after training. During the 6-8-week training period, it will be 5 days on-site Mon-Fri (7:00am-3:30pm). Your responsibilities will include: Provides Tier 2 support in the monitoring, management, and troubleshooting of perimeter devices to include firewalls, proxies, and mail transport agents. Monitor Service Now application for Firewall Operations (FWOPS) incident and service requests. Implements firewall rules and policies, perform troubleshooting of firewalls (Palo Alto, Cloud Palo Alto, and FortiGate), CISCO Email Security Appliance (ESA), A10 (load balancer), Proxy platforms, URL filtering across platforms, and analyzing network traffic captures. Escalates issues as required to Tier 3 staff and monitors issues throughout a problem's life cycle. Performs recurring maintenance activities such as device reboots and software upgrades on all devices underneath the Firewall Operations Team. Records and reports on firewall operations, utilization, and maintenance. Collaborate across Bureaus and Agencies to implement and repair network changes as they relate to perimeter security devices. Support Diplomatic Security Computer Incident Response Team (CIRT) by implementing block requests for IP's, Websites, and Email addresses. Update architecture diagrams using Visio. Monitor and perform health checks on multiple perimeter security devices. Draft, coordinate and publish outage notifications as required. Update shift logs and provide reports to leadership as needed. Maintain standard operating procedures (SOP), work instructions, and other working documents. Attend calls requiring a FWOPS team to attend, to include troubleshooting calls. Required Education & Experience: BA degree and 2-4 years of experience, may accept additional experience in lieu of degree. In Depth experience using Palo Alto Firewalls and Panorama monitoring tools to troubleshoot and configure a Firewall infrastructure. Strong understanding of networking, proxy, and packet filtering technologies. Minimum 3-5 years of IT Customer Support experience (Tier I and/or Tier II). First-hand experience with supporting the monitoring and configuration of Firewall/DMZ infrastructure including Network and Application Firewall Packet Filtering technologies (Palo Alto, Palo Alto virtual FW (cloud), FortiGate, Azure Firewall, Cloudflare, Cisco Email Security Appliances (ESA), A10 (Load Balancer), and proxy devices. CLI experience preferred. Experienced in utilizing network monitoring tools such as NeuralStar. Experienced with TCP/IP network implementation and troubleshooting. Required Clearance US Citizenship. An Interim Secret clearance is required to start work and requires eligibility to obtain a Top-Secret clearance. Powered by JazzHR 2IrLa6mmdU
09/28/2026
Full time
Job Description Job Description Network Operations - Firewall Operations Engineer Position Description Description This is an opening for a Firewall Engineer to support a Department of State (DoS) Bureau of Diplomatic Technology (DT) program. This program provides transparent, interconnected systems and security supporting the DoS in successfully carrying out its U.S. foreign policy mission. DT provides enterprise architecture design, engineering, operations and maintenance support services for servers, networks, firewalls, and enterprise applications across the Department. This is a firewall engineer position, providing general Tier 2 monitoring, configuration, and support to multiple firewalls and perimeter security systems. The position directly supports DoS on-site to provide perimeter security protection to over 80,000 customers globally. This is a hybrid position based out of Beltsville, MD with 3 days on-site. Shift is Day's (7:00am-3:30pm), Tuesday-Saturday after training. During the 6-8-week training period, it will be 5 days on-site Mon-Fri (7:00am-3:30pm). Your responsibilities will include: Provides Tier 2 support in the monitoring, management, and troubleshooting of perimeter devices to include firewalls, proxies, and mail transport agents. Monitor Service Now application for Firewall Operations (FWOPS) incident and service requests. Implements firewall rules and policies, perform troubleshooting of firewalls (Palo Alto, Cloud Palo Alto, and FortiGate), CISCO Email Security Appliance (ESA), A10 (load balancer), Proxy platforms, URL filtering across platforms, and analyzing network traffic captures. Escalates issues as required to Tier 3 staff and monitors issues throughout a problem's life cycle. Performs recurring maintenance