Network Security Engineer: STIGs & DoD Compliance

NS4 Inc; Fort Meade, Northern (MD, KY); On-site; USD 90,000 - 125,000; Full time

Job summary

NS4 Inc is seeking an Information Assurance & Cybersecurity Engineer to harden network infrastructure and support security, compliance, and risk management for critical DoD networks. The role emphasizes applying STIGs, establishing secure baselines, and conducting vulnerability assessments across complex telecommunications systems.

You will translate security guidelines into practical configurations, support RMF A&A activities, and implement robust access controls (TACACS+/RADIUS, SSHv2, SNMPv3,

Qualifications

• Hands-on experience configuring and securing network devices.
• Experience applying DISA STIGs and SRGs.
• Strong understanding of DoD cybersecurity requirements.
• Ability translate security guidelines into operational network configs.

Responsibilities

• Apply, validate, and document DISA STIGs and SRGs across routers, switches, firewalls, optical transport, and telecom equipment.
• Establish, maintain, and audit secure baseline configurations for multi-vendor network devices.
• Perform automated and manual vulnerability scans using ACAS (Nessus) and SCC.
• Identify, analyze, and remediate cybersecurity vulnerabilities and configuration drift across network hardware and firmware.
• Develop Plan of Action and Milestones (POA&Ms) for non-compliant controls and track remediation.
• Support RMF Authorization and Assessment processes, compiling BoE artifacts for network controls.
• Configure secure administrative protocols and access controls, including TACACS+, RADIUS, SSHv2, SNMPv3, 802.1X, and RBAC.
• Implement network-level security controls, including control plane policing, banner settings, logging, and disabling unnecessary services.

Skills

Network security

Vulnerability assessment

RMF/A&A processes

Security standards

DoD requirements

Tools

ACAS (Nessus)

SCAP Compliance Checker (SCC)

Job description

NS4 Inc is seeking an Information Assurance & Cybersecurity Engineer to harden network infrastructure and support security, compliance, and risk management for critical DoD networks. The role emphasizes applying STIGs, establishing secure baselines, and conducting vulnerability assessments across complex telecommunications systems.

You will translate security guidelines into practical configurations, support RMF A&A activities, and implement robust access controls (TACACS+/RADIUS, SSHv2, SNMPv3,