Network Engineer

Centurion; Vienna (VA); On-site; USD 110,000 - 170,000; Full time

Job summary

Centurion is seeking a network and security engineer in Virginia to design, implement, and maintain enterprise infrastructure across on-prem and cloud environments. The role requires hands-on expertise with Cisco devices, Palo Alto and Cisco Firepower firewalls, and cloud networking in AWS/Azure, including Gov cloud offerings.

The ideal candidate has 4–7 years of related experience, is familiar with NIST 800-53, FISMA, and FedRAMP, and is able to interface with users while providing after-hours

Qualifications

• 4–7 years of network/security engineering experience.
• Hands-on Cisco experience with Catalyst/Nexus switches, routers, and IOS-XE.
• Experience with Palo Alto and Cisco Firepower firewalls.
• Cloud networking in AWS or Azure, including VNets and route tables.
• Experience with Azure Government or AWS Government.
• Understanding of Zero Trust Architecture.
• Familiarity with NIST 800-53, FISMA, FedRAMP.
• Ability to perform updates and troubleshoot complex issues.
• Willingness to on-site Mon–Fri with after-hours/weekend support.

Responsibilities

• Design, configure, and maintain enterprise network and security infrastructure (on-prem and cloud).
• Support cloud migration and hybrid connectivity efforts.
• Implement and enforce security policies aligned with federal compliance requirements.
• Troubleshoot network incidents and participate in change management processes.
• Perform software/firmware updates and resolve complex technical issues.
• Interface with users and customers on requests and issues.
• Contribute to architecture documentation and ATO/assessment activities.
• Provide after-hours and weekend support as needed.

Skills

Network security

Cisco experience

Palo Alto

Cisco Firepower

Cloud networking

Zero Trust

NIST 800-53

FISMA

FedRAMP

On-site support

Customer interfacing

Tools

AWS

Azure

Job description

What type/level of security clearance required? Secret

Required Skills:

• 4–7 years of experience in network and/or security engineering
• Hands-on Cisco experience — Catalyst/Nexus switches, routers, and IOS-XE — sufficient to maintain both on-prem and cloud routers
• Experience with enterprise firewalls, specifically Palo Alto and/or Cisco Firepower (called out as a must-have) Solid hands-on experience with a cloud environment — AWS or Azure — including cloud networking constructs (VNets, NSGs, route tables, Direct Connect)
• Experience with Azure Government or AWS Government
• At least a working understanding of Zero Trust Architecture principles
• Understanding of federal security frameworks: NIST 800-53, FISMA, and FedRAMP
• Experience performing software/firmware updates and troubleshooting complex issues
• Comfort interfacing directly with users/customers
• Able to be on-site Monday–Friday, and available for after-hours and weekend support as needed

Preferred Skills:

• Zscaler experience — ZIA and ZPA configuration, policy management, and integration with Zero Trust frameworks (nice-to-have, explicitly not required)
• One or more relevant certifications: CCNA/CCNP, CompTIA Security+/CySA+, AZ-700, AZ-500, Zscaler Certified Cloud Professional (ZCCP), or Palo Alto Networks Certified Network Security Engineer (PCNSE)

Day-to-day Responsibilities:

• Design, configure, and maintain enterprise network and security infrastructure (on-prem and cloud)
• Support cloud migration and hybrid connectivity efforts
• Implement and enforce security policies aligned with federal compliance requirements
• Troubleshoot network incidents and participate in change management processes
• Perform software/firmware updates and resolve complex technical issues
• Interface with users and customers on requests and issues
• Contribute to architecture documentation and ATO/assessment activities
• Provide after-hours and weekend support as needed