Network Security Engineer, Senior

Booz Allen Hamilton; Fort Meade (MD); On-site; USD 87,000 - 198,000; Full time

Job summary

Booz Allen Hamilton is seeking a Senior Network Security Engineer to design, implement, and support secure, high-availability network architectures in national security environments. You will work hands-on with F5 LTM, BGP, IPv6, and Azure networking, while collaborating with cybersecurity teams to meet stringent requirements.

The role requires DoD experience, ability to obtain a Secret clearance, and a strong background in routing, security policies, and technical documentation.

Qualifications

• Bachelor’s degree required.
• Ability to obtain a Secret clearance.
• 8140 IAT Level II Certification (Security+) within 6 months of start date.

Responsibilities

• Configure and manage F5 LTM and load balancing.
• Troubleshoot connectivity using tmsh, bash, imish (ZebOS).
• Architect, implement, and troubleshoot networks with BGP/IPv6 and Cisco VRF.
• Support Azure virtual networking and policy implementation.
• Document implementations with SOPs, test plans, and CONOPS.

Skills

F5 LTM

Load balancing

BGP

IPv6

Cisco routing

tmsh

imish (ZebOS)

Education

Bachelor’s degree

8140 IAT Level II Certification (Security+)

Tools

tmsh

imish (ZebOS)

Configuration Utility

Azure networking

Job description

Network Security Engineer, Senior

The Opportunity: Highly skilled network security engineers who thrive in complex, high-impact environments will find this role both challenging and rewarding. This position is built for someone who enjoys solving difficult networking problems, working hands-on with advanced F5 and load balancing technologies, and supporting critical infrastructure where performance, resilience, and security matter every day. This role offers the opportunity to take ownership of meaningful technical challenges, collaborate with experienced engineering and cybersecurity teams, and help modernize secure communications infrastructure supporting national security missions. Ideal candidates are strong troubleshooters, self-driven engineers, and technical problem-solvers who enjoy operating in fast-paced environments where their expertise directly impacts operational success.

What You’ll Work On:

• Configure and manage F5 LTM including virtual servers, virtual addresses, pools, dynamic load balancing, and BGP route advertisement.
• Configure and troubleshoot HA pairs, partitions, and route domains.
• Troubleshoot connectivity issues using tmsh, bash, imish (ZebOS), and the Configuration Utility.
• Architect, implement, and troubleshoot network solutions supporting BGP, IPv6, CIDR or subnetting, and Cisco VRF configuration.
• Support Azure virtual networking.
• Partner with operational and security teams to implement new security policies, evaluate metrics, and resolve complex technical issues.
• Test, integrate, and secure new email security components.
• Develop technical documentation including implementation plans, test plans, SOPs, TTPs, and CONOPS.
• Collaborate across teams to drive modern network solutions, break legacy patterns, and deliver resilient, secure architectures.

You Have:

• Experience with Cisco switches and routers
• Experience with F5 LTM, load balancing, and general networking protocols
• Experience implementing and troubleshooting network architectures, routing, and supported protocols
• Experience designing, implementing, and operating cybersecurity solutions
• Ability to independently produce technical documentation
• Ability to obtain a Secret clearance
• Bachelor’s degree
• Ability to obtain an 8140 IAT Level II Certification such as Security+ Certification within 6 months of start date

Nice If You Have:

• Experience working in DoD networks, including hardware acquisition and deployment processes, TSR/TSO processes, STIG requirements, L2 or L3 routing, NIPR, Internet, and JPE environments, and IAP and BCAP functionality
• Experience designing, securing, and operating Azure environments, including automation of Azure resource management
• Experience with Cisco and Juniper devices in DoD or enterprise environments
• Knowledge of SMTP and associated security or network protocols
• Knowledge of RedHat and BIND administration
• Secret clearance

Compensation

Salary at Booz Allen is determined by various factors, including but not limited to location, the individual’s particular combination of education, knowledge, skills, competencies, and experience, as well as contract-specific affordability and organizational requirements. The projected compensation range for this position is $86,900.00 to $198,000.00 (annualized USD). The estimate displayed represents the typical salary range for this position and is just one component of Booz Allen’s total compensation package for employees. This posting will close within 90 days from the Posting Date.

Benefits

• health
• life
• disability
• financial
• retirement benefits
• paid leave
• professional development
• tuition assistance
• work-life programs
• dependent care

Our recognition awards program acknowledges employees for exceptional performance and superior demonstration of our values.

Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible to participate in Booz Allen’s benefit programs. Individuals that do not meet the threshold are only eligible for select offerings, not inclusive of health benefits.

Security Clearance and Eligibility

Clearance: Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information.

Identity Statement

As part of the hiring process, we will ask you to complete an identity verification process that leverages advanced biometrics and artificial intelligence to ensure authenticity and protect against identity fraud. You are expected to be on camera during interviews and assessments. We reserve the right to take your picture to verify your identity and prevent fraud.

Candidate AI Usage Policy

AI is a part of our daily work at Booz Allen, and we are committed to the responsible and ethical use of AI tools. However, we want to ensure a fair candidate process based on your own skills and knowledge. As part of this commitment, the use of artificial intelligence (AI) or other tools to assist with responses during interviews (whether in-person or virtual) is prohibited unless permission is explicitly provided.

Work Model

• Remote: If this position is listed as remote, there may still be occasions when you are required to work in person at a Booz Allen or customer facility.
• Hybrid: If this position is listed as hybrid, you will be expected to work from a Booz Allen or customer facility, in alignment with your leadership's expectations and the needs of the role.
• Onsite: If this position is listed as onsite, work will primarily be performed full-time at a customer facility, where employees will collaborate directly with colleagues and customers as required by the role.

Commitment to Non-Discrimination

All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, local, or international law.

Know Your Rights Poster Accommodations

Applicants who need a reasonable accommodation for any part of the application, hiring, or employment process because of a disability, a sincerely held religious belief, practice, or observance, or as otherwise required by applicable law should contact the Booz Allen Help Desk by calling 1-877-927-8278 or sending an email to [e-mail]. We will review requests on an individualized basis and provide reasonable accommodations consistent with applicable law.

Data Privacy

For more information on how Booz Allen uses your information, please see our Careers Privacy Policy.