Principal Network Security Engineer

Grow, innovate, and generate progress: Harness your expertise to solve challenges and celebrate success! Job Summary JCS Solutions is seeking a Principal Network Security Engineer to design, engineer, and implement enterprise network security capabilities across a large, distributed Department of Defense network environment. This role serves as a senior technical leader responsible for advancing network security architecture through strategic engineering efforts that strengthen segmentation, access control, zero-trust initiatives, resiliency, and enterprise-wide security posture. The successful candidate will assess current network security architectures, identify capability gaps, develop implementation strategies, and lead engineering teams through complex modernization efforts. This position requires expertise in network security architecture, firewall technologies, intrusion prevention, network access control, segmentation, encryption, and secure connectivity across enterprise environments. This role requires a hands-on engineer capable of developing solutions, directing technical teams, communicating with stakeholders and approval authorities, and delivering secure, scalable, and sustainable network security capabilities. Location: Ft. Meade, MD Clearance: Secret Salary: $104,000.00 - $149,000.00 Certification: Active DoD 8140/8570 IAT Level II certification. What’s in it for you: Join a premier technology firm specializing in innovative solutions. Be part of a collaborative, inclusive, and innovative work culture. Enjoy tremendous growth potential in a high-performing team environment. A robust benefits package:Health, dental, and vision insurance Life insurance Short-and-long term disability Paid time off (PTO) 401k retirement plan with employer match Annual Professional Development Reimbursement Program And more! What you will do: Network Security Engineering and Architecture Design, engineer, and implement enterprise network security architectures spanning next-generation firewalls, intrusion detection and prevention systems, web and TLS proxies, VPN and encryption services, network access control, DNS security, and east-west security controlsEvaluate existing network security architecture and identify security gaps, improvement opportunities, risks, and implementation approachesLead network segmentation and secure connectivity initiatives, including data-flow mapping, security-zone design, enclave development, firewall rule review, ACL rationalization, and routing coordinationDesign and implement network access control and device-posture enforcement solutions, including identity validation, device authentication, policy enforcement, remediation workflows, and phased implementation strategiesAdvance zero-trust networking principles, least-privilege access, micro-segmentation, and encrypted communications strategiesEvaluate and recommend emerging security technologies to improve enterprise security capabilitiesEngineer secure connectivity between on-premises, cloud, and remote environments utilizing VPN, TLS, IPsec, cloud interconnects, and boundary protection technologiesOptimize security controls to reduce false positives, improve visibility, strengthen enforcement capabilities, and maintain network performance Project Execution Lead network security projects from concept through implementationPerform requirements analysis, dependency identification, architecture review, design coordination, planning, validation, and operational transition activitiesDevelop implementation plans, cutover strategies, rollback plans, validation procedures, and stakeholder communication plansCoordinate maintenance windows, testing efforts, change activities, and contingency planning for security infrastructure modificationsCollaborate with network engineering, cybersecurity, operations, project management, and subject matter experts to successfully deliver network security initiativesSupport security accreditation, compliance, STIG implementation, vulnerability remediation, POA&M activities, and authorization requirements Technical Leadership Serve as the senior technical authority for network security architecture and design decisionsProvide technical direction, mentoring, and engineering guidance to network engineers, security engineers, administrators, and analystsManage multiple concurrent technical efforts and maintain accountability against project schedulesPresent security architecture recommendations, implementation strategies, risks, and technical decisions to government leadership, cybersecurity authorities, and approval boardsImprove engineering processes, documentation standards, implementation playbooks, migration runbooks, and operational handoff procedures Documentation Develop and maintain network security architecture diagrams and logical/physical design documentationCreate data-flow diagrams, segmentation models, security-zone designs, and secure connectivity documentationMaintain firewall policy standards, ACL documentation, and rule-set baselinesDevelop implementation plans, rollback procedures, test plans, validation packages, risk registers, and dependency documentationCreate accreditation artifacts, technical standards, SOPs, runbooks, as-built documentation, and transition-to-operations documentation What you will bring: Bachelor's degree or equivalent experience with 12+ years of relevant experience, or