network security engineer

Qode

<div>Job Description &mdash; Confidential
hr@ithr360.com | www.ithr360.com
Network Security Engineer
Professional Services &middot; Network Security Practice
Location: UAE / Middle East (On-site)
Employment Type: Full-Time
Department: Professional Services &ndash; Network Security
Experience: 4&ndash;8 Years (Network / Network Security)
Reports To: Head of Technical Delivery
ABOUT ITHR
ITHR is a technology consulting and professional services organisation supporting enterprises across the UAE and Middle East with digital transformation, cybersecurity, ERP implementation, talent solutions, and managed technology services. We partner with organisations to design, implement, and optimise secure and scalable technology environments that enable business growth and operational resilience.
Our Network Security Practice delivers enterprise-grade security solutions spanning next-generation firewalls, secure connectivity, zero trust architectures, cloud-delivered security, and managed network security services. As organisations continue to modernise their infrastructure, network security remains a critical pillar of our delivery capability and an important area of strategic growth.
ROLE OVERVIEW
We are looking for an experienced Network Security Engineer to join our technical delivery team. This is a hands-on role spanning the full project lifecycle &mdash; from pre-sales Proof-of-Concept (PoC) environments and solution design through to deployment, integration, and post-go-live support across enterprise customer environments.
You will be the technical authority on network security engagements, working directly with customers onsite and remotely to deliver firewall deployments, policy migrations, network segmentation programmes, and secure access solutions. You will also contribute to our managed network security service, where ongoing policy management, health monitoring, and incident escalation are part of the scope.
The role requires deep expertise in at least one major firewall vendor ecosystem, strong networking fundamentals, and the confidence to lead technical conversations and produce customer-ready documentation independently.
KEY RESPONSIBILITIES<ul><li>
Design, deploy, and configure next-generation firewalls (NGFW) across enterprise customer environments &mdash; including Palo Alto Networks, Fortinet FortiGate, and Cisco platforms.</li><li>
Design, build, and execute PoC environments for prospective customers during the pre-sales stage &mdash; defining success criteria, standing up the solution, running demonstrations, and producing outcome reports to support deal progression.</li><li>
Develop key project deliverables: High-Level Designs (HLDs), Low-Level Designs (LLDs), project plans, firewall ruleset documentation, and network security policy frameworks.</li><li>
Perform firewall policy reviews, rule base optimisations, and security posture assessments &mdash; identifying unnecessary exposure, rule bloat, and misconfigurations in existing customer environments.</li><li>
Configure and manage site-to-site and remote access VPN solutions &mdash; IPSec, SSL/TLS, and zero trust network access integrations.</li><li>
Implement network segmentation and micro-segmentation strategies &mdash; designing zone-based architectures, DMZ configurations, and east-west traffic controls.</li><li>
Deploy and tune Intrusion Prevention Systems (IPS), URL filtering, application control, SSL inspection, and threat prevention profiles.</li><li>
Integrate network security platforms with SIEM, SOAR, and log management infrastructure &mdash; ensuring relevant telemetry flows to the SOC for monitoring and alerting.</li><li>
Configure and support SD-WAN solutions and their integration with cloud-delivered security services where applicable.</li><li>
Support integration of SASE/SSE platforms (Zscaler, Netskope, or similar) alongside or in place of traditional perimeter controls where customer architecture demands it.</li><li>
Conduct technical workshops, customer onboarding sessions, and knowledge transfer with customer network teams post-deployment.</li><li>
Produce thorough as-built documentation and operational runbooks suitable for customer sign-off and ongoing managed service handover.</li><li>
Provide post-deployment support, troubleshoot complex network security issues, and act as technical escalation during the warranty and stabilisation phase.</li><li>
