senior network security engineer

Everforth ECS

<div><p>Everforth ECS is seeking an <b><i>Network &amp; Security Infrastructure Engineer </i></b>to work in our <b><i>Washington, DC </i></b>office / <b><i>remote</i></b>. <b>The role is contingent upon additional funding.</b></p>
<p>
</p><p>We are seeking an experienced and technically versatile <b>Network &amp; Security Infrastructure Engineer</b> to take on a high-impact, dual-function role within a large and complex enterprise environment. This position sits at the crossroads of network infrastructure, virtual environment engineering, and security operations, and it requires genuine depth across all three, not surface-level familiarity.</p>
<p>
</p><p>The near-term priority for this role is significant: you will lead a major re-architecture of the organization's VMware ESXi virtual environment to support comprehensive firewall and VLAN implementations that deliver proper network segmentation across the enterprise. This is a foundational infrastructure initiative with direct security implications, and it will require someone who can think and execute at the architectural level within a virtualized environment.</p>
<p>
</p><p>Beyond that primary objective, this role carries ongoing responsibility across two organizational teams. You will provide dedicated firewall support to the Architecture and Engineering division, administering the enterprise's internal and cloud-facing firewall environments. On the networking side, you will support the security operations division, monitoring and maintaining a Cisco-based network infrastructure and an Aruba wireless environment from a security-first perspective.</p>
<p>
</p><p>This role is built for someone who can operate with equal confidence in a virtual environment console, a firewall policy manager, and a network operations context.</p>
<p>
</p><p><i>Salary Range: $120,000 - $130,000</i><br>
<i>General Description of Benefits</i></p>
Requirements:
<p>Virtual Environment &amp; Network Segmentation</p>
<ul>
<li>Hands-on experience designing and re-architecting VMware ESXi environments in an enterprise setting</li>
<li>Ability to plan and implement VLAN segmentation strategies within virtualized infrastructure to support firewall enforcement and proper traffic isolation</li>
<li>Experience configuring virtual switches, distributed switches, and virtual port groups in support of security segmentation objectives</li>
<li>Familiarity with NSX or equivalent software-defined networking (SDN) platforms as they relate to micro-segmentation and east-west traffic control</li>
<li>Ability to document virtual network architecture clearly and thoroughly, including design decisions, configurations, and future-state plans</li>
</ul>
<p>Firewall Administration</p>
<ul>
<li>Hands-on experience configuring and administering enterprise-class firewall technologies, with specific experience on Check Point and Palo Alto platforms</li>
<li>Ability to implement new firewall architectures, upgrades, and feature rollouts as directed</li>
<li>Experience administering firewall policy including updates, upgrades, policy administration, and validation</li>
<li>Proficiency managing and tuning software blades and associated security features such as IPS, URL filtering, Application Control, antivirus, and advanced malware detection</li>
<li>Ability to review and implement changes consistent with existing firewall policies while maintaining thorough, up-to-date documentation</li>
<li>Strong knowledge of firewall rules, security policies, and security operations within a large enterprise environment</li>
<li>Willingness to work outside of normal business hours when required to support outage resolution or planned maintenance</li>
</ul>
<p>Network Infrastructure &amp; Security</p>
<ul>
<li>Strong hands-on experience with Cisco network infrastructure including routing, switching, and network security configurations in an enterprise setting</li>
<li>Experience supporting and securing Aruba wireless access point environments</li>
<li>Solid understanding of core networking protocols including TCP/IP, BGP, OSPF, VLANs, and VPNs</li>
<li>Ability to monitor and analyze network architecture, communication flows, policies, and protocols from a cybersecurity perspective</li>
<li>Experience identifying and isolating network-based security issues quickly during incidents and outages</li>
<li>Familiarity with network access control concepts and how they integrate with broader security operations</li>
</ul>
<p>Collaboration &amp; Documentation</p>
<ul>
<li>Ability to collaborate across teams including cybersecurity, systems administration, and technology support partners</li>
<li>Experience supporting security continuous monitoring efforts such as risk assessments, vulnerability identification, and patch coordination</li>
<li>Ability to create and maintain clear, accurate documentation for virtual, network, and firewall configurations, procedures, and troubleshooting steps</li>
<li>Comfortable communicating technical findings and infrastructure risk clearly to both technical peers and senior leadership</li>
</ul>
<p>A minimum of 5+ years of experience in network security engineering or a closely related infrastructure discipline is required, with direct hands-on experience on both Check Point and Palo Alto platforms strongly preferred. Candidates who bring demonstrated experience with VMware ESXi re-architecture and VLAN segmentation design &mdash; in addition to enterprise networking and firewall administration &mdash; will be given strong preference over candidates with depth in only one or two of these areas.</p><br>
<br>
Req Benefits:
<div>Benefits - Everforth ECS</div></div>

