Senior Network Security Architect — Enterprise Zero-Trust

Global-Enterprise-Services,-LL; Fort Meade (MD); Hybrid; USD 160,000 - 175,000; Full time

Job summary

Global-Enterprise-Services,-LL seeks a Principal Network Security Engineer to design, engineer, and implement enterprise network security across a large distributed environment. You will guide architecture through strategic design, lead a team of engineers, and deliver secure, scalable solutions under tight timelines.

The role requires deep expertise in NGFWs, IDS/IPS, proxies, VPNs, and zero-trust concepts, with a focus on segmentation, access control, and resiliency.

Qualifications

• Bachelor's degree or equivalent experience; 12+ years preferred.
• Significant experience designing and implementing network security architecture in large-scale environments.
• Experience leading security engineering projects from planning through implementation.
• Hands-on with NGFWs, IDS/IPS, proxies, TLS inspection, VPN and encryption services.

Responsibilities

• Design, engineer, and implement enterprise network security architecture across next-generation firewalls, IDS/IPS, proxies, VPNs, and access controls.
• Evaluate current architecture, identify gaps, and develop practical engineering plans with risk assessments.
• Lead segmentation and secure connectivity efforts, including data-flow mapping and firewall policy coordination.
• Oversee device-posture enforcement and Comply-to-Connect style controls.
• Advance zero-trust, least-privilege, and encrypted-transport strategies enterprise-wide.
• Engineer secure connectivity between on-prem, cloud, and remote environments.
• Tune controls to reduce false positives without impacting performance.

Skills

Network security design

Enterprise WAN security

Firewall & ACL management

Zero trust & micro-segmentation

Incident response planning

Technical leadership

Documentation and briefing

Jira/Confluence

Education

Bachelor's degree or equivalent

IAT Level II or higher (Security+ / CISSP)

Tools

Palo Alto

Cisco

Aruba

Infoblox

Job description

Global-Enterprise-Services,-LL seeks a Principal Network Security Engineer to design, engineer, and implement enterprise network security across a large distributed environment. You will guide architecture through strategic design, lead a team of engineers, and deliver secure, scalable solutions under tight timelines.

The role requires deep expertise in NGFWs, IDS/IPS, proxies, VPNs, and zero-trust concepts, with a focus on segmentation, access control, and resiliency.