Network Security Engineer

The Chief Information Office (CIO) is responsible for planning, maintaining, and sustaining the global CIO enterprise that supports critical national security missions. Through the SITE III multi-award IDIQ contract, the CIO delivers high-impact solutions that strengthen how the Defense Intelligence Agency operates today and prepares it for the future.

SITE III supports warfighters, policymakers, and acquisition leaders across the Defense Intelligence Enterprise (DIE) by delivering a decisive Information and Communications Technology (ICT) advantage. Our teams provide strategic, technical, and program management expertise to modernize enterprise infrastructure, systems, and applications—ensuring they are secure, resilient, and mission-ready.

This is not a staff augmentation program. SITE III focuses on managed services and outcome-driven solutions that improve integration, enable seamless information sharing, and protect critical data. If you’re interested in solving complex problems, working at scale, and helping modernize mission-critical systems, SITE III offers the opportunity to make a real difference.

Job description:

The role involves designing, deploying, and supporting Endace packet capture systems, integrating with security tools, supporting Zero Trust strategies, troubleshooting hardware and software issues, automating workflows, and collaborating with teams.

Duties and Responsibilities:

• Design, deploy, and configure Endace appliances for enterprise-scale packet capture.
• Develop packet capture strategies aligned with network architecture and Zero Trust controls.
• Build high-availability, scalable Endace clusters across data centers and cloud environments
• Integrate Endace with SIEM, SOAR, NDR, EDR, and investigation platforms.
• Maintain and tune hardware and software for optimal performance, including upgrades and patching.

You MUST have:

- Active TS/SCI clearance; willingness to take a polygraph exam
- 5+ years of experience in cybersecurity engineering, network security, or SOC tooling
- DoD 8570.01-M IAT Level II Certification
(Security+ CE, CCNA-Security, GSEC, SSCP, CySA+, GICSP, or CND)
- Ability to obtain a DoD 8570.01-M Cybersecurity Service Provider - Infrastructure Support Certification within 30 days
- Proficiency in Linux administration and scripting (Python, Bash, PowerShell)

It’s GREAT if you also have:

• Hands-on experience deploying and managing Endace DAG/Probe solutions
• Strong understanding of packet analysis, network forensics, deep packet inspection, and PCAP workflows
• Experience supporting regulated or high-security environments (DoD, IC, FedRAMP, PCI, HIPAA)
• Familiarity with Zero Trust Architecture, segmentation principles, and identity-centric policy models
• Familiarity with network tools like Zeek, Suricata, Arkime, NDR platforms
• Experience with cloud networking in AWS, Azure, or GCP
• Certifications such as CISSP, GCIA, GNFA, GCIH, or vendor-specific credentials
• Strong analytical, problem-solving, communication, and collaboration skills

Education:

• Associate’s degree and 5+ years of supporting IT projects and activities, Bachelor’s degree and 3+ years, or Master’s degree and 1+ years