Network & Security Infrastructure Engineer

Apollo Technology Solutions LLC

<div><div><b>Title: Sr Network Security Engineer</b><br>
<b>Location: Mechanicsville, VA(Hybrid)</b><br>
<b>Duration: 10 Months</b><br>
<b>Interview Type: In Person Only</b><br>
<br>
<br>
<b>Job Description:</b><br>
Client is seeking an experienced Sr Network Security Engineer (Sr NSE) to implement and support the agency's IT network, cloud, and computing infrastructure. The Sr NSE performs day-to-day activities related to securing Client's infrastructure.<br>
The Sr NSE performs day-to-day activities related to securing, documenting, performing research, analysis, design, and implementation of Client's network and computing related infrastructure.<br>
<br>
The Sr NSE will support a hybrid enterprise environment consisting of approximately 300 statewide locations, Palo Alto firewalls, Azure networking, ExpressRoute connectivity, WAF technologies, Splunk SIEM, SD-WAN, and mission-critical public-facing applications. The role partners closely with Infrastructure, Cloud Engineering, and the Information Security Office to maintain the confidentiality, integrity, and availability of Client's network infrastructure.<br>
<br>
<b>Key Responsibilities:</b><br>
<ul><li>Ensures network security architecture aligns with operational security standards prior to and after deployment.</li>
<li>Lead investigation and containment of network security incidents.</li>
<li>Review firewall rule requests and ensure compliance with security standards.</li>
<li>Design and maintain secure hybrid network architecture across on-premises and Azure environments.</li>
<li>Monitor security events using SIEM technologies and coordinate incident response activities.</li>
<li>Perform network security assessments and recommend remediation strategies.</li>
<li>Develop and maintain network security standards, diagrams, and operational documentation.</li>
<li>Support penetration testing and remediation efforts.</li>
<li>Participate in on-call support during critical security incidents.</li>
<li>Responsible for conducting proactive threat hunting and anomaly detection.</li>
<li>Validates WAF and firewall placement and integration exposure/connectivity. Also leads implementation, review, and management of agency WAF(s).</li>
<li>Identifies and diagnoses system problems and threats by using system logs, line monitors, SIEM, diagnostic software, and test equipment.</li>
<li>Identifies, prioritizes, and remediates network security vulnerabilities.</li>
<li>Must have the ability to provide documentation, network architecture topology diagrams, IP schemes, firewall rules, and access controls when required.</li>
<li>Must have the ability to work independently on assigned projects.
</li></ul><br>
<b>Required/ Desired Skills:</b>
<ul><li>Enterprise Networking</li>
<li>Enterprise Security</li>
<li>Azure Networking</li>
<li>WAF/NGFW</li>
<li>Supporting environments with 300+ Network Devices</li>
<li>Candidate must have experience in the following areas: Incident response, Security investigations, Log analysis, Threat intelligence, Security monitor</li>
<li>Candidate must have experience with the SIEM products (e.g. Splunk, Microsoft Sentinel)</li>
<li>Candidate must have experience in vulnerability management and remediation tracking as well as vulnerability scanning tools (e.g. Nessus, Tenable, Def</li>
<li>Candidate must have experience in the following areas: Active Directory, MFA, Conditional Access, Certificates</li>
<li>Candidate must have experience with; SEC530, CIS Benchmarks, NIST CSF, NIST 800-53, Zero Trust principles</li>
<li>Candidate must have experience with the following: Cisco Client, NAC, 802.1X, RADIUS, TACACS</li>
<li>Candidate must have experience with the following products: Palo Alto, F5 Distributed Cloud, Azure WAF, Cisco VPN, Global Protect, F5 BIG-IP</li>
<li>Candidate must have experience working in highly regulated environments and leading technical troubleshooting during outages</li>
<li>Candidate must have ability to communicate technical issues to technical and executive audiences and an ability to mentor junior engineers.</li>
<li>Candidate should have achieved or ability to achieve the following certifications: Azure Security Engineer (AZ-500), Azure Network Engineer (AZ-700),</li></ul></div></div>

Sr Network Security Engineer

St. Jude Children's Research Hospital

<div><div><div><div><div><div>Location
</div><div>Memphis, TN
</div></div><div><div>Category
</div><div>Information Technology
</div></div><div><div>Department
</div><div>Information Services
</div></div><div><div>Shift
</div><div>Weekday Day
</div></div><div><div>Position Type
</div><div>Full Time
</div></div><div><div>Scheduled Weekly Hours
</div><div>40
</div></div><div><div>Req #
</div><div>JR7270
</div></div></div></div></div><div><div><div><h2 class="jobSectionHeader"><b>Job Description
</b></h2></div></div><div><div><div><div>The Network Engineer (Level II or Senior) plays a critical role in supporting the mission of St. Jude Children's Research Hospital by ensuring the reliable, secure, and scalable network services that connect researchers, clinicians, staff, patients, and remote locations around the world. As a member of the team responsible for Tier 0 network infrastructure, this position designs, implements, and supports the foundational services upon which all other technology systems depend.<br>
<br>
This role provides leadership for the operation and advancement of enterprise networking technologies, including DNS, DHCP, IP Address Management (IPAM), Cisco Network Data Fabric Controller (NDFC), load balancing, wireless networking, remote access solutions, edge connectivity, and related infrastructure services. Through proactive engineering, strategic planning, and operational excellence, the Network Engineer (Level II or Senior) helps ensure that critical research, patient care, and business operations remain connected and uninterrupted.<br>
<br>
The ideal candidate is a highly skilled engineer who thrives in a dynamic environment, balancing long-term infrastructure initiatives with operational support and incident response. Success in this role is measured not only by system availability and performance, but by enabling the work that drives scientific discovery, advances treatments, and improves outcomes for children facing catastrophic diseases worldwide.<p></p><p><b>
Senior Level Qualifications:</b></p><p><b>
Job Responsibilities:</b></p><ul><li>
Oversee configuration and management of the IT infrastructure to support requirements (e.g. data retention, security, business continuity, disaster recovery, information risk management).</li><li>
Monitor and evaluate the efficiency and effectiveness of infrastructure service delivery methods and procedures.</li><li>
Lead and manage internal infrastructure through established regulations &amp; standards.</li><li>
Implement and monitor incident/problem &amp; disaster recovery for infrastructure support.</li><li>
Manage and provide current systems usage statistics, provide future projected growth estimates based on customer&rsquo;s demand.</li><li>
Partner with internal teams to develop prioritization, metrics, and processes around capacity planning and infrastructure availability.</li><li>
Periodically present capacity planning and performance reports to senior leaders during presentations and meetings.</li><li>
Benchmark, analyze, and make recommendations for improvement of IT infrastructure.</li><li>
Perform other duties as assigned to meet the goals and objectives of the department and institution.</li><li>
Maintains regular and predictable attendance.</li></ul><p></p><p><b>
Minimum Education and/or Training:</b></p><ul><li>
Bachelor's degree in Computer Science, Engineering, Business or related field of study required.</li><li>
Master's degree preferred.</li></ul><p></p><p><b>
Minimum Experience:</b></p><ul><li>
Minimum experience: Four (4) years of IT experience with experience in infrastructure operations and engineering environments.</li><li>
Experience in infrastructure design, systems analysis, and security management.</li><li>
Some experience working with commercial models around infrastructure capacity procurement.</li><li>
Experience in customer service and vendor management.</li><li>
Some experience in business stakeholder engagement and management.</li><li>
Hands-on experience with core network services such as DNS, DHCP, and IP Address Management (IPAM) highly preferred.</li><li>
Experience troubleshooting complex network connectivity issues across large, distributed environments highly preferred.</li><li>
Knowledge of network security principles, remote access solutions, and VPN technologies highly preferred.</li><li>
Cisco Certified Network Professional (CCNP) certification highly desired.</li><li>
Strong analytical, problem-solving, and incident response skills with the ability to prioritize multiple competing demands highly preferred.</li><li>
Experience supporting Cisco wireless networking technologies in a large enterprise environment preferred.</li><li>
Experience administering Cisco Network Data Fabric Controller (NDFC) preferred.</li><li>
Experience with enterprise load balancing technologies such as F5, Citrix ADC, or similar platforms preferred.</li><li>
Experience supporting network infrastructure in healthcare, research, higher education, or other mission-critical environments preferred.</li><li>
Experience designing highly available and scalable network architectures that support organizational growth and expansion preferred.</li><li>
Familiarity with enterprise monitoring, automation, and infrastructure management tools preferred.</li><li>
Proven performance in earlier role/comparable role.</li></ul><p></p><p><b>
Special Skills, Knowledge and Abilities:</b></p><ul><li>
Promptly and effectively responds to customer queries and requests.</li><li>
Explores optimal solutions for customer needs.</li><li>
Escalates/redirects effectively for quicker customer support.</li><li>
Is aware of interdependencies across work and considers all parts of the work and its impact while executing own work.</li><li>
Collaborates across scrum teams and contractors to deliver common team goals.</li><li>
Navigates and flexes work style to requirements that can change frequently, continues to communicate and influence others.</li><li>
Conducts proactive resource/capacity planning and identifies ways to optimize asset performance.</li><li>
Anticipates and addresses business needs to improve operating environments for teams within own area.</li><li>
Conducts ongoing troubleshooting of complex system/application issues and devises suitable resolution/repair strategies.</li><li>
Engages with development teams on system/application building, implementation, and issue resolution.</li><li>
Effectively relays understanding of diverse perspectives.</li><li>
Can handle communication upwards and downwards as needed.</li><li>
Presents information in a clear, well thought out way and tailored to the audience.</li><li>
Shows support for the new direction even when the details have not been finalized.</li><li>
Uses a data-driven approach to spot early indications of underperformance and takes corrective actions. Celebrates successes.</li><li>
Works with partners in their function to find the best solutions that align with functional priorities. Works effectively to find solutions.</li><li>
Ability to look at data more critically and draw meaningful conclusions. Conducts root-cause analysis as needed.</li><li>
Quickly rebounds from setbacks, including creating viable plans to move forward.</li><li>
Helps others understand the need for change and adapt to it.</li></ul><p></p><p><b>
Level II Qualifications:</b></p><p><b>
Job Responsibilities:</b></p><ul><li>