activities such as device reboots and software upgrades on all devices underneath the Firewall Operations Team. Records and reports on firewall operations, utilization, and maintenance. Collaborate across Bureaus and Agencies to implement and repair network changes as they relate to perimeter security devices. Support Diplomatic Security Computer Incident Response Team (CIRT) by implementing block requests for IP's, Websites, and Email addresses. Update architecture diagrams using Visio. Monitor and perform health checks on multiple perimeter security devices. Draft, coordinate and publish outage notifications as required. Update shift logs and provide reports to leadership as needed. Maintain standard operating procedures (SOP), work instructions, and other working documents. Attend calls requiring a FWOPS team to attend, to include troubleshooting calls. Required Education & Experience: BA degree and 2-4 years of experience, may accept additional experience in lieu of degree. In Depth experience using Palo Alto Firewalls and Panorama monitoring tools to troubleshoot and configure a Firewall infrastructure. Strong understanding of networking, proxy, and packet filtering technologies. Minimum 3-5 years of IT Customer Support experience (Tier I and/or Tier II). First-hand experience with supporting the monitoring and configuration of Firewall/DMZ infrastructure including Network and Application Firewall Packet Filtering technologies (Palo Alto, Palo Alto virtual FW (cloud), FortiGate, Azure Firewall, Cloudflare, Cisco Email Security Appliances (ESA), A10 (Load Balancer), and proxy devices. CLI experience preferred. Experienced in utilizing network monitoring tools such as NeuralStar. Experienced with TCP/IP network implementation and troubleshooting. Required Clearance US Citizenship. An Interim Secret clearance is required to start work and requires eligibility to obtain a Top-Secret clearance. Powered by JazzHR 2IrLa6mmdU
Job Description Job Description We are seeking a Senior Network Security Engineer for an operations-first role supporting enterprise network security infrastructure across on-premises, remote-access, hybrid-cloud, and cloud-connected environments. This is not primarily an architecture/design role. The priority is a hands-on engineer who can administer, configure, maintain, troubleshoot, patch, upgrade, back up, validate, document, and operate production security platforms with minimal ramp-up. Firewall operations: hands-on Cisco and Palo Alto firewall administration, rule changes, NAT, troubleshooting, policy cleanup, upgrades, backups, logging, and production support. VPN / remote access: support for remote-access VPN, site-to-site VPN, user connectivity issues, certificates, authentication flows, and after-hours troubleshooting. RSA / MFA administration: RSA SecurID or equivalent MFA operations, token support, server administration, user troubleshooting, VPN integration, certificates, patching, backups, logs, and monitoring. Day-to-day operations: ticket resolution, monitoring alerts, health checks, change requests, incident support, maintenance windows, operational reporting, and customer support. Configuration and administration: installing, configuring, maintaining, patching, upgrading, backing up, validating, and troubleshooting assigned security platforms. Production troubleshooting: strong TCP/IP, DNS, routing, firewall logs, packet captures, VPN authentication, certificate, and connectivity troubleshooting. Documentation and process discipline: SOPs, runbooks, diagrams, change records, rollback plans, evidence collection, knowledge transfer, and formal change management. Federal/customer environment maturity: Public Trust eligibility, regulated-environment documentation, customer support, cross-team coordination, and comfort working with government stakeholders. The best candidate can credibly say: "I have operated enterprise Cisco and Palo Alto firewalls in production, handled firewall rule changes and troubleshooting, supported VPN users and site-to-site tunnels, administered or supported RSA/MFA tied to VPN access, followed formal change-management processes, maintained documentation and backups, and can step into daily operational support with minimal ramp-up." Scope and Role Boundaries Primary platforms include Cisco ASA/Firepower/FTD/FMC, Palo Alto NGFW/Panorama/GlobalProtect, remote-access and site-to-site VPN, RSA SecurID Authentication Manager or comparable MFA, monitoring/logging/SIEM integrations, and related network security