Network Security Engineer

Job Summary

Our client is seeking a Network Security Engineer to join their team! This position is located in McLean, Virginia.

• Analyzes, designs and develops security solutions with Cybersecurity architects to ensure it is consistent with corporate technology goals and risk tolerance levels
• Designs and engineers solutions to align with the Cybersecurity Strategy
• Serves as the subject matter expert for supported security technologies, and act as subject matter expert during escalations
• Validates current and future state architectural models to assess impact across assigned Cybersecurity technology systems
• Oversees security requirements and technical specifications to guide project implementation towards successful solution delivery
• Provides direction to infrastructure, operations, data and application developments groups throughout transitioning phase, implementation in production and beyond
• Manages relationships with security partners and vendors
• Builds and maintains effective relationships with management, peers, project managers and internal customer
• Maintains knowledge of engineering next‑gen designs, security trends, threats and attack techniques
• Ensures compliance to audit, regulatory and legal requirements

• Experience in managing Netskope SWG, CASB, DLP policies and configurations
• Experience monitoring, reporting, and tuning security policies
• Ability to architect, deploy, and optimize Netskope solutions for enterprise‑scale environments
• Hands‑on experience with Broadcom Web Proxy and Web Security Services (WSS)
• Proficient in configuration and maintaining policies, content filtering, an secure web access
• Experience with migration, upgrade, and integration projects involving Broadcom solutions
• Experience with Palo Alto Networks firewall policies, including URL/content filtering
• Strong knowledge of Cisco ASA/Firepower platforms, Any Connect VPN, and Palo Alto Networks Global Protect
• Experience with network segmentation, access control, and policy enforcement for secure connectivity
• Experience with Secure Remote Access platform migration
• Ability to design, implement, and maintain enterprise security policies across multiple platforms
• Strong understanding of SWG, CASB, and Firewall best practices for cloud, on‑premise, and hybrid environments
• Capable of evaluating policy impact and implementing tuning to minimizing business disruption
• Proficient in Python for automation, reporting, and security tool integration
• Experience with Ansible for configuration management and automated deployments
• Familiarity with Github for version control and collaborative development
• Ability to design and implement complex security architectures to meet business and compliance requirements
• Experience with large‑scale migrations, integrations, and cross‑platform security solutions
• Understanding of security protocols, encryption standards, and secure network architectures
• Experience with AWS services and cloud security best practices
• Ability to design, monitor, and secure cloud‑based workloads and applications
• Experience creating, modifying, and optimizing dashboards in Grafana and Solar Winds
• Proficient in root cause analysis for network, policy, or configuration related issues
• Comfortable navigating and performing administrative tasks in a Linux shell environment
• Familiarity with regulatory frameworks and audits, specifically PCI‑DSS and SOX

• Medical, Dental, & Vision Insurance Plans
• Employee‑Owned Profit Sharing (ESOP)
• 401K offered

The approximate pay range for this position is between $49.00 and $70.00
. Please note that the pay range provided is a good faith estimate. Final compensation may vary based on factors including but not limited to background, knowledge, skills, and location. We comply with local wage minimums.