Contribute to infrastructure/network projects/operations and other internal/external solutions and services within own area.</li><li>
Provide customer service around infrastructure/network in line with defined service level commitments.</li><li>
Co-ordinate installation, configuration and support for new and existing network/infrastructure.</li><li>
Monitor availability of existing organizational network/infrastructure and associated systems.</li><li>
Provide capacity planning and performance analysis aligned with business demand.</li><li>
Manage responses to security incidents to ensure timely resolution.</li><li>
Create capacity planning and utilization reports for own area.</li><li>
Perform other duties as assigned to meet the goals and objectives of the department and institution.</li><li>
Maintains regular and predictable attendance.</li></ul><p></p><p><b>
Minimum Education and/or Training:</b></p><ul><li>
Bachelor's degree in Computer Science, Engineering, business or related field of study required.</li><li>
Master's degree preferred.</li></ul><p></p><p><b>
Minimum Experience:</b></p><ul><li>
Minimum requirement: Two (2) years of IT experience with experience in infrastructure operations and engineering environments.</li><li>
Some experience in infrastructure design, systems analysis, and security management.</li><li>
Some experience working with business stakeholders to identify and document requirements.</li><li>
Hands-on experience with core network services such as DNS, DHCP, and IP Address Management (IPAM) highly preferred.</li><li>
Experience troubleshooting complex network connectivity issues across large, distributed environments highly preferred.</li><li>
Knowledge of network security principles, remote access solutions, and VPN technologies highly preferred.</li><li>
Cisco Certified Network Professional (CCNP) certification highly desired.</li><li>
Strong analytical, problem-solving, and incident response skills with the ability to prioritize multiple competing demands highly preferred.</li><li>
Experience supporting Cisco wireless networking technologies in a large enterprise environment preferred.</li><li>
Experience administering Cisco Network Data Fabric Controller (NDFC) preferred.</li><li>
Experience with enterprise load balancing technologies such as F5, Citrix ADC, or similar platforms preferred.</li><li>
Experience supporting network infrastructure in healthcare, research, higher education, or other mission-critical environments preferred.</li><li>
Experience designing highly available and scalable network architectures that support organizational growth and expansion preferred.</li><li>
Familiarity with enterprise monitoring, automation, and infrastructure management tools preferred.</li><li>
Proven performance in earlier role/comparable role.</li></ul><p></p><p><b>
Special Skills, Knowledge and Abilities:</b></p><ul><li>
Ability to think critically, draw insights and connect the dots. Openness to change and adapting to changing times with resilience and flexibility.</li><li>
Learns on the job and applies skills in routine tasks and activities; delivers under supervision and guidance</li><li>
Understands the task at hand, seeks out information, and draws conclusions from available data to deliver outcomes. Adapts quickly to changing priorities to perform as needed in his/her role. Remains calm when faced with changes to (and in) his/her work.</li><li>
Skills in communicating complex ideas effectively to diverse audiences and influence others to see different points of view.</li><li>
Is able to apply knowledge/skills within own area to deliver tasks with limited guidance</li><li>
Effectively relays understanding of diverse perspectives. Can handle communication upwards and downwards as needed. Presents information in a clear, well thought out way and tailored to the audience.</li><li>
Focus on setting high targets, following through with actions, and achieving results. Ability to anticipate roadblocks and circumvent challenges.</li><li>
Is able to apply knowledge/skills within own area to deliver tasks with limited guidance</li><li>
Shows support for the new direction even when the details have not been finalized. Uses a data-driven approach to spot early indications of underperformance and takes corrective actions. Celebrates successes. Works with partners in their function to find the best solutions that align with functional priorities. Works effectively to find solutions.</li><li>
Skills in prioritizing and addressing needs from multiple customers/stakeholders with a focus on efficient, responsive, high-quality/fit-for-purpose delivery.</li><li>
Learns on the job and applies skills in routine tasks and activities; delivers under supervision and guidance</li><li>
Seeks to understand customer needs by asking clarifying questions. Prioritizes responses to customer queries. Solves routine customer problems as per processes, and seeks guidance, if needed for quick resolution.</li><li>
Ability to take accountability for work outcomes and proactively account for interdependencies across adjacent work areas.</li><li>
Is able to apply knowledge/skills within own area to deliver tasks with limited guidance</li><li>
Is aware of interdependencies across work and considers all parts of the work and its impact while executing own work. Collaborates across scrum teams and contractors to deliver common team goals. Navigates and flexes work style to requirements that can change frequently, continues to communicate and influence others.</li><li>
Skills in addressing technology infrastructure requirements and optimally managing technology assets.</li><li>
Is able to apply knowledge/skills within own area to deliver tasks with limited guidance</li><li>
Is able to install, configure, test, and deploy assets based on understanding of functioning of hardware and technologies within own domain. Leverages knowledge of infrastructure/network as related to diverse computing/operating environments to implement resource plans and address infrastructure performance needs/issues. Supports performance optimization and system tuning as directed.</li></ul><p></p><p><b>
Compensation</b></p>
In recognition of certain U.S. state and municipal pay transparency laws, St. Jude is including a reasonable estimate of the compensation range for this role. This is an estimate offered in good faith and a specific salary offer takes into account factors that are considered in making compensation decisions including but not limited to skill sets, experience and training, licensure and certifications, and other business and organizational needs. It is not typical for an individual to be hired at or near the top of the salary range and compensation decisions are dependent on the facts and circumstances of each case. A reasonable estimate of the current salary range is $94,640 - $169,520 per year for the role of Network Engineer (Level II or Senior) - Enterprise Network Team.<p></p><p>
Explore our exceptional benefits!</p><p></p><div><p>
St. Jude is an Equal Opportunity Employer</p></div><p></p><p><b>
No Search Firms</b></p><p>
St. Jude Children's Research Hospital does not accept unsolicited assistance from search firms for employment opportunities. Please do not call or email. All resumes submitted by search firms to any employee or other representative at St. Jude via email, the internet or in any form and/or method without a valid written search agreement in place and approved by HR will result in no fee being paid in the event the candidate is hired by St. Jude.</p></div></div></div></div></div></div>

