Zero Trust Network Security Engineer

Booz Allen Hamilton

Confirmed live today High trust

Quick summary

Work type
On-site
Location
Scott AFB, IL
Employment
Full-time
Posted
68 days ago
Freshness
Confirmed live today
Nearby
99+ roles within 25 mi

Market check

Salary context

How this pay compares to similar roles

Similar $179k
$119k $230k
below market most similar roles pay here above market

This listing doesn't post a salary. Most similar roles pay $145,000–$213,250.

Based on 240 similar postings.

Employer

About Booz Allen Hamilton

Booz Allen Hamilton is a management and technology consulting firm that provides analytics, digital, engineering, and cybersecurity solutions primarily to U.S. government agencies and commercial clients. Industry: Management & Technology Consulting

Booz Allen Hamilton currently has 1662 open roles on FindRole.

Listed pay typically runs $86,800–$198,000 across 904 roles with salary data.

Most-posted roles

View all roles at Booz Allen Hamilton

At a glance

TL;DR · Zero Trust Network Security Engineer

Role Posting Log in to save

The Zero Trust Network Security Engineer joins the team to design and support remote access and conditional access enforcement solutions for the Department of Defense Zero Trust mission. The role involves evaluating and modernizing legacy VPN infrastructure into Security Service Edge and Zero Trust Network Access capabilities. Day-to-day responsibilities include developing solutions that enforce access based on user identity, device posture, and organizational policy to protect mission-critical resources. Required technical skills include networking fundamentals like IP addressing, routing, LAN/WAN architecture, and firewall concepts. Candidates should possess experience with SSE solutions, Linux or UNIX environments, and federal compliance standards such as NIST 800-53, FIPS, and DoD STIGs. The position requires a Secret clearance and knowledge of ICAM capabilities and Comply to Connect requirements.

Skills

Zero Trust Network Access (ZTNA) Security Service Edge (SSE) SASE VPN Linux UNIX NIST 800-53 FIPS DoD STIGs Routing IP Addressing Palo Alto Prisma Access Versa Networks Conditional Access Network Security Engineering

What you'll do

  • Design and support remote access and conditional access enforcement solutions for the DoD.
  • Modernize legacy VPN infrastructure into Security Service Edge (SSE) and Zero Trust Network Access (ZTNA) capabilities.
  • Develop technical specifications for real-world access control challenges.
  • Implement ZTNA solutions based on user identity, device posture, and organizational policy.
  • Create conditional access solutions that evaluate users and devices in real time.
  • Support a large-scale, DoD-wide Zero Trust conditional access initiative.
  • Merge network security engineering with Zero Trust architecture and policy enforcement design.

What we're looking for

  • 5+ years of experience supporting DoD enterprise security architectures.
  • Experience designing, deploying, and supporting remote access solutions, including traditional VPN or SSE solutions.
  • Knowledge of networking fundamentals, including IP addressing, routing, LAN or WAN architecture, and firewall concepts.
  • Ability to design and support solutions that enforce ZTNA based on user identity, device posture, and organizational policy.
  • HS diploma or GED.
  • Experience with SASE platforms such as Versa Networks and Palo Alto Prisma Access (preferred).
  • Experience implementing solutions in classified spaces (preferred).
  • Secret clearance.

Related searches

More Zero Trust Network Security Engineer jobs Zero Trust Network Security Engineer jobs in Scott AFB All jobs at Booz Allen Hamilton

More like this

Similar roles

Zero Trust Information Systems Security Engineer

Booz Allen Hamilton

Honolulu, HI 68 days ago
Zero Trust ICAM SAML OAuth 2.0 OpenID Connect Active Directory LDAP SailPoint Radiant Logic Ping Federate Delinea Python Ansible Terraform Puppet Chef PowerShell Splunk Elastic Logstash Kibana Cribl Confluent Windows Linux TCP IP DNS DHCP HTTP HTTPS IDS IPS Firewalls AI ML NIST 800-207
3+ yrs exp
Save

Network Security Engineer

Booz Allen Hamilton

Fort Meade, MD +8 7 days ago $99,000–$225,000
Network Security Firewalls Palo Alto Cisco Juniper Wireshark SIEM AWS Azure GCP Python Ansible SD-WAN Packet Analysis Vulnerability Assessment STIGs Cloud Security
5+ yrs exp
Save

Network Security Engineer

Booz Allen Hamilton

San Diego, CA +8 4 days ago $99,000–$225,000
Network Security Firewalls Palo Alto Cisco Juniper Wireshark SIEM Python Ansible AWS Azure GCP SD-WAN Packet Analysis STIGs Vulnerability Assessment Cloud Security
5+ yrs exp
Save

Network Security Engineer

Booz Allen Hamilton

San Diego, CA 12 days ago $99,000–$225,000
Forescout Network Access Control (NAC) Cisco ISE Python PowerShell REST APIs 802.1X RADIUS EAP-TLS MAB Trellix CrowdStrike Microsoft Defender Microsoft Intune HBSS STIGs Risk Management Framework (RMF) Zero Trust Network Security Automation
5+ yrs exp
Save

Network Security Automation Engineer

Booz Allen Hamilton

McLean, VA 68 days ago
AWS Terraform Python TypeScript CloudFormation AWS CDK Palo Alto VM-Series CI/CD Ansible Bash PowerShell VPC Transit Gateway Gateway Load Balancer AWS Network Firewall Git Wireshark Elastic Splunk VPN
5+ yrs exp
Save

Principal Network Security Engineer

Leidos

Odenton, MD 19 days ago $116,350–$210,325
Network Security Architecture Next-Generation Firewalls VPN TLS Network Access Control DNS Security zero-trust Micro-segmentation IPsec TCP/IP Routing Protocols VLANs NAT QoS Palo Alto Cisco Aruba Dell Infoblox Brocade NIST FedRAMP FISMA RMF DISA STIGs Python Ansible REST APIs PKI SIEM SOAR Visio PowerPoint Cameo Jira Confluence
10+ yrs exp
Save