GovCIO is seeking a remote Network Engineer with strong Zscaler, Palo Alto Networks firewall, Cisco routing/switching, and McAfee Web Security Proxy experience to design, implement, and maintain secure network architectures and security solutions, requiring a bachelor’s degree or equivalent with 12+ years of experience, and the ability to attain an AOUSC Public Trustclearance.

This will be fully remote Continental USA.

• Design, implement, and operate next-generation firewall and web security proxy solutions, ensuring secure, high-availability network operations across data centers and nationwide field locations

• Design, implement, and maintain Palo Alto Networks next-generation firewall solutions, including security policies, NAT, VPNs, threat prevention, URL filtering, and decryption

• Engineer and support Cisco routing and switching infrastructure across LAN/WAN environments

• Design and maintain secure network architectures incorporating firewalls, web proxies, VPNs, and access control technologies

• Deploy, configure, and support McAfee Web Security Proxy (Web Gateway) to enforce web filtering, malware protection, and acceptable use policies

• Integrate firewall and proxy solutions with authentication systems (Active Directory, LDAP, RADIUS, TACACS+)

• Monitor security platforms for threats, performance issues, and policy violations

• Analyze logs and alerts to identify security incidents and implement mitigation strategies

• Perform configuration reviews, rulebase optimization, and security hardening

Bachelor’s degree in Computer Science, Information Technology, Engineering, or equivalent experiencewith12+ years (or commensurate experience)

Required Skills and Experience

• Strong Zscaler experience

• 5 years of IT or network security experience

• 3 years of hands-on experience with firewall and security platforms routers and switches

• Strong experience with:

• Palo Alto Networks firewalls

• Cisco routers and switches

• McAfee Web Security Proxy / Web Gateway

• In-depth knowledge of:

• TCP/IP, routing, and switching

• IPsec and SSL VPNs

• DNS, DHCP, NTP

• ACLs, NAT, QoS

• Experience with authentication and access control technologies:

• RADIUS / TACACS+

• Active Directory / LDAP

• 1X

Competencies and traits

• Strategic thinker with practical hands-on implementation experience.

• Strong problem-solving, stakeholder management, and facilitation skills.

• Ability to work across 24/7 operational teams and influence cross-functional processes.

• Detail-oriented with focus on resiliency, security, and automation.

Clearance Required:Must be able to attainand maintainan AOUSCPublic Trust

Preferred Skills and Experience

• Master’s preferred

• TOGAF, AWS/Azure/GCP Cloud Architect, CCNP/CCIE, CISSP, or equivalent.