Sr. Network Engineer - Zero Trust, NGFW

- We prefer a bachelors degree in a technical discipline, though comparable hands-on experience may replace formal education. - We require an active U.S. Top Secret clearance, with eligibility for expedited SCI read-in; a recent in-scope investigation is needed, and prior TS/SCI with polygraph is preferred. - We require Security+ certification, which also aligns with DoD 8140 requirements for the 441 Network Operations Specialist role. - We require at least one platform-specific security certification, such as PCNSE, Fortinet NSE, or a Cisco security credential. - CCIE Security or CCIE Enterprise Infrastructure is preferred. - We need 10+ years of network engineering experience focused primarily on enterprise security infrastructure. - We need proven expertise in designing, deploying, and managing next-generation firewalls, VPN technologies, intrusion prevention systems, and network access control platforms. - We need direct experience protecting network perimeters and internal segments through policy development, segmentation, and threat mitigation. - We need operational experience administering firewall rules, VPN tunnels, and security policies in mission-critical environments. - We need practical experience with enterprise security platforms such as Palo Alto Networks, Fortinet, or Cisco security technologies. - We need hands-on experience with Cisco ISE and Cisco ASA environments. - We need experience with IDS and IPS tools, as well as endpoint hardening in secure environments. - We need familiarity with Zero Trust architectures and identity-centered network security approaches. - We need the ability to contribute immediately with minimal onboarding in a high-stakes operational setting.