Network Security Engineer

Position Overview

We are looking for a senior level Network Security Engineer to support enterprise network infrastructure initiatives focused on secure, scalable, and high-availability systems. The engineer will play a vital role in the planning, design, deployment, and management of secure networking solutions across systems. This role requires a deep understanding of network security principles, modern tools, and enterprise environments, along with a proactive and collaborative approach to problem-solving and project execution.

• Contribute to the architecture and deployment of robust and secure network systems aligned with enterprise requirements.
• Manage hands-on implementations of next-gen firewall technologies and secure connectivity solutions.
• Lead or participate in transitioning legacy systems to contemporary platforms using Palo Alto, Cisco, and other security tools.
• Deliver ongoing security assessments and performance reviews for data communication networks.
• Generate technical documentation, including network diagrams, implementation plans, and status updates.
• Support end-user issue resolution in coordination with other IT teams and maintain regular communication on project status.
• Coordinate and conduct weekly status meetings, prepare reports, and track milestones.

• Associate degree.
• Active certifications in :

• Palo Alto Networks Certified Network Security Administrator (PCNSA) or Palo Alto Networks Certified Network Security Engineer (PCNSE)
• Cisco Certified Network Associate (CCNA) Enterprise or (CCNA) Security Certification or Cisco Certified Network Professional (CCNP) – Enterprise or Security

• Bachelor's degree in Information Technology or a related field.
• At least 10 years of hands-on experience in IT networking and cybersecurity across CONUS.

• Prisma Certified Cloud Security Engineer (PCCSE)
• Cisco Certified Internetwork Expert (CCIE) – Enterprise Infrastructure or Security

• Palo Alto Networks (firewalls, content filtering, DLP, VPNs, IDS / IPS, SSL / TLS inspection)
• Cisco switching, routing, wireless infrastructure
• A10 load balancers and reverse proxies
• Cisco ISE, Free Radius, and ACLs

• MFA and 802.1x authentication
• Cloud-based security and networking models
• EIGRP, OSPF, BGP routing protocols
• PKI, certificate management
• Nessus, NMAP, Wireshark for vulnerability and protocol analysis
• Panorama, Solar Winds for centralized management

• Mentor junior engineers and work independently
• Create technical documentation and deliver professional presentations

Hybrid work model :

• 2 days onsite at Annapolis location
• 3 days remote (subject to performance and approval)

Standard hours :
Monday–Friday, 8 : 00 AM–4 : 30 PM EST

Must be available for on-site support within 4 hours if needed

Occasional extended hours, weekends, or holidays may be required