controls. Coordinate with SOC/NOC, cloud, identity/directory, wireless/LAN, server, endpoint, system owner, application, governance, and vendor teams during changes, incidents, troubleshooting, compliance, and audit support. Cloudflare, Cisco ISE/NAC, secure web/email gateways, packet visibility tools, SD-WAN/SASE/ZTNA, AWS/Azure security, and F5/application-delivery awareness are useful where they intersect with assigned operational support, but the core need is firewall, VPN, RSA/MFA, and production operations. Key Responsibilities Provide daily, weekly, monthly, and annual operational support for assigned security systems, including tickets, alerts, health checks, email/phone support, metrics, status reporting, and operational validation. Administer and troubleshoot enterprise firewalls, including rule bases, NAT, segmentation, high availability, threat prevention, VPN integration, logging, secure baselines, rule reviews, recertification, cleanup, and decommissioning. Install, configure, maintain, patch, upgrade, back up, and validate firewall, VPN, MFA, and related network security systems in production environments. Support remote-access VPN, site-to-site VPN, partner connectivity, cloud connectivity, mobile/remote users, certificates, authentication policies, availability, utilization, and user access issues. Maintain and troubleshoot RSA SecurID Authentication Manager or equivalent MFA services, including servers/appliances, agents, certificates, HA, backups, logs, monitoring, directory integration, VPN authentication, and token lifecycle support. Respond to incidents, vulnerability notices, urgent requests, vendor advisories, PSIRT notices, system alerts, and emergency troubleshooting while minimizing service disruption. Use firewall logs, VPN logs, packet captures, SIEM data, monitoring tools, DNS/routing checks, and standard diagnostics to resolve complex connectivity, authentication, TLS/certificate, and application-flow issues. Create and maintain topology diagrams, equipment inventories, configurations, SOPs, runbooks, implementation plans, rollback plans, build/upgrade procedures, troubleshooting notes, and knowledge articles. Follow approved change, release, incident, problem, and configuration-management processes; prepare change records, peer-review materials, validation evidence, root-cause analysis, metrics, and audit artifacts. Support vulnerability remediation, POA&M tracking, continuous monitoring, compliance reviews, audit evidence collection, and coordination with ISSO, system owner, and security governance teams. Requirements 7+ years of experience in network security engineering, network infrastructure, cybersecurity infrastructure, or a closely related role. 5+ years of hands-on experience administering, maintaining, and troubleshooting enterprise firewall platforms in production environments. Hands-on experience with Cisco security technologies such as Cisco ASA, Firepower, FTD, FMC, AnyConnect/Secure Client, or equivalent Cisco firewall/VPN platforms. Hands-on experience with Palo Alto Networks technologies such as NGFW, Panorama, GlobalProtect, security profiles, App-ID/User-ID, logging, and policy optimization. Experience administering or supporting RSA SecurID Authentication Manager or comparable enterprise MFA/two-factor authentication platforms, including token support, server operations, patching/upgrades, backups, certificates, monitoring, and directory/VPN integration. Strong knowledge of firewall policy, NAT, VPNs, routing, DNS, DHCP, BGP, TLS/certificates, packet captures, log analysis, segmentation, high availability, and common network diagnostic tools. Experience with enterprise monitoring, logging, SIEM, alerting, vulnerability management, incident response, formal change management, and regulated-environment documentation. Ability to create clear technical documentation, support customers and stakeholders, prioritize operational work, communicate clearly, and coordinate across technical teams. Ability to obtain and maintain a Public Trust background investigation. Desired Certifications Relevant certifications are helpful but should not replace demonstrated hands-on experience. Examples include CCNP Security, CCIE Security, PCNSE, PCCSE, CISSP, CCSP, AWS Certified Security - Specialty, AWS Advanced Networking - Specialty, Microsoft Certified: Azure Security Engineer Associate, Microsoft Certified: Azure Network Engineer Associate, CompTIA Security+, CompTIA CySA+, GIAC certifications, or equivalent vendor/cloud