Network Security Automation Engineer

Booz Allen Hamilton

Confirmed live today High trust

Quick summary

Work type
On-site
Location
McLean, VA
Employment
Full-time
Posted
69 days ago
Freshness
Confirmed live today

Market check

Salary context

How this pay compares to similar roles

Similar $175k
$121k $218k
below market most similar roles pay here above market

This listing doesn't post a salary. Most similar roles pay $142,487–$208,387.

Based on 240 similar postings.

Employer

About Booz Allen Hamilton

Booz Allen Hamilton is a management and technology consulting firm that provides analytics, digital, engineering, and cybersecurity solutions primarily to U.S. government agencies and commercial clients. Industry: Management & Technology Consulting

Booz Allen Hamilton currently has 1662 open roles on FindRole.

Listed pay typically runs $86,800–$198,000 across 904 roles with salary data.

Most-posted roles

View all roles at Booz Allen Hamilton

At a glance

TL;DR · Network Security Automation Engineer

The Network Security Automation Engineer joins the team to design and automate secure, cloud-based cyber range networks for Department of Defense missions. This role involves translating operational and security requirements into reusable infrastructure components to deploy virtual networks, routing, firewalls, VPN services, and traffic inspection capabilities. You will build automated network deployments, firewall integrations, and environment teardowns using infrastructure as code, scripting, APIs, and CI/CD pipelines. Key technologies include AWS Transit Gateway, Gateway Load Balancer, Palo Alto VM-Series firewalls, AWS Network Firewall, VPC endpoints, and centralized logging. Required skills include experience with AWS CDK, CloudFormation, or Terraform, alongside languages like TypeScript, Python, PowerShell, and Bash. You will troubleshoot routing and interoperability issues while ensuring environments remain isolated from corporate networks and unauthorized external systems.

What you'll do

  • Design and automate secure, cloud-based cyber range networks using infrastructure-as-code.
  • Translate operational requirements into reusable components for virtual networks, firewalls, and VPN services.
  • Automate network deployment, firewall integration, and environment teardown using CI/CD pipelines and APIs.
  • Configure and manage AWS networking services including Transit Gateway, Gateway Load Balancer, and VPC endpoints.
  • Troubleshoot routing, traffic inspection, and firewall interoperability issues.
  • Ensure network isolation from corporate networks and unauthorized external systems.
  • Use network monitoring and flow logs to analyze traffic and troubleshoot connectivity.

What we're looking for

  • High school diploma or GED.
  • 5+ years of experience with network security or designing IT systems and networks for large commercial enterprises or government agencies.
  • 3+ years of experience with firewalls, intrusion detection and prevention systems, network segmentation, boundary protection, or vulnerability assessment.
  • Experience designing and securing cloud or enterprise network architectures.
  • Experience with Palo Alto, Cisco, or Juniper firewalls.
  • Experience automating infrastructure using an infrastructure-as-code framework such as AWS CDK, CloudFormation, or Terraform.
  • Experience developing automation with TypeScript, Python, PowerShell, Bash, APIs, or orchestration tools.
  • Ability to obtain a DoD 8570 IAT Level II Certification within 3 months of start date.

More like this

Similar roles

Network Security Automation Engineer

Fiserv

Berkeley Heights, NJ +5 23 days ago $127,500–$204,000
Network Security Architecture Zero Trust Policy-as-Code AWS Azure GCP Kubernetes Software-Defined Networking Palo Alto Check Point Fortinet Cisco IDS/IPS Snort Suricata TCP/IP DNS BGP Wireshark tcpdump IPSec SSL VPN micro segmentation AI-driven Automation
8+ yrs exp

Network Security Automation Engineer

Fiserv

Berkeley Heights, NJ +5 23 days ago $127,500–$204,000
Network Security Architecture Zero Trust Policy-as-Code AWS Azure GCP Kubernetes Software-Defined Networking Palo Alto Check Point Fortinet Cisco IDS/IPS Snort Suricata TCP/IP DNS BGP Wireshark tcpdump IPSec SSL VPN micro segmentation AI-driven Automation
8+ yrs exp

Network Security Engineer

Booz Allen Hamilton

San Diego, CA +8 4 days ago $99,000–$225,000
Network Security Firewalls Palo Alto Cisco Juniper Wireshark SIEM Python Ansible AWS Azure GCP SD-WAN Packet Analysis STIGs Vulnerability Assessment Cloud Security
5+ yrs exp

Network Security Engineer

Booz Allen Hamilton

Fort Meade, MD +8 7 days ago $99,000–$225,000
Network Security Firewalls Palo Alto Cisco Juniper Wireshark SIEM AWS Azure GCP Python Ansible SD-WAN Packet Analysis Vulnerability Assessment STIGs Cloud Security
5+ yrs exp

Network Security Engineer

Booz Allen Hamilton

San Diego, CA 12 days ago $99,000–$225,000
Forescout Network Access Control (NAC) Cisco ISE Python PowerShell REST APIs 802.1X RADIUS EAP-TLS MAB Trellix CrowdStrike Microsoft Defender Microsoft Intune HBSS STIGs Risk Management Framework (RMF) Zero Trust Network Security Automation
5+ yrs exp

Network Security Engineer

Booz Allen Hamilton

Dahlgren, VA 24 days ago $69,300–$158,000
Red Hat Enterprise Linux Ubuntu Microsoft Windows HP-UX UNIX Solaris VMWare KVM TCP/IP Firewalls SSH ACAS Nessus STIGs RMF CI/CD DevSecOps Honeypots