{"id":2577842,"url":"https://alion.io/job/jcs-solutions-principal-network-security-engineer-jcs-solutions-llc","title":"Principal Network Security Engineer - JCS Solutions LLC","company":{"id":3854787,"name":"JCS Solutions","domain":"jcssolutions.com","url":"https://alion.io/company/jcs-solutions","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"JazzHR","truth_index":null},"role":"Security","role_family":"Security","seniority":"lead","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Fort Meade, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":104000,"max":149000,"currency":"USD","period":"year","gross":null,"usd_annual":149000},"salary_estimate":null,"experience_years_min":12,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Ansible","optional":false},{"name":"Confluence","optional":false},{"name":"DHCP","optional":false},{"name":"Discord","optional":false},{"name":"DNS","optional":false},{"name":"FedRAMP","optional":false},{"name":"ITSM","optional":false},{"name":"Jira","optional":false},{"name":"Least Privilege","optional":false},{"name":"PKI","optional":false},{"name":"Python","optional":false},{"name":"Rest API","optional":false},{"name":"SIEM","optional":false},{"name":"Slack","optional":false},{"name":"TCP/IP","optional":false},{"name":"VPN","optional":false},{"name":"Zero Trust","optional":false}],"status":"live","first_seen_at":"2026-10-15T00:45:05Z","employer_posted_date":"2026-10-15","last_verified_at":"2026-10-18T07:01:32Z","board_verified":true,"closed_at":null,"days_open":3,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":3},"description":"Grow, innovate, and generate progress: Harness your expertise to solve challenges and celebrate success!\nJob Summary\nJCS Solutions is seeking a Principal Network Security Engineer to design, engineer, and implement enterprise network security capabilities across a large, distributed Department of Defense network environment. This role serves as a senior technical leader responsible for advancing network security architecture through strategic engineering efforts that strengthen segmentation, access control, zero-trust initiatives, resiliency, and enterprise-wide security posture.\nThe successful candidate will assess current network security architectures, identify capability gaps, develop implementation strategies, and lead engineering teams through complex modernization efforts. This position requires expertise in network security architecture, firewall technologies, intrusion prevention, network access control, segmentation, encryption, and secure connectivity across enterprise environments.\nThis role requires a hands-on engineer capable of developing solutions, directing technical teams, communicating with stakeholders and approval authorities, and delivering secure, scalable, and sustainable network security capabilities.\nLocation: Ft. Meade, MD\nClearance: Secret\nSalary: $104,000.00 - $149,000.00\nCertification: Active DoD 8140/8570 IAT Level II certification.\nWhat’s in it for you:\nJoin a premier technology firm specializing in innovative solutions. \nBe part of a collaborative, inclusive, and innovative work culture. \nEnjoy tremendous growth potential in a high-performing team environment. \nA robust benefits package: Health, dental, and vision insurance \nLife insurance \nShort-and-long term disability \nPaid time off (PTO) \n401k retirement plan with employer match \nAnnual Professional Development Reimbursement Program \nAnd more! \n\nWhat you will do:\nNetwork Security Engineering and Architecture\nDesign, engineer, and implement enterprise network security architectures spanning next-generation firewalls, intrusion detection and prevention systems, web and TLS proxies, VPN and encryption services, network access control, DNS security, and east-west security controls.\nEvaluate existing network security architecture and identify security gaps, improvement opportunities, risks, and implementation approaches.\nLead network segmentation and secure connectivity initiatives, including data-flow mapping, security-zone design, enclave development, firewall rule review, ACL rationalization, and routing coordination.\nDesign and implement network access control and device-posture enforcement solutions, including identity validation, device authentication, policy enforcement, remediation workflows, and phased implementation strategies.\nAdvance zero-trust networking principles, least-privilege access, micro-segmentation, and encrypted communications strategies.\nEvaluate and recommend emerging security technologies to improve enterprise security capabilities.\nEngineer secure connectivity between on-premises, cloud, and remote environments utilizing VPN, TLS, IPsec, cloud interconnects, and boundary protection technologies.\nOptimize security controls to reduce false positives, improve visibility, strengthen enforcement capabilities, and maintain network performance.\nProject ExecutionLead network security projects from concept through implementation.\nPerform requirements analysis, dependency identification, architecture review, design coordination, planning, validation, and operational transition activities.\nDevelop implementation plans, cutover strategies, rollback plans, validation procedures, and stakeholder communication plans.\nCoordinate maintenance windows, testing efforts, change activities, and contingency planning for security infrastructure modifications.\nCollaborate with network engineering, cybersecurity, operations, project management, and subject matter experts to successfully deliver network security initiatives.\nSupport security accreditation, compliance, STIG implementation, vulnerability remediation, POA&M activities, and authorization requirements.\nTechnical LeadershipServe as the senior technical authority for network security architecture and design decisions.\nProvide technical direction, mentoring, and engineering guidance to network engineers, security engineers, administrators, and analysts.\nManage multiple concurrent technical efforts and maintain accountability against project schedules.\nPresent security architecture recommendations, implementation strategies, risks, and technical decisions to government leadership, cybersecurity authorities, and approval boards.\nImprove engineering processes, documentation standards, implementation playbooks, migration runbooks, and operational handoff procedures.\nDocumentationDevelop and maintain network security architecture diagrams and logical/physical design documentation.\nCreate data-flow diagrams, segmentation models, security-zone designs, and secure connectivity documentation.\nMaintain firewall policy standards, ACL documentation, and rule-set baselines.\nDevelop implementation plans, rollback procedures, test plans, validation packages, risk registers, and dependency documentation.\nCreate accreditation artifacts, technical standards, SOPs, runbooks, as-built documentation, and transition-to-operations documentation.\nWhat you will bring:Bachelor's degree or equivalent experience with 12+ years of relevant experience, or Master's degree with 10+ years of experience.\nSpecific experience, education, and training may be considered in lieu of a degree.\nActive DoD Secret security clearance.\nCurrent DoD 8140/8570 IAT Level II certification or higher.\nSignificant experience designing and implementing network security architecture in complex, large-scale enterprise environments.\nExperience serving as a senior technical lead directing network and security engineers, administrators, analysts, or implementation teams.\nExperience leading security engineering projects from planning through implementation.\nHands-on engineering experience with:Next-generation firewalls\nIntrusion detection and prevention systems\nProxies and TLS inspection solutions\nVPN and encryption services\nNetwork access control platforms\n\nExperience with network segmentation and secure connectivity initiatives.\nExperience with data-flow analysis, firewall policy reviews, ACL management, security-zone design, stakeholder coordination, and implementation planning.\nStrong knowledge of:TCP/IP\nRouting protocols\nSwitching\nVLANs\nDNS/DHCP/IPAM\nNAT\nQoS\n\nSoftware-defined networking\nCloud-connected environments\nHands-on experience with two or more of the following technologies:Palo Alto\nCisco\nAruba\nDell\nInfoblox\nBrocade\nWorking knowledge of:\nNIST\nFedRAMP\nFISMA\nRMF\nDISA STIGs\n\nDoD cybersecurity requirements