Secret-Cleared VPN/Firewall Network Engineer

Critical Solutions; Norfolk (VA); On-site; USD 112,000 - 144,000; Full time

Benefits offered by this job

Medical/Dental/Vision coverage

401K matching

PTO/Holidays

Job summary

Critical Solutions seeks a VPN/Firewall Network Engineer (Secret) in Norfolk, VA, onsite, to design, implement, and maintain robust global network security solutions.

You will collaborate with NOC and engineering, manage DMZ/VPN/Firewalls, and oversee Incident, Change, and Problem Management while ensuring DoD security requirements.

Active DoD Secret clearance and IAT III certs are required; schedule is 8AM-5PM with on-call weekends as needed.

Qualifications

• U.S. Citizen with an active DoD Secret clearance.
• Active DoD 8570.01 IAT Level III Certification (CCNP Security, CISSP, or CASP+).
• Active Associate level Network Vendor Certification (Cisco, Juniper, Palo Alto, F5).
• Ability to work off-hours and on-call rotation for mission support.
• Network SME for Tier-III incident management and support.
• Experience with VPN, DMZ, Firewalls, and security appliances.
• Routing protocols: BGP, OSPF, IS-IS; VLANs; Spanning Tree; ingress/egress security.
• Ansible, Python IaC network automation experience.

Responsibilities

• Provide VPN, DMZ, and Firewall SME for the largest intranet in the world.
• Collaborate with NOC and Engineering to improve security and operations.
• Lead creation of Network SOPs/TTPs and continuous service improvements.
• Plan and execute network upgrades with stakeholders and ops teams.
• Tier III escalation support and vendor engagement for incidents.
• Participate in Root Cause Analysis for problem management.

Skills

VPN / Firewall Networking

Firewall Administration

DMZ management

Network Security

BGP/OSPF/IS-IS

MPLS/VPN routing

Ansible, Python IaC

Education

Bachelor's degree in a related field

Tools

Cisco IOS

Juniper Junos

Palo Alto Networks

F5 BIG-IP

Job description

Critical Solutions seeks a VPN/Firewall Network Engineer (Secret) in Norfolk, VA, onsite, to design, implement, and maintain robust global network security solutions.

You will collaborate with NOC and engineering, manage DMZ/VPN/Firewalls, and oversee Incident, Change, and Problem Management while ensuring DoD security requirements.

Active DoD Secret clearance and IAT III certs are required; schedule is 8AM-5PM with on-call weekends as needed.