Principal Network Security Engineer

Grow, innovate, and generate progress:
Harness your expertise to solve challenges and celebrate success!

JCS Solutions is seeking a Principal Network Security Engineer to design, engineer, and implement enterprise network security capabilities across a large, distributed Department of Defense network environment. This role serves as a senior technical leader responsible for advancing network security architecture through strategic engineering efforts that strengthen segmentation, access control, zero‑trust initiatives, resiliency, and enterprise‑wide security posture.

The successful candidate will assess current network security architectures, identify capability gaps, develop implementation strategies, and lead engineering teams through complex modernization efforts. This position requires expertise in network security architecture, firewall technologies, intrusion prevention, network access control, segmentation, encryption, and secure connectivity across enterprise environments.

This role requires a hands‑on engineer capable of developing solutions, directing technical teams, communicating with stakeholders and approval authorities, and delivering secure, scalable, and sustainable network security capabilities.

Location: Ft. Meade, MD Clearance: Secret Salary: $ - $
Certification: Active DoD 8140/8570 IAT Level II certification.

• Join a premier technology firm specializing in innovative solutions.
• Be part of a collaborative, inclusive, and innovative work culture.
• Enjoy tremendous growth potential in a high‑performing team environment.
• A robust benefits package:
  • Health, dental, and vision insurance
  • Life insurance
  • Short‑and‑long term disability
  • Paid time off (PTO)
  • 401k retirement plan with employer match
  • Annual Professional Development Reimbursement Program
  • And more!
• And more!

• Design, engineer, and implement enterprise network security architectures spanning next‑generation firewalls, intrusion detection and prevention systems, web and TLS proxies, VPN and encryption services, network access control, DNS security, and east‑west security controls.
• Evaluate existing network security architecture and identify security gaps, improvement opportunities, risks, and implementation approaches.
• Lead network segmentation and secure connectivity initiatives, including data‑flow mapping, security‑zone design, enclave development, firewall rule review, ACL rationalization, and routing coordination.
• Design and implement network access control and device‑posture enforcement solutions, including identity validation, device authentication, policy enforcement, remediation workflows, and phased implementation strategies.
• Advance zero‑trust networking principles, least‑privilege access, micro‑segmentation, and encrypted communications strategies.
• Evaluate and recommend emerging security technologies to improve enterprise security capabilities.
• Engineer secure connectivity between on‑premises, cloud, and remote environments utilizing VPN, TLS, IPsec, cloud interconnects, and boundary protection technologies.
• Optimize security controls to reduce false positives, improve visibility, strengthen enforcement capabilities, and maintain network performance.

• Lead network security projects from concept through implementation.
• Perform requirements analysis, dependency identification, architecture review, design coordination, planning, validation, and operational transition activities.
• Develop implementation plans, cutover strategies, rollback plans, validation procedures, and stakeholder communication plans.
• Coordinate maintenance windows, testing efforts, change activities, and contingency planning for security infrastructure…