Contribute to internal delivery standards, PoC playbooks, and best-practice guides as the network security practice matures.</li></ul>
REQUIRED QUALIFICATIONS (MUST-HAVE)<ul><li>
4&ndash;8 years of hands-on experience in network security or network engineering roles, with a strong delivery track record in enterprise environments.</li><li>
Deep practical expertise with at least one major NGFW platform &mdash; Palo Alto Networks (PAN-OS), Fortinet (FortiOS), or Cisco (FTD/ASA) &mdash; including design, deployment, and advanced feature configuration.</li><li>
Strong networking fundamentals: routing (BGP, OSPF, static), switching, VLANs, NAT, QoS, spanning tree, and packet-level troubleshooting.</li><li>
Hands-on experience with VPN technologies &mdash; IPSec IKEv1/v2, SSL VPN, and remote access architectures.</li><li>
Practical knowledge of network security architecture principles &mdash; zone design, least privilege, defence-in-depth, and perimeter versus zero trust models.</li><li>
Experience performing firewall policy reviews and rule optimisation in live customer environments.</li><li>
Ability to develop HLDs, LLDs, and customer-facing documentation to a professional standard independently.</li><li>
Comfortable working onsite with enterprise customers, leading technical workshops, and managing stakeholder expectations.</li><li>
At least one of the mandatory certifications listed below must be held at the time of application.</li></ul>
CERTIFICATIONS
Candidates must hold at least one mandatory certification. Additional certifications &mdash; particularly from multiple vendor ecosystems &mdash; are a strong differentiator.
Alto Networks Certified Network Security Engineer (PCNSE) Palo Alto Networks Mandatory (one required)
Cisco CCNP Security Cisco Mandatory (one required)
Fortinet NSE 7 / FCSS &ndash; Secure Networking FortinetMandatory (one required)
Zscaler Certified Administrator (ZCCA-IA / ZCCA-PA / ZCP) Zscaler Good to Have
Netskope Administrator / Integrator Accreditation Netskope Good to Have
Palo Alto PCNSA Palo Alto Networks Good to Have
Fortinet NSE 4 / NSE 5 Fortinet Good to Have
Cisco CCNA / CCNA Security Cisco Good to Have
Check Point CCSA / CCSE Check Point Good to Have
PREFERRED QUALIFICATIONS (NICE-TO-HAVE)<ul><li>
Hands-on experience with Zscaler (ZIA/ZPA) or Netskope as part of a SASE/SSE architecture.</li><li>
Experience with Check Point firewalls, SmartConsole, policy management, and R8x administration.</li><li>
Familiarity with network access control solutions such as Forescout, Cisco ISE, or Aruba ClearPass.</li><li>
Experience with SD-WAN platforms including Fortinet Secure SD-WAN, Palo Alto Prisma SD-WAN, Cisco Meraki, or similar technologies.</li><li>
Exposure to cloud networking and security including Azure Virtual WAN, AWS Transit Gateway, cloud-native security groups, and cloud firewall deployments.</li><li>
Familiarity with packet capture and traffic analysis tools such as Wireshark and tcpdump.</li><li>
Scripting or automation experience using Python, Ansible, or REST APIs.</li><li>
Prior delivery experience in the UAE or broader Middle East region.</li></ul>
SOFT SKILLS &amp; PROFESSIONAL ATTRIBUTES<ul><li>
Technically rigorous with a strong focus on secure architecture and attention to detail.</li><li>
Customer-confident and comfortable leading workshops, presentations, and design discussions.</li><li>
Methodical under pressure with structured troubleshooting capabilities.</li><li>
Clear communicator able to explain technical concepts to business stakeholders.</li><li>
Collaborative and delivery-focused, working effectively with project managers, pre-sales teams, and operations groups.</li></ul>
WHAT WE OFFER<ul><li>
Competitive Compensation &mdash; Strong base salary with incentives linked to delivery quality and project outcomes.</li><li>
Training &amp; Certification Budget &mdash; Dedicated annual budget for certifications, vendor training, and lab environments.</li><li>
Multi-vendor Exposure &mdash; Work across Palo Alto, Fortinet, Cisco, SASE, and cloud security platforms.</li><li>
Regional Delivery &mdash; Exposure to projects across the UAE and wider Middle East region.</li><li>
Growth Path &mdash; Clear progression into Senior Network Security Engineer, Solutions Architect, or Practice Lead roles.</li><li>
Culture &mdash; A collaborative technology-focused team that values technical excellence, ownership, customer success, and execution.</li></ul></div>

