Senior Network Security Design Engineer

Core4ce • North Charleston, SC

3d • $125,000 - $175,000

About The Position

The Senior Network Security Design Engineer serves as a technical subject matter expert responsible for designing, prototyping, documenting, and supporting enterprise network security solutions. The role focuses on secure network architecture, data center and WAN security, firewall and web application security, traffic inspection, encryption, VPN connectivity, and integration of multi-vendor security technologies.

The engineer builds and tests solutions in laboratory environments, evaluates emerging technologies, and supports deployment and sustainment teams as solutions move into production. The successful candidate works in complex enterprise environments, collaborates with network, security, systems, and application teams, and translates technical designs into reliable, supportable implementations. The position is designed to be flexible, with responsibilities evolving to meet business needs and enable individual growth.

Requirements

• U.S. citizen.
• Active Secret Clearance.
• Bachelor’s degree in computer science, information technology, engineering, or a related technical field; equivalent experience may be considered.
• 8 or more years of experience in enterprise network engineering, network security engineering, or telecommunications.
• Advanced knowledge of Cisco enterprise routing and switching technologies.
• Experience designing, implementing, and troubleshooting complex enterprise networks.
• Experience with network security architecture, including firewalls, IDS/IPS, access control, segmentation, and secure network services.
• Experience with IP routing and switching protocols such as BGP, OSPF, EIGRP, VRF, and MPLS.
• Experience with IPsec VPNs, GRE, GETVPN/GDOI, or comparable encrypted network technologies.
• Experience designing or supporting SSL/TLS inspection or decryption architectures.
• Experience building and testing complex network solutions in a lab or development environment.
• Ability to produce clear architecture documents, network diagrams, implementation plans, and operational procedures.
• Ability to work effectively with technical and non-technical stakeholders.
• Ability to obtain and maintain required security and technical certifications.

Nice To Haves

• Experience with F5 BIG-IP technologies, including one or more of Local Traffic Manager, Global Server Load Balancing, DNS, advanced firewall or application security capabilities, SSL Orchestrator, and Application Security Manager.
• Experience with Cisco ASR, ISR, Catalyst, and Nexus platforms.
• Experience with Palo Alto firewalls.
• Experience with web proxies, packet brokers, content switching, and security appliance integration.
• Experience supporting FISMA, NIST, DISA STIG, or other regulated environments.
• Knowledge of FIPS 140-2/140-3 requirements.
• Experience with high-availability data center, campus, or global WAN environments.
• Experience designing network security solutions for cloud or hybrid environments, including AWS or Microsoft Azure.
• Experience with network automation or device APIs using Python, PowerShell, Netmiko, Ansible, or comparable tools.
• Cisco certification at the CCNP level or equivalent knowledge.
• Security certification such as Security+, CySA+, SSCP, GSEC, or equivalent.

Responsibilities

• Design, engineer, and document enterprise network security solutions across data center, campus, WAN, and enclave environments.
• Develop laboratory prototypes that replicate production network and security architectures.
• Design and support solutions involving enterprise firewalls, web application firewalls, intrusion detection and prevention, SSL/TLS break-and-inspect architectures, packet brokers and security appliance integration, VPN and encrypted transport solutions, application delivery controllers and load balancing, and network segmentation and routing isolation.
• Evaluate existing network security architectures and recommend improvements to security, availability, performance, and operational supportability.
• Support the design and implementation of Cisco, F5, Palo Alto, and related network security technologies.
• Develop implementation plans, test plans, diagrams, operating procedures, and other technical documentation.
• Troubleshoot complex interoperability and performance issues across multi-vendor network and security environments.
• Assist deployment and sustainment teams with production implementation, transition, and technical escalation.
• Collaborate with network, cybersecurity, systems, application, and infrastructure engineering teams.
• Identify and communicate relevant security threats, vulnerabilities, and technology risks.
• Ensure designs align with applicable security and compliance requirements, including FISMA, DISA STIG, and FIPS requirements where applicable.
• Provide technical mentoring, knowledge transfer, and instructional sessions for engineering and operations personnel.
• Participate in architecture reviews, project planning, technology evaluations, and engineering team meetings.
• Provide concise status updates and project reporting.

Benefits

• 401(k) with 100% company match on the first 6% deferred, with immediate vesting.
• Comprehensive medical, dental, and vision coverage, with the employee portion paid 100% by Core4ce.
• Unlimited access to training and certifications, with no pre-set cap on eligible professional development.
• Tuition assistance for job-related degrees and courses.
• Paid parental leave.
• PTO that grows with tenure.
• Generous holiday schedules.
• The Forge gives employees the chance to propose bold innovations and help bring them to life with internal backing.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior