Network Security Engineer Senior

Description

The team sits in the cyber security directorate of a U.S. federal border agency and runs 24/7/365 security operations, threat intelligence, forensics, incident response, cloud and network engineering, zero trust modernization, vulnerability assessment, and enterprise risk and compliance work.

This senior role supports the rollout, monitoring and upkeep of security tools across the networks, checking that devices, configurations and traffic flows meet current security standards and federal requirements.

The work involves leading technical staff, shaping security strategy and protecting systems that support national-level operations.

The company is a global technology and professional services firm with 26,000 staff. It serves U.S. government, defense and intelligence customers in 50+ countries, with work in AI, cloud, cyber and software development.

Responsibilities

• Own the design, build and lifecycle of network protection systems across the enterprise, including firewalls, IDS/IPS, VPN and network access control.
• Analyze network security architectures, find weaknesses and design mitigations that meet federal and internal requirements.
• Watch and interpret complex security events, lead investigations into advanced threats and direct response and containment.
• Propose and deliver upgrades that strengthen resilience, reduce the attack surface and keep the environment current.
• Write, review and enforce network security policies, standards and procedures that satisfy NIST, CIS and other regulatory obligations.
• Advise leadership and cross-functional teams so secure design is built into programs, system upgrades and architecture decisions.
• Mentor junior and mid-level engineers, giving technical guidance and checking the quality of their work.
• Work with IT, security operations and infrastructure teams on secure network design and day-to-day operations.

Requirements

• Background in cybersecurity, cybersecurity operations, IT network security or network security tools.
• At least seven years of hands-on network or security engineering work, within 8+ years of related experience.
• Experience with enterprise-grade firewalls, IDS/IPS, VPNs and NAC tools.
• Solid knowledge of network protocols, architecture and security best practices.
• Hands-on experience maintaining firewalls, intrusion detection and prevention systems, VPNs and network access controls.
• Ability to analyze security architectures and build solutions that protect network assets from threats and weaknesses.
• Experience monitoring security events, investigating incidents, responding to them and strengthening defenses.
• Experience writing network security policies, procedures and standards, and keeping systems in line with security frameworks and regulations.
• Familiarity with frameworks such as NIST, ISO 27001 and CIS.
• U.S. citizenship required.
• Optional: a bachelor's degree is preferred in cybersecurity, information technology, computer science or a related field.
• Optional: certifications may include CISSP, CCSP, CCNP Security, CompTIA Security+, or CCNA or CCNA Security.
• Optional: a previous or current CBP background investigation is desired.

Conditions

Regular, onsite position in Ashburn, Virginia, with 40 scheduled hours per week.

Travel is less than 10% of the time.

Public Trust position requiring a BI Full 6C (T4) investigation. No security clearance is needed now or must be obtainable.

Likely salary range is $124,093 to $167,325. This is not a guarantee. Pay depends on experience, geographic location and possibly contract requirements, and may fall outside this range.

Identity verification uses biometrics and AI. You must be on camera for virtual interviews, and by applying you authorize collection and use of your biometric data for identity checks.

The employer is an equal opportunity employer that welcomes individuals with disabilities and protected veterans.

Benefits

• Medical plan options, some with Health Savings Accounts, plus dental and vision plans.
• 401(k) that accepts pre- and post-tax contributions up to IRS annual limits, with a company match.
• Full flex work weeks where possible.
• Paid time off including vacation, sick and personal time, holidays, paid parental, military, bereavement and jury duty leave.
• Short- and long-term disability, life, accidental death and dismemberment, personal accident, critical illness, and business travel and accident insurance, provided or available.