26-2230: Network Security Engineer - Annapolis, MD

Navitas•Annapolis, MD

About The Position

The Network Security Engineer provides expert‐level support in the design, security, deployment, and maintenance of mission critical network environments. This role ensures 24x7 secure, stable, scalable, and redundant network operations supporting Navitas customers and programs. The engineer will lead and support advanced security engineering projects, perform troubleshooting and optimization, and serve as a subject matter expert for next generation network security technologies.

Requirements

Associate degree in an Information Technology (IT) related field, as determined by the AOC.
10+ years of CONUS technical experience in computer networking and network security to include:
Ability to work independently and coach/mentor junior associates.
Strong communication skills with ability to present technical topics to stakeholders.
Ability to produce technical documentation (diagrams, design documents, project plans, schedules, manuals).
Experience implementing Microsoft MFA and other identity solutions.
Experience with cloud based virtual networking and security platforms.
Knowledge of authentication standards (802.1X) in wired and wireless environments.
Experience with scalable routing protocols, including EIGRP, OSPF, BGP.
Enterprise data center and micro segmentation strategies.
Certificate management, PKI administration.
Vulnerability management tools (Nessus, Nmap, Windows, Unix, Linux).
Packet and protocol analysis using Opnet, Riverbed, Wireshark, taps.
Centralized management using Panorama, SolarWinds.
Familiarity with major server and desktop operating systems.
PCNSA – Certified Network Security Administrator or PCNSP – Network Security Professional
CCNA Enterprise or CCNA Security

Nice To Haves

5+ years of experience with Palo Alto Networks to include:
Next‑generation firewall services
Intrusion detection and prevention
Content filtering
VPN technologies
Data Loss Prevention (DLP)
TLS/SSL inspection
4+ years of experience with Cisco Systems including
Complex switching and routing
Wireless technologies
3+ years of A10 Networks to include:
Reverse proxies
Load balancing
2+ years of Network Access Control to include
Cisco Identity Services Engine (ISE)
FreeRADIUS
Access Control Lists (ACLs)

Responsibilities

Analyze and assess organizational security requirements; design and engineer scalable solutions that meet mission and operational needs.
Perform project‑based engineering including design, installation, configuration, and troubleshooting of secure data networks.
Lead or assist in the migration of legacy network security platforms to next‑generation architectures.
Create comprehensive technical documentation including system diagrams, configuration guides, implementation plans, and acceptance packages.
Provide network capacity planning, monitoring, maintenance reviews, and lifecycle support.
Troubleshoot complex network security incidents, threats, and performance issues.
Support remediation efforts and collaborate with network engineering teams.
Implement and enforce secure configuration standards, change management practices, and operating procedures.
Provide mentorship and guidance to junior engineers and technical staff.
Lead and coordinate engineering activities and provide task direction to team members.
Manage timelines and ensure timely resolution of end‑user and enterprise security issues.
Deliver weekly status reports including project progress, milestones, risks, and accomplishments.
Host recurring team meetings or ad‑hoc status calls as required.