Network Security Engineer

If you are unable to complete this application due to a disability, contact this employer to ask for an accommodation or an alternative application process.

Full Time Irving, TX, US

30+ days ago Requisition

Salary Range: $ To $ Annually

Network Security Engineer

About Us

EFJohnson Technologies is a subsidiary of JVCKENWOOD Corporation, a leading provider of P25 communications solutions for first responders in public safety and public service, the federal government, and industrial organizations. Our products are marketed under the EFJohnson and KENWOOD brands.

EFJohnson provides wireless communications products and systems for public safety, commercial, and government customers. We design, manufacture, and market conventional and trunked radio systems, land mobile radio repeaters , and mobile and portable radios, including Project 25 digital radio products.

______________________________________________________________________________

As a Network Security Engineer you’ll design, implement, and enforce comprehensive network and security architectures for mission-critical radio, data, and monitoring systems. This position will develop and maintain security standards and technical controls directly aligned with NIST SP 800-171 and CMMC Level 2 requirements to ensure protection of Controlled Unclassified Information (CUI). As a Network Security Engineer, you’ll collaborate with network and system architects to embed security throughout the full system lifecycle, from design and segmentation to identity management, remote access, and incident response.

This role is hybrid, based out of Irving, TX.

Key Responsibilities

Security Architecture & Compliance

• Define, document, and maintain comprehensive network security standards mapped to NIST SP 800-171 and CMMC Level 2 controls.
• Collaborate with architects to incorporate security in every design, emphasizing segmentation and isolation of CUI assets.
• Design, test, and maintain network-level controls supporting Identification & Authentication (IA) and System & Communications Protection (SC) families.
• Contribute technical content to the System Security Plan (SSP), Plan of Action and Milestones (POA&M), and compliance evidence packages.
• Enforce configuration management and formal change-control processes to maintain baseline compliance.
• Perform security impact assessments on proposed design changes, ensuring traceability to CMMC requirements.

Identity & Access Management (IAM)

• Design and deploy centralized LDAP for directory services and user authentication.
• Design, implement, and administer TACACS+ for AAA control across routers, switches, and radio controllers.
• Configure and manage Multi-Factor Authentication (MFA) for privileged and remote accounts (CMMC IA.L2-3.5.3).
• Ensure unique identification and authentication of all users and devices (CMMC IA.L2-3.5.1).
• Integrate IAM systems with centralized logging and SIEM tools to support audit and traceability requirements.

Network Security Services Implementation

• Design, configure, and deploy Remote Access VPNs and IPSec site-to-site tunnels for secure connectivity, ensuring encryption of CUI in transit.
• Configure, deploy, and manage Next-Generation Firewalls (NGFWs) to enforce zone-based policies and control traffic between segmented network zones.
• Implement and tune Intrusion Prevention Systems (IPS) to detect and block malicious traffic in real time.
• Run regular vulnerability assessments and penetration tests; prioritize remediation actions that impact CMMC compliance.
• Integrate firewall, VPN, and IPS logs with centralized SIEM systems; conduct Root Cause Analysis (RCA) for network or IAM-related security incidents.
• Act as Tier 2/Tier 3 escalation for the Security Operations Center (SOC).
• Ensure…