Senior CSfC Network Security Engineer - TS/SCI Onsite

Take2 Consulting, LLC; Fort Belvoir (VA); On-site; USD 140,000 - 200,000; Full time

Job summary

Take2 Consulting, LLC is seeking a Network Security Engineer to join our Fort Belvoir team. You will architect and operate CSfC-based networks with dual-layer cryptographic boundaries using Cisco and Aruba VPNs and dynamic routing in strict NSA-aligned packages.

You will implement 802.1X, PKI, and ISE/ClearPass for access control, build Palo Alto NGFW policies, and ensure compliance with CNSA and NSA CSfC requirements in a DoD environment.

Qualifications

• / Bachelor’s degree or higher in Computer Science, IT, Engineering, E/M or MIS, plus 12–15 years’ experience.
• / 12+ years of progressive network engineering experience in DoD/DoW, federal, or defense contractor environments.
• / Active TS/SCI Clearance.
• / DoD 8570.01-M / DoD 8140 IAT Level II/III baseline certification.
• / Proven expertise configuring Cisco/Aruba VPNs and IPsec/SSL.
• / Experience with Palo Alto firewalls, Panorama and IDS/IPS.
• / Experience with 802.1X, EAP-TLS, and ISE/ClearPass.
• / X.509 PKI, CA hierarchies, CRLs/OCSP, and secure NTP.

Responsibilities

• Architect and operate CSfC-based networks with dual-layer cryptographic boundaries.
• Author and tune Palo Alto security policies, configure 802.1X and PKI services.
• Design, deploy, and maintain CSfC architectures aligned with NSA packages.
• Implement routing protocols (BGP/OSPF) with redundant VPN tunnels.
• Prepare CSfC compliance artifacts and registration packages.

Skills

Top-Secret Clearance

Networking expertise

DoD/Federal experience

IPsec/SSL VPN

802.1X authentication

Education

Bachelor's degree or higher in Computer Science / IT / Engineering / MIS or related STEM

Tools

Cisco IOS-XE/ASR

Aruba Mobility Controllers/Gateways

Palo Alto PAN-OS

Cisco ISE / Aruba ClearPass

NSA CSfC compliance tools

Job description

Take2 Consulting, LLC is seeking a Network Security Engineer to join our Fort Belvoir team. You will architect and operate CSfC-based networks with dual-layer cryptographic boundaries using Cisco and Aruba VPNs and dynamic routing in strict NSA-aligned packages.

You will implement 802.1X, PKI, and ISE/ClearPass for access control, build Palo Alto NGFW policies, and ensure compliance with CNSA and NSA CSfC requirements in a DoD environment.