Senior Cybersecurity Engineer – Network Security, Zero Trust, Automation

This is a fully remote position, open to applicants in United States.

📋 Description

• Deliver senior-level technical expertise in the design, implementation, integration, operation, sustainment, and modernization of enterprise cybersecurity platforms within a complex federal environment.

• Engineer, administer, troubleshoot, optimize, and maintain enterprise firewall technologies.

• Provide hands-on engineering for next-generation firewalls, secure remote access, segmentation, and network security services.

• Oversee the firewall policy lifecycle, including rules, objects, NAT, security profiles, recertification, cyber hygiene, optimization, and the removal of outdated or overly permissive policies.

• Lead changes to firewall and security platforms through impact analysis, testing, change control, rollback, validation, and documentation.

• Support Zero Trust and SASE capabilities, including ZTNA, Secure Web Gateway, Firewall-as-a-Service, secure remote access, segmentation, device posture, and policy enforcement.

• Troubleshoot complex issues related to routing, NAT, VPN, DNS, authentication, PKI/certificates, TLS/SSL inspection, logging, performance, and high availability.

• Assist with platform deployments, upgrades, patching, hardening, configuration management, vendor escalation, and vulnerability remediation.

• Engineer and support SOAR, security automation, workflow orchestration, and integrations based on APIs.

• Develop automation for alert enrichment, IOC analysis/blocking, incident triage, ticket creation, containment, remediation, policy changes, and reporting.

• Integrate security capabilities and telemetry across SIEM/XDR, endpoint, identity, ITSM, vulnerability management, DLP, NAC, threat intelligence, cloud services, and enterprise logging/data platforms.

• Evaluate AI-assisted security operations while ensuring human validation and guardrails are in place.

• Support greenfield deployments, migrations, environment separation, coexistence, testing, and transition to operations.

• Collaborate with Security Operations, network engineering, IAM/ICAM, endpoint, NAC, vulnerability management, cloud, and infrastructure teams.

• Act as a senior technical escalation point and may serve as a technical or project lead.

• Create architecture diagrams, SOPs, implementation/test plans, runbooks, troubleshooting guides, configuration baselines, and as-built documentation.

• Support security assessments, authorization activities, audits, evidence collection, and compliance requirements.

• Ensure that configurations and engineering changes comply with cybersecurity policies, technical standards, approved architectures, and change-management protocols.

⛳️ Requirements

• Bachelor’s degree in Computer Science, Cybersecurity, IT, Engineering, or a related STEM field, along with 10+ years of relevant experience; allowable substitutions may apply per contractual labor-category requirements.

• 7+ years of experience related to the qualifications listed in the job description.

• Significant hands-on experience in engineering and troubleshooting enterprise next-generation firewalls in complex production environments.

• Strong background in firewall policy lifecycle management, NAT, zones, segmentation, logging, optimization, and change control.

• Solid understanding of network engineering fundamentals including TCP/IP, routing, BGP, DNS, DHCP, NAT, VPN, TLS/SSL, PKI/certificates, packet analysis, and high availability.

• Experience with Zero Trust/SASE technologies and familiarity with NIST SP 800-207 or comparable Zero Trust principles.

• Working knowledge of SOAR, security automation, APIs, workflow orchestration, and security platform integration.

• Proficiency in Python, REST API, JSON, webhooks, or similar technologies is strongly preferred.

• Experience in integrating enterprise security platforms and telemetry is strongly preferred.

• Experience with greenfield deployments, migrations, environment separation, or independently managed security environments is strongly preferred.

• Familiarity with Palo Alto Networks or comparable enterprise network security and SASE technologies is strongly preferred; direct experience with Palo Alto is highly desirable.

• Prior experience in federal, government, or highly regulated enterprise environments is preferred.

• Relevant professional certifications are preferred; no specific certification is mandatory.

• Strong analytical, troubleshooting, documentation, communication, and cross-functional collaboration skills.

• Ability to support planned maintenance and change windows, including occasional after-hours activities.

• Capable of providing senior technical support for priority incidents or service-impacting security platform issues.

• Must be eligible to obtain and maintain the required federal suitability determination/background investigation.

• US citizenship is required.

• Public Trust/Other Required: BI Full 6C (T4)

🏝️ Benefits

• Options for medical plans, including some with Health Savings Accounts.

• Dental plan options available.

• Vision plan options provided.

• 401(k) plan featuring pre- and post-tax contributions along with a company match.

• Flexible work weeks where possible.

• Vacation, sick leave, personal leave, holiday leave, paid parental leave, military leave, bereavement leave, and jury duty leave.

• Typically, 15 days of paid leave per calendar year.

• 10 paid holidays each year.

• Up to 160 hours of paid family leave available in a rolling 12-month period for eligible employees.

• Short- and long-term disability benefits provided.

• Life insurance coverage.

• Accidental death and dismemberment insurance included.

• Personal accident insurance offered.

• Critical illness insurance available.

• Business travel and accident insurance provided.

• Options for remote work/telecommuting.