812146 Network Engineer $245,000.00

B4Corp; Chantilly (VA); On-site; USD 221,000 - 270,000; Full time

Benefits offered by this job

401k with employer match

Phantom stock

Medical, dental, vision insurance

Paid time off

Referral bonus

Job summary

B4Corp in Chantilly, VA is seeking a Network Engineer SME to manage security and performance of a VDI environment, including firewall, VPNs, and endpoint policy enforcement. The role requires TS/SCI with polygraph and hands-on configuration of Palo Alto, Cisco Firepower, Nexus switches, and OpenVPN/IPsec-based VPNs.

The candidate will design and operate a VMware Horizon-based VDI, implement Zero Trust networking, manage endpoint provisioning and hardening, and develop automation to streamline

Qualifications

• Hands-on firewall administration and network access controls.
• Experience with VPN tunneling and secure remote access.
• Experience securing and managing endpoint devices and emulation environments.

Responsibilities

• Manage security and performance of a VMware Horizon VDI environment.
• Configure and optimize firewalls, VPNs, VLANs, and access controls.
• Develop automation scripts for policy enforcement and desktop deployment.
• Engineer Zero Trust network segmentation and endpoint hardening.

Skills

firewall administration

VPN tunneling

endpoint security

mobile emulation environments

Zero Trust security

Tools

Palo Alto PA-3430

Cisco Firepower 2130s

Nexus switches

OpenVPN/IPsec

VMware Horizon

vSphere

Cisco HyperFlex

ManageEngine

Job description

Details

Labor Category: Network Engineer

Position Title: Network Engineer

Position Level: Level 1 - Subject Matter Expert

Salary: Up to $245,000.00 per year

Core Hours: 9am to 4pm

Location: Chantilly VA

Description

Position Requires a Top Secret (TS/SCI) Clearance with a Polygraph. IT - Network Engineer (SME) - The Candidate shall manage security and performance of virtual desktop infrastructure (VDI), to include networking components, administering firewall policies, VPNs, network segmentation, and endpoint policy enforcement. The Candidate shall ensure network and endpoint systems are secure, efficient, and compliant. The Candidate shall manage Palo Alto PA-3430, Cisco Firepower 2130s, and Nexus switches and administer and optimize firewall and network switch configurations. The Candidate shall configure OpenVPN/IPsec-based VPNs for secure remote access in a VDI environment. The Candidate shall segment networks using VLANs and Access Control Lists in a Zero Trust model. The Candidate shall implement network segmentation strategies to enhance security and minimize the attack surface. The Candidate shall oversee endpoint provisioning, patching, and hardening via ManageEngine, to include managing the lifecycle of endpoint devices, provisioning, patching, and hardening to ensure they are secure and up to date. The Candidate shall administer Windows 11, Linux, and BlueStacks. The Candidate shall manage and support endpoint operating systems and Android emulators to ensure they meet performance and security standards. The Candidate shall enforce GPOs and AD-integrated access controls. The Candidate shall implement and manage Group Policy Objects and Active Directory integrated access controls to enforce security policies and user permissions. The Candidate shall develop and deploy automation scripts to streamline policy enforcement and system management tasks. Work Requirements for Systems Engineering and Architecture: The Candidate shall design, deploy, and optimize a VMware Horizon-based VDI environment using vSphere and Cisco HyperFlex, including Android emulation, golden image management, and GPU virtualization, to ensure a secure, scalable, and high-performance virtual desktop infrastructure. The Candidate shall architect and maintain a scalable, secure VMware Horizon-based VDI platform. The Candidate shall manage and optimize Cisco HyperFlex hyperconverged infrastructure, including compute, storage, and network stack, to support the VDI environment. The Candidate shall design, optimize, and manage golden images for Windows 11 and Linux. The Candidate shall create and maintain standardized images for virtual desktops, ensuring they are optimized for performance and security. The Candidate shall implement GPU virtualization to enhance the performance of Android emulators used within the VDI environment. The Candidate shall implement automation workflows for desktop deployment and updates. The Candidate shall develop and deploy automation scripts and workflows to streamline the provisioning and updating of virtual desktops.

Mandatory Requirements

• Developmental (0-2 years' experience)
• Full Performance (3-5 years' experience)
• Senior (6-10 years' experience)
• Expert (11-15 years' experience)
• SME (16+ years' experience)
• Demonstrated hands on experience with firewall administration, Network Access Control, and Access Controls.
• Demonstrated experience with VPN tunneling.
• Demonstrated experience with endpoint security and mobile emulation environments.
• Demonstrated experience in securing and managing endpoint devices, including mobile emulation environments such as BlueStacks.

Optional Requirements

• Certifications: CCNP Security, PCNSE, ITIL v4, Microsoft MCP, or CompTIA Linux+.
• Demonstrated experience collaborating with cybersecurity and VDI teams, Sponsor or otherwise.
• Demonstrated experience providing training and support.
• Demonstrated experience developing and maintaining network and endpoint security policies and procedures.
• Demonstrated experience conducting regular security assessments.
• Demonstrated experience implementing Zero Trust security model.

B4CORP Company Information

B4Corp is a small defense contracting company that focuses on providing an optimum environment for mission-focused, highly skilled consultants to support the United States of America’s intelligence community and other defense organizations. B4Corp provides a low overhead, highly efficient, high salary environment that allows employees to excel at meeting the client’s needs. B4Corp is looking for information technology professionals that have a high sense of personal responsibility, self-motivation, and mission drive.

B4Corp's dedication and care for its employees is reflected in our outstanding compensation and benefits package. B4Corp's benefits reflect the company's policy of putting the employees first. B4Corp's maximum flexibility comp / makeup time policy, along with the company's cafeteria-style benefit plan that allows employees to maximize their Benefit Dollars, reflects B4Corp's commitment to its employees.

Compensation

• Outstanding Salaries

Retirement

• Full Vanguard 401k Plan - Featuring a full scope of investment options - 100% employer matched contribution up to 6% of employee's salary - Ability to max out 401k savings $57k ($63.5k if over 50)
• Employees receive B4Corp phantom stock each year (2-year vesting period)

Insurance

• Medical - United Health Care (UHC) (multiple plan options)
• Dental - United Concordia (UC) Flex Plan
• Vision - Vision Service Plan Insurance Co (VSP) Signature Plans
• Mutual of Omaha short-term disability (60% of salary up to $2,000.00/week)
• Mutual of Omaha long-term disability (60% of salary up to $10,000.00/month)
• Mutual of Omaha life insurance ($200,000.00)

Employee Referral Bonus

• Refer a friend or a coworker and receive $3,000 per year for every year the person works for B4CORP

Paid Time Off (PTO)

• Seven weeks of leave per year (including ten federal holidays)
• Flexible work schedule with comp time (with customer approval)

B4Corp is an EEO and e-Verify employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, sexual orientation or national origin. Please take the time to review and complete these three voluntary identification forms if you choose to do so and email them to [e-mail].