CyberSecurity Engineer (On-Site) (Germantown MD)

Description

Summary: Seeking a hands-on, security-minded Cybersecurity/Network Engineer to design, configure, and secure well-documented networks within a tight IT team. Highlights: 1. Opportunity to build secure, well-documented networks 2. Work closely with a tight IT team 3. Design, configure, secure, and document network solutions We’re a small, mission-focused company in Germantown, MD looking for a hands-on Cybersecurity/Network Engineer who enjoys building secure, well-documented networks and working closely with a tight IT team. If you’re the kind of engineer who can design it, configure it, secure it, and write the “how-to” so others can support it, this role is for you. What you’ll work on: 1.) Firewalls & segmentation. -- Build and maintain firewall policies (currently SonicWall NSa + TZ series) -- Help design layered network segmentation between LAN, Server, Wi-Fi, and VPN 2.) Wireless & identity. -- Enterprise Wi-Fi with: ** RADIUS authentication ** Integration with Active Directory ** Captive portal / landing page workflow 3.) Remote access modernization -- OpenVPN & SonicWall SMA Optimization 4.) Network redesign & modernization -- Help redesign the network architecture into Core / Distribution / Access layers -- Core handles routing + VLAN trunking (including VPN trunking) 5.) Monitoring & security operations -- Maintain and improve monitoring using Lansweeper, Graylog, and Darktrace. -- Endpoint/security tooling experience (example: Trend Micro) 6.) Virtualization -- Configure and support VMware, Proxmox & SANs What we’re looking for (must-have): -- Strong, hands-on networking fundamentals: ** TCP/IP stack, DNS, DHCP, VLANs, Layer 1–7 concepts ** Broadcast/multicast behavior and troubleshooting -- Comfortable configuring firewalls, switches, routers, and Wi-Fi -- Security-minded, collaborative, and documentation-oriented -- Team-first attitude and steady communication Due to the nature of our work, applicants must provide proof of U.S. citizenship and be eligible to obtain a TS/SCI clearance; this position is on-site in Germantown, MD, and to apply, please send your resume along with a brief note highlighting your experience with firewalls, Wi-Fi, and VLAN/segmentation.