{"id":29001,"url":"https://alion.io/job/credence-network-security-engineer","title":"Network Security Engineer","company":{"id":3864336,"name":"Credence","domain":"credence.ai","url":"https://alion.io/company/credence-4","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workable","truth_index":{"grade":"A","score":100,"open_postings":7,"ghost_share":0,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":50,"computed_at":"2026-10-14T06:34:16Z"}},"role":"Security","role_family":"Security","seniority":null,"employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["McLean, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":100000,"max_usd":229000,"period":"year","method":"role_country_seniority_unknown","sample_n":2855},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"BGP","optional":false},{"name":"Configuration Management","optional":false},{"name":"FortiGate","optional":false},{"name":"GCP","optional":false},{"name":"IAM","optional":false},{"name":"Nessus","optional":false},{"name":"Palo Alto NGFW","optional":false},{"name":"SOC 2","optional":false},{"name":"VPN","optional":false},{"name":"Windows","optional":false},{"name":"Ansible","optional":true},{"name":"FedRAMP","optional":true},{"name":"NIST 800-171","optional":true},{"name":"Python","optional":true}],"status":"live","first_seen_at":"2026-07-31T00:00:00Z","employer_posted_date":"2026-07-31","last_verified_at":"2026-10-14T08:32:28Z","board_verified":true,"closed_at":null,"days_open":75,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":75},"description":"Overview\nJoin a team where innovation meets mission. Our AI, cloud, cyber, and modernization solutions save agencies thousands of hours, safeguard national security, and strengthen health and humanitarian missions worldwide. With more than 1,700+ team members, 1,500+ AI & data experts, and 100+ prime contracts, we deliver at scale and with purpose.\nWe’ve been recognized as a Top Workplace by The Washington Post for six consecutive years and named to the Inc. 5000 list of Fastest-Growing Private Companies in 13 of the past 14 years. Credence is a welcoming environment for those looking to grow and make a meaningful impact. We encourage employees to push boundaries and help solve critical, world-changing federal challenges.\nPosition Summary\nCredence has an immediate opening for a Network Security Engineer to join our internal IT team. This individual will own enterprise network and security infrastructure across physical and cloud-hosted environments, administer multi-vendor firewalls, and maintain compliance-aligned controls within a CMMC Level 2 and SOC 2 audit environment. The role carries meaningful responsibility for SSP accuracy, ISSO support functions, and GCP organization-level governance. The ideal candidate combines deep network security expertise with documentation discipline and a proactive, compliance-first mindset\nResponsibilities:\nNetwork Infrastructure & Operations\nProvide technical ownership of the corporate WAN, LAN, and wireless infrastructure, including planning, implementation, expansion, and lifecycle management.\nMonitor and maintain network performance and reliability, ensuring a minimum of 99% uptime for corporate systems, phone systems, and connectivity.\nConfigure and manage routing, switching, firewalls, and VPNs across Palo Alto NGFW (HQ and branch), Palo Alto VM-Series (AWS Commercial), and FortiGate VM (Azure Government).\nServe as primary administrator across all firewall platforms, including policy management, rule additions and modifications, allow-list maintenance, and configuration backups; maintain privileged access under a documented change-controlled process.\nOversee network configuration management and backups to ensure recoverability and business continuity.\nAnalyze and resolve escalated Tier 2+ network support tickets.\nAdminister enterprise wireless infrastructure across multiple vendor platforms including Cisco, Aruba, and Ubiquiti; manage access point provisioning\nSecurity & Compliance\nIdentify, assess, and mitigate network vulnerabilities through proactive monitoring and remediation.\nImplement and manage network security controls including firewalls, intrusion detection/prevention systems, antivirus, and secure access solutions.\nCollaborate with Systems Administrators on vulnerability scanning, patch management, and remediation efforts (e.g., Nessus scan results, OS hardening).\nSupport audit readiness and compliance for CMMC Level 2 and SOC 2, including maintaining network-layer controls in the System Security Plan (SSP), providing firewall and network evidence for assessments, and contributing to ISSO functions as needed.\nCoordinate firewall rule changes and network modifications through a documented change management process, maintaining an audit-ready record of all changes for SOC 2 and CMMC assessment cycles.\nCollaboration & Support\nWork in coordination with Systems and Security administrators to ensure smooth systems and network integration across on-prem and cloud environments.\nProvide training, documentation, and knowledge sharing to IT staff on new network technologies and processes.\nAssist in disaster recovery planning and implementation of secure, redundant connectivity solutions.\nWrite and maintain technical documentation, including network diagrams, cabling layouts, and internal knowledge base articles.