Zero Trust Network Security Engineer

Booz Allen Hamilton

Confirmed live yesterday High trust

Quick summary

Work type: On-site
Location: Scott AFB, IL
Salary: $86,800–$198,000 / yr
Posted: 23 days ago
Freshness: Confirmed live yesterday
Nearby: 92 roles within 25 mi

Market check

Salary context

Below market

How this pay compares to similar roles

Similar $176k

This role $142k

$71k most similar roles pay here $232k

This role pays less than 80% of similar roles. Most pay $145,700–$205,325 — the shaded band above. At the midpoint, this role pays about $142k versus about $176k for comparable roles.

Based on 240 similar postings.

Employer

About Booz Allen Hamilton

Booz Allen Hamilton is a management and technology consulting firm that provides analytics, digital, engineering, and cybersecurity solutions primarily to U.S. government agencies and commercial clients. Industry: Management & Technology Consulting

Booz Allen Hamilton currently has 802 open roles on FindRole.

Listed pay typically runs $86,800–$198,000 across 783 roles with salary data.

Most-posted roles

View all roles at Booz Allen Hamilton

At a glance

TL;DR · Zero Trust Network Security Engineer

Role Posting Log in to save

As a Zero Trust Network Security Engineer, you will join the team to design and support remote access and conditional access enforcement solutions in support of the Department of Defense's Zero Trust mission. You will be responsible for evaluating and modernizing legacy VPN infrastructure into Security Service Edge (SSE) and Zero Trust Network Access (ZTNA) capabilities. Your daily work involves developing skills in identity, device posture, and policy-based access control to create real-time evaluation solutions for mission-critical resources. The role requires expertise in networking fundamentals like IP addressing, routing, LAN/WAN architecture, and firewall concepts. You will utilize tools such as Versa Networks or Palo Alto Prisma Access while navigating Linux or UNIX environments. Key technical competencies include knowledge of ICAM capabilities, NIST 800-53 standards, FIPS, and DoD STIGs to solve complex access control challenges.

Skills

Zero Trust ZTNA SSE SASE VPN Palo Alto Prisma Access Versa Networks ICAM Linux UNIX NIST 800-53 FIPS DoD STIGs LAN WAN Security+

What you'll do

Design and support remote access and conditional access enforcement solutions for the DoD.
Modernize legacy VPN infrastructure into Security Service Edge (SSE) and Zero Trust Network Access (ZTNA) capabilities.
Develop technical specifications to translate real-world access control challenges into engineering solutions.
Implement policy-based access controls based on user identity, device posture, and organizational policy.
Create conditional access solutions that evaluate users and devices in real time before they reach mission-critical resources.
Manage and support large-scale, DoD-wide Zero Trust conditional access initiatives.

What we're looking for

5+ years of experience supporting DoD enterprise security architectures.
Experience designing, deploying, and supporting remote access solutions, including traditional VPN or SSE solutions.
Knowledge of networking fundamentals, including IP addressing, routing, LAN/WAN architecture, and firewall concepts.
Ability to design and support ZTNA solutions based on user identity, device posture, and organizational policy.
HS diploma or GED.
Experience with SASE platforms, classified spaces, cross-functional collaboration, and Linux/UNIX environments (preferred).
Knowledge of DoD C2C, ICAM, NIST 800-53, FIPS, STIGs, and Security+ Certification (preferred).
Secret clearance.

Similar roles

Zero Trust Information Systems Security Engineer

Booz Allen Hamilton

Honolulu, HI 23 days ago $99,000–$225,000

Zero Trust ICAM PAM Delinea SailPoint Radiant Logic Ping Federate Active Directory SAML OAuth 2.0 OpenID Connect NIST 800-207 Splunk Elastic Logstash Kibana Cribl Confluent PowerShell Ansible Terraform Python Puppet Chef IDS IPS Firewalls

3+ yrs exp

Save

Zero Trust Solutions Engineer

Booz Allen Hamilton

Washington, DC 3 days ago $99,000–$225,000

Zero Trust Identity and Access Management Attribute-Based Access Control Micro-segmentation Automation and Orchestration Cloud Security AWS Azure Cloud GCP NGFW AI Machine Learning Big Data Security Architecture

5+ yrs exp

Save

Network Security Automation Engineer

Booz Allen Hamilton

McLean, VA 23 days ago $99,000–$225,000

AWS Terraform CloudFormation AWS CDK Python TypeScript Bash PowerShell CI/CD Ansible Git Wireshark VPN Splunk Elastic STIGs Network Security Infrastructure as Code

5+ yrs exp

Save

Firewall Network Security Engineer

Intel

Chandler, AZ 115 days ago $105,300–$175,210

Fortinet FortiGate FortiOS FortiManager FortiAnalyzer BGP OSPF NAT IPS IDS Ansible Python APIs SIEM NAC Splunk Wireshark UNIX IPSec SSL MFA SNMP NIST STIG

3+ yrs exp

Save

Zero Trust Cybersecurity Manager

General Dynamics

Tampa, FL 17 days ago $133,450–$180,550

Zero Trust ICAM Trellix Enterprise Security Suite Splunk Cisco Identity Services Engine (ISE) Forescout Network Micro-Segmentation SIEM SOAR UEBA NIST SP 800-207 Project Management PMP

5+ yrs exp

Save

Prisma Access Engineer

Booz Allen Hamilton

Fort Meade, MD +4 16 days ago $99,000–$225,000

Prisma Access Palo Alto Firewalls ZTNA Network Security Routing Switching TLS mTLS PKI NIST 800-53 FIPS FedRAMP GlobalProtect Azure AWS Linux UNIX SSH CLI RDP

4+ yrs exp

Save