Job DescriptionThe Senior Network Security Design Engineer serves as a technical subject matter expert responsible for designing, prototyping, documenting, and supporting enterprise network security solutions.
This role focuses on secure network architecture, data center and WAN security, firewall and web application security, traffic inspection, encryption, VPN connectivity, and integration of multi-vendor security technologies. The engineer will build and test solutions in laboratory environments, evaluate emerging technologies, and support deployment and sustainment teams as solutions move into production.
The successful candidate will be comfortable working in complex enterprise environments, collaborating with network, security, systems, and application teams, and translating technical designs into reliable, supportable implementations.
Responsibilities:- Design, engineer, and document enterprise network security solutions across data center, campus, WAN, and enclave environments.
- Develop laboratory prototypes that replicate production network and security architectures.
- Design and support solutions involving:
- Enterprise firewalls
- Web application firewalls
- Intrusion detection and prevention
- SSL/TLS break-and-inspect architectures
- Packet brokers and security appliance integration
- VPN and encrypted transport solutions
- Application delivery controllers and load balancing
- Network segmentation and routing isolation
- Evaluate existing network security architectures and recommend improvements to security, availability, performance, and operational supportability.
- Support the design and implementation of Cisco, F5, Palo Alto, and related network security technologies.
- Develop implementation plans, test plans, diagrams, operating procedures, and other technical documentation.
- Troubleshoot complex interoperability and performance issues across multi-vendor network and security environments.
- Assist deployment and sustainment teams with production implementation, transition, and technical escalation.
- Collaborate with network, cybersecurity, systems, application, and infrastructure engineering teams.
- Identify and communicate relevant security threats, vulnerabilities, and technology risks.
- Ensure designs align with applicable security and compliance requirements, including FISMA, DISA STIG, and FIPS requirements where applicable.
- Provide technical mentoring, knowledge transfer, and instructional sessions for engineering and operations personnel.
- Participate in architecture reviews, project planning, technology evaluations, and engineering team meetings.
- Provide concise status updates and project reporting.
This position is designed to be flexible, with responsibilities evolving to meet business needs and enable individual growth.
Requirements:- U.S. Citizen
- Active Secret Clearance
- Bachelor's degree in computer science, information technology, engineering, or a related technical field; equivalent experience may be considered.
- 8 or more years of experience in enterprise network engineering, network security engineering, or telecommunications.
- Advanced knowledge of Cisco enterprise routing and switching technologies.
- Experience designing, implementing, and troubleshooting complex enterprise networks.
- Experience with network security architecture, including firewalls, IDS/IPS, access control, segmentation, and secure network services.
- Experience with IP routing and switching protocols such as BGP, OSPF, EIGRP, VRF, and MPLS.
- Experience with IPsec VPNs, GRE, GETVPN/GDOI, or comparable encrypted network technologies.
- Experience designing or supporting SSL/TLS inspection or decryption architectures.
- Experience building and testing complex network solutions in a lab or development environment.
- Ability to produce clear architecture documents, network diagrams, implementation plans, and operational procedures.
- Ability to work effectively with technical and non-technical stakeholders.
- Ability to obtain and maintain required security and technical certifications.
Preferred Qualifications:- Experience with F5 BIG-IP technologies, including one or more of the following:
- Local Traffic Manager
- Global Server Load Balancing
- DNS
- Advanced firewall or application security capabilities
- SSL Orchestrator
- Application Security Manager
- Experience with Cisco ASR, ISR, Catalyst, and Nexus platforms.
- Experience with Palo Alto firewalls.
- Experience with web proxies, packet brokers, content switching, and security appliance integration.
- Experience supporting FISMA, NIST, DISA STIG, or other regulated environments.
- Knowledge of FIPS 140-2/140-3 requirements.
- Experience with high-availability data center, campus, or global WAN environments.
- Experience designing network security solutions for cloud or hybrid environments, including AWS or Microsoft Azure.
- Experience with network automation or device APIs using Python, PowerShell, Netmiko, Ansible, or comparable tools.
- Cisco certification at the CCNP level or equivalent knowledge.
- Security certification such as Security+, CySA+, SSCP, GSEC, or equivalent.
*Core4ce provides the listed pay range for this position as a general guideline only and not as a guarantee of compensation or salary. Final offers may take into account a variety of factors, including, but not limited to, job responsibilities, education, experience, knowledge, skills, abilities, internal equity, market data alignment, any applicable collective bargaining agreement, and other legal requirements.
