Senior Network Security Engineer (SDN / Multi-Enclave)

Peraton; United States; On-site; USD 146,000 - 234,000; Full time

Job summary

Peraton Labs seeks a poly cleared Senior Network Security Engineer (SDN / Multi-Enclave) to lead secure design and sustainment of cross-enclave network architectures at a customer site near College Park, MD. You will drive security planning, risk analysis, and cross-domain integration, applying deep SDN expertise and compliance experience within government programs.

The role requires hands-on engineering across SDN-enabled architectures and secure networks, with a focus on segmentation, access

Qualifications

• Minimum of 12 years of experience in Network Security Engineering or related DoD/IC programs; a Bachelor’s degree with additional experience may be substituted.
• 5+ years implementing security software/hardware across Juniper, FORE, and Cisco routers/switches.
• Demonstrated experience in installation and support of network telecommunications with expert security knowledge.
• Hands-on knowledge of LAN/WAN, VLANs, VoIP; routing protocols RIP, OSPF, EIGRP; authentication AAA/TACACS; and security ACLs.
• Experience with secure network products such as VPNs and IDS/IPS; SDN design/implementation; and security compliance planning/audits.
• Active TS/SCI with a current polygraph is required.

Responsibilities

• Design, engineer, and validate secure network solutions across multiple enclaves with varying security classifications.
• Recommend and implement system-level security solutions to meet mission, compliance, and operational requirements.
• Lead security planning and risk analyses; document decisions and mitigations.
• Enforce trusted relationships among external systems and architectures; support cross-domain interconnections and boundary protections.
• Engineer SDN-enabled architectures with segmentation and policy enforcement; ensure strong access control.
• Install, configure, harden, troubleshoot, and support network infrastructure and security capabilities.
• Develop security design packages, diagrams, and compliance evidence; maintain artifacts.
• Conduct root-cause analysis of security or connectivity issues and implement corrective actions.
• Provide technical guidance to teams; participate in design and security reviews and change control.

Skills

SDN

Network security

Risk analysis

Leadership

Education

Bachelor's degree in Computer Science or related field

Tools

Juniper routers

FORE routers

Cisco routers

Job description

Responsibilities

Peraton Labs is seeking a poly cleared Senior Network Security Engineer (SDN / Multi-Enclave) to provide senior technical leadership for the secure design, implementation, and sustainment of network and system architectures across multiple enclaves, including environments with different data protection and classification requirements. In this role you will lead security planning and risk activities, recommend system-level solutions to meet security requirements, and support our MD-based government customer in establishing and enforcing trusted relationships among external systems and architectures. The ideal candidate for this role will bring deep expertise in Software Defined Networking (SDN) and demonstrated security compliance experience within government programs of similar scope and complexity.

This position requires full-time on-site work at a customer site near College Park, MD.

Responsibilities within this role may include:

• Design, engineer, and validate secure network/systems solutions spanning multiple enclaves with varying security boundaries and classification levels


• Recommend and implement system-level security solutions to satisfy mission, compliance, and operational requirements


• Perform and support security planning, assessments, risk analysis, risk management, including documentation and briefing of risk decisions and mitigations


• Support our government customer in enforcing the design and implementation of trusted relationships among external systems and architectures (e.g., interconnections, cross-domain dependencies, boundary protections)


• Engineer and secure SDN-enabled architectures (i.e. controller/overlay models), ensuring segmentation, policy enforcement, and strong access control


• Install, configure, harden, troubleshoot, and support network telecommunications infrastructure and security capabilities


• Develop/maintain network security artifacts such as security design packages, interface control documentation, diagrams, and compliance evidence


• Conduct root-cause analysis of security or connectivity issues and implement corrective actions that preserve mission availability and security posture


• Provide technical guidance to teams and stakeholders; participate in design reviews, security reviews, and change control activities

Qualifications

Required qualifications

• Minimum of 12 years of experience as a Network Security Engineer (or related role) supporting DoD/IC programs, and a Bachelor's in Computer Science, Cybersecurity Engineering, System Engineering, Network Engineering or related discipline. 4 years of additional experience may be accepted in lieu of a bachelor's degree (for a total of 16 years of experience)


• 5+ years of experience demonstrating principles, theories, methods, and techniques of security software (IOS) and hardware across Juniper, FORE, and Cisco routers/switches


• Demonstrated experience in the installation and support of network telecommunications, with expert-level network security knowledge


• Hands-on knowledge and troubleshooting experience with:
  
  
  • LAN/WAN, VLANs, VoIP
  
  
  • Routing: RIP, OSPF, EIGRP
  
  
  • Authentication: AAA/TACACS
  
  
  • Security controls: Juniper/FORE/Cisco ACLs
  
  


• Experience implementing and troubleshooting secure network products such as VPNs and IDS/IPS (or equivalent)


• Demonstrated experience designing, implementing, securing, or operating Software Defined Networking solutions


• Demonstrated experience supporting security compliance (planning, assessment, audit support, evidence collection, control implementation/validation)


• An active/current Cisco Certified Network Associate (CCNA) certification is required for this role; additionally, you should have or have documented (over 50%) progress toward completion of a Cisco Certified Network Professional (CCNP) certification


• Active TS/SCI security clearance with a current polygraph is required.

Additional preferred qualifications

• Experience supporting DoD/IC customers and multi-enclave/multi-domain architectures


• Experience with security engineering in regulated frameworks (e.g., RMF/ATO processes, control validation, POA&M support)


• Hands-on with SDN platforms/approaches (controller-based networking, overlays, micro segmentation, policy-as-code concepts)


• Experience with IDS/IPS tuning, VPN design at scale, and secure segmentation patterns in hybrid environments


• Ability to author high-quality technical documentation (design packages, CONOPs, SOPs, diagrams) and brief technical + non-technical stakeholders

Peraton Overview

Peraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world's leading mission capability integrator and transformative enterprise IT provider, we deliver trusted, highly differentiated solutions and technologies to protect our nation and allies. Peraton operates at the critical nexus between traditional and nontraditional threats across all domains: land, sea, space, air, and cyberspace. The company serves as a valued partner to essential government agencies and supports every branch of the U.S. armed forces. Each day, our employees do the can't be done by solving the most daunting challenges facing our customers. Visit peraton.com to learn how we're keeping people around the world safe and secure.

Target Salary Range

$146,000 - $234,000. This represents the typical salary range for this position. Salary is determined by various factors, including but not limited to, the scope and responsibilities of the position, the individual's experience, education, knowledge, skills, and competencies, as well as geographic location and business and contract considerations. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay.

EEO

Equal opportunity employer, including disability and protected veterans, or other characteristics protected by law.