Principal Network Security Engineer
JCS Solutions LLC
A complete application in a minute
Tailored resume and cover letter, ready to send.
Benefits offered by this job
Job summary
JCS Solutions is seeking a Principal Network Security Engineer to design, engineer, and implement enterprise network security across a large DoD network environment.
This role serves as a senior technical leader responsible for advancing network security architecture through strategic engineering efforts that strengthen segmentation, access control, zero‑trust initiatives, resiliency, and enterprise‑wide security posture.
Qualifications
- Bachelor's degree or equivalent experience with 12+ years of relevant experience, or Master's with 10+ years of experience.
- Active DoD Secret security clearance.
- Current DoD 8140/8570 IAT Level II certification or higher.
Responsibilities
- Design, engineer, and implement enterprise network security architectures spanning firewalls, IDS/IPS, proxies, VPN and encryption services.
- Lead network segmentation and secure connectivity initiatives with data-flow mapping and enclave design.
- Provide senior technical leadership and direction to engineers, administrators, and analysts; present to leadership and approval boards.
- Develop and maintain architecture diagrams, runbooks, and accreditation artifacts; support STIGs, vulnerability remediation, and RMF activities.
Skills
Education
Tools
Job description
Grow, innovate, and generate progress: Harness your expertise to solve challenges and celebrate success!
JCS Solutions is seeking a Principal Network Security Engineer to design, engineer, and implement enterprise network security capabilities across a large, distributed Department of Defense network environment. This role serves as a senior technical leader responsible for advancing network security architecture through strategic engineering efforts that strengthen segmentation, access control, zero‑trust initiatives, resiliency, and enterprise‑wide security posture.
The successful candidate will assess current network security architectures, identify capability gaps, develop implementation strategies, and lead engineering teams through complex modernization efforts. This position requires expertise in network security architecture, firewall technologies, intrusion prevention, network access control, segmentation, encryption, and secure connectivity across enterprise environments.
This role requires a hands‑on engineer capable of developing solutions, directing technical teams, communicating with stakeholders and approval authorities, and delivering secure, scalable, and sustainable network security capabilities.
Location: Ft. Meade, MD Clearance: Secret Salary: $104,000.00 - $149,000.00 Certification: Active DoD 8140/8570 IAT Level II certification.
- Join a premier technology firm specializing in innovative solutions.
- Be part of a collaborative, inclusive, and innovative work culture.
- Enjoy tremendous growth potential in a high‑performing team environment.
- A robust benefits package:
- Health, dental, and vision insurance
- Life insurance
- Short‑and‑long term disability
- Paid time off (PTO)
- 401k retirement plan with employer match
- Annual Professional Development Reimbursement Program
- And more!
- And more!
- Design, engineer, and implement enterprise network security architectures spanning next‑generation firewalls, intrusion detection and prevention systems, web and TLS proxies, VPN and encryption services, network access control, DNS security, and east‑west security controls.
- Evaluate existing network security architecture and identify security gaps, improvement opportunities, risks, and implementation approaches.
- Lead network segmentation and secure connectivity initiatives, including data‑flow mapping, security‑zone design, enclave development, firewall rule review, ACL rationalization, and routing coordination.
- Design and implement network access control and device‑posture enforcement solutions, including identity validation, device authentication, policy enforcement, remediation workflows, and phased implementation strategies.
- Advance zero‑trust networking principles, least‑privilege access, micro‑segmentation, and encrypted communications strategies.
- Evaluate and recommend emerging security technologies to improve enterprise security capabilities.
- Engineer secure connectivity between on‑premises, cloud, and remote environments utilizing VPN, TLS, IPsec, cloud interconnects, and boundary protection technologies.
- Optimize security controls to reduce false positives, improve visibility, strengthen enforcement capabilities, and maintain network performance.
- Lead network security projects from concept through implementation.
- Perform requirements analysis, dependency identification, architecture review, design coordination, planning, validation, and operational transition activities.
- Develop implementation plans, cutover strategies, rollback plans, validation procedures, and stakeholder communication plans.
- Coordinate maintenance windows, testing efforts, change activities, and contingency planning for security infrastructure modifications.
- Collaborate with network engineering, cybersecurity, operations, project management, and subject matter experts to successfully deliver network security initiatives.
- Support security accreditation, compliance, STIG implementation, vulnerability remediation, POA&M activities, and authorization requirements.
- Serve as the senior technical authority for network security architecture and design decisions.
- Provide technical direction, mentoring, and engineering guidance to network engineers, security engineers, administrators, and analysts.
- Manage multiple concurrent technical efforts and maintain accountability against project schedules.
- Present security architecture recommendations, implementation strategies, risks, and technical decisions to government leadership, cybersecurity authorities, and approval boards.
- Improve engineering processes, documentation standards, implementation playbooks, migration runbooks, and operational handoff procedures.
- Develop and maintain network security architecture diagrams and logical/physical design documentation.
- Create data‑flow diagrams, segmentation models, security‑zone designs, and secure connectivity documentation.
- Maintain firewall policy standards, ACL documentation, and rule‑set baselines.
- Develop implementation plans, rollback procedures, test plans, validation packages, risk registers, and dependency documentation.
- Create accreditation artifacts, technical standards, SOPs, runbooks, as‑built documentation, and transition‑to‑operations documentation.
- Bachelor's degree or equivalent experience with 12+ years of relevant experience, or Master's degree with 10+ years of experience.
- Specific experience, education, and training may be considered in lieu of a degree.