\nContribute to internal IT automation and tooling initiatives, including scripting, infrastructure-as-code, and network-layer input on expanding internal platforms and dashboards.\nCloud Infrastructure & GCP Governance\nServe as the GCP organization owner, maintaining folder hierarchy, org policies, IAM governance, and network configurations across all projects and access boundaries.\nAdminister cloud-hosted network infrastructure including Palo Alto VM-Series in AWS Commercial and FortiGate VM in Azure Government; design and maintain hybrid connectivity patterns across cloud environments.\nSupport GCP cloud networking operations including Cloud NCC hub-and-spoke architecture, HA-VPN with BGP over IKEv2, Cloud Router, and Cloud NAT.\nRequirements\nMust be a U.S. Citizenship\nBachelor’s degree in Computer Science, Information Technology, or a related field (or equivalent experience).\nMust have a minimum of 5+ years of hands-on working experience in network engineering, IT administration, or a related technical role.\nMust have a strong knowledge of Windows operating systems and enterprise networking fundamentals.\nHands-on experience with enterprise firewall administration; Palo Alto NGFW experience and Cisco or equivalent routing and switching experience required.\nMust be proficient in managing network security tools (firewalls, IDS/IPS, VPNs, antivirus).\nMust be familiar with configuration management, monitoring, and documentation tools.\nMust have 5+years of demonstrated ability to maintain and update network security documentation including firewall rule baselines, network diagrams, and SSP network control contributions.\nMust have the ability to troubleshoot complex issues and communicate effectively with both technical and non-technical staff.\nPreferred Qualifications\nCertifications such as Palo Alto PCNSE, FortiGate NSE 4 or higher, CCNA, CCNP, Security+, or equivalent.\nFortiGate experience, including FortiGate VM in Azure Government, preferred; candidates with strong enterprise firewall experience may ramp up on FortiGate with internal support.\nExperience supporting Microsoft 365, Azure Government (GCC High), AWS Commercial, and GCP environments; familiarity with compliance boundaries specific to Azure Gov and GCC High preferred.\nFamiliarity with VoIP, secure mail flow, and endpoint management integration.\nExperience contributing to IT/security-related project initiatives.\nPrior experience in an ISSO or ISSO support role, or familiarity with SSP documentation and NIST 800-171 network control mapping.\nExperience administering cloud-hosted firewall VMs (Palo Alto VM-Series or FortiGate VM) in AWS or Azure environments.\nExperience with network monitoring and management platforms such as PRTG Network Monitor, network documentation tools such as NetBox, and network automation and configuration management tools such as Ansible.\nExperience with Workload Identity Federation (WIF) and OIDC-based service account authentication in GCP; ability to audit and migrate from key-based service accounts.\nGCP Professional Cloud Network Engineer certification or equivalent demonstrated experience.\nFamiliar with GCP organization-level governance including IAM, org policies, and folder hierarchy.\nExperience in a federal contractor environment or familiarity with government compliance frameworks (CMMC, FedRAMP) preferred.\nComfort with scripting languages (Python, Bash) or infrastructure automation tools for network configuration and operational tasks.\nSalary Range: $130,000.00 to $155,000.00 annually. Actual compensation will be determined based on the selected candidate's experience, education, skills, and overall qualifications.\nPlease join us, as together we build a better world one mission at a time powered by Technology and its People!\nBenefits\nHealth Care Plan (Medical, Dental & Vision)\nRetirement Plan (401k, IRA)\nLife Insurance (Basic, Voluntary & AD&D)\nPaid Time Off (Vacation, Sick & Public Holidays)\nFamily Leave (Maternity, Paternity)\nShort Term & Long Term Disability\nTraining & Development\nWellness Resources","description_format":"text","description_chars":7889,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["401k plan","Life insurance","Parental leave","Retirement plans"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Network Security","Machine Learning","Supply Chain & Logistics Software"],"lifecycle":[{"event":"open","at":"2026-07-31T00:00:00Z"}],"visa":[],"liveness":{"score":17,"band":"cold","label":"Long shot","p_open":1,"p_active":0.477,"p_room":0.36,"age_days":75,"expected_fill_days":50,"reasons":["conf:3","velocity","win:tail","crowd:"],"computed_at":"2026-10-14T06:34:16Z"},"pay":null,"html_url":"https://alion.io/job/credence-network-security-engineer","json_url":"https://alion.io/job/credence-network-security-engineer.json","meta":{"generated_at":"2026-10-14T09:18:48Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":10377,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-15T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3864336},"rest":"https://alion.io/mcp/rest/get_company?id=3864336"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fcredence-network-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fcredence-network-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fcredence-network-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/credence-network-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fcredence-network-security-engineer"}]}