Network Engineer (Level II or Senior) - Enterprise Network Team

California Institute of Technology

<div><div><p>Caltech is a world-renowned science and engineering institute that marshals some of the world's brightest minds and most innovative tools to address fundamental scientific questions. We thrive on finding and cultivating talented people who are passionate about what they do. Join us and be a part of the diverse Caltech community.</p><p></p><p><b>
Job Summary</b></p><p>
IPAC at Caltech is seeking a Security and Network Engineer to support the cybersecurity, compliance architecture, and high-performance network infrastructure powering world-class NASA, NSF, and privately funded ground and spaceborne observatories. As a member of the IPAC Support Group (ISG) Data Center Engineering team, you will focus heavily on shaping IPAC&rsquo;s overall cybersecurity posture while working alongside other network, systems, and database engineers to build and defend the vital pipelines that connect the global astronomical community to invaluable scientific data.</p><p>
IPAC, situated within the Division of Physics, Mathematics, and Astronomy at Caltech (www.caltech.edu), provides science operations, pipeline processing, user support, and data services for high-profile missions including the Nancy Grace Roman Space Telescope, SPHEREx, Euclid, the Near-Earth Object Surveyor, and the Zwicky Transient Facility (ZTF). Our diverse portfolio of research archives includes multi-petabyte datasets like the NASA/IPAC Infrared Science Archive (IRSA), alongside highly curated reference repositories like the NASA Extragalactic Database (NED) and the NASA Exoplanet Archive, which are key research references for modern astrophysics and exoplanet science.</p><p>
This role prioritizes robust cybersecurity governance and technical systems defense. While cybersecurity and federal compliance are the primary focuses of this position, your core network engineering expertise will directly inform your security architecture. As part of a close-knit team of about ten engineers, you will help shape IPAC&rsquo;s cybersecurity architecture, coordinate federal compliance activities, and provide network-security expertise across the organization.</p><p><b>
Essential Job Duties and Responsibilities</b></p><p><b>
As an IPAC Security and Network Engineer, your role will be to:</b></p><ul><li>
Manage NASA ATO Compliance &amp; Reporting: Coordinate IPAC&rsquo;s compliance, documentation, and reporting requirements necessary to achieve and maintain our NASA Authority to Operate (ATO) status. Lead the generation, aggregation, and continuous monitoring of evidence required to prove compliance with federal mandates.</li><li>
Develop Security Plans &amp; Frameworks: Design, maintain, and audit comprehensive System Security Plans (SSPs) and related Plan of Action and Milestones (POA&amp;M) tracking for individual space missions, research projects, and IPAC-wide infrastructure.</li><li>
Implement NIST &amp; NASA Frameworks: Translate federal compliance guidelines&mdash;specifically NIST SP 800-53 security controls, FIPS requirements, and NASA-specific IT security directives&mdash;into enforceable network architectures, system configurations, and operational workflows.</li><li>
Manage Enterprise Security Perimeters: Design, deploy, audit, and maintain firewall rules, intrusion prevention systems, and secure zone configurations across our enterprise edge, utilizing Palo Alto firewalls and related security platforms.</li><li>
Provide Network Consultation &amp; Backup Support: Collaborate with Data Center staff to apply security and networking expertise to IPAC infrastructure. Leverage your network engineering background to ensure compliance frameworks align practically with our network, systems, and software architectures. Provide cross-functional backup support to peer network engineers managing core Arista and Cisco routing and switching environments.</li><li>
Monitor &amp; Mitigate Threats: Implement and manage network-level monitoring, centralized logging, and security alerting tools to proactively analyze vulnerabilities, detect anomalies, and defend our data center environments.</li><li>
Perform other duties as assigned.</li></ul><p><b>
Basic Qualifications</b></p><ul><li>
Bachelor&rsquo;s degree in Information Technology, Computer Science, Computer Engineering, or a related field, plus 5+ years of relevant experience in network administration and cybersecurity (or an equivalent combination of education and experience).</li><li>
Solid hands-on network design and administration experience, particularly with Arista, Cisco, or similar enterprise networking hardware.</li><li>
Proven experience managing enterprise firewalls and network security perimeters.</li><li>
Experience with network penetration testing and security auditing. Experience with packet capture and data analysis.</li><li>
Demonstrated expertise in cybersecurity principles, including network access control, threat mitigation, and secure architecture design.</li><li>
Working familiarity with federal cybersecurity compliance frameworks (e.g., NIST SP 800-53, RMF).</li><li>
Qualify as a US PERSON as defined by ITAR regulations: A US person is a citizen of the United States, a lawful permanent resident alien of the US (&ldquo;Green Card&rdquo; holder), or an individual granted refugee or asylee status under US law.</li></ul><p><b>
Preferred Qualifications</b></p><p>
Beyond these basic qualifications, there are skills and experiences which will give you a head start here. We are a specialized environment looking for a well-rounded engineer who thrives in a shared-responsibility model. If you have experience in a few of these areas, you will hit the ground running, but even if these don&rsquo;t yet describe you and your experience, we would still like to hear from you:</p><ul><li>