Master's degree with 10+ years of experienceSpecific experience, education, and training may be considered in lieu of a degreeActive DoD Secret security clearanceCurrent DoD 8140/8570 IAT Level II certification or higherSignificant experience designing and implementing network security architecture in complex, large-scale enterprise environmentsExperience serving as a senior technical lead directing network and security engineers, administrators, analysts, or implementation teamsExperience leading security engineering projects from planning through implementationHands-on engineering experience with:Next-generation firewallsIntrusion detection and prevention systemsProxies and TLS inspection solutionsVPN and encryption servicesNetwork access control platformsExperience with network segmentation and secure connectivity initiativesExperience with data-flow analysis, firewall policy reviews, ACL management, security-zone design, stakeholder coordination, and implementation planningStrong knowledge of:TCP/IPRouting protocolsSwitchingVLANsDNS/DHCP/IPAMNATQoSSoftware-defined networkingCloud-connected environmentsHands-on experience with two or more of the following technologies:Palo AltoCiscoArubaDellInfobloxBrocadeWorking knowledge of:NISTFedRAMPFISMARMFDISA STIGsDoD cybersecurity requirementsDemonstrated ability to manage competing priorities and deliver complex technical initiativesExperience documenting network and security architectures using Visio, PowerPoint, Cameo, or similar toolsExcellent written and verbal communication skillsExperience briefing senior leadership, cybersecurity authorities, stakeholders, and approval boardsExperience with wireless security and authentication, including WPA2/WPA3, 802.1X, RADIUS, and enterprise NAC platformsExperience integrating wireless infrastructure with enterprise networking services, including DNS, DHCP, NTP, routing, and monitoring platformsExperience developing and executing engineering designs, implementation plans, migration procedures, test plans, and production deploymentsStrong troubleshooting and analytical skills with the ability to resolve complex wireless connectivity, authentication, and network performance issuesStrong written and verbal communication skillsExperience providing technical guidance and developing engineering documentationMust meet applicable cybersecurity workforce qualification requirements for the assigned position. How you will wow us: CISSP, Palo Alto PCNSE, Cisco CCNP Security, or equivalent advanced security certificationExperience implementing Comply-to-Connect, 802.1X, or comparable network access control and device-posture enforcement solutions at enterprise scaleExperience with zero-trust architecture, micro-segmentation, SASE, or secure cloud connectivity designsExperience integrating network security platforms with SIEM, SOAR, ITSM, and analytics platformsExperience utilizing Python, Ansible, REST APIs, or similar technologies for security automation and infrastructure-as-code initiativesExperience with automated firewall policy managementExperience supporting enterprise certificate management, PKI environments, encrypted-traffic inspection, and key management servicesExperience supporting RMF, eMASS, continuous monitoring, audits, assessments, and inspection activitiesExperience utilizing Jira, Confluence, or similar project management and knowledge-sharing platformsExperience developing engineering execution frameworks, implementation playbooks, migration runbooks, technical standards, and risk-reduction methodologies JCS Solutions (JCS) is a premier technology firm providing innovative solutions and high-quality services in defense, national security, and civilian sectors. JCS offers enterprise-wide solutions including cloud computing, software development, cybersecurity, digital modernization, and management consulting for the federal government. At JCS, we elevate our customers’ mission through the application of technology and professional services. Our commitment to investing in our workforce drives innovation and progress for our clients, employees, and communities. JCS is both a Great Place to Work and a Top Places to Work certified company. Our employees embody our core values, and we are looking for others who do too! Customer Experience: Strive for excellence and delight our clients Innovation: Embrace creative thinking to enable continual growth and powerful solutions Accountability: Take ownership of and pride in our actions and service delivery Inspire: Be inspired to be your best self and have fun in the process Integrity: Do the right thing, the right way, every time! Stewardship: The careful and responsible management of something entrusted to our care. At JCS Solutions, compensation is based on a number of factors such as location, qualifications, and applicable contract terms. The general salary range for this position is as follows: $104,000.00 - $149,000.00 Commitment to Non-Discrimination All qualified applicants will receive consideration for employment without regard to any protected status protected by applicable federal, state, or local laws. NOTICE: Please be aware that all JCS Solutions communications related to job interviews and offers from our recruiting team will only come from @JCSSolutions.com. We want to emphasize that we do not conduct any interviews over Discord, Slack, Skype, Zoom, or any chat app. Powered by JazzHR ZMIUJGoEtN