Cybersecurity Network Engineer - Firewall & OT Security

Terrestris Global Solutions; Jacksonville (NC); On-site; USD 95,000 - 135,000; Full time

Benefits offered by this job

Health benefits

Retirement benefits

Tuition assistance

Paid leave

Work-life programs

Job summary

Terrestris Global Solutions seeks a Cybersecurity Network Engineer/Firewall to support FRCS on-site at Marine Corps Base Camp Lejeune, MCAS New River, and satellite locations, 40 hours per week, Mon–Fri 7:00 am–5:00 pm. You will configure Palo Alto firewalls, IPSec VPNs, and secure networks across enterprise and OT environments.

The role requires a Secret clearance and experience with Linux (CentOS), PKI, and secure VPNs.

Qualifications

• Current Secret clearance required.
• Authorized to work in the U.S. without sponsorship.
• English fluency in oral and written form.
• Valid State Driver's License.
• Experience applying DISA STIGs/SRGs to secure systems.
• Experience with PKI and IPSec VPNs.
• Palo Alto firewalls experience in IDS/OT environments.
• Linux servers (CentOS) security and hardening.
• Professional security certifications (Security+, CASP, or CISSP).

Responsibilities

• Configure, administer, and maintain Palo Alto firewalls and VPNs for FRCS environments.
• Harden Linux (CentOS), Raspberry Pi, and networked devices per baselines.
• Design and manage PKI, certificates, and IPSec VPN tunnels.
• Monitor security events and vulnerabilities; investigate incidents and ensure compliance.
• Develop secure configurations, firewall rules, and SOPs for accreditation.
• Collaborate with admins, architects, and engineers to secure FRCS network infrastructure.

Skills

English fluency

Secret clearance

Driver's license

Tools

Palo Alto firewalls

Linux (CentOS)

PKI / certificates

IPSec VPN

DISA STIGs / SRG

Job description

Terrestris Global Solutions seeks a Cybersecurity Network Engineer/Firewall to support FRCS on-site at Marine Corps Base Camp Lejeune, MCAS New River, and satellite locations, 40 hours per week, Mon–Fri 7:00 am–5:00 pm. You will configure Palo Alto firewalls, IPSec VPNs, and secure networks across enterprise and OT environments.

The role requires a Secret clearance and experience with Linux (CentOS), PKI, and secure VPNs.