Senior Network Security Engineer
Job Description
Support a large federal customer in Washington, DC as a Tier 3 network security specialist responsible for securing and operating enterprise network infrastructure.
Responsibilities
- Administer, configure, maintain, and troubleshoot Check Point firewalls in high-availability (HA) configurations
- Manage firewall security policies and access rules, including NAT policies, routing, software upgrades, and security patches
- Support Check Point Harmony for remote-access VPN connectivity
- Configure, monitor, and troubleshoot Check Point IPS/IDS (Intrusion Prevention and Intrusion Detection)
- Investigate network security incidents, connectivity problems, and service outages
- Provide Tier 3 escalation support for complex network security issues
- Configure and support Cisco Catalyst switches and other enterprise network infrastructure
- Implement and troubleshoot IEEE 802.1X network access control integrated with Cisco Identity Services Engine (ISE)
- Use network tools such as Cisco DNA center to identify network gear upgrades and IAVA/PSIRTS
- Configure and support security logging, monitoring, and analysis using SIEM platforms such as Microsoft Sentinel
- Respond to cybersecurity incidents and coordinate remediation activities
- Support Continuity of Operations (COOP) planning and implementation
- Maintain and support System Security Plans (SSPs) and Authorization to Operate (ATO) documentation and related compliance activities
- Manage security incidents, service requests, and change-management tickets
- Collaborate with engineering teams, federal stakeholders, and project managers to maintain a secure, reliable network environment
Requirements
- 10+ years of professional experience in network engineering, network security, or cybersecurity infrastructure
- Active Top Secret security clearance, or ability to obtain one
- Strong hands-on experience administering and troubleshooting Check Point firewalls
- Experience managing firewall policies, software upgrades, patch management, routing, and VPN connectivity
- Solid understanding of enterprise networking technologies, including TCP/IP, VLANs, routing, switching, and network troubleshooting
- Experience supporting enterprise network security operations and resolving complex technical issues
- Ability to communicate effectively with federal customers, technical teams, and project leadership
- Strong analytical, troubleshooting, and problem-solving skills
- Demonstrated ability to collaborate, mentor junior engineers, and work effectively in a team environment
Technologies
- Check Point firewalls
- High-availability (HA) configurations
- Check Point Harmony
- Check Point Intrusion Prevention and Intrusion Detection (IPS/IDS)
- Cisco Catalyst
- IEEE 802.1X
- Cisco Identity Services Engine (ISE)
- Cisco DNA center
- IAVA/PSIRTS
- Microsoft Sentinel
- SIEM platforms
- System Security Plans (SSPs)
- Authorization to Operate (ATO)
- COOP planning
Preferred Qualifications
- Industry certifications such as Check Point CCSA/CCSE, Cisco CCSP/CCIE, or equivalent certifications
- Experience with Cisco ISE and 802.1X
- Experience with Microsoft Sentinel or other SIEM platforms
- Experience with SolarWinds and Cisco Catalyst Center
- Familiarity with federal cybersecurity requirements, SSPs, ATO processes, and COOP planning
- Previous experience supporting federal government customers
Work Schedule
- Job Type: Full-Time
- Schedule: Monday–Friday
Location
- Washington, DC: Hybrid (Washington, DC 20266)
Benefits
- Highly competitive compensation with overtime opportunities
- Three weeks of Paid Time Off (PTO)
- 10 paid federal holidays
- 401(k) retirement plan with company matching
- Comprehensive medical, dental, and vision insurance
- PPO, HMO, and Health Savings Account (HSA) plan options
- Flexible Spending Account (FSA)
- Short-term and long-term disability insurance
- Life insurance and Accidental Death & Dismemberment (AD&D) coverage
- Annual tuition reimbursement
- Professional development and certification support
- 100% employer-paid parking
- Supportive team environment with emphasis on work-life balance
- Dental insurance
- Health insurance
- Life insurance
- Paid time off
- Professional development assistance
- Referral program
- Retirement plan
- Tuition reimbursement
- Vision insurance
Application Questions
- Do you have hands on experience with Checkpoint Firewalls?
- Do you have hands on experience with Cisco ISE and 802.1x?
- Do you hold an active Secret or Top-Secret clearance?
Experience (Additional)
- Configuring network equipment: 10 years (Preferred)
Licenses / Certifications (Additional)
- Do you have hold any Checkpoint /Cisco/Palo Alto Cert? (Preferred)