Network Security Engineer

MANTECH; Chantilly (VA); On-site; USD 120,000 - 150,000; Full time

Job summary

MANTECH seeks a motivated Network Security Engineer to join our team in Chantilly, VA. This onsite role requires high-level security credentials and hands-on expertise in designing and supporting secure IT infrastructures.

Responsibilities include Tier II/III engineering, monitoring with SolarWinds and Cisco tools, and creating detailed security diagrams. A TS/SCI clearance is required, with DoD certifications encouraged. Onsite duties and collaboration with sponsors are essential.

Qualifications

• High School Diploma or GED with 7+ years in network security engineering.
• CCNA certification or equivalent routing/switching cert (e.g., JNCIA-Junos).
• DoD 8570IAT Level II certification required; DoD 8570.1/8140.01 IAT III within 6 months.

Responsibilities

• Provide Tier II/III network security engineering support and design WAN/LAN/data center solutions.
• Monitor networks with SolarWinds, Cisco Firepower FMC, and Cisco ISE to ensure a functioning infrastructure.
• Create and maintain detailed network security diagrams and routing/topology schemas.
• Coordinate with internal teams and Sponsor authorities to drive infrastructure agendas.
• Participate in ITIL Service Lifecycle, including Change Requests and security event policies.
• Evaluate current security architectures and recommend improvements for performance.
• Deliver end-to-end analyses, requirements, cost estimates, and engineering releases for customer IT environments.
• Must have a current and active TS/SCI clearance.

Skills

Network security engineering

Tier II/III support

Firewall administration

Education

High School Diploma or GED

Bachelor's degree (preferred)

Tools

SolarWinds

Cisco Firepower FMC

Cisco ISE

VMware

Ansible

DSC

Job description

MANTECH

seeks a motivated, career and customer-oriented Network Security Engineer to join our team in Chantilly, VA. This is an onsite position.

Responsibilities

• Perform Tier II and Tier III network security engineering support, while assisting in designing advanced WAN, LAN, and data center solutions.
• Monitor and configure networks utilizing SolarWinds, Cisco Firepower FMC, and Cisco ISE to analyze complex network requirements and ensure complete, functioning infrastructure
• Create, maintain, and interpret highly detailed technical network security diagrams, routing topology schemas, and robust hardware configuration baselines
• Coordinate across large internal teams, stakeholders, and Sponsor authorities to drive infrastructure agendas and successfully navigate systems engineering processes
• Participate in all phases of the ITIL Service Lifecycle, including submitting Change Requests and maintaining security event monitoring policies
• Evaluate current network security architectures, inventory complex routing pathways, and recommend process improvements to optimize performance and throughput
• Deliver end-to-end functional analysis, requirements specification, cost estimation, and engineering package releases for customer production IT environments

Minimum Qualifications

• High School Diploma or GED with 7+ years of progressively responsible experience in Network Security Engineering, Network Analysis, or a related technical discipline
• Cisco Certified Network Associate (CCNA) certification, or equivalent routing/switching technical certification, ex., Juniper Networks Certified Associate - Junos (JNCIA-Junos)
• DoD 8570IAT Level II Certification, e.g., Security+
• DoD 8570.1 / DoD 8140.01 (IAT III Level) certification required within 6 months of hire, e.g., SecurityX

Preferred Qualifications

• Bachelors degree in an engineering discipline
• Experience using and administering SolarWinds alongside deep knowledge of Microsoft Windows Systems, HP SANs, and VMware products
• Advanced experience managing VPNs, GRE tunnels, routing protocols (BGP E/I, OSPF), VLANs, VRFs, and configuring KGs
• Strong familiarity with Cisco ACI, data center fabric best practices, Ansible, and Desired State Configuration (DSC)
• Strong familiarity with Cisco Secure Firewall ( Firepower FMC)
• Practical knowledge of BICSI standards, terminating fiber and Cat 5 cabling, as well as familiarity with NSTISSAM TEMPEST/2-95 and CNSSAM TEMPEST/01-13 guidelines

Clearance Requirements

• Must have a current and active TS/SCI clearance

Physical Requirements

• The person in this position must be able to remain in a stationary position 50% of the time. Occasionally move about inside the office to access file cabinets, office machinery, or to communicate with co-workers, management, and customers, via email, phone, and or virtual communication, which may involve delivering presentations.