certifications. Core Competencies Enterprise firewall engineering and policy lifecycle management VPN, remote access, RSA/MFA, and token lifecycle operations Cloudflare, edge security, secure access, and Zero Trust support Content filtering, secure web/email gateway, and NAC operations Hybrid-cloud network security and secure connectivity Monitoring, logging, SIEM integration, and incident response support Security visibility, packet analysis, and advanced troubleshooting Vulnerability remediation, compliance evidence, and POA&M support Change management, documentation, reporting, and operational metrics Technical leadership, customer support, and cross-team collaboration Benefits 401(k) 401(k) matching Dental insurance Flexible schedule Flexible spending account Health insurance Health savings account Life insurance Paid time off Professional development assistance Referral program Retirement plan Tuition reimbursement Vision insurance
09/28/2026
Full time
Job Description Job Description We are seeking a Senior Network Security Engineer for an operations-first role supporting enterprise network security infrastructure across on-premises, remote-access, hybrid-cloud, and cloud-connected environments. This is not primarily an architecture/design role. The priority is a hands-on engineer who can administer, configure, maintain, troubleshoot, patch, upgrade, back up, validate, document, and operate production security platforms with minimal ramp-up. Firewall operations: hands-on Cisco and Palo Alto firewall administration, rule changes, NAT, troubleshooting, policy cleanup, upgrades, backups, logging, and production support. VPN / remote access: support for remote-access VPN, site-to-site VPN, user connectivity issues, certificates, authentication flows, and after-hours troubleshooting. RSA / MFA administration: RSA SecurID or equivalent MFA operations, token support, server administration, user troubleshooting, VPN integration, certificates, patching, backups, logs, and monitoring. Day-to-day operations: ticket resolution, monitoring alerts, health checks, change requests, incident support, maintenance windows, operational reporting, and customer support. Configuration and administration: installing, configuring, maintaining, patching, upgrading, backing up, validating, and troubleshooting assigned security platforms. Production troubleshooting: strong TCP/IP, DNS, routing, firewall logs, packet captures, VPN authentication, certificate, and connectivity troubleshooting. Documentation and process discipline: SOPs, runbooks, diagrams, change records, rollback plans, evidence collection, knowledge transfer, and formal change management. Federal/customer environment maturity: Public Trust eligibility, regulated-environment documentation, customer support, cross-team coordination, and comfort working with government stakeholders. The best candidate can credibly say: "I have operated enterprise Cisco and Palo Alto firewalls in production, handled firewall rule changes and troubleshooting, supported VPN users and site-to-site tunnels, administered or supported RSA/MFA tied to VPN access, followed formal change-management processes, maintained documentation and backups, and can step into daily operational support with minimal ramp-up." Scope and Role Boundaries Primary platforms include Cisco ASA/Firepower/FTD/FMC, Palo Alto NGFW/Panorama/GlobalProtect, remote-access and site-to-site VPN, RSA SecurID Authentication Manager or comparable MFA, monitoring/logging/SIEM integrations, and related network security controls. Coordinate with SOC/NOC, cloud, identity/directory, wireless/LAN, server, endpoint, system owner, application, governance, and vendor teams during changes, incidents, troubleshooting, compliance, and audit support. Cloudflare, Cisco ISE/NAC, secure web/email gateways, packet visibility tools, SD-WAN/SASE/ZTNA, AWS/Azure security, and F5/application-delivery awareness are useful where they intersect with assigned operational support, but the core need is firewall, VPN, RSA/MFA, and production operations. Key Responsibilities Provide daily, weekly, monthly, and annual operational support for assigned security systems, including tickets, alerts, health checks, email/phone support, metrics, status reporting, and operational validation. Administer and troubleshoot enterprise firewalls, including rule bases, NAT, segmentation, high availability, threat prevention, VPN integration, logging, secure baselines, rule reviews, recertification, cleanup, and