Principal Network Security Engineer

What you'll do

• Design and implement enterprise network security architecture including firewalls, IDS/IPS, proxies, and VPN services.
• Lead network segmentation efforts by mapping data flows and designing security zones and enclaves.
• Develop and deploy network access control and device-posture enforcement policies across the enterprise.
• Engineer secure connectivity between on-premises, cloud, and remote environments using IPsec and TLS.
• Drive security engineering projects from initial requirements analysis through execution, validation, and operational transition.
• Serve as the senior technical authority by providing direction, mentoring, and guidance to engineering teams.
• Create and maintain technical documentation including architecture diagrams, firewall standards, and migration runbooks.
• Support accreditation and compliance activities by implementing security controls and providing required technical artifacts.

What we're looking for

• Bachelor's degree with 12+ years of relevant experience, or a Master's degree with 10+ years of experience.
• Significant experience designing and implementing network security architecture in complex, large-scale enterprise environments.
• Experience serving as a senior technical lead directing the work of network and security engineers, administrators, and analysts.
• Experience leading security engineering projects from planning through implementation, including requirements analysis and risk reduction.
• Hands-on engineering experience with next-generation firewalls, IDS/IPS, proxies, TLS inspection, VPN, and network access control.
• Experience with network segmentation, data-flow analysis, firewall/ACL policy review, and security-zone design.
• Strong knowledge of TCP/IP, routing, switching, DNS/DHCP/IPAM, NAT, QoS, and software-defined or cloud-connected networks.
• Hands-on experience with two or more of the following: Palo Alto, Cisco, Aruba, Dell, Infoblox, or Brocade.
• Working knowledge of Federal requirements including NIST, FedRAMP, FISMA, RMF, DISA STIGs, and DoD cybersecurity requirements.
• Experience documenting designs and plans using tools such as Visio, PowerPoint, or Cameo.
• Excellent written and verbal communication skills for briefing technical leadership and cybersecurity authorities.
• Current IAT Level II or higher certification, such as Security+ or CISSP.
• Active DoD Secret clearance.
• CISSP, Palo Alto PCNSE, Cisco CCNP Security, or equivalent advanced security certification (preferred).
• Experience implementing Comply-to-Connect, 802.1X, or comparable network access control at enterprise scale (preferred).
• Experience with zero-trust architecture, micro-segmentation, SASE, or secure cloud connectivity designs (preferred).
• Experience integrating network security platforms with SIEM, SOAR, ITSM, and analytics tooling (preferred).
• Experience with security automation and infrastructure-as-code using Python, Ansible, or REST APIs (preferred).
• Experience with certificate and PKI management, encrypted-traffic inspection, and key management (preferred).
• Experience supporting RMF, eMASS, continuous monitoring, and audit or inspection activities (preferred).
• Experience with Jira, Confluence, or other project and knowledge-management tools (preferred).
• Experience developing repeatable engineering execution frameworks, implementation playbooks, and migration runbooks (preferred).