Senior Network Security Architect (Zero-Trust)

VulnU; Odenton, Northern (MD, KY); Hybrid; USD 140,000 - 190,000; Full time

Job summary

Leidos is seeking a Principal Network Security Engineer to design, engineer, and implement enterprise network security across a large, distributed environment. You will lead technical efforts, evaluate security architectures, and direct a team to deliver segmentation, access control, and resiliency improvements while coordinating with government and technical leadership.

The role emphasizes zero-trust, data-flow mapping, and secure connectivity across on-premises and cloud environments, with a

Qualifications

• Significant experience designing and implementing network security architecture for large-scale enterprise environments.
• Experience leading security engineering projects from planning through implementation, including risk assessment and operational transition.
• Strong knowledge of firewall, IDS/IPS, TLS inspection, VPN, network access control, segmentation, and zero-trust concepts.
• Excellent written and verbal communication, with ability to brief technical leadership and government stakeholders.

Responsibilities

• Lead network security engineering and architecture across next-generation firewalls, IDS/IPS, proxies, VPNs, and DNS security.
• Design segmentation models, data-flow mappings, and enclave designs; review and rationalize firewall rules and ACLs.
• Oversee implementation plans, timelines, cutovers, validation, and transition to operations for mission-critical changes.
• Enable secure connectivity between on-premises, cloud, and remote environments with strong risk-based planning.

Job description

Leidos is seeking a Principal Network Security Engineer to design, engineer, and implement enterprise network security across a large, distributed environment. You will lead technical efforts, evaluate security architectures, and direct a team to deliver segmentation, access control, and resiliency improvements while coordinating with government and technical leadership.

The role emphasizes zero-trust, data-flow mapping, and secure connectivity across on-premises and cloud environments, with a