{"id":1204659,"url":"https://alion.io/job/etelligentgroup-cloud-network-security-engineer","title":"Cloud / Network Security Engineer","company":{"id":674370,"name":"Etelligentgroup","domain":"etelligentgroup.com","url":"https://alion.io/company/etelligentgroup","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"B","score":80,"open_postings":7,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":17,"computed_at":"2026-09-27T05:45:00Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":[],"countries":[],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":130000,"max":140000,"currency":"USD","period":"year","gross":null,"usd_annual":140000},"salary_estimate":null,"experience_years_min":7,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Anomaly Detection","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Crowdstrike","optional":false},{"name":"Git","optional":false},{"name":"HPC","optional":false},{"name":"IAM","optional":false},{"name":"Microsoft Defender","optional":false},{"name":"Microsoft Sentinel","optional":false},{"name":"Splunk","optional":false},{"name":"Terraform","optional":false},{"name":"Zero Trust","optional":false},{"name":"Zscaler","optional":false},{"name":"CloudFormation","optional":true},{"name":"FedRAMP","optional":true},{"name":"Linux","optional":true},{"name":"SLURM","optional":true}],"status":"live","first_seen_at":"2021-08-18T14:27:52Z","employer_posted_date":"2026-09-24","last_verified_at":"2026-09-28T04:04:35Z","board_verified":true,"closed_at":null,"days_open":1866,"trust":{"level":"stale","repost_count":0,"flags":["stale"],"days_open":1866},"description":"Company Overview:\nOver the past 15 years, eTel has delivered essential solutions for the federal government by securing and managing data, providing scalable identity access, modernizing legacy systems, and building high-performance platforms. By integrating new technologies and ensuring reliable operations we help agencies stay prepared for future challenges As a premier technology solutions and services company to the US federal government, eTel possesses longstanding relationships across the federal civilian marketplace. Other customers include the broader Treasury Department, Commerce Department, and State Department.\neTel offers integrated CMMI Level 3 processes, tools, and techniques with innovative, cost-efficient, and secure solutions to address complex challenges. eTel also holds ISO 9001:2015, ISO/IEC 27001:2013, and ISO/IEC 20000-1:2018 certifications, and offers dedicated subject matter experts (SMEs) and thought leaders that possess a deep understanding of customers’ environments and challenges.\nWork Location and On-Site/Telework Requirements: Hybrid - NIH, Bethesda, MD. On site for workshops and pilots (typically 1-2 days/week during the first 120 days, then as scheduled).\nCitizenship: U.S. Citizenship required\nClearance: All staff must obtain NIH suitability and a PIV credential and be fluent in English. Anyone doing risk or vulnerability testing needs a current T2 (BI) or higher investigation.\nSalary Range: $130,000-$140,000 yearly salary\n\nOverview:\nYou will co-author the cloud, network, and identity design patterns behind NIH's Future State ZTA under the NIH Governance, Risk & Compliance (GRC) Zero Trust Architecture (ZTA) Support Services task order for the NIH Office of the Chief Information Officer (OCIO). You will work in the Architecture Pod on Tasks 2, 3, and 4. This is a design and advisory role: you will produce reference architectures, patterns, and control mappings for NIH teams to implement, not operate NIH production systems. Deep hands-on engineering experience is still essential.\n\nResponsibilities:\nCo-author the cloud, on-premises, and hybrid reference architectures (Subtask 2.2) with the Senior ZT Architect, as reusable design patterns with NIST SP 800-53 Rev 5 control mappings.\nDesign microsegmentation and workload-identity patterns (NIST SP 800-207A, CISA and NSA Zero Trust guidance), software-defined perimeter for HPC clusters, and isolated VLANs with brokered remote access for laboratory instruments.\nDocument how centrally provided network, endpoint, and logging services are inherited, as input to the Centrally Provided Services Matrix.\nDefine technical policy anchors for the network and device pillars (segmentation policy in the controller, compliance policy in endpoint management). Map controls to telemetry so continuous-monitoring evidence is collected rather than written by hand.\nSupport Task 3 network use cases: flow baselining to generate and validate microsegmentation policy, and lateral-movement anomaly detection.\nSupport the Task 4 gap assessment for the network, device, and cloud pillars, and the evidence expectations in the ZTA Overlay.\nValidate patterns with IC engineering teams (CIT, HPC, and clinical platform owners).\nTools & Technology Environment: AWS and Azure (including GovCloud), cloud-native IAM and CSPM; SSE/ZTNA (e.g., Zscaler, Palo Alto); microsegmentation platforms (e.g., Illumio); Palo Alto/Fortinet/Cisco firewalls; Microsoft Defender, CrowdStrike, Forescout; Splunk/Microsoft Sentinel; Terraform/IaC; Git.\nRequired Qualifications:\nBachelor's degree plus 7+ years of network and/or cloud security engineering.\nHands-on experience with identity-aware access, microsegmentation, and cloud security patterns in enterprise environments.\nExperience with firewalls, SSE/ZTNA, and native AWS or Azure security services.\nSecurity+ or a higher security certification.\nAbility to obtain an NIH suitability determination and PIV credential; fluent in English.\nPreferred Qualifications:\nA cloud security certification (AWS Security Specialty, AZ-500, or CCSP); PCNSE or CCNP Security.\nExperience in FedRAMP-authorized or GovCloud environments.\nExperience with research networks, HPC (Linux/Slurm), or operational technology/IoT device segmentation.\nInfrastructure-as-code (Terraform, CloudFormation) and experience writing security patterns as code.\nCurrent National Institutes of Health (NIH) or U.S. Department of Health and Human Services (HHS) experience is highly preferred.\nCommitment to Diversity -\neTelligent Group provides equal employment opportunities (EEO) to all applicants without regard to race, color, religion, gender, sexual orientation, gender identity, nations origin, age, disability, genetic information, marital status, amnesty, status as a covered veteran, and any other characteristic provided in accordance with applicable, federal, state and local laws.","description_format":"text","description_chars":4891,"description_truncated":false,"requirements":{"experience_years_min":7,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[{"language":"English","level":"Advanced (C1)","optional":false}]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Network Security","Government"],"lifecycle":[{"event":"open","at":"2026-09-24T23:02:16Z"}],"liveness":{"score":8,"band":"cold","label":"Long shot","p_open":1,"p_active":0.274,"p_room":0.28,"age_days":1865,"expected_fill_days":17,"reasons":["conf:0","win:tail","crowd:"],"computed_at":"2026-09-27T05:45:00Z"},"pay":{"stated_usd_annual":140000,"is_top_pay":false},"html_url":"https://alion.io/job/etelligentgroup-cloud-network-security-engineer","json_url":"https://alion.io/job/etelligentgroup-cloud-network-security-engineer.json","meta":{"generated_at":"2026-09-28T05:10:59Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","usage":{"tier":"crawler","counted_by":"address","units_charged":1,"used_today":3385,"day_limit":5000,"remaining_today":1615,"minute_limit":60,"resets_at":"2026-09-29T00:00:00Z"}}}