Pillar Lead: Network Engineer (R-00209)

This role bridges security engineering and day to day operations by supporting implementation of security capabilities, evaluating technical solutions, maintaining cybersecurity tools, and helping operational teams translate security architecture into effective, repeatable practices. The Cybersecurity Engineer works closely with vulnerability management, incident response, RMF, and ISSO teams to ensure engineering activities directly support operational risk reduction and continuous improvement.

Position Responsibilities
Develop reusable network and environment architecture patterns for Zero Trust use cases. Assess segmentation, microsegmentation, routing, secure access, policy enforcement, and telemetry requirements for system implementations. Identify network dependencies and interoperability requirements across identity, device, application, data, and analytics capabilities. Support engineering plans, pilot designs, test cases, implementation validation, and rollback planning. Evaluate network security technologies in a vendor-neutral manner for architectural fit and operational effectiveness. Document deviations, implementation lessons, and recommendations for continuous improvement of network Zero Trust patterns.

Job Qualifications
Bachelor’s degree in Network Engineering, Computer Science, Cybersecurity, Information Technology, or a related field. Five or more years of enterprise network engineering or network security experience. Strong knowledge of segmentation, firewalls, routing, secure access, cloud networking, and network telemetry. Working knowledge of Zero Trust and policy enforcement concepts. Experience designing and troubleshooting complex hybrid enterprise networks. Preferred Qualifications: Experience with software-defined networking, microsegmentation, SASE, ZTNA, or cloud-native networking. Experience supporting Federal or large regulated environments. Experience producing architecture diagrams and implementation test plans. Preferred Certifications: One or more of the following is preferred: CCNP Security CCNP Enterprise CISSP Security+