C

Credence

Federal government management, engineering, technology solutions

Network Security Engineer

Network Engineering & AdministrationConfirmed live in the last 24 hours
Full-timeMcLean, VA, USA$130k - $155k /yrHybrid

About the Job

Requirements

  • Must be a U.S. citizen.
  • A bachelor's degree in Computer Science, Information Technology, or a related field, or equivalent experience, is required.
  • Must have a minimum of 5 years of hands-on experience in network engineering, IT administration, or a related technical role.
  • Must have strong knowledge of Windows operating systems and enterprise networking fundamentals.
  • Must have hands-on experience with enterprise firewall administration; Palo Alto NGFW experience and Cisco or equivalent routing and switching experience are required.
  • Must be proficient in managing network security tools, including firewalls, intrusion detection and prevention systems, virtual private networks, and antivirus.
  • Must be familiar with configuration management, monitoring, and documentation tools.
  • Must have at least 5 years of demonstrated ability to maintain and update network security documentation, including firewall rule baselines, network diagrams, and System Security Plan network control contributions.
  • Must be able to troubleshoot complex issues and communicate with technical and non-technical staff.

Responsibilities

  • Provide technical ownership of the corporate wide area network, local area network, and wireless infrastructure, including planning, implementation, expansion, and lifecycle management.
  • Monitor and maintain network performance and reliability, ensuring a minimum of 99% uptime for corporate systems, phone systems, and connectivity.
  • Configure and manage routing, switching, firewalls, and virtual private networks across Palo Alto next-generation firewalls at headquarters and branches, Palo Alto VM-Series in AWS Commercial, and FortiGate VM in Azure Government.
  • Serve as primary administrator across firewall platforms, including policy management, rule additions and modifications, allow-list maintenance, and configuration backups; maintain privileged access under a documented change-controlled process.
  • Oversee network configuration management and backups to ensure recoverability and business continuity.
  • Analyze and resolve escalated Tier 2 or higher network support tickets.
  • Administer enterprise wireless infrastructure across Cisco, Aruba, and Ubiquiti platforms, including access point provisioning.
  • Identify, assess, and mitigate network vulnerabilities through proactive monitoring and remediation.
  • Implement and manage network security controls, including firewalls, intrusion detection and prevention systems, antivirus, and secure access solutions.
  • Collaborate with Systems Administrators on vulnerability scanning, patch management, and remediation efforts, including Nessus scan results and operating system hardening.
  • Support audit readiness and compliance for CMMC Level 2 and SOC 2, including maintaining network-layer controls in the System Security Plan, providing firewall and network evidence for assessments, and contributing to ISSO functions as needed.
  • Coordinate firewall rule changes and network modifications through a documented change management process, maintaining an audit-ready record of changes for SOC 2 and CMMC assessment cycles.
  • Coordinate with Systems and Security administrators to ensure smooth systems and network integration across on-premises and cloud environments.
  • Provide training, documentation, and knowledge sharing to IT staff on new network technologies and processes.
  • Assist in disaster recovery planning and implementation of secure, redundant connectivity solutions.
  • Write and maintain technical documentation, including network diagrams, cabling layouts, and internal knowledge base articles.
  • Contribute to internal IT automation and tooling initiatives, including scripting, infrastructure-as-code, and network-layer input on expanding internal platforms and dashboards.
  • Serve as the GCP organization owner, maintaining folder hierarchy, organization policies, IAM governance, and network configurations across projects and access boundaries.
  • Administer cloud-hosted network infrastructure, including Palo Alto VM-Series in AWS Commercial and FortiGate VM in Azure Government; design and maintain hybrid connectivity patterns across cloud environments.
  • Support GCP cloud networking operations, including Cloud NCC hub-and-spoke architecture, HA-VPN with BGP over IKEv2, Cloud Router, and Cloud NAT.

Desired Qualifications

  • Certifications such as Palo Alto PCNSE, FortiGate NSE 4 or higher, CCNA, CCNP, Security+, or equivalent are preferred.
  • FortiGate experience, including FortiGate VM in Azure Government, is preferred; candidates with strong enterprise firewall experience may ramp up on FortiGate with internal support.
  • Experience supporting Microsoft 365, Azure Government (GCC High), AWS Commercial, and GCP environments, and familiarity with compliance boundaries specific to Azure Government and GCC High, are preferred.
  • Familiarity with VoIP, secure mail flow, and endpoint management integration is preferred.
  • Experience contributing to IT/security-related project initiatives is preferred.
  • Prior experience in an ISSO or ISSO support role, or familiarity with System Security Plan documentation and NIST 800-171 network control mapping, is preferred.
  • Experience administering cloud-hosted firewall virtual machines, including Palo Alto VM-Series or FortiGate VM, in AWS or Azure environments is preferred.
  • Experience with network monitoring and management platforms such as PRTG Network Monitor, network documentation tools such as NetBox, and network automation and configuration management tools such as Ansible is preferred.
  • Experience with Workload Identity Federation and OpenID Connect-based service account authentication in GCP, and the ability to audit and migrate from key-based service accounts, is preferred.
  • GCP Professional Cloud Network Engineer certification or equivalent demonstrated experience is preferred.
  • Familiarity with GCP organization-level governance, including IAM, organization policies, and folder hierarchy, is preferred.
  • Experience in a federal contractor environment or familiarity with government compliance frameworks such as CMMC and FedRAMP is preferred.
  • Comfort with scripting languages such as Python and Bash or infrastructure automation tools for network configuration and operational tasks is preferred.

About the Company

Credence

Federal government management, engineering, technology solutions

Credence provides management, engineering, and technology solutions to the Federal Government, focusing on helping government programs that are complex and technical. Its work is delivered through an independent and objective approach, acting as a trusted partner to customers and teaming partners to achieve mission goals. The company differentiates itself through a track record of recognition in the government contracting space, a culture that emphasizes employee empowerment and a values framework of Trust, Partnership, and Success, and a commitment to delivering measurable outcomes for clients. Credence aims to support government missions by providing high-quality services that ensure project success, while also giving back to the community through charitable involvement and volunteerism.

Company size
501-1,000
Company stage
Not listed
Total funding
Not listed
Headquarters
Vienna, VA
Founded
2005

Recently Posted Jobs

Explore more opportunities at Credence

See more jobs