Senior Network Security Engineer

TOMORROW HIRE•Mechanicsville, VA

3d•Hybrid

About The Position

We are seeking an experienced Senior Network Security Engineer to implement, secure, and support the agency's enterprise network, cloud, and computing infrastructure. This position plays a critical role in protecting a hybrid enterprise environment spanning approximately 300 statewide locations while ensuring the confidentiality, integrity, and availability of mission-critical systems and public-facing applications. The successful candidate will collaborate closely with Infrastructure, Cloud Engineering, and the Information Security Office to strengthen VDOT's cybersecurity posture across on-premises and Azure environments.

Requirements

Minimum 8 years of enterprise networking experience.
Minimum 5 years of enterprise security experience.
Minimum 3 years of Azure networking experience.
Minimum 3 years of WAF/Next-Generation Firewall (NGFW) experience.
Experience with incident response, security investigations, log analysis, threat intelligence, and security monitoring.
Experience with SIEM platforms such as Splunk or Microsoft Sentinel.
Experience with vulnerability management, remediation tracking, and vulnerability scanning tools such as Nessus, Tenable, or similar solutions.
Experience with Active Directory, Multi-Factor Authentication (MFA), Conditional Access, and certificate management.
Experience applying SEC530 guidance, CIS Benchmarks, NIST Cybersecurity Framework (CSF), NIST 800-53, and Zero Trust principles.
Experience with Cisco ISE, Network Access Control (NAC), 802.1X, ccExperience with Palo Alto, F5 Distributed Cloud, Azure WAF, Cisco VPN, GlobalProtect, and F5 BIG-IP technologies.
Experience supporting highly regulated environments and leading technical troubleshooting during production outages.
Demonstrated ability to communicate technical concepts to technical and executive audiences.
Ability to mentor junior engineers.
Azure Security Engineer (AZ-500), Azure Network Engineer (AZ-700), or the ability to achieve these certifications.
Must physically reside within the United States for the duration of the assignment.
Must attend an in-person interview.
Must be legally authorized to work in the United States without employer sponsorship, now or in the future.

Nice To Haves

Minimum 3 years of experience supporting enterprise environments with more than 300 network devices.

Responsibilities

Design, implement, and maintain secure network architectures across on-premises and Microsoft Azure environments.
Ensure network security architecture complies with operational security standards before and after deployment.
Lead investigations, containment, and resolution of network security incidents.
Review firewall rule requests and validate compliance with established security standards.
Monitor security events using SIEM platforms and coordinate incident response activities.
Conduct proactive threat hunting and anomaly detection across enterprise environments.
Perform network security assessments and recommend remediation strategies.
Identify, prioritize, and remediate network security vulnerabilities.
Support penetration testing initiatives and remediation efforts.
Validate Web Application Firewall (WAF) and firewall placement, integration, and connectivity.
Lead implementation, review, and ongoing management of agency WAF solutions.
Diagnose security threats using system logs, SIEM platforms, diagnostic tools, monitoring utilities, and test equipment.
Develop and maintain network security standards and operational documentation.
Produce and maintain network architecture diagrams, IP addressing schemes, firewall rule documentation, and access control records.
Ensure documentation accurately reflects enterprise security configurations and operational procedures.
Partner with Infrastructure, Cloud Engineering, and Information Security teams to maintain secure enterprise operations.
Communicate technical issues effectively to both technical teams and executive leadership.
Mentor junior engineers and provide technical guidance on security best practices.
Support a hybrid enterprise environment consisting of approximately 300 statewide locations.
Participate in on-call support during critical security incidents.
Independently manage assigned projects while maintaining operational excellence.