Senior Network Security

Job Title: Senior Network Security Engineer

Location: Mechanicsville, VA (Hybrid)

We are seeking an experienced Senior Network Security Engineer to support and secure a large-scale hybrid enterprise infrastructure consisting of on-premises and Azure environments. The ideal candidate will have deep expertise in enterprise networking, network security, cloud networking, SIEM, firewalls, and incident response.

Mandatory Skills:

• 8+ years of Enterprise Networking experience
• 5+ years of Enterprise Security experience
• 3+ years of Azure Networking
• 3+ years of WAF/Next-Generation Firewall (NGFW) experience
• Hands-on experience with Palo Alto Firewalls, Azure WAF, F5 BIG-IP/F5 Distributed Cloud, Cisco VPN, and GlobalProtect
• Experience with SIEM tools (Splunk or Microsoft Sentinel)
• Incident Response, Security Investigations, Threat Hunting, Log Analysis, and Security Monitoring
• Vulnerability Management using tools such as Nessus, Tenable, or Defender
• Active Directory, MFA, Conditional Access, and Certificate Management
• Cisco ISE, NAC, 802.1X, RADIUS, and TACACS
• Strong knowledge of NIST CSF, NIST 800-53, CIS Benchmarks, Zero Trust, and security best practices
• Experience working in highly regulated enterprise environments
• Ability to create network architecture diagrams, firewall rules, IP schemes, and technical documentation
• Strong communication skills with the ability to mentor junior engineers

Responsibilities:

• Design, implement, and support secure enterprise network infrastructure across on-premises and Azure environments.
• Manage and optimize firewalls, WAFs, VPNs, and network security technologies.
• Monitor security events, investigate incidents, and lead remediation efforts.
• Conduct threat hunting, vulnerability assessments, and security reviews.
• Develop and maintain network security documentation, standards, and architecture.
• Collaborate with Infrastructure, Cloud, and Security teams to ensure secure and reliable network operations.