- Active DoD Secret security clearance.
- Current DoD 8140/8570 IAT Level II certification or higher.
- Significant experience designing and implementing network security architecture in complex, large‑scale enterprise environments.
- Experience serving as a senior technical lead directing network and security engineers, administrators, analysts, or implementation teams.
- Experience leading security engineering projects from planning through implementation.
- Hands‑on engineering experience with:
- Next‑generation firewalls
- Intrusion detection and prevention systems
- Proxies and TLS inspection solutions
- VPN and encryption services
- Network access control platforms
- Experience with network segmentation and secure connectivity initiatives.
- Experience with data‑flow analysis, firewall policy reviews, ACL management, security‑zone design, stakeholder coordination, and implementation planning.
- Strong knowledge of:
- TCP/IP
- Routing protocols
- Switching
- VLANs
- DNS/DHCP/IPAM
- NAT
- QoS
- Software‑defined networking
- Cloud‑connected environments
- Hands‑on experience with two or more of the following technologies:
- Palo Alto
- Cisco
- Aruba
- Dell
- Infoblox
- Brocade
- Working knowledge of:
- NIST
- FedRAMP
- FISMA
- RMF
- DISA STIGs
- DoD cybersecurity requirements
- Demonstrated ability to manage competing priorities and deliver complex technical initiatives.
- Experience documenting network and security architectures using Visio, PowerPoint, Cameo, or similar tools.
- Excellent written and verbal communication skills.
- Experience briefing senior leadership, cybersecurity authorities, stakeholders, and approval boards.
- Experience with wireless security and authentication, including WPA2/WPA3, 802.1X, RADIUS, and enterprise NAC platforms.
- Experience integrating wireless infrastructure with enterprise networking services, including DNS, DHCP, NTP, routing, and monitoring platforms.
- Experience developing and executing engineering designs, implementation plans, migration procedures, test plans, and production deployments.
- Strong troubleshooting and analytical skills with the ability to resolve complex wireless connectivity, authentication, and network performance issues.
- Strong written and verbal communication skills.
- Experience providing technical guidance and developing engineering documentation.
- Must meet applicable cybersecurity workforce qualification requirements for the assigned position.
- CISSP, Palo Alto PCNSE, Cisco CCNP Security, or equivalent advanced security certification.
- Experience implementing Comply‑to‑Connect, 802.1X, or comparable network access control and device‑posture enforcement solutions at enterprise scale.
- Experience with zero‑trust architecture, micro‑segmentation, SASE, or secure cloud connectivity designs.
- Experience integrating network security platforms with SIEM, SOAR, ITSM, and analytics platforms.
- Experience utilizing Python, Ansible, REST APIs, or similar technologies for security automation and infrastructure‑as‑code initiatives.
- Experience with automated firewall policy management.
- Experience supporting enterprise certificate management, PKI environments, encrypted‑traffic inspection, and key management services.
- Experience supporting RMF, eMASS, continuous monitoring, audits, assessments, and inspection activities.
- Experience utilizing Jira, Confluence, or similar project management and knowledge‑sharing platforms.
- Experience developing engineering execution frameworks, implementation playbooks, migration runbooks, technical standards, and risk‑reduction methodologies.
JCS Solutions (JCS) is a premier technology firm providing innovative solutions and high‑quality services in defense, national security, and civilian sectors. JCS offers enterprise‑wide solutions including cloud computing, software development, cybersecurity, digital modernization, and management consulting for the federal government. At JCS, we elevate our customers’ mission through the application of technology and professional services. Our commitment to investing in our workforce drives innovation and progress for our clients, employees, and communities.
- Customer Experience: Strive for excellence and delight our clients
- Innovation: Embrace creative thinking to enable continual growth and powerful solutions
- Accountability: Take ownership of and pride in our actions and service delivery
- Inspire: Be inspired to be your best self and have fun in the process
- Integrity: Do the right thing, the right way, every time!
- Stewardship: The careful and responsible management of something entrusted to ourcare.
At JCS Solutions, compensation is based on a number of factors such as location, qualifications, and applicable contract terms. The general salary range for this position is as follows: $104,000.00 - $149,000.00
All qualified applicants will receive consideration for employment without regard to any protected status protected by applicable federal, state, or local laws.
NOTICE: Please be aware that all JCS Solutions communications related to job interviews and offers from our recruiting team willonlycome from @JCSSolutions.com. We want to emphasize that we do not conduct any interviews over Discord, Slack, Skype, Zoom, or any chat app.
'/%3e%3cpath%20d='M101.744%2012.4726L102.894%2016.1947L99.0021%2013.2201L101.744%2012.4726ZM105.3%208.40937H100.488L99.0026%203.59473L97.5116%208.41047L92.7%208.40385L96.5965%2011.3834L95.1055%2016.1942L99.0021%2013.2196L101.408%2011.3834L105.3%208.40992V8.40937Z'%20fill='white'/%3e%3cdefs%3e%3clinearGradient%20id='paint0_linear_5593_1381'%20x1='90'%20y1='9.44471'%20x2='99'%20y2='9.44471'%20gradientUnits='userSpaceOnUse'%3e%3cstop%20stop-color='%2300AD70'/%3e%3cstop%20offset='0.998594'%20stop-color='%2300B67A'/%3e%3cstop%20offset='1'%20stop-color='%23DCDCE6'/%3e%3c/linearGradient%3e%3c/defs%3e%3c/svg%3e){kind=small}