Network Security Engineer

Click Group

Join the Network Security Experts at Click ITS!Click ITS, a leading System Integrator located in Egypt, is expanding our elite Network Security Department. We partner with industry giants including Fortinet, Palo Alto Networks, Kaspersky, CrowdStrike, Nozomi Networks, Tenable, and Thales to deliver comprehensive security solutions across various layers such as NGFW, SD-WAN, EDR, XDR, OT Security, Data Protection, MFA, and SOC.We are currently looking for passionate and driven professionals to join our dynamic team in the following roles:1. Junior Network Security EngineerAre you ready to accelerate your career in cybersecurity? We are looking for a hands-on Junior Network Security Engineer with a strong foundation in network defence and a drive to learn.Experience Required: 3 YearsKey Responsibilities:<ul><li>Implement, configure, and manage security solutions across different layers (NGFW, SD-WAN, EDR/XDR).</li><li>Assist in the deployment and integration of top-tier vendor solutions including Fortinet, Palo Alto, and Kaspersky.</li><li>Monitor network traffic for security events and assist the SOC team in incident response.</li><li>Troubleshoot and resolve network security issues in enterprise environments.</li><li>Maintain and update security documentation and standard operating procedures.</li></ul>Qualifications:<ul><li>Bachelor’s degree in computer engineering, Information Technology, or a related field.</li><li>Approximately 3 years of practical experience in network security or systems integration.</li><li>Familiarity with NGFW, Endpoint Security, and basic Data Protection concepts.</li><li>Relevant vendor certifications (e.g., NSE 4, PCNSA) are a strong plus.</li><li>Excellent problem-solving skills and a proactive attitude.</li></ul>Why Join Click ITS?Work with the Best: Hands-on experience with cutting-edge technologies from top global vendors.Career Growth: Continuous learning opportunities, training, and certification support.Impactful Work: Protect critical infrastructures and enterprise networks against modern threats.Dynamic Culture: Join a collaborative, innovative, and fast-paced team environment in Egypt.

Junior Network Security Engineer

Jacobs

Location
 Bristol, Bristol City, United Kingdom
 
Capabilities
 Digital and Data
 
Office Setup
 Hybrid
 
Job ID
 #41256
 Market
 National Security & Defense
 
At Jacobs, we're challenging today to reinvent tomorrow by solving the world's most critical problems for thriving cities, resilient environments, mission-critical outcomes, operational advancement, scientific discovery and cutting-edge manufacturing, turning abstract ideas into realities that transform the world for good.
 
Your impact
 
Are you ready to shape the future of secure connectivity? At Jacobs, we are seeking a Senior Network Security Engineer to deliver high-assurance, security-critical solutions within regulated and sovereign UK contexts.
 
This is your opportunity to work on impactful programmes that blend traditional networking with modern secure access and hybrid cloud connectivity. Collaborate with multidisciplinary teams to solve unique connectivity challenges in restricted and isolated environments, enabling secure, resilient operations across public and private infrastructures.
 
What you’ll do: 
Design and deliver secure network architectures for controlled environments.
 
Engineer secure browsing and remote access solutions.
 
Define and implement firewall policies, DNS design, and traffic control.
 
Apply Zero Trust principles to network access and service exposure.
 
Support secure data flows and one-way transfer mechanisms.
 
Collaborate with DevOps and platform teams to integrate networking and security controls.
 
Act as a technical authority on secure connectivity and network risk.
 
Here's what you'll need
 
Core requirements: 
Proven experience in network security engineering within high-assurance or regulated environments.
 
Strong understanding of network architecture, segmentation, firewall policies, and traffic inspection.
 
Experience with Zero Trust networking and designing for restricted or air-gapped environments.
 
Security-first mindset with knowledge of operational risk and compliance constraints.
 
Desirable experience: 
Hybrid connectivity spanning on-premise and cloud services.
 
Virtual networking and hypervisor-level security controls.
 
Familiarity with remote browser isolation technologies.
 
Experience in environments requiring formal security accreditation.
 
At Jacobs, we deliver solutions that matter. You’ll be trusted to make technical decisions, encouraged to challenge respectfully, and supported to deliver pragmatic, high-quality solutions. If you’re ready to shape the future of secure connectivity and network security, we’d love to hear from you.
 
