Location: Chantilly, VA 20151
Employment Type: Full-Time
Clearance: Active TS/SCI with Full Scope Polygraph required

Position Overview

We are seeking a Network Engineer to support a mission-focused customer in Chantilly, VA. This role supports technical risk assessment and mitigation activities across a broad range of enterprise technologies, including IT systems and networks, mobile and wireless networks, cloud-based computing, network management platforms, communication protocols, scripting and programming products, configuration scripts, and IT hardware and software products.

The Network Engineer will manage the security and performance of a virtual desktop infrastructure environment, including networking components, firewall policies, VPNs, network segmentation, and endpoint policy enforcement. The selected candidate will help ensure network and endpoint systems are secure, efficient, compliant, and aligned with mission requirements.

Key Responsibilities

• Manage the security, performance, and reliability of networking components within a VDI environment.
• Administer, configure, and optimize firewall policies, network switches, VPNs, and access control mechanisms.
• Manage and support Palo Alto PA-3430, Cisco Firepower 2130, and Nexus switches.
• Configure and maintain OpenVPN and IPsec-based VPNs to support secure remote access in a VDI environment.
• Implement network segmentation strategies using VLANs and Access Control Lists within a Zero Trust model.
• Enhance network and endpoint security by minimizing attack surfaces and enforcing secure access patterns.
• Oversee endpoint provisioning, patching, lifecycle management, and hardening using ManageEngine.
• Administer and support endpoint operating systems and mobile emulation environments, including:
  • Windows 11
  • Linux
  • BlueStacks
• Enforce Group Policy Objects and Active Directory-integrated access controls to manage user permissions and security policies.
• Develop and deploy automation scripts to streamline policy enforcement, system management, and recurring operational tasks.
• Support technical risk assessment activities involving networks, endpoints, hardware, software, configuration scripts, communication protocols, and enabling technologies.
• Collaborate with cybersecurity, VDI, systems engineering, and mission stakeholders to strengthen network and endpoint security.
• Develop, maintain, and improve network and endpoint security policies, procedures, and technical documentation.
• Conduct regular security assessments and recommend improvements to enhance the overall security posture.

Required Qualifications

Demonstrated experience with:

• Hands-on firewall administration
• Network Access Control
• Access controls
• VPN tunneling
• Endpoint security
• Mobile emulation environments
• Securing and managing endpoint devices, including mobile emulation environments such as BlueStacks
• Network troubleshooting, documentation, and secure infrastructure support

Desired Qualifications

Demonstrated experience with one or more of the following:

• Collaborating with cybersecurity and VDI teams in secure enterprise environments
• Providing technical training and operational support
• Developing and maintaining network and endpoint security policies and procedures
• Conducting regular security assessments
• Implementing a Zero Trust security model
• Identifying opportunities to enhance network and endpoint security measures
• Implementing innovative solutions to improve overall security posture
• Supporting classified, government, or Intelligence Community environments
• Working with Palo Alto, Cisco Firepower, Nexus, ManageEngine, Active Directory, GPOs, VLANs, ACLs, OpenVPN, or IPsec technologies

Benefits

This position offers a highly competitive, employer-supported benefits package, including:

• 5 weeks of PTO plus birthday leave
• 11 floating holidays
• 401(k) with 10% employer contribution
• Multiple medical plan options through Anthem, including:
  • Platinum PPO national plan
  • Gold PPO national plan
  • Gold HMO HSA national plan
• Employer-paid dental coverage through Delta Dental PPO Plus Premier
• Employer-paid vision coverage through VSP / DeltaVision
• Employer-paid Life and AD&D coverage at 2x salary, up to $400,000
• Optional voluntary Life and AD&D coverage from $10,000 to $500,000, not to exceed 5x salary
• Employer-paid Short-Term Disability, covering 60% of salary up to $2,500
• Employer-paid Long-Term Disability, covering 60% of salary up to $10,000 per month
• Health Savings Account availability, depending on selected health plan
• $1,000 annual Lifestyle Savings Account
• $5,000 annual professional development reimbursement for degrees, training, and certifications
• $1,000 annual technology reimbursement
• Candidate referral bonus program, up to $10,000
• Discretionary profit sharing
• Discretionary performance bonus opportunities
• New contract bonus opportunities, up to $10,000
• Employer-paid access to online training through Udemy and Paylocity
• Optional pet insurance through Pets Best
• Access to Working Advantage employee discounts and rewards programs at no cost

About the Opportunity

This is an excellent opportunity for a Network Engineer with strong firewall, VPN, endpoint security, and VDI networking experience to support mission-critical infrastructure. The selected candidate will play a key role in securing and optimizing network and endpoint systems that support technical risk assessment, virtual desktop operations, and enterprise mission objectives.