Security Engineer

About the role

The Security Engineer will design, implement, secure, and support enterprise network and security infrastructures while ensuring compliance with CMMC and other cybersecurity frameworks. This role requires strong experience with secure network architecture, security controls, risk mitigation, and enterprise networking technologies. The ideal candidate is a hands-on technical expert who enjoys solving complex security challenges while working collaboratively with clients and internal engineering teams.

Responsibilities

• Design, implement, and support secure enterprise network architectures.
• Design and maintain environments that meet Cybersecurity Maturity Model Certification (CMMC) requirements.
• Implement and maintain security controls aligned with industry best practices.
• Configure, optimize, and troubleshoot enterprise network infrastructure.
• Develop and maintain technical documentation, network diagrams, and security architecture documentation.
• Implement and support firewalls, VPNs, network segmentation, NAC, and secure remote access solutions.
• Configure and troubleshoot routing and switching technologies in enterprise environments.
• Analyze security risks and recommend remediation strategies.
• Participate in security assessments, audits, and compliance initiatives.
• Collaborate with engineering teams to integrate secure network solutions into client environments.
• Provide technical leadership and mentorship to junior engineers.
• Stay current with emerging cybersecurity threats, technologies, and best practices.

Requirements

• Demonstrated experience supporting organizations with CMMC compliance (Required)
• Minimum 5–10 years of enterprise networking and security engineering experience.
• Strong experience designing and implementing secure enterprise network architectures.
• Expert knowledge of Cisco routing and switching technologies.
• Extensive experience configuring and troubleshooting enterprise networking equipment.
• Strong understanding of:
  • BGP
  • OSPF
  • EIGRP
  • VLANs
  • STP
  • VTP
  • VRFs
• Experience implementing and supporting:
  • Enterprise Firewalls
  • VPN technologies
  • Access Control Lists (ACLs)
  • 802.1X Network Access Control
• Experience with Microsoft enterprise environments and secure infrastructure.
• Excellent analytical, troubleshooting, and documentation skills.
• Strong verbal and written communication skills.
• Ability to work independently and collaboratively within a team.

Qualifications

Candidates should possess one or more of the following certifications:

• Active experience supporting CMMC compliance (Required)
• Cisco CCNP Enterprise or CCNP Data Center
• Cisco CCIE or CCDE
• Offensive Security Certified Professional (OSCP)

Preferred Qualifications

• Experience with one or more of the following is highly desirable:
  • Alto Networks
  • Fortinet
  • Juniper Networks
  • Meraki
  • HPE Aruba
  • Sophos
  • Brocade
• Additional cybersecurity certifications are a plus:
  • PNPT
  • CRTO
  • eCPPT
  • eCPTX
  • CRTP
  • CRTE
• Experience with advanced security research and offensive security technologies:
  • DragonOS
  • RF Hacking
  • Software-Defined Radio (SDR)
  • HITB Training

Benefits

• 401(k) matching
• Dental insurance
• Employee discount
• Health insurance
• Life insurance
• Paid time off
• Professional development assistance
• Vision insurance

Pay

$90,000 - $100,000