Other important info: 
This role is subject to UK Security Vetting at DV (developed vetting) level. Applicants must be eligible and willing to undergo the appropriate security clearance process if not already cleared. If you’re successful in your application, we’ll ask you to undergo the relevant vetting process to achieve DV clearance. You can find out more about vetting here . Any offer of employment will be conditional upon satisfactory completion of the relevant clearance process.
 
This is a full time, permanent, hybrid (2-3 days/week) role based in Bristol, with occasional business travel across the UK.
 
Full‑time employment at Jacobs is based on a 40‑hour working week. We place a strong emphasis on work‑life balance and flexibility, and flexi-time is available.
 
We offer an excellent and wide range of employee benefits including comprehensive Health Cover, Life Assurance, Income Protection, holiday buy/sell scheme, and a variety of wellbeing, family, parental and fertility support offerings, along with an enhanced contribution pension scheme.
 
#LI-JW8
 
More company details and info below: 
Joining Jacobs not only connects you locally but globally. Our values stand on a foundation of safety, integrity, inclusion and belonging. We put people at the heart of our business, and we truly believe that by supporting one another through our culture of caring, we all succeed. We value positive mental health and a sense of belonging for all employees.
 
With safety and flexibility always top of mind, we’ve gone beyond traditional ways of working so you have the support, means and space to maximize your potential. You’ll uncover flexible working arrangements, benefits, and opportunities, from well-being benefits to our global giving and volunteering program, to exploring new and inventive ways to help our clients make the world a better place. No matter what drives you, you’ll discover how you can cultivate, nurture, and achieve your goals – all at a single global company. Find out more about life at Jacobs .
 
We aim to embed inclusion and belonging in everything we do. We know that if we are inclusive, we’re more connected and creative. We accept people for who they are, and we champion the richness of different perspectives, lived experiences and backgrounds in the workplace, as a source of learning and innovation. We are committed to building vibrant communities within Jacobs, including through our Jacobs Employee Networks, Communities of Practice and our Find Your Community initiatives, allowing every employee to find connection, purpose, and belonging. Find out more about our Jacobs Employee Networks here .
 
Jacobs partners with VERCIDA to help us attract and retain talent from a wide range of backgrounds. For greater online accessibility please visit https://www.vercida.com/uk/employers/jacobs to view and access our roles.
 
As a disability confident employer, we will interview disabled candidates who best meet the criteria. We welcome applications from candidates who are seeking flexible working and from those who may not meet all the listed requirements for a role.
 
We value collaboration and believe that in-person interactions are crucial for both our culture and client delivery. We empower employees with our hybrid working policy, allowing them to split their work week between Jacobs offices/projects and remote locations enabling them to deliver their best work.
 
Your application experience is important to us, and we’re keen to adapt to make every interaction even better. If you require further support or reasonable adjustments with regards to the recruitment process (for example, you require the application form in a different format), please contact the team via Careers Support .

Senior Network Security Engineer

DeepSource Technologies

<div><ul><li>Deep technical experience on F5 advanced WAF</li><li>Identify and clean up unused or orphaned IP addresses on F5 BIG-IP load balancers to improve performance, efficiency, and manageability.</li><li>Review, validate, and remove unused, duplicate, or obsolete firewall policies across HQ and DR data centers while maintaining security posture and compliance.</li><li>Ensure firewall and load balancer changes are aligned with high availability (HA) and disaster recovery (DR) requirements.</li></ul>
Network &amp; Security Assessment<ul><li>Perform a comprehensive assessment of all devices, applications, databases, and network components using public IP addresses.</li><li>Analyze application, service, and security dependencies to determine the potential impact of IP, firewall, and load balancer changes.</li><li>Classify firewall rules and DNS-related entries based on criticality, usage, activity level, and business relevance.</li></ul>
IP Addressing &amp; DNS Governance<ul><li>Develop detailed cleanup and migration plans including sequencing, timelines, backups, and rollback procedures.</li><li>Design and allocate private IP address ranges, ensuring compatibility with existing network and security architecture.</li><li>Assess and analyze DNS records to identify unused, outdated, or invalid entries related to applications and security controls.</li><li>Remove or update invalid, obsolete, or unnecessary DNS records while ensuring no impact on applications or end users.</li></ul>
Secure Execution &amp; Validation<ul><li>Execute cleanup and migration activities in a secure, controlled, and auditable manner, ensuring uninterrupted service continuity.</li><li>Coordinate with application, systems, SOC, and operations teams to align firewall rules, NAT, routing, DNS, and access controls.</li><li>Perform post-change testing and validation to confirm service availability, security enforcement, and performance stability.</li></ul>
Governance, Review &amp; Documentation<ul><li>Establish periodic review procedures for firewall rules, F5 configurations, IP addressing, and DNS records to ensure ongoing accuracy and security.</li><li>Ensure cleanup activities do not negatively impact applications, services, or end users.</li><li>Maintain comprehensive documentation for all activities, including changes implemented, issues encountered, root cause analysis, and approved remediation actions.</li><li>Support audit, compliance, and regulatory requirements through proper documentation and change tracking.</li></ul> 
Requirements<ul><li> 
Strong hands-on experience with firewalls (NGFW), security policies, NAT, and access control management.</li><li>Proven expertise in F5 BIG-IP (LTM), including VIPs, Self IPs, SNATs, and HA configurations.</li><li>Solid understanding of enterprise IP addressing, DNS, routing, and network security architecture.</li><li>Experience operating in HQ / DR, high-availability, and mission-critical environments.</li><li>Strong knowledge of change management, rollback planning, and risk mitigation.</li></ul>
Education &amp; Certifications (Preferred)<ul><li>Bachelor&rsquo;s degree in Computer Science, Information Technology, or related field</li><li>Certifications such as CCNP Security, F5-CA/CTS, NSE, or equivalent are high</li></ul></div>

Senior Network Security Engineer - Jeddah, KSA

DirectViz Solutions, LLC

<div>DirectViz Solutions (DVS) is a dynamic and rapidly growing government contractor committed to delivering innovative IT solutions that address the mission-critical needs of our government clients. Through the expertise and dedication of our talented team, we provide cutting-edge technology services designed to achieve success and exceed expectations.
At DVS, we prioritize our employees as our greatest asset. We offer competitive compensation, comprehensive medical benefits, a 401(k) match, generous PTO accrual, professional development reimbursement, corporate-funded technology certifications, and robust employee recognition and appreciation programs.
Network Security Engineer II
Overview
We are seeking a motivated and detail-oriented Network Security Engineer III to support and maintain secure enterprise network environments in accordance with DoD cybersecurity and network security standards. The ideal candidate will have hands-on experience with network engineering, cybersecurity best practices, vulnerability management, and Cisco network technologies in classified or government environments. MUST HAVE AN ACTIVE SECRET CLEARANCE
This position supports mission-critical infrastructure and requires experience with secure network operations, STIG implementation, vulnerability remediation, and network troubleshooting.
Key Responsibilities<ul><li>
Support the design, configuration, implementation, and maintenance of secure network infrastructure.
</li><li>Configure and maintain Cisco networking devices including routers, switches, and related technologies.
</li><li>Perform network hardening activities in compliance with DoD cybersecurity requirements and Security Technical Implementation Guides (STIGs).
</li><li>Conduct vulnerability assessments using Assured Compliance Assessment Solution (ACAS) and assist with remediation efforts.
</li><li>Troubleshoot network connectivity, routing, switching, and performance issues across enterprise environments.
</li><li>Utilize packet analysis and monitoring tools such as Wireshark and tcpdump to diagnose and resolve network issues.
</li><li>Assist with implementing security controls and maintaining compliance with DoD cybersecurity policies and procedures.
</li><li>Support system accreditation and continuous monitoring activities as required.
</li><li>Maintain documentation related to network configurations, security findings, remediation activities, and operational procedures.
</li><li>Collaborate with cybersecurity, systems engineering, and operations teams to ensure secure and reliable network services.
</li></ul>Required Qualifications
Education:
Bachelor's degree in Cybersecurity, Cyber Operations, Cyber Engineering, Information System, Information Technology, Computer, Electrical, or Electronics Engineering, Software Engineering, Computer Science, Mathematics with a concentration in Computer Science, or equivalent to above disciplines.
Certification:
A minimum of one of the following: CASP+ CE or CCNP Security or CISA or CISSP or GCED or GCIH or CCSP.
Clearance: Secret
Experience:
A combined total of eight (8) years of full-time professional experience in the following skillsets/disciplines:
<ul><li>Network Security to include the design, implementation, configuration, and enforcement of security controls on network, hardware, and software components and devices;
</li><li>Performing STIG implementation;
</li><li>Utilizing and configuring Active Directory;
</li><li>Performing vulnerability assessments with the Assured Compliance Assessment Solution tool;
</li><li>Configuring Cisco networking devices; o Utilizing packet analyzer tools (examples, Wireshark and tcpdump, etc.);
</li><li>Implementing and managing firewalls and IDS/IPS solutions.</li></ul>
If you thrive on solving complex problems and building meaningful connections, we'd love to hear from you. Join our team and make an impact today!
Physical and Mental Qualifications:<ul><li>
Maintain focus and awareness throughout scheduled working hours.</li><li>
Perform tasks requiring prolonged periods of sitting or standing at a desk, utilizing a computer, mouse, and keyboard.</li><li>
Lift and move objects weighing up to 15 pounds as needed.</li><li>
Exhibit excellent verbal and written communication skills, with a strong command of the English language.</li><li>
Demonstrate the ability to work independently while also collaborating effectively as part of a team.</li><li>
Quickly learn and retain routine tasks and processes.</li><li>
Possess strong organizational skills, attention to detail, business correspondence proficiency, and self-management capabilities.</li><li>
Perform the essential functions of the role satisfactorily; reasonable accommodation will be provided for employees with disabilities upon request.</li><li>
Accept and adapt to additional responsibilities or changes to assigned duties as determined by DirectViz Solutions (DVS).</li></ul>
DirectViz Solutions, LLC (DVS) is an equal opportunity employer who prohibits discrimination and harassment against any employee or applicant for employment based on race, , sex (including pregnancy), age, gender identity, creed, religion, national origin, sexual orientation, marital status, genetic information, disability, political affiliation, protected veteran status, or any other status protected by federal, state or local law.
DVS has a zero-tolerance policy for harassment, threats, coercion, discrimination, and intimidation. Employees may file a complaint or exercise any right protected by Executive Order 11246, Section 503 of the Rehabilitation Act of 1973, as amended, Section 4212 of the Vietnam Era Veterans Readjustment Assistance Act of 1974, or the Veterans Employment Opportunities Act of 1998.</div>

Network Security Engineer III (MUST HAVE SECRET CLEARANCE)

SAIC

<div>Job ID: 2613944
Location: Kaiserslautern, Rhineland-Palatinate, DE
Date Posted: 2026-06-24
Category: Information Technology
Subcategory: Network Engineer
Schedule: Full-Time
Shift: Day Job
Travel: Yes - 10% of the time
Minimum Clearance Required: Secret
Clearance Level Must Be Able to Obtain: TS/SCI
Potential for Remote Work: ORA_ON_SITE 
Description
SAIC is seeking a Network Engineer Principal to support the US Air Force Collaborative Operations for Battlespace Resilient Architecture (COBRA) program at the US Air Forces Europe / Air Forces Africa (USAFE-AFAFRICA) Warfare Center (UAWC) in Kaiserslautern, Germany.
COBRA provides for the implementation, integration, development, and delivery of Modeling and Simulation (M&amp;S) solutions to support the US Air Force, Department of Defense, and mission partner multi-domain operations (MDO) within the Joint All-Domain Command and Control (JADC2) strategy.
This role of this position is to support the UAWC&rsquo;s physical exercise networks including, Non-Secure Internet Protocol Network (NIPRNET), Secure Internet Protocol Network (SIPRNET), Coalition and Exercise Networks, Commercial Internet, and Video Teleconferencing (VTC) systems.
The Network Engineer Principal will:<ul><li>
Design, plan, build, deploy, configure, test, monitor, and maintain the UAWC's network systems and its related hardware, software, licenses, and certification.</li><li>
Implement network upgrades, system software patching, and security compliance in accordance with DOD 8140.01, Risk Management Framework (RMF), DISA STIGS, Maintenance Task Orders, Information Assurance Vulnerability Management, Air Force Instructions, and UAWC policies.</li><li>
Coordinate with UAWC IT Technical Planners to plan and complete event and exercise-related networking tasks and requests.</li><li>
Using advanced troubleshooting methodologies for physical, virtualized, and software-defined environments, research, analyze, recommend, and document possible resolutions to resolve network issues or improve network performance,</li><li>
Monitor, analyze, and respond to real-time network traffic. Coordinate and submit tickets to escalate network issues with upstream providers as needed.</li><li>
Oversee the design and optimization of standards-compliant, high-speed, and redundant LAN/WAN architectures within UAWC&rsquo;s distributed/exercise-specific network environment.</li><li>
Lead the deployment and optimization of enterprise collaboration tools and communication platforms, including VoIP, VTC, and IPTV.</li><li>
Continually evaluate and upgrade UAWC&rsquo;s network systems, providing strategic recommendations for enhanced capabilities and network infrastructure refresh cycles to accommodate M&amp;S and JADC2 initiatives.</li><li>
Develop technical documentation, including network diagrams, SOPs (Standard Operating Procedures), and compliance policies to maintain accurate records.</li><li>
Monitor status of projects, prepare milestone status reports, and present status to the UAWC.</li></ul>
Qualifications
Required Experience/Qualifications:<ul><li>
US Citizen and U.S. Secret security clearance, eligible for TS/SCI.</li><li>
Bachelor's and Five (5) or relevant years of experience in lieu of degree</li><li>
Cisco Certified Network Professional (CCNP) Certification.</li><li>
DoDM 8140 Work Role 441 &ndash; Network Operations Specialist - Intermediate Certification (e.g. Security+, Cloud+, etc.)</li><li>
Proficiency using MS Office, including: Word, PowerPoint, Excel, SharePoint, Visio, and Teams.</li><li>
Network engineer experience supporting Department of Defense networks, including network compliance with STIGs, RMF, and NIST Cybersecurity Framework.</li></ul>
Desired Experience/Qualifications:<ul><li>
Additional Security certifications such as CASP, CCNA Security, or equivalent.</li><li>
Deep understanding and extensive practical experience with enterprise level networking such as: Cisco Call Manager, Cisco Meeting Servers, Nexus, Cisco Firewalls, Cisco DNA Center, Cisco Identity Service Engine.</li><li>
Experience with emerging technologies such as Cisco SD-WAN and Cisco FMC/FTD with VTI.</li><li>
Experience with SolarWinds.</li><li>
Experience with Multicast routing, QoS, and VPN deployment.</li><li>
Experience with routing protocols such as EIGRP, OSPF, VRFs, NAT, and BGP.</li><li>
Desired experience with VoIP and VTC integration.</li><li>
Desired experience with Virtual Infrastructure such as vSphere, vCenter, and Cisco Hyperflex.</li><li>
Desired experience security monitoring platforms and incident detection management, such as Wazuh or ACAS.</li></ul>
Expected Salary Range - Highly dependent on candidate qualifications.<ul><li>
$90,000 - $140,000</li></ul>
Additional Benefits - Dependent on personal eligibility and/or meeting length of employment requirements<ul><li>
Status of Forces Agreement (SOFA) Individual Logistics Support, including:<ul><li>
German tax exemption.</li><li>
Base Exchange and Commissary privileges.</li><li>
Motor vehicle registration.</li><li>
Access to VAT-free vehicle fuel.</li><li>
Armed Forces Post Office (APO) services.</li></ul></li><li>
Reimbursement for minor dependent education at the duty location and access of DoD Education Activities (DoDEA) school system on a space-available basis.</li><li>
Living Quarters Allowance (LQA) at the Group 3 rate.</li><li>
Relocation to/from Germany.</li><li>
Foreign Earned Income Exclusion (Federal income tax exclusion).</li></ul></div>

Senior Network Engineer

10Pearls

<div>Company Overview 
 
10Pearls is an award-winning end-to-end digital innovation company that helps businesses imagine and build the future. We are proud to announce that 10Pearls was named as winner of the Best Tech Work Culture Timmy Award in Washington DC by Tech in Motion, recognized on the Inc. 5000 Fastest-Growing Companies List, and was ranked the #1 Most Diverse Midsize Company in Greater Washington. We partner with businesses to help them transform, scale, and accelerate by adopting digital and exponential technologies. Our work has ranged from creating highly usable, secure digital experiences, mobile and software products, to helping businesses modernize through cloud adoption and development and the digitalization of their business processes. Our clientele is highly diverse, including Global 1000 enterprises, mid-market businesses, and even high-growth start-ups. But those are just the facts. What makes us unique is that we have true heart and soul. We have a strong focus on a double bottom line and actively support and engage with the communities where we live and work to make the world a better place. In a nutshell, we believe in doing well, while doing good and know how to balance the two. 
 
Role 
At 10Pearls, we are looking for an experienced Network Security Architect to join our Cyber Security team and play a critical role in designing, implementing, and managing enterprise-grade network security solutions for a leading banking client. The ideal candidate will possess deep expertise in network security architecture, firewall technologies, cloud security, and security operations, ensuring the confidentiality, integrity, and availability of critical infrastructure. This role involves driving security initiatives, leading complex infrastructure migrations, strengthening the organization's security posture, and collaborating with cross-functional teams to deliver secure, scalable, and resilient network environments while ensuring compliance with industry standards and regulatory requirements. 
 
Responsibilities<ul><li>
Design, implement, administer, and maintain the Bank's network security architecture and security infrastructure.</li><li>
Manage and optimize enterprise security technologies including firewalls, web application firewalls (WAF), intrusion prevention systems (IPS), web proxies, email security, DDoS protection, database activity monitoring (DAM), cloud security, file integrity monitoring (FIM), load balancers, and multi-factor authentication (MFA) solutions.</li><li>
Ensure maximum availability, performance, and resilience of security infrastructure while meeting defined ITSM service level agreements (SLAs).</li><li>
Perform proactive monitoring, tuning, troubleshooting, and performance optimization of security appliances to identify and mitigate potential security threats.</li><li>
Execute security incident response, root cause analysis, problem management, and remediation activities for network security-related issues.</li><li>
Plan, execute, and support security projects, infrastructure upgrades, migrations, and implementation of new security technologies.</li><li>
Develop and maintain security architecture documentation, technical procedures, standards, and operational runbooks.</li><li>
Ensure compliance with the Bank's information security policies, regulatory requirements, security baselines, and audit standards.</li><li>
Evaluate security risks, recommend appropriate security controls, and implement solutions to enhance the organization's security posture.</li><li>
Support change management processes by reviewing, implementing, and validating security-related changes with minimal business disruption.</li><li>
Collaborate with infrastructure, cloud, application, and operations teams to integrate security best practices across the technology landscape.</li><li>
Provide technical guidance and subject matter expertise for network security technologies and emerging cyber security threats.</li><li>
Participate in business continuity, disaster recovery, vulnerability management, and security improvement initiatives.</li></ul><h3 class="jobSectionHeader">
Requirements</h3><ul><li>
Bachelor's degree in Computer Science, Information Technology, Cyber Security, or a related discipline.</li><li>
10+ years of hands-on experience in Network Security, Cyber Security Operations, or Security Infrastructure Engineering.</li><li>
Strong expertise with enterprise security technologies including Check Point, Palo Alto, Cisco Firewalls/IPS, F5 WAF/LTM, Radware, Arbor DDoS, Forcepoint, FireEye, Zscaler, IBM Guardium, Tripwire, Microsoft EOP, Azure Cloud Security, Imprivata MFA/SSO, and Cisco networking.</li><li>
Solid understanding of network security architecture, firewalls, VPNs, IDS/IPS, web security, email security, cloud security, identity and access management, and zero trust principles.</li><li>
Experience with incident management, root cause analysis, change management, audit compliance, and security operations.</li><li>
Knowledge of regulatory compliance frameworks, information security standards, and banking security requirements.</li><li>
Experience managing security projects, migrations, and enterprise-scale security implementations.</li><li>
Strong analytical, troubleshooting, documentation, and problem-solving skills.</li><li>
Excellent communication, stakeholder management, and cross-functional collaboration abilities.</li><li>
Relevant certifications such as CISSP, CISM, CCNP Security, PCNSE, CCSE, Azure Security Engineer, or equivalent are highly preferred.</li></ul> 

K9d5pxhFL6</div>

Network Security Architect- Morning Shift - Full-time

Search 7728+ Network security engineer jobs near you this July. New roles added regularly across leading industries. Apply today.