Job Description

Position Overview

We are looking for a skilled Network Security Engineer to support enterprise network infrastructure initiatives focused on secure, scalable, and high-availability systems. The engineer will play a vital role in the planning, design, deployment, and management of secure networking solutions across systems. This role requires a deep understanding of network security principles, modern tools, and enterprise environments, along with a proactive and collaborative approach to problem-solving and project execution.

Responsibilities

• Contribute to the architecture and deployment of robust and secure network systems aligned with enterprise requirements.
• Manage hands-on implementations of next-gen firewall technologies and secure connectivity solutions.
• Lead or participate in transitioning legacy systems to contemporary platforms using Palo Alto, Cisco, and other security tools.
• Deliver ongoing security assessments and performance reviews for data communication networks.
• Generate technical documentation, including network diagrams, implementation plans, and status updates.
• Support end-user issue resolution in coordination with other IT teams and maintain regular communication on project status.
• Coordinate and conduct weekly status meetings, prepare reports, and track milestones.

Required Qualifications

• Associate degree in a relevant IT discipline.
• Active certifications in:
  • Palo Alto Networks Certified Network Security Engineer (PCNSE)
  • Cisco Certified Network Professional (CCNP) – Enterprise or Security

Preferred Qualifications

• Bachelor's degree in Information Technology or a related field.
• At least 10 years of hands-on experience in IT networking and cybersecurity across CONUS.
• Additional certifications highly desired:
  • Prisma Certified Cloud Security Engineer (PCCSE)
  • Cisco Certified Internetwork Expert (CCIE) – Enterprise Infrastructure or Security

Technical Skills & Experience

• Extensive experience with:
  • Palo Alto Networks (firewalls, content filtering, DLP, VPNs, IDS/IPS, SSL/TLS inspection)
  • Cisco switching, routing, wireless infrastructure
  • A10 load balancers and reverse proxies
  • Cisco ISE, Free Radius, and ACLs
• Familiarity with:
  • MFA and 802.1x authentication
  • Cloud-based security and networking models
  • EIGRP, OSPF, BGP routing protocols
  • PKI, certificate management
  • Nessus, NMAP, Wireshark for vulnerability and protocol analysis
  • Panorama, SolarWinds for centralized management
• Demonstrated ability to:
  • Mentor junior engineers and work independently
  • Create technical documentation and deliver professional presentations

Work Schedule and Conditions

• Hybrid work model:
  • 3 days onsite at Annapolis location
  • 2 days remote (subject to performance and approval)
• Standard hours: Monday–Friday, 8:00 AM–4:30 PM EST
• Must be available for on-site support within 4 hours if needed
• Occasional extended hours, weekends, or holidays may be required

Job Tags

Similar Jobs