Senior Network Security Engineer

Cybersecurity Jobs; Washington (District of Columbia); Hybrid; USD 150,000 - 190,000; Full time

Benefits offered by this job

Three weeks PTO

10 paid federal holidays

401(k) retirement plan with company匹配

Comprehensive medical, dental, andvis

Job summary

Start to End Networks LLC is seeking a senior network security professional in Washington, DC for a hybrid role supporting a large federal customer. You will manage Check Point firewalls, IPS/IDS, and VPN connectivity, while handling escalation and incident response in a secure enterprise environment.

The role requires 10+ years of experience, Top Secret clearance, and collaboration with federal teams to maintain SSPs/ATO compliance. Expect a Monday–Friday schedule with hybrid work in DC.

Qualifications

• Active Top Secret clearance or ability to obtain one.
• 10+ years of experience in network engineering, security, or cybersecurity infrastructure.
• Hands-on experience administering and troubleshooting Check Point firewalls.
• Experience managing firewall policies, upgrades, patching, routing, and VPN connectivity.
• Strong understanding of enterprise networking including TCP/IP, VLANs, routing, and switching.

Responsibilities

• Administer, configure, maintain, and troubleshoot Check Point firewalls in HA configurations.
• Manage firewall security policies, NAT, routing, upgrades, and patches.
• Support Check Point Harmony for remote-access VPN connectivity.
• Configure and troubleshoot IPS/IDS and SIEM platforms.
• Maintain SSPs and ATO documentation and compliance activities.
• Respond to cybersecurity incidents and coordinate remediation.
• Collaborate with federal stakeholders and project managers to keep a secure network.
• Support COOP planning and continuity of operations.

Skills

Top Secret clearance

Network security operations

Incident response

Troubleshooting

Tools

Check Point firewalls

Cisco ISE

Microsoft Sentinel

SIEM platforms

Cisco Catalyst

Job description

Start to End Networks LLC supports a large federal customer in Washington, DC and is building a team that values secure, reliable network operations and work-life balance. This hybrid role pairs Tier 3 network security support with hands-on enterprise infrastructure work, backed by competitive pay, robust benefits, and professional development support.

In this position, you will help maintain enterprise network security infrastructure, provide escalation support for complex issues, and support compliance activities tied to SSPs and ATO documentation. The work is performed in Washington, DC (hybrid) with a Monday–Friday schedule.

Responsibilities

• Administer, configure, maintain, and troubleshoot Check Point firewalls in high-availability (HA) configurations.
• Manage firewall security policies, access rules, NAT policies, routing, software upgrades, and security patches.
• Support Check Point Harmony for remote-access VPN connectivity.
• Configure, monitor, and troubleshoot Check Point Intrusion Prevention and Intrusion Detection (IPS/IDS).
• Investigate network security incidents, connectivity problems, and service outages.
• Provide Tier 3 escalation support for complex network security issues.
• Configure and support Cisco Catalyst switches and other enterprise network infrastructure.
• Implement and troubleshoot IEEE 802.1X network access control integrated with Cisco Identity Services Engine (ISE).
• Use network tools such as Cisco DNA center to identify network gear upgrades and IAVA/PSIRTS.
• Configure and support security logging, monitoring, and analysis using SIEM platforms such as Microsoft Sentinel.
• Respond to cybersecurity incidents and coordinate remediation activities.
• Support Continuity of Operations (COOP) planning and implementation.
• Maintain and support System Security Plans (SSPs) and Authorization to Operate (ATO) documentation and compliance activities.
• Manage security incidents, service requests, and change-management tickets.
• Collaborate with engineering teams, federal stakeholders, and project managers to maintain a secure and reliable network environment.

Requirements

• 10+ years of professional experience in network engineering, network security, or cybersecurity infrastructure.
• Active Top Secret security clearance (or ability to obtain one).
• Strong, hands-on experience administering and troubleshooting Check Point firewalls.
• Experience managing firewall policies, software upgrades, patch management, routing, and VPN connectivity.
• Solid understanding of enterprise networking technologies, including TCP/IP, VLANs, routing, switching, and network troubleshooting.
• Experience supporting enterprise network security operations and resolving complex technical issues.
• Ability to communicate effectively with federal customers, technical teams, and project leadership.
• Strong analytical, troubleshooting, and problem-solving skills.
• Demonstrated ability to collaborate, mentor junior engineers, and work effectively in a team environment.

Technologies

• Check Point firewalls (HA)
• Check Point Harmony
• Check Point IPS/IDS
• Cisco Catalyst
• IEEE 802.1X
• Cisco Identity Services Engine (ISE)
• Cisco DNA center
• IAVA/PSIRTS
• Microsoft Sentinel (SIEM)
• System Security Plans (SSPs), Authorization to Operate (ATO)
• COOP planning

Benefits

• Highly competitive compensation with overtime opportunities
• Three weeks of Paid Time Off (PTO)
• 10 paid federal holidays
• 401(k) retirement plan with company matching
• Comprehensive medical, dental, and vision insurance
• PPO, HMO, and Health Savings Account (HSA) plan options
• Flexible Spending Account (FSA)
• Short-term and long-term disability insurance
• Life insurance and Accidental Death & Dismemberment (AD&D) coverage
• Annual tuition reimbursement
• Professional development and certification support
• 100% employer-paid parking
• A supportive team environment with an emphasis on work-life balance
• Dental insurance, Health insurance, Life insurance, Paid time off, Vision insurance
• Referral program
• Retirement plan

Preferred Qualifications

• Industry certifications such as Check Point CCSA/CCSE, Cisco CCSP/CCIE, or equivalent certifications.
• Experience with Cisco ISE and 802.1X.
• Experience with Microsoft Sentinel or other SIEM platforms.
• Experience with SolarWinds and Cisco Catalyst Center.
• Familiarity with federal cybersecurity requirements, SSPs, ATO processes, and COOP planning.
• Previous experience supporting federal government customers.

Work Schedule / Location

• Job Type: Full-Time
• Schedule: Monday–Friday
• Location: Hybrid remote in Washington, DC 20266

Application Questions

• Do you have hands on experience with Checkpoint Firewalls?
• Do you have hands on experience with Cisco ISE and 802.1x?
• Do you hold an active Secret or Top-Secret clearance?