Network Security Engineer; Firewall & Vulnerability Management; Enterprise Firewall Engineering​/Check Point, Endpoint

Position: Network Security Engineer (Firewall & Vulnerability Management) - Enterprise Firewall Engineering/Check Point, Endpoint
Location: Washington

Peraton Overview

Peraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world’s leading mission capability integrator and transformative enterprise IT provider, we deliver trusted, highly differentiated solutions and technologies to protect our nation and allies. Peraton operates at the critical nexus between traditional and nontraditional threats across all domains: land, sea, space, air, and cyberspace.

The company serves as a valued partner to essential government agencies and supports every branch of the U.S. armed forces. Each day, our employees do the can’t be done by solving the most daunting challenges facing our customers. Visit  to learn how we’re keeping people around the world safe and secure.

Responsibilities

Peraton is currently hiring an experienced Network Security Engineer (Firewall & Vulnerability Management) with hands-on experience implementing security configurations for its’ Federal Strategic Cyber programs.

Location:

Washington, DCWork Arrangement:
Hybrid – On-site Monday through Wednesday; up to two remote days per week Security Requirement:
Tier 2 Public Trust

Position Overview We are seeking an experienced, hands-on Network Security Engineer (Firewall & Vulnerability Management) to execute critical cybersecurity improvement initiatives within a hybrid Microsoft, AWS, and Azure federal enterprise environment.

This is a project-driven cybersecurity engineering and implementation position, not a traditional security assessment, advisory, compliance, or steady-state security operations role.

Serving as the single dedicated technical engineering resource, the selected candidate will independently execute ten security improvement projects spanning vulnerability management, endpoint protection, patch management, firewall and network security, identity and access management, and security governance.

The successful candidate must demonstrate experience personally configuring, implementing, hardening, troubleshooting, and validating enterprise security technologies and controls. Responsibilities extend beyond identifying vulnerabilities and recommending corrective actions to directly implement approved security configuration changes, executing technical remediation, optimizing security platforms, and delivering measurable improvements to the organization's security posture.

The engineer will take ownership of technical deliverables from initial assessment and solution design through implementation, testing, validation, documentation, and completion. The customer retains responsibility for risk acceptance and policy approvals, while the engineer is accountable for executing approved technical security improvements.

The environment operates under federal cybersecurity requirements, including IRS Publication 1075, NIST SP 800-53 Revision 5, and the NIST Risk Management Framework (RMF).

Key Responsibilities Vulnerability Assessment, Remediation & Governance Conduct authenticated and unauthenticated vulnerability assessments across enterprise servers, endpoints, network devices, SQL Server, virtual desktop infrastructure (VDI), and AWS/Azure workloads.

Directly implement and validate technical remediation activities, including secure configuration changes, system hardening, and vulnerability resolution.

Develop a risk-based vulnerability prioritization matrix incorporating Common Vulnerability Scoring System (CVSS) ratings, asset criticality, and exploitability.

Establish a comprehensive vulnerability remediation governance framework, including ownership models, service-level agreement (SLA) targets, remediation closure standards, and escalation workflows.

Deliver a…