USMC Cybersecurity Network Engineer/Firewall

Terrestris Global Solutions; Jacksonville (NC); On-site; USD 95,000 - 135,000; Full time

Benefits offered by this job

Health benefits

Retirement benefits

Tuition assistance

Paid leave

Work-life programs

Job summary

Terrestris Global Solutions seeks a Cybersecurity Network Engineer/Firewall to support FRCS on-site at Marine Corps Base Camp Lejeune, MCAS New River, and satellite locations, 40 hours per week, Mon–Fri 7:00 am–5:00 pm. You will configure Palo Alto firewalls, IPSec VPNs, and secure networks across enterprise and OT environments.

The role requires a Secret clearance and experience with Linux (CentOS), PKI, and secure VPNs.

Qualifications

• Current Secret clearance required.
• Authorized to work in the U.S. without sponsorship.
• English fluency in oral and written form.
• Valid State Driver's License.
• Experience applying DISA STIGs/SRGs to secure systems.
• Experience with PKI and IPSec VPNs.
• Palo Alto firewalls experience in IDS/OT environments.
• Linux servers (CentOS) security and hardening.
• Professional security certifications (Security+, CASP, or CISSP).

Responsibilities

• Configure, administer, and maintain Palo Alto firewalls and VPNs for FRCS environments.
• Harden Linux (CentOS), Raspberry Pi, and networked devices per baselines.
• Design and manage PKI, certificates, and IPSec VPN tunnels.
• Monitor security events and vulnerabilities; investigate incidents and ensure compliance.
• Develop secure configurations, firewall rules, and SOPs for accreditation.
• Collaborate with admins, architects, and engineers to secure FRCS network infrastructure.

Skills

English fluency

Secret clearance

Driver's license

Tools

Palo Alto firewalls

Linux (CentOS)

PKI / certificates

IPSec VPN

DISA STIGs / SRG

Job description

Cybersecurity Network Engineer/Firewall for the Facilities Related Control Systems (FRCS) Support Services contract is a full-time, on-site position at Marine Corps Base (MCB) Camp Lejeune, Marine Corps Air Station (MCAS) New River, and satellite locations near Camp Lejeune, working 40 hours per week (Mon‑Fri, 7:00 am–5:00 pm).

What does a typical day look like for a Cybersecurity Network Engineer/Firewall?

• Configure, administer, and maintain Palo Alto firewalls, IPSec VPNs, and secure network communications supporting FRCS and IDS/OT environments across enterprise and remote facilities.
• Implement, harden, and validate Linux (CentOS), Raspberry Pi, and networked devices by applying DISA STIGs, SRGs, FIPS 140-2 requirements, and approved cybersecurity baselines.
• Design, deploy, and manage Public Key Infrastructure (PKI), digital certificates, encryption keys, and Hub‑and‑Spoke IPSec VPN tunnels to ensure secure authentication and encrypted communications.
• Monitor firewall operations, network traffic, security events, and system vulnerabilities; investigate incidents, implement corrective actions, and maintain continuous compliance with DoD, DoN, USMC, and RMF security requirements.
• Develop and maintain secure configuration guides, firewall rulesets, standard operating procedures, and technical documentation supporting IDS/OT Authority to Operate accreditation and lifecycle management.
• Collaborate with systems administrators, cybersecurity architects, and control systems engineers to integrate secure network solutions, automate security tasks through scripting, support enterprise databases and reporting tools, and troubleshoot complex FRCS network infrastructure.

What qualifications do you look for?

• A current Secret clearance is required.
• Authorization to permanently work in the United States without sponsorship.
• Oral and written English fluency.
• State’s Driver’s License.
• Demonstrated knowledge in securing multiple operating systems and other networked devices using appropriate DISA STIGs and Structured Requirements Guide (SRG).
• Experience with creating and maintaining PKI (Public Key Infrastructure) to be used for secure IPSec VPN connections.
• Experience with Palo Alto firewalls in an IDS/OT environment.
• Expert in Raspberry Pi security and configuration.
• Knowledgeable of FIPS 140-2 IPSec configurations including encryption types, key generation/storage, and configuring tunnels in a Hub‑and‑Spoke architecture.
• Experience with building, securing, and accrediting Linux servers and devices running CentOS.
• Expertise writing policies and procedures for the secure configuration, installation, and management of firewalls and encrypt/decrypt devices on the MCEN in support of the IDS/OT ATO/ATC.
• Professional Certifications: CompTIA Security+ or CompTIA CASP or Certified Information System Security Professional (CISSP) VLP Certificate 100W.

We will be extra impressed if you have:

• SEL certificates or training.
• Experience programming/scripting – Python, SQL, Bash, Java.
• Databases – SQL Server, PostgreSQL, NoSQL, MongoDB.
• Power BI expertise.
• Advanced Microsoft Excel expertise.
• AutoCAD expertise.
• Sec+ expertise.
• Net+ expertise.

What kind of benefits does Terrestris Offer?

We offer outstanding benefits including health, financial, and retirement benefits, as well as paid leave, professional development, tuition assistance, and work‑life programs. Our award programs acknowledge employees for exceptional performance and superior demonstration of our service standards. Full‑time and part‑time employees working at least 20 hours a week on a regular basis are eligible to participate in our benefit programs. Other offerings may be provided for employees not within this category.

Terrestris is an Equal Opportunity Employer (EOE). Qualified applicants are considered for employment without regard to age, race, color, religion, sex, national origin, sexual orientation, disability, or veteran status. Applicants must be authorized to work in the U.S.