Sr. Network Security Engineer III (6852)
Hands-on network security SME at MetroStar designing, operating, and hardening mission-critical federal networks — next-gen firewalls, VPNs, IPS/IDS, and NAC across Palo Alto, Fortinet, and Cisco (ISE/ASA) platforms, with a Zero Trust focus. Requires an active Top Secret clearance and 10+ years of enterprise network security experience.
- Compensation
- $207K–$320K / yr
- Location
- Washington, DC
- Work setup
- Not specified
- Seniority
- Senior
- Employment
- Full time
- Experience
- 10+ years
- Category
- Security
- Posted
Skills
Must have
- Active U.S. Government issued Top Secret security clearance (or higher)
- Security+ certification
- At least one platform-specific security certification (e.g., PCNSE/Network Security Professional or a Cisco security certification)
- DoD 8140 certification aligned to the 441 Network Operations Specialist work role (Network+, Security+, Cloud+, SSCP, CASP+, CISSP, or CCNP Security)
- 10+ years of network engineering experience with a primary focus on enterprise network security infrastructure
- SME expertise designing, implementing, and managing next-generation firewalls, VPNs, IPS, and NAC platforms
- Hands-on experience securing network perimeters and internal segments, including policy design, segmentation, and threat mitigation
- Operational experience deploying, managing, maintaining, and upgrading firewall rule sets, VPN tunnels, and security policies in mission-critical environments
- Deep hands-on experience managing, maintaining, and upgrading Palo Alto Networks enterprise security platforms
- Hands-on experience with Cisco security technologies
- Hands-on experience with Cisco ISE and Cisco ASA environments
- Hands-on experience with IDS/IPS solutions and endpoint configuration hardening in secure environments
- Experience supporting Zero Trust architectures and identity-centric network security patterns
- Ability to contribute immediately with minimal ramp-up in a mission-critical operational environment
- Participate in Agile execution, technical planning, and security risk discussions
Nice to have
- Bachelor's degree in a technical field (relevant experience may substitute)
Full description
As a Sr. Network Security Engineer III, you’ll provide hands-on expertise securing mission-critical networks for a high-visibility customer with the goal of making an impact across the federal government. Our team is responsible for designing, operating, and hardening complex security environments, and you’ll play a critical role in strengthening, scaling, and protecting these environments while enabling secure mission delivery across the organization.
We know that you can’t have great technology services without amazing people. At MetroStar, we are obsessed withour people and have led a two-decade legacy of building the best and brightest teams. Because we know our future relies on our deep understanding and relentless focus on our people, we live by our mission: A passion for our people. Value for our customers.
If you think you can see yourself delivering our mission and pursuing our goals with us, then check out the job description below!
What you’ll do:
- Design, implement, and manage firewalls, VPNs, IPS, and NAC solutions in mission-critical environments
- Secure network perimeters and internal network segments using defense-in-depth strategies
- Respond rapidly to security incidents, vulnerabilities, and operational needs with urgency and discipline
- Support continuous security hardening and improvement of network infrastructure
- Participate in Agile execution, technical planning, and security risk discussions
- Communicate security impacts, risks, and mitigation strategies clearly to technical and non-technical stakeholders
- Recommend and implement security architecture and operational improvements
- Serve as a hands-on technical SME, contributing immediately with minimal ramp-up
- Establish and maintain a high level of customer trust and confidence through reliable, secure delivery
- Apply creativity and engineering judgment to deliver practical, mission-focused security solutions
- Demonstrated subject matter expertise designing, implementing, and managing next-generation firewalls, VPN solutions, intrusion prevention systems, and network access control platforms.
- Hands-on experience securing network perimeters and internal network segments, including policy design, segmentation, and threat mitigation.
- Operational experience deploying and managing firewall rule sets, VPN tunnels, and security policies in mission-critical environments.
- Hands-on experience with at least one enterprise security platform, such as Palo Alto Networks, Fortinet, or Cisco security technologies.