Security Policy Development and Implementation: Experience drafting, updating, and enforcing organizational IT security policies, acceptable use guidelines, and incident response procedures in an academic or research setting.</li><li>
Compliance Frameworks &amp; ATO Lifecycle: Practical experience steering systems through the federal cybersecurity Risk Management Framework (RMF) to secure or maintain an ATO. Direct familiarity with auditing NIST SP 800-53 controls, FIPS standards, or related NASA cybersecurity guidelines.</li><li>
Security &amp; Vulnerability Tooling: Hands-on experience with the deployment, configuration, and operational oversight of enterprise security tools, such as Rapid7 for vulnerability scanning and reporting, and CrowdStrike for endpoint protection.</li><li>
Systems &amp; Scripting: Strong Linux systems administration skills (Red Hat or Debian) and experience leveraging scripting/programming languages (e.g., Python, Bash) for security analysis, log parsing, or task automation.</li><li>
Cloud Security: Experience implementing and monitoring security controls within public cloud environments (e.g., AWS).</li><li>
Mission Alignment: A genuine interest in science, astronomy, or space exploration. Understanding mission objectives helps us build better systems for the scientists and staff we support.</li><li>
Teamwork &amp; Collaboration: A strong collaborative mindset, a willingness to share operational duties, and the ability to communicate security and compliance constraints clearly and pragmatically within an active engineering group.</li></ul><p><b>
Required Documents</b></p><ul><li>
Full Resume.</li><li>
Cover Letter (briefly highlighting key qualifications and fit for this role).</li><li>
Names and Contact information of 3 professional references.</li></ul><p><b>
Application Details</b></p><ul><li>
This is an on-site position at the Caltech campus in Pasadena, California. Remote work is normally allowed up to one day per week.</li><li>
Applicants for this position must be a United States (US) person as defined by ITAR regulations &ndash; A US person is a citizen of the United States, a lawful permanent resident alien of the US (&ldquo;Green Card&rdquo; holder), or individuals granted refugee and asylee status under US law.</li><li>
Applications are due by August 31, 2026</li></ul><p><b><br>
Life at IPAC</b></p><p>
People choose to work at IPAC for many reasons, and our casual, employee-centric culture often leads to fulfilling, long-term careers and positive relationships. Whether in science, engineering, or administration, IPAC staff share a unique sense of pride in knowing their individual talents support human discovery.</p><p>
Unlike traditional corporate tech, IPAC emphasizes sustainable workloads and a healthy work&ndash;life balance: after-hours work is rare, shared across the operations team, and typically limited to exceptional situations. We actively support ongoing professional development, including training, conferences, and skill development aligned with your career goals. Caltech&rsquo;s benefits program offers a highly competitive benefits package, an exceptional 403(b) defined contribution plan, and access to campus facilities including the athletic center, libraries, on-site daycare, and Athenaeum club membership.</p>
</div><div><div><div><div><h2 class="jobSectionHeader"><b>Hiring Range</b></h2>
<p>
$47.75 - $62.25 Per Hour<br>
<br>
The salary of the finalist(s) selected for this role will be set based on a variety of factors, including but not limited to, internal equity, experience, education, specialty and training.
<br>
<br>
As one of the largest employers in Pasadena, CA, Caltech is committed to providing comprehensive benefits to eligible employees and their eligible dependents. Our benefits package includes competitive compensation, health, dental, and vision insurance, retirement savings plans, generous paid time off (vacation, holidays, sick time, parental leave, bereavement, etc.), tuition reimbursement, and more. Non-benefit eligible employees will have access to some benefits such as onsite counseling and sick time. Learn more about our benefits and staff perks.</p><br>
<h2 class="jobSectionHeader"><b>
EEO Statement</b></h2>
<p>
We are an equal opportunity employer and all qualified applicants will receive consideration for employment without regard to age, race, color, religion, sex, sexual orientation, gender identity, or national origin, disability status, protected veteran status, or any other characteristic protected by law.<br>
<br>
Caltech is a VEVRAA Federal Contractor.</p>
<p>
To read more Equal Employment Opportunity (EEO) go to eeoc_self_print_poster.pdf.</p>
</div>
</div></div></div><div><div><div><div><h2 class="jobSectionHeader"><b>Disability Accommodations</b></h2><p>
Caltech complies with the Fair Employment and Housing Act (FEHA) and the Americans with Disabilities Act (ADA). We consider reasonable accommodation measures that may be necessary for eligible applicants and employees to perform the essential functions of a position.</p><p>
If you would like to request an accommodation to complete this application, interview, or otherwise participate in the employee selection process, please contact Caltech Recruiting at employment@caltech.edu.</p><p>
Additionally, if you do not meet the basic qualifications of a role but believe you can perform the essential functions of the job with reasonable accommodation, please reach out to Caltech Recruiting at employment@caltech.edu.</p></div></div></div></div></div><p></p>

