Senior Network Security Engineer: Firewall/IPS (Top Secret)

ITC Federal, LLC; Idaho; On-site; USD 150,000 - 190,000; Full time

Benefits offered by this job

Health benefits

Dental benefits

Vision benefits

401(k) plan

FSA

11 paid federal holidays

PTO

Education reimbursement

Job summary

ITC Federal, LLC is seeking a Senior Network Security Engineer (Firewall/IPS) to support DOJ NSD in a Washington, DC-based role with a Top Secret clearance. The engineer will design, implement, and monitor firewall and IPS solutions, upgrade Cisco components, and maintain security documentation across complex networks.

The position requires 10+ years in IT, a bachelor’s degree (preferred), and hands-on Cisco ISE/Firepower experience, with CNSSP-15-compliant DMVPN and ADVPN knowledge.

Qualifications

• 10+ years of IT experience.
• Bachelor’s Degree strongly preferred.
• Active Top Secret clearance required.
• Hands-on experience with Cisco ISE, Firepower, and ASA/FTD migrations.
• Familiarity with CNSSP-15 compliant DMVPN and Juniper ADVPN.

Responsibilities

• Plan, coordinate, and implement the organization’s network security.
• Design and optimize firewall and IPS rule structures.
• Monitor and maintain firewall/IPS health and suggest improvements.
• Develop and maintain firewall/IPS documentation.
• Research and evaluate new network security technologies.
• Provide guidance to network engineers as needed.

Skills

Security architecture

Network security

Team collaboration

Top Secret handling

Education

Bachelor’s Degree

Tools

Cisco ISE

Cisco Firepower

ASA to FTD migration

802.1X deployment

DMVPN design

Juniper ADVPN

Job description

ITC Federal, LLC is seeking a Senior Network Security Engineer (Firewall/IPS) to support DOJ NSD in a Washington, DC-based role with a Top Secret clearance. The engineer will design, implement, and monitor firewall and IPS solutions, upgrade Cisco components, and maintain security documentation across complex networks.

The position requires 10+ years in IT, a bachelor’s degree (preferred), and hands-on Cisco ISE/Firepower experience, with CNSSP-15-compliant DMVPN and ADVPN knowledge.