This role pays more than
52%
of similar roles. Most pay
$138,806–$199,512
— the shaded band above.
At the midpoint, this role pays about
$162k
versus about
$169k
for comparable roles.
Based on 240 similar postings.
Employer
About Booz Allen Hamilton
Booz Allen Hamilton is a management and technology consulting firm that provides analytics, digital, engineering, and cybersecurity solutions primarily to U.S. government agencies and commercial clients. Industry: Management & Technology Consulting
Booz Allen Hamilton currently has
802 open roles
on FindRole.
Listed pay typically runs
$86,800–$198,000
across 783 roles with salary data.
As a Network Security Automation Engineer, you will join the team to design and automate secure, cloud-based cyber range networks for Department of Defense missions. You will translate operational requirements into reusable infrastructure components, building automated systems for virtual networks, routing, firewalls, VPN services, traffic inspection, and monitoring. Your daily work involves automating network deployment, firewall integration, configuration validation, and environment teardown using infrastructure as code, scripting, APIs, and CI/CD pipelines. The role requires expertise in AWS Transit Gateway, Gateway Load Balancer, Palo Alto VM-Series firewalls, and AWS Network Firewall. You will utilize tools such as Terraform, CloudFormation, AWS CDK, TypeScript, Python, PowerShell, Bash, Git, and Wireshark. You will solve complex problems regarding network segmentation, traffic inspection, and ensuring environment isolation while troubleshooting interoperability issues within a secure infrastructure framework.
Design and automate secure, cloud-based cyber range networks using infrastructure-as-code frameworks like Terraform or AWS CDK.
Translate operational requirements into reusable components for virtual networks, routing, firewalls, VPNs, and traffic inspection.
Automate network deployment, firewall integration, configuration validation, and environment teardown using scripts and CI/CD pipelines.
Manage cloud networking services including AWS Transit Gateway, Gateway Load Balancer, and VPC endpoints.
Troubleshoot complex issues related to routing, traffic inspection, firewall functionality, and system interoperability.
Ensure network isolation between cyber ranges, corporate networks, and unauthorized external systems.
Integrate network telemetry with SIEM platforms like Elastic or Splunk for monitoring and analysis.
What we're looking for
High school diploma or GED.
Ability to obtain a DoD 8570 IAT Level II Certification within 3 months of start date.
5+ years of experience with network security or designing IT systems and networks for large commercial enterprises or government agencies.
3+ years of experience with firewalls, intrusion detection and prevention systems, network segmentation, boundary protection, or vulnerability assessment.
Experience designing and securing cloud or enterprise network architectures.
Experience with Palo Alto, Cisco, or Juniper firewalls.
Experience automating infrastructure using an infrastructure-as-code framework such as AWS CDK, CloudFormation, or Terraform.
Experience developing automation with TypeScript, Python, PowerShell, Bash, APIs, or orchestration tools; and experience with routing, switching, VPNs, security groups, network access controls, and traffic inspection.