decommissioning. Install, configure, maintain, patch, upgrade, back up, and validate firewall, VPN, MFA, and related network security systems in production environments. Support remote-access VPN, site-to-site VPN, partner connectivity, cloud connectivity, mobile/remote users, certificates, authentication policies, availability, utilization, and user access issues. Maintain and troubleshoot RSA SecurID Authentication Manager or equivalent MFA services, including servers/appliances, agents, certificates, HA, backups, logs, monitoring, directory integration, VPN authentication, and token lifecycle support. Respond to incidents, vulnerability notices, urgent requests, vendor advisories, PSIRT notices, system alerts, and emergency troubleshooting while minimizing service disruption. Use firewall logs, VPN logs, packet captures, SIEM data, monitoring tools, DNS/routing checks, and standard diagnostics to resolve complex connectivity, authentication, TLS/certificate, and application-flow issues. Create and maintain topology diagrams, equipment inventories, configurations, SOPs, runbooks, implementation plans, rollback plans, build/upgrade procedures, troubleshooting notes, and knowledge articles. Follow approved change, release, incident, problem, and configuration-management processes; prepare change records, peer-review materials, validation evidence, root-cause analysis, metrics, and audit artifacts. Support vulnerability remediation, POA&M tracking, continuous monitoring, compliance reviews, audit evidence collection, and coordination with ISSO, system owner, and security governance teams. Requirements 7+ years of experience in network security engineering, network infrastructure, cybersecurity infrastructure, or a closely related role. 5+ years of hands-on experience administering, maintaining, and troubleshooting enterprise firewall platforms in production environments. Hands-on experience with Cisco security technologies such as Cisco ASA, Firepower, FTD, FMC, AnyConnect/Secure Client, or equivalent Cisco firewall/VPN platforms. Hands-on experience with Palo Alto Networks technologies such as NGFW, Panorama, GlobalProtect, security profiles, App-ID/User-ID, logging, and policy optimization. Experience administering or supporting RSA SecurID Authentication Manager or comparable enterprise MFA/two-factor authentication platforms, including token support, server operations, patching/upgrades, backups, certificates, monitoring, and directory/VPN integration. Strong knowledge of firewall policy, NAT, VPNs, routing, DNS, DHCP, BGP, TLS/certificates, packet captures, log analysis, segmentation, high availability, and common network diagnostic tools. Experience with enterprise monitoring, logging, SIEM, alerting, vulnerability management, incident response, formal change management, and regulated-environment documentation. Ability to create clear technical documentation, support customers and stakeholders, prioritize operational work, communicate clearly, and coordinate across technical teams. Ability to obtain and maintain a Public Trust background investigation. Desired Certifications Relevant certifications are helpful but should not replace demonstrated hands-on experience. Examples include CCNP Security, CCIE Security, PCNSE, PCCSE, CISSP, CCSP, AWS Certified Security - Specialty, AWS Advanced Networking - Specialty, Microsoft Certified: Azure Security Engineer Associate, Microsoft Certified: Azure Network Engineer Associate, CompTIA Security+, CompTIA CySA+, GIAC certifications, or equivalent vendor/cloud certifications. Core Competencies Enterprise firewall engineering and policy lifecycle management VPN, remote access, RSA/MFA, and token lifecycle operations Cloudflare, edge security, secure access, and Zero Trust support Content filtering, secure web/email gateway, and NAC operations Hybrid-cloud network security and secure connectivity Monitoring, logging, SIEM integration, and incident response support Security visibility, packet analysis, and advanced troubleshooting Vulnerability remediation, compliance evidence, and POA&M support Change management, documentation, reporting, and operational metrics Technical leadership, customer support, and cross-team collaboration Benefits 401(k) 401(k) matching Dental insurance Flexible schedule Flexible spending account Health insurance Health savings account Life insurance Paid time off Professional development assistance Referral program Retirement plan Tuition reimbursement Vision insurance
