Senior Network Security Engineer (SDN / Multi-Enclave)

Peraton Labs, Inc.; College Park (MD); On-site; USD 190,000 - 304,000; Full time

Benefits offered by this job

Medical benefits

Dental benefits

401(k) plan

Job summary

Peraton Labs, Inc. seeks a senior Network Security Engineer (SDN / Multi-Enclave) to lead secure design and sustainment of network architectures across multiple enclaves with varying data protections.

You will drive risk analysis, system-level security solutions, and trusted relationships among external systems for a DoD/IC client near College Park, MD. The ideal candidate has 12+ years in network security for DoD/IC, active TS/SCI with poly, and CCNA with CCNP progress.

Qualifications

• Bachelor's degree in CS, Cybersecurity, or related field; 4 years can substitute.
• Active CCNA required; progress toward CCNP preferred.
• 12+ years in network security engineering for DoD/IC programs.

Responsibilities

• Design, engineer, and validate secure network/systems across multiple enclaves.
• Implement system-level security solutions to satisfy requirements.
• Perform security planning, risk assessment and mitigation.
• Support government customer in enforcing trusted relationships across external systems.
• Engineer SDN-enabled architectures with segmentation and policy enforcement.
• Install and troubleshoot network infrastructure and security capabilities.
• Develop security design packages and diagrams.
• Conduct root-cause analysis and drive corrective actions.
• Provide technical guidance and participate in design/security reviews.

Skills

SDN concepts

Network security engineering

DoD/IC program experience

Security compliance RMF/ATO

CCNA/CCNP progress

Education

Bachelor's degree in CS/Cybersecurity or related

4 years additional experience in lieu of degree

Tools

Juniper

FORE

Cisco

Job description

About Peraton

Peraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world's leading mission capability integrator and transformative enterprise IT provider, we deliver trusted, highly differentiated solutions and technologies to protect our nation and allies. Peraton operates at the critical nexus between traditional and nontraditional threats across all domains: land, sea, space, air, and cyberspace. The company serves as a valued partner to essential government agencies and supports every branch of the U.S. armed forces. Each day, our employees solve the most daunting challenges that our customers face. Visit peraton.com to learn how we're keeping people around the world safe and secure.

About The Role

Peraton Labs is seeking a poly cleared Senior Network Security Engineer (SDN / Multi-Enclave) to provide senior technical leadership for the secure design, implementation, and sustainment of network and system architectures across multiple enclaves, including environments with different data protection and classification requirements. In this role you will lead security planning and risk activities, recommend system-level solutions to meet security requirements, and support our MD-based government customer in establishing and enforcing trusted relationships among external systems and architectures. The ideal candidate for this role will bring deep expertise in Software Defined Networking (SDN) and demonstrated security compliance experience within government programs of similar scope and complexity.

This position requires full-time on-site work at a customer site near College Park, MD.

Responsibilities within this role may include:

• Design, engineer, and validate secure network/systems solutions spanning multiple enclaves with varying security boundaries and classification levels
• Recommend and implement system-level security solutions to satisfy mission, compliance, and operational requirements
• Perform and support security planning, assessments, risk analysis, risk management, including documentation and briefing of risk decisions and mitigations
• Support our government customer in enforcing the design and implementation of trusted relationships among external systems and architectures (e.g., interconnections, cross-domain dependencies, boundary protections)
• Engineer and secure SDN-enabled architectures (i.e. controller/overlay models), ensuring segmentation, policy enforcement, and strong access control
• Install, configure, harden, troubleshoot, and support network telecommunications infrastructure and security capabilities
• Develop/maintain network security artifacts such as security design packages, interface control documentation, diagrams, and compliance evidence
• Conduct root-cause analysis of security or connectivity issues and implement corrective actions that preserve mission availability and security posture
• Provide technical guidance to teams and stakeholders; participate in design reviews, security reviews, and change control activities

#MDFSP

#PLABS26

Qualifications

Required qualifications

• Minimum of 12 years of experience as a Network Security Engineer (or related role) supporting DoD/IC programs, and a Bachelor's in Computer Science, Cybersecurity Engineering, System Engineering, Network Engineering or related discipline. 4 years of additional experience may be accepted in lieu of a bachelor's degree (for a total of 16 years of experience)
• 5+ years of experience demonstrating principles, theories, methods, and techniques of security software (IOS) and hardware across Juniper, FORE, and Cisco routers/switches
• Demonstrated experience in the installation and support of network telecommunications, with expert-level network security knowledge
• Hands-on knowledge and troubleshooting experience with:
  • LAN/WAN, VLANs, VoIP
  • Routing: RIP, OSPF, EIGRP
  • Authentication: AAA/TACACS
  • Security controls: Juniper/FORE/Cisco ACLs
• Experience implementing and troubleshooting secure network products such as VPNs and IDS/IPS (or equivalent)
• Demonstrated experience designing, implementing, securing, or operating Software Defined Networking solutions
• Demonstrated experience supporting security compliance (planning, assessment, audit support, evidence collection, control implementation/validation)
• An active/current Cisco Certified Network Associate (CCNA) certification is required for this role; additionally, you should have or have documented (over 50%) progress toward completion of a Cisco Certified Network Professional (CCNP) certification
• Active TS/SCI security clearance with a current polygraph is required.

Additional Preferred Qualifications

• Experience supporting DoD/IC customers and multi-enclave/multi-domain architectures
• Experience with security engineering in regulated frameworks (e.g., RMF/ATO processes, control validation, POA&M support)
• Hands-on with SDN platforms/approaches (controller-based networking, overlays, micro segmentation, policy-as-code concepts)
• Experience with IDS/IPS tuning, VPN design at scale, and secure segmentation patterns in hybrid environments
• Ability to author high-quality technical documentation (design packages, CONOPs, SOPs, diagrams) and brief technical + non-technical stakeholders

#MDPM

#MDFSP

Details

Target Salary Range: $190,000 - $304,000. This represents the typical salary range for this position. Salary is determined by various factors, including but not limited to, the scope and responsibilities of the position, the individual's experience, education, knowledge, skills, and competencies, as well as geographic location and business and contract considerations. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay.

Benefits Statement: Peraton offers eligible employees a variety of benefits including medical, dental, vision, life, health savings account, short/long term disability, EAP, parental leave, 401(k), paid time off (PTO) for vacation, and company paid holidays. A full listing of available benefits can be viewed at https://www.careers.peraton.com/benefits.

EEO: Equal opportunity employer, including disability and protected veterans, or other characteristics protected by law.