Network Security Engineer III
Role summary
The Network Security Engineer III is responsible for the deployment, configuration, and operational support of enterprise firewall infrastructure. This role requires a strong understanding of enterprise networking fundamentals, including routing, switching, and traffic flow, with hands-on experience in troubleshooting LAN/WAN, eBGP, and VLANs. The engineer will design, implement, and maintain NGFW security policies, perform IDS/IPS tuning and alert triage, and conduct network security monitoring. Experience with Palo Alto APP-ID, network diagramming (Visio), packet captures, and Splunk dashboards is essential. Collaboration with network, SOC, and engineering teams during incidents and routine operations is expected. A Bachelor's degree in a technical discipline or equivalent experience, 6+ years of relevant experience, and current DoD 8570 IAT II and CCNP certifications are required, along with a TS/SCI clearance.
Title: Network Security Engineer III
Location: Alexandria, VA
Clearance: TS/SCI with the ability to obtain and maintain a CI polygraph
Job Details:
- Responsible for the deployment, configuration, and operational support of enterprise firewall infrastructure
- Execute enterprise networking fundamentals, including routing, switching, and end-to-end traffic flow
- Demonstrate LAN and WAN troubleshooting experience
- Hands on experience with eBGP, VLANs, and Palo Alto APP-ID
- Design, implement, and maintain NGFW security policies, including both physical and virtual firewalls
- Perform IDS/IPS configuration, tuning, and alert triage
- Read, produce, and maintain accurate network diagrams (Visio or equivalent)
- Conduct network security monitoring including traffic analysis and anomaly detection
- Troubleshoot routing, VLAN, and policy related issues impacting data flow across the enterprise
- Perform packet captures and traffic analysis to isolate and resolve complex connectivity issues
- Monitor and refine Splunk dashboards and alerts in support of firewall operations and incident investigation desired
- Collaborate with the network, SOC, and engineering teams during incidents and routine operations
- Document configurations, runbooks, and post incident findings
Requirements:
- Bachelor's degree from an accredited institute in a technical discipline; an additional four (4) years of experience may be substituted in lieu of a degree
- Minimum six (6) years of relevant experience in addition to education level
- Experience working in a DoD or Intelligence Community Environment desired
- Must possess current DoD 8570 IAT II and CCNP (or equivalent) certifications
- Current active TS/SCI clearance, with the ability to obtain and maintain a CI polygraph
*Equal Opportunity Employer/Veteran/Disabled*