Job Description Job Description Benefits: Onsite Competitive salary Opportunity for advancement About the Role: Select Minds LLC is looking for a talented Network Security Engineer to join our growing team in Dallas, TX. This is an exciting opportunity to protect critical infrastructure, design robust security solutions, and work alongside a team of passionate technology professionals. If you thrive in a fast-paced environment and love solving complex security challenges, we want to hear from you! Responsibilities: Design, implement, and maintain network security architectures, firewalls, and intrusion detection/prevention systems (IDS/IPS) Monitor network traffic for suspicious activity and respond to security incidents and threats in real time Perform vulnerability assessments, penetration testing, and risk analysis across network infrastructure Configure and manage VPNs, access control lists (ACLs), and zero-trust network policies Collaborate with IT and DevOps teams to ensure security best practices are integrated into all systems Develop and maintain security documentation, policies, and incident response procedures Stay current with emerging cybersecurity threats, trends, and compliance requirements (NIST, ISO 27001, etc.) Requirements: 3+ years of experience in network security engineering or a related cybersecurity role Proficiency with firewalls, SIEM tools, and network monitoring platforms (e.g., Cisco, Palo Alto, Splunk) Strong understanding of TCP/IP, DNS, VPN, and network protocols Experience with cloud security environments (AWS, Azure, or GCP) is a plus Relevant certifications such as CISSP, CCNP Security, CEH, or CompTIA Security+ preferred Strong analytical and problem-solving skills with keen attention to detail Excellent communication skills and ability to work both independently and collaboratively About Us: Select Minds LLC is a forward-thinking technology firm based in Dallas, TX, dedicated to delivering innovative IT and security solutions to businesses of all sizes. Our clients trust us to safeguard their most critical assets, and our team takes that responsibility seriously. We foster a culture of continuous learning, collaboration, and growth - making Select Minds a place where talented professionals truly thrive.
09/28/2026
Full time
Job Description Job Description Benefits: Onsite Competitive salary Opportunity for advancement About the Role: Select Minds LLC is looking for a talented Network Security Engineer to join our growing team in Dallas, TX. This is an exciting opportunity to protect critical infrastructure, design robust security solutions, and work alongside a team of passionate technology professionals. If you thrive in a fast-paced environment and love solving complex security challenges, we want to hear from you! Responsibilities: Design, implement, and maintain network security architectures, firewalls, and intrusion detection/prevention systems (IDS/IPS) Monitor network traffic for suspicious activity and respond to security incidents and threats in real time Perform vulnerability assessments, penetration testing, and risk analysis across network infrastructure Configure and manage VPNs, access control lists (ACLs), and zero-trust network policies Collaborate with IT and DevOps teams to ensure security best practices are integrated into all systems Develop and maintain security documentation, policies, and incident response procedures Stay current with emerging cybersecurity threats, trends, and compliance requirements (NIST, ISO 27001, etc.) Requirements: 3+ years of experience in network security engineering or a related cybersecurity role Proficiency with firewalls, SIEM tools, and network monitoring platforms (e.g., Cisco, Palo Alto, Splunk) Strong understanding of TCP/IP, DNS, VPN, and network protocols Experience with cloud security environments (AWS, Azure, or GCP) is a plus Relevant certifications such as CISSP, CCNP Security, CEH, or CompTIA Security+ preferred Strong analytical and problem-solving skills with keen attention to detail Excellent communication skills and ability to work both independently and collaboratively About Us: Select Minds LLC is a forward-thinking technology firm based in Dallas, TX, dedicated to delivering innovative IT and security solutions to businesses of all sizes. Our clients trust us to safeguard their most critical assets, and our team takes that responsibility seriously. We foster a culture of continuous learning, collaboration, and growth - making Select Minds a place where talented professionals truly thrive.