CyberSecurity Engineer | On-Site | (Germantown MD)

Description

Summary: Seeking a hands-on Cybersecurity/Network Engineer to build secure, well-documented networks and collaborate with a tight IT team in a mission-focused company. Highlights: 1. Design, configure, secure, and document network infrastructure 2. Focus on firewalls, segmentation, wireless, and remote access modernization 3. Engage in network redesign and security monitoring operations We’re a mission-focused company in Germantown, MD looking for a hands-on Cybersecurity/Network Engineer who enjoys building secure, well-documented networks and working closely with a tight IT team. If you’re the kind of engineer who can design it, configure it, secure it, and write the “how-to” so others can support it, this role is for you. What you’ll work on: 1.) Firewalls & segmentation. -- Build and maintain firewall policies (currently SonicWall NSa + TZ series) -- Help design layered network segmentation between LAN, Server, Wi-Fi, and VPN 2.) Wireless & identity. -- Enterprise Wi-Fi with: ** RADIUS authentication & TACACS+ ** Integration with Active Directory ** Captive portal/landing page workflow 3.) Remote access modernization -- OpenVPN & SonicWall SMA Optimization 4.) Network redesign & modernization -- Help redesign the network architecture into Core / Distribution / Access layers -- Core handles routing + VLAN trunking (including VPN trunking) 5.) Monitoring & security operations -- Maintain and improve monitoring using Lansweeper, Graylog, and Darktrace. -- Endpoint/security tooling experience (E.g. CrowdStrike) 6.) Virtualization -- Configure and support VMware, Proxmox; SANs What we’re looking for (must-have): -- Strong, hands-on networking fundamentals: ** TCP/IP stack, DNS, DHCP, VLANs, Layer 1–7 concepts ** Broadcast/multicast behavior and troubleshooting -- Comfortable configuring firewalls, switches, routers, and Wi-Fi -- Security-minded, collaborative, and documentation-oriented -- Team-first attitude and steady communication Due to the nature of our work, applicants must be eligible to obtain a TS/SCI clearance; this position is on-site in Germantown, MD, and to apply, please send your resume along with a brief note highlighting your experience with firewalls, Wi-Fi, and VLAN/segmentation.