Network Security Engineer (Ref: 18558)

Position: Network Security Engineer (Ref: 18558)
Location: Mechanicsville, VA USA, 23116
Salary: DOE
Duration: 10 Months 27 Days - Contract
Openings: 1
Deadline: 08/07/2026
Description:
***Local Candidate
***Hybrid

We are seeking an experienced Senior Network Security Engineer to implement, support, and secure enterprise IT network, cloud, and computing infrastructure. In this role, you will lead day-to-day security operations, perform network research, design secure architecture, and handle threat mitigation across on-premises and cloud environments.

You will support a high-availability, hybrid enterprise environment comprising roughly 300 locations, Palo Alto firewalls, Azure networking, ExpressRoute connectivity, Web Application Firewalls (WAF), Splunk SIEM, SD-WAN, and critical public-facing applications.

Key Responsibilities
• Architecture & Design: Design and maintain secure hybrid network architecture across on-premises and Azure environments. Ensure network security architecture aligns with operational security standards before and after deployment.
• Firewall & WAF Management: Validate WAF and firewall placement, integration, exposure, and connectivity. Lead implementation, review, and management of WAF solutions and review firewall rule requests for compliance.
• Incident Response & Operations: Lead the investigation, containment, and coordination of network security incidents. Participate in on-call support for critical incidents.
• Threat Detection & Hunting: Conduct proactive threat hunting and anomaly detection using SIEM technologies (Splunk), system logs, line monitors, diagnostic software, and test equipment.
• Assessments & Vulnerabilities: Identify, prioritize, and remediate network security vulnerabilities and support penetration testing efforts.
• Documentation: Develop and maintain network security standards, network architecture topology diagrams, IP schemes, firewall rules, and access controls.

Qualifications & Key Requirements
• Extensive experience in Network Security Engineering within a hybrid enterprise environment.
• Strong expertise with Palo Alto Firewalls, Azure Networking, ExpressRoute, and SD-WAN.
• In-depth hands-on experience with WAF technologies and Splunk SIEM.
• Demonstrated ability to conduct proactive threat hunting, log analysis, and incident containment.
• Proven track record of creating detailed network architecture diagrams and access control documentation.
• Ability to work independently on assigned projects and collaborate effectively across cloud, infrastructure, and information security teams.

Work Details
• Interview Process: In-Person Only.
• Work Arrangement: Hybrid (requires on-site presence at the designated worksite in Mechanicsville, VA).

Required / Desired Skills
• Enterprise Networking Required - 8 Years
• Enterprise Security Required - 5 Years
• Azure Networking Required - 3 Years
• WAF/NGFW Required - 3 Years
• Supporting environments with 300+ Network Devices Required - 3 Years
• Experience in the following areas: Incident response, Security investigations, Log analysis, Threat intelligence, Security monitor Required - 3 Years
• Experience with the SIEM products (e.g. Splunk, Microsoft Sentinel) Required - 3 Years
• Experience in vulnerability management and remediation tracking as well as vulnerability scanning tools (e.g. Nessus, Tenable, Def) Required - 3 Years
• Experience in the following areas: Active Directory, MFA, Conditional Access, Certificates Required - 3 Years
• Experience with; SEC530, CIS Benchmarks, NIST CSF, NIST 800-53, Zero Trust principles Required - 3 Years
• Experience with the following: Cisco ISE, NAC, 802.1X, RADIUS, TACACS Required - 3 Years
• Experience with the following products: Palo Alto, F5 Distributed Cloud, Azure WAF, Cisco VPN, Global Protect, F5 BIG-IP Required - 3 Years
• Experience working in highly regulated environments and leading technical troubleshooting during outages Required - 3 Years
• Ability to communicate technical issues to technical and executive audiences and an ability to mentor junior engineers. Required - 3 Years
• Ability to achieve the following certifications: Azure Security Engineer (AZ-500), Azure Network Engineer (AZ-700), Required - 3 Years