USMC Cybersecurity Network EngineerFirewall

Terrestris Global Solutions; Jacksonville (NC); On-site; USD 110,000 - 150,000; Full time

Benefits offered by this job

Health benefits

Financial benefits

Retirement benefits

Paid leave

Professional development

Tuition assistance

Work-life programs

Job summary

Terrestris Global Solutions seeks a Cybersecurity Network Engineer/Firewall to support USMC DoDIN environments with on-site, full-time engagement. The role emphasizes hardening, PKI/VPN design, and secure network operations in IC/OT contexts.

The candidate will implement DISA STIGs, manage PKI for IPSec VPNs, and ensure continuous RMF compliance while collaborating with cybersecurity and systems teams. Excellent DoD security acumen is essential.

Qualifications

• Experience securing multiple OS and devices with DISA STIGs/SRG.
• Experience with PKI for secure IPSec VPN connections.
• Expertise with Palo Alto firewalls in IC/OT environments.
• CentOS/Linux server hardening and configuration.
• Ability to author secure configuration guides and SOPs.

Responsibilities

• Configure, administer, and maintain Palo Alto firewalls, IPSec VPNs, and secure communications across ENVs.
• Harden Linux/CentOS, Raspberry Pi, and networked devices per DISA STIGs/SRGs and FIPS 140-2 baselines.
• Design, deploy, and manage PKI, certificates, and hub-and-spoke IPSec VPN tunnels.
• Monitor security events, investigate incidents, and maintain RMF DoD/USMC compliance.
• Develop secure configuration guides, firewall rulesets, and SOPs; collaborate with admins and engineers.

Skills

Secret clearance

Work authorization US

English fluency

DISA STIGs knowledge

PKI management

Palo Alto firewall

Raspberry Pi security

FIPS 140-2

Linux CENTOS

Policy writing

Scripting

Education

CompTIA Security+ or CASP

CISSP

VLP Certificate 100W

Tools

Palo Alto Firewall

CentOS Linux

Raspberry Pi

Job description

Cybersecurity Network Engineer/Firewall

This full‑time, on‑site position provides knowledge, training, and support to assist the U.S. Marine Corps Public Works Department in the areas of FRCS, Cybersecurity, Assessment & Authorization, Authority To Operate/Connect, USMC Cloud, data center support, and FRCS virtualized environment.

Responsibilities

• Configure, administer, and maintain Palo Alto firewalls, IPSec VPNs, and secure network communications supporting FRCS and IC/OT environments across enterprise and remote facilities.
• Implement, harden, and validate Linux (CentOS), Raspberry Pi, and networked devices by applying DISA STIGs, SRGs, FIPS 140‑2 requirements, and approved cybersecurity baselines.
• Design, deploy, and manage Public Key Infrastructure (PKI), digital certificates, encryption keys, and Hub‑and‑Spoke IPSec VPN tunnels to ensure secure authentication and encrypted communications.
• Monitor firewall operations, network traffic, security events, and system vulnerabilities; investigate incidents, implement corrective actions, and maintain continuous compliance with DoD, DoN, USMC, and RMF security requirements.
• Develop and maintain secure configuration guides, firewall rulesets, standard operating procedures, and technical documentation supporting ATO/ATC accreditation and lifecycle management.
• Collaborate with systems administrators, cybersecurity architects, and control systems engineers to integrate secure network solutions, automate security tasks through scripting, support enterprise databases and reporting tools, and troubleshoot complex FRCS network infrastructure.

Qualifications

• Current Secret clearance is required.
• Authorization to permanently work in the United States without sponsorship.
• Oral and written English fluency.
• State's Driver's License.
• Demonstrated knowledge in securing multiple operating systems and other networked devices using appropriate DISA STIGs and Structured Requirements Guide (SRG).
• Experience with creating and maintaining PKI for secure IPSec VPN connections.
• Experience with Palo Alto firewalls in an IC/OT environment.
• Expert in Raspberry Pi security and configuration.
• Knowledge of FIPS 140‑2 IPSec configurations including encryption types, key generation/storage, and configuring tunnels in a Hub‑and‑Spoke architecture.
• Experience with building, securing, and accrediting Linux servers and devices running CENTOS.
• Expertise writing policies and procedures for the secure configuration, installation, and management of firewalls and Encrypt/Decrypt devices on the MCEN in support of the IC/OT ATO/ATC.
• Professional Certifications: CompTIA Security+ or CompTIA CASP or Certified Information System Security Professional (CISSP) or VLP Certificate 100W.

Preferred Qualifications

• SEL certificates or training.
• Experience programming/scripting — Python, SQL, Bash, Java.
• Databases — SQL Server, PostgreSQL, NoSQL, MongoDB.
• Power BI, advanced Microsoft Excel, AutoCAD expertise.
• Sec+, Net+ expertise.

Benefits

We offer outstanding benefits including health, financial, and retirement benefits; paid leave; professional development; tuition assistance; and work‑life programs. Full‑time employees working at least 20 hours a week on a regular basis are eligible for benefits. Other offerings may be provided for employees not within this category.

Terrestris is an Equal Opportunity Employer (EOE). Qualified applicants are considered for employment without regard to age, race, color, religion, sex, national origin, sexual orientation, disability, or veteran status. Applicants must be authorized to work in the U.S.