Principal Network Security Engineer (Firewalls & LAN/WAN) - TS/SCI w/Poly

Public Trust: None

Requisition Type: Regular

Your Impact

Own your opportunity to serve as a critical component of our nation’s safety and security. Make an impact by using your expertise to protect our country from threats.

Job Description

The Network Engineer is responsible for designing technical solutions for complex problems. The candidate will provide technical oversight of a project solution, including requirement interpretation and allocation of requirements to technical components. The candidate will define processes to support the implementation of requirements. The candidate will be responsible for ensuring that the technical solutions leverage industry best practices, designing security and excellence while minimizing the total cost of ownership. Candidate should be able to define internal and external customer IT infrastructure architecture needs and then design solutions to meet those needs to include: capacity planning, systems configuration and tuning, monitoring backups, and installations of hardware and software. Candidates will be required to work independently with little supervision and should be flexible to work and support IT Operations needs as requested.

HOW A NETWORK ENGINEER WILL MAKE AN IMPACT

• Define, maintain, and upgrade the overall security posture of the networks

• Will perform security audits of events, overall health and implement changes to improve the overall programs security posture.

• Manage and allocate network installation and engineering tasks, configure and maintain communications systems, familiarity with implementation of LAN and WAN equipment including firewalls, servers, workstations, routers, switches, hubs, storage devices, A/V equipment and equipment racks

• Ability to write and edit “build-to” and “as-built” documentation, as well as implementation and test plans for physical and logical installs of IT equipment

• Able to engage in technical system planning beyond the network, to include applications and systems that utilize the network being delivered

• Provides expert level analysis of voice, video, and/or data communications networks, including planning, designing, evaluating, selecting, and upgrading operating systems and protocol suites

• Able to plan network layouts and configures systems to user environments

• May provide technical support and troubleshooting to users. (Tier I, II, and III)

WHAT YOU’LL NEED TO SUCCEED:

• The position requires an active TS/SCI with Poly clearance

• Bachelor’s or Technology degree in Engineering or a related specialized area/field, OR equivalent 14 years job-related experience

• 10+ years of related Network Engineering experience

• 12 +years of experience configuring/maintaining Cisco ASA/Next Generation Firewall

• 10 + years of experience configuring, designing, maintaining, and troubleshooting LAN/WAN devices. Thorough understanding of network routing concepts (EIGRP, OSPF, BGP, IP MPLS)

• Experience design, engineering, and deploying controlled interfaces (10 + years)

• Expertise/experience (more than 10) deploying Cisco, Palo Alto, or Juniper firewall Manager servers

• Experience allowing voice, video traffic across port-based firewall and NGFW

• Experience in engineering and deploying multi firewall solutions

• Experience design, engineering, and deploying firewall vendor transitioning plans

• Experience design, engineering, and deploying firewall in a multicast network environment

• Experience IPSec site-to-site VPN utilizing PKI (CA)

• Experiences Remote access VPN

• Basic understanding of QoS concepts

• Experience with network monitoring technologies

• Ability to take ambiguous requirements or problems and convert them into technical solutions

• Ability to partner with systems administrators, storage administrators, and application developers to solve complex problems

• Complex problem management research and issue resolution

• Ability to mentor junior network engineers

• Excellent organizational, coordination, interpersonal and team building skills

• Proven problem-solving skills in complex environments

• Location: At Customer Site – Herndon area

DESIRED QUALIFICATIONS:

• Experience configuring, designing, and troubleshooting QoS in LAN or WAN devices

• Juniper, Palo Alto, or Cisco Next Generation Firewalls Certifications and hands on experience

• Experience design, engineering, and deploying Muli-Factor Authentication solution

• Experience design, engineering, and deploying Zero-Trust solutions

GDIT IS YOUR PLACE:

• 401K with company match

• Comprehensive health and wellness packages

• Internal mobility team dedicated to helping you own your career

• Professional growth opportunities including paid education and certifications

• Cutting-edge technology you can learn from

• Rest and recharge with paid vacation and holidays

#GDITCareers

#cjpost

#GDITPolyEvent

#JET

#VA_2026Alumni

#GDITEnhanced2026

#MissionPoly2026

Work Requirements

Years of Experience

10 + years of related experience

* may vary based on technical training, certification(s), or degree

Certification

Travel Required

None

Citizenship

U.S. Citizenship Required