Sr. Network Security Engineer III (Clearable) (6563)

MetroStar•Washington, DC

12h

About The Position

As a Sr. Network Security Engineer III, you will provide hands-on expertise securing mission-critical networks for a high-visibility customer, aiming to make an impact across the federal government. The team is responsible for designing, operating, and hardening complex security environments, and this role is critical in strengthening, scaling, and protecting these environments while enabling secure mission delivery. MetroStar emphasizes its people-centric culture, with a two-decade legacy of building strong teams, driven by a mission of passion for its people and value for its customers.

Requirements

Ability to obtain and maintain a U.S. Government Issued Top Secret with SCI security clearance
Required technical certifications include Security+ and at least one platform-specific security certification, such as PCNSE, Fortinet NSE, or a Cisco security certification
Possess DoD 8140 certification aligned to the 441 Network Operations Specialist work role, such as Network+, Security+, Cloud+, SSCP, CASP+, CISSP, or CCNP Security
10+ years of experience in network engineering with a primary focus on enterprise network security infrastructure
Demonstrated subject matter expertise designing, implementing, and managing next-generation firewalls, VPN solutions, intrusion prevention systems, and network access control platforms
Hands-on experience securing network perimeters and internal network segments, including policy design, segmentation, and threat mitigation
Operational experience deploying and managing firewall rule sets, VPN tunnels, and security policies in mission-critical environments
Hands-on experience with at least one enterprise security platform, such as Palo Alto Networks, Fortinet, or Cisco security technologies
Hands-on experience with Cisco ISE and Cisco ASA environments
Hands-on experience with IDS and IPS solutions and endpoint configuration hardening in secure environments
Experience supporting Zero Trust architectures and identity-centric network security patterns
Ability to contribute immediately with minimal ramp-up in a mission-critical operational environment

Nice To Haves

Bachelor’s degree in a technical field is preferred. Relevant experience may substitute for education requirements.

Responsibilities

Design, implement, and manage firewalls, VPNs, IPS, and NAC solutions in mission-critical environments
Secure network perimeters and internal network segments using defense-in-depth strategies
Respond rapidly to security incidents, vulnerabilities, and operational needs with urgency and discipline
Support continuous security hardening and improvement of network infrastructure
Participate in Agile execution, technical planning, and security risk discussions
Communicate security impacts, risks, and mitigation strategies clearly to technical and non-technical stakeholders
Recommend and implement security architecture and operational improvements
Serve as a hands-on technical SME, contributing immediately with minimal ramp-up
Establish and maintain a high level of customer trust and confidence through reliable, secure delivery
Apply creativity and engineering judgment to deliver practical, mission-focused security solutions