Security and Network Engineer

Human Capital HR Solutions

<p>Human Capital HR Solutions is Hiring</p><p><b>Position</b>: Senior Executive IT (Network Administrator)</p><p><b>Location</b>: Keamari, Karachi</p><p><b>Industry</b>: Port &amp; Terminal Operations / Logistics</p><p><b>Employment Type</b>: Full-Time</p><p>Human Capital HR Solutions is hiring on behalf of its client for the position of Senior Executive Information Technology (Network Administrator). We are looking for an experienced IT professional with strong expertise in enterprise networking, cybersecurity, and network infrastructure management to ensure secure, reliable, and high-performing IT operations.</p><p><b>Key Responsibilities</b></p><p>Design, implement, and maintain secure, reliable, and scalable network infrastructure.</p><p>Configure and manage Cisco networking devices, firewalls, VPNs, LAN, WAN, WLAN, and cloud connectivity.</p><p>Monitor network performance, availability, and security using network monitoring and SIEM tools.</p><p>Troubleshoot complex network issues and ensure maximum uptime.</p><p>Manage Security Operations Center (SOC) activities and incident response processes.</p><p>Implement and maintain cybersecurity solutions including IDS/IPS, DLP, EDR, IAM, and access control policies.</p><p>Support business continuity and disaster recovery planning and testing.</p><p>Identify and implement network and security improvements based on industry best practices.</p><p>Provide technical guidance, coaching, and support to junior IT team members.</p><p>Ensure compliance with organizational quality, health &amp; safety, and information security standards.</p><p><b>Qualifications</b></p><p>Bachelor's degree (16 years of education) in Computer Science, Information Technology, or a related field.</p><p><b>Experience</b></p><p>5&ndash;6 years of relevant experience in Network Administration, Infrastructure Management, or Network Security.</p><p><b>Required Skills</b></p><p>Strong knowledge of Cisco networking technologies.</p><p>Hands-on experience with firewalls, VPNs, routing, switching, and wireless networks.</p><p>Experience with SIEM, IDS/IPS, DLP, EDR, IAM, and other cybersecurity solutions.</p><p>Knowledge of network monitoring, troubleshooting, and performance optimization.</p><p>Understanding of SOC operations, incident response, and disaster recovery.</p><p>Strong analytical, problem-solving, and communication skills.</p><p>Proficiency in spoken and written English.</p><p>Location: Keamari, Karachi</p><p><b>How to Apply</b>:</p><p>Interested candidates are encouraged to send their updated CV to careers1.hc@gmail.com.</p><p>Please mention &quot;Senior Executive IT &ndash; Network Administrator&quot; in the subject line of your email.</p><p>Work Location: In person</p>

Senior Executive IT (Network Administrator)

L3Harris

<div><p>L3Harris is dedicated to recruiting and developing high-performing talent who are passionate about what they do. Our employees are unified in a shared dedication to our customers&rsquo; mission and quest for professional growth. L3Harris provides an inclusive, engaging environment designed to empower employees and promote work-life success. Fundamental to our culture is an unwavering focus on values, dedication to our communities, and commitment to excellence in everything we do.</p><p>
L3Harris is the Trusted Disruptor in defense tech. With customers&rsquo; mission-critical needs always in mind, our employees deliver end-to-end technology solutions connecting the space, air, land, sea and cyber domains in the interest of national security.</p><p><b>
Job Title: Senior Specialist, Network Plan Engineer</b></p><p><b>
Job Code: 41856</b></p><p><b>
Job Location: Palm Bay, FL</b></p><p><b>
Job Schedule: 9/80</b></p><p><b>
Job Description:</b></p><p>
Conducts network architecture design, feasibility and modeling. Designs, analyzes, plans, and modifies network components and/or software by translating customer requirements and objectives into final product design. Develops and evaluates network performance criteria and measurement methods. Prepares analysis of the short-term or long-term capacity needs for switching, routing transmission and signaling.</p><p><b>
Essential Functions:</b></p><ul><li>
Configure, manage, and troubleshoot secure network communications using IPSec and IKEv1/IKEv2 technologies.</li><li>
Administer and maintain Cisco Firepower Management Center (FMC) and Cisco Identity Services Engine (ISE) environments.</li><li>
Implement and validate STIG compliance on network devices to support security and regulatory requirements.</li><li>
Perform vulnerability scanning review and remediation support using Nessus and ACAS tools.</li><li>
Deploy, configure, and support Cisco Nexus, Catalyst, and ISR networking platforms.</li><li>
Develop and maintain network diagrams, layouts, and technical documentation using Visio Professional.</li><li>
Configure, monitor, and troubleshoot Cisco Firepower (FPR) and Firepower Threat Defense (FTD) firewall solutions.</li><li>
Evaluate technologies and designs in relation to the critical infrastructure and service needs for external customers.</li><li>
Experience in configuring &amp; hardening routers, switches, firewalls, non-standard OSI-Model like OTN, or Communications hardware with a strong OSI understanding and packet structure foundation.</li><li>
Implement system engineering solutions with network function that support system level requirements.</li><li>
Participate in inter-program working group and cross-technology initiatives and discussions to resolve technical challenges</li><li>
Create and maintain documentation for Network, QoS, Protocol and System level designs.</li><li>
Ability to take a technology manual for a new non-standard device and solve issues relating to hardware or software configuration to identify technical issues and resolutions.</li><li>
Experience working with classified and unclassfied cloud connectivity such as AWS or other government facilities.</li><li>
Experience in the configuration, implementation and troubleshooting complex problems for Type-1 encryption used in encryption of data in transit (KG family of encryptors).</li><li>
Identify areas of opportunity for cost reduction and network optimization.</li><li>
Routinely perform proof of concepts and service trials while documenting system integration.</li><li>
Ability to effectively communicate verbally and in writing.</li><li>
Ability to think critically in high pressure environments.</li></ul><p><b>
Qualifications:</b></p><ul><li>
Education:<ul><li>
Bachelor&rsquo;s Degree and minimum 6 years of prior relevant experience, or</li><li>
Graduate Degree and a minimum of 4 years of prior related experience or</li><li>
In lieu of a degree, minimum of 10 years of prior related experience.</li></ul></li><li>
TS/SCI (SCI eligible) security clearance with CI Poly required.</li><li>
Security+ certification</li></ul><p><b>
Preferred Additional Skills:</b></p><ul><li>
Familiarization with wireshark, protocol analysis and quality of service architecture is strongly preferred.</li><li>
CCNP or equivalent vendor certification is preferred.</li><li>
Ability to plan, implement, verify and troubleshoot local and wide-area enterprise networks.</li><li>
Strong enterprise network troubleshooting (Multicast, Layer 2, Cisco IOS(s), IP routing [BGP, ISIS, OSPF, and EIGRP], HSRP and physical layer issues [Ethernet, Optical, TDM]).</li><li>
Experience with Agile development processes.</li><li>
Strong skill set with Microsoft Office software applications</li></ul><p>
L3Harris Technologies is proud to be an Equal Opportunity Employer. L3Harris is committed to treating all employees and applicants for employment with respect and dignity and maintaining a workplace that is free from unlawful discrimination. All applicants will be considered for employment without regard to race, color, religion, age, national origin, ancestry, ethnicity, gender (including pregnancy, childbirth, breastfeeding or other related medical conditions), gender identity, gender expression, sexual orientation, marital status, veteran status, disability, genetic information, citizenship status, characteristic or membership in any other group protected by federal, state or local laws. L3Harris maintains a drug-free workplace and performs pre-employment substance abuse testing and background checks, where permitted by law.</p><p>
Please be aware many of our positions require the ability to obtain a security clearance. Security clearances may only be granted to U.S. citizens. In addition, applicants who accept a conditional offer of employment may be subject to government security investigation(s) and must meet eligibility requirements for access to classified information.
</p><p>By submitting your resume for this position, you understand and agree that L3Harris Technologies may share your resume, as well as any other related personal information or documentation you provide, with its subsidiaries and affiliated companies for the purpose of considering you for other available positions.</p><p>
L3Harris Technologies is an E-Verify Employer. Please click here for the E-Verify Poster in English or Spanish. For information regarding your Right To Work, please click here for English or Spanish.</p></div>

Senior Specialist, Network Plan Engineer

C-Serv

<div><p>Columbus - Ohio &middot; Financial Services Client &middot; Direct Hire/ Contractor</p><p></p><p><b>
Own the network security backbone for a major financial services enterprise, real ownership, not a support seat, if you have strong experience of SDWAN and ADVPN then read on!</b></p><p><br>
</p><p>What you'll own</p><ul><li>Day-to-day operation and support of enterprise Fortinet infrastructure in a high-security, financial services environment</li><li>Building methods of procedure (MOPs) for migrations, upgrades and releases that hold up under audit</li><li>Testing new features and releases before they touch production</li><li>Evaluating how third-party devices interoperate with Fortinet products</li><li>Training client staff so they're not dependent on you for everything</li><li>Being the person who catches issues early and escalates the ones that matter</li></ul><b><br>
Requirements</b><p><br>
Must-haves</p><ul><li>7+ years in LAN/WAN/Internet consulting, support or administration</li><li>5+ years with network security products, 4+ years specifically with Fortinet</li><li>Strong hands-on FortiGate firewall expertise</li><li>Strong knowledge of Fortinet SD-WAN design, with hands-on experience in a global, multi-site architecture</li><li>Hands-on ADVPN design and implementation experience</li><li>Comfort working in a regulated, high-stakes financial environment</li><li>Must be authorized to work in the United States, only US citizens or green card holders need apply.<br>
</li></ul><br>
<br>
<b>Benefits</b><p><br>
What you'll get</p><p>
Direct hire or contract flexibility, competitive rates paid and a placement with a firm that treats financial-sector security work as the specialist discipline it is.</p><p><b>
Ready to be the engineer a financial services client trusts on the ground? Apply now, we're moving quickly on this one.</b></p></div>

Fortinet Security Engineer SDWAN & ADVPN - Resident Engineer

Search 8144+ Senior network security engineer jobs near you this August. New roles added regularly across leading industries. Apply today.