Network Security Engineer

Program Description: The contractor shall provide IT Infrastructure support services, which includes Tier 1 Help Desk, Tier 2 End User Support, Tier 3 Server, Platform, and Network Infrastructure Support and Engineering. Services shall include, but are not limited to, technical assistance for hardware, software, and network issues; incident and problem resolution; service request management; infrastructure monitoring and support; hardware and software lifecycle support; and management of escalation across all tiers.

Position Description: Manages and maintains NCUA’s Cisco network infrastructure. Oversee the deployment, configuration, and support of Cisco network devices, ensuring optimal performance, security, and availability.

  Responsibilities:

The Network Security Engineer is responsible for managing, maintaining, and modernizing the agency’s enterprise network infrastructure. This includes Cisco-based networking environments, multi-cloud connectivity, perimeter security platforms, and associated monitoring and compliance capabilities. The role ensures performance, availability, security, and alignment with federal networking and logging requirements.

 The Network Security Engineer shall be responsible for, but is not limited to, performing the following:

 · Install, configure, and maintain network infrastructure components, including Cisco routers, switches, wireless systems, and firewalls.

· Administer network management and monitoring platforms, including PathSolutions and Cisco DNA Center, and maintain operations continuity during transition from Cisco Prime (near-term end of support).

· Manage Palo Alto firewall platforms and services, including PAN-OS, VPN, Prisma Access, and GlobalProtect, ensuring lifecycle support through end-of-support timelines.

· Perform structured cabling installation and management for copper and fiber infrastructure across sites and colocation facilities.

· Monitor and optimize network performance across enterprise, MPLS, and cloud-connected environments to ensure efficient resource utilization and minimal downtime.

· Diagnose and resolve network issues, including routing, switching, connectivity, latency, and security-related incidents.

· Implement and maintain secure network configurations, including patching, updates, and compliance hardening across on-premises and cloud network environments.

· Support hybrid and multi-cloud connectivity, including Azure ExpressRoute (dual-region connectivity), AWS Direct Connect, and site-to-site redundancy architectures.

· Operate and maintain wide area network (WAN) infrastructure, including dual MPLS circuits per site and high-speed interconnection (e.g., 10G point-to-point links between colocation facilities).

· Support Trusted Internet Connections (TIC) and managed security services, including Lumen MTIPS and Cloudflare-based TIC 3.0 alignment.

· Administer segmented network environments supporting operational systems (e.g., OCSM networks, building systems, access control such as Lenel panels), including associated firewalls and supporting infrastructure.

· Support telecommunications and transition initiatives, including EIS Task Orders (TO) and migration from legacy voice/video systems to Microsoft Teams-based solutions.

· Integrate network telemetry and security monitoring tools, including platforms such as Corelight, Garland, and related SOC enablement technologies.

· Ensure compliance with federal policies and directives, including OMB M-21-31 requirements for event logging and network visibility.

· Maintain and update network documentation, including configurations, standard operating procedures, diagrams, and configuration management artifacts.

· Collaborate with cross-functional IT teams to support system integration, application delivery, and enterprise architecture alignment.

· Respond to network alerts, incidents, and service disruptions, ensuring timely resolution and escalation as required.

· Provide technical support for existing and emerging technologies, including planning and execution of network-related projects and initiatives.

Conduct research and provide analysis on emerging networking technologies and their applicability to the organization.

· Perform installation, replacement, and lifecycle management of network hardware and associated components.

Preferred Skills

· PAN-OS, VPN, Prisma Access, and GlobalProtect

Soft Skills:

· Organizational Skills: Can plan and prioritize work. Follows tasks to their logical conclusion and makes sure that everything has been done to the right standard. Good attention to detail.

· Team Work: Able to enthuse and maintain project interest. Comfortable working both individually and as part of a team. Prepared to challenge ideas within a group in a constructive way.

· Communications: Ability to communicate clearly and efficiently to team members and clients, verbally and in writing. Able to present ideas in a variety of ways depending upon audience and context. Excellent active listening skills.

· Quantitative Management: Ability to determine process measures and track to determine process effectiveness and efficiency.

· Results oriented : Able to drive things forward regardless of personal interest in the task.

Requirements

· Bachelor’s degree in computer science, Information Systems, Engineering, or related field.

· Cisco Certified Network Professional (CCNP) certification and 4 years of relevant IT experience required; candidates without CCNP certification must have 6 years of relevant IT experience.

· Ability to obtain a Public trust security clearance

· Located in the DMV area

Benefits

SES provides a competitive salary and the following benefits:

• Medical
• Dental
• Vision
• AD&D
• STD
• LTD
• Company paid Life Insurance
• 401k with employer contribution
• Paid Time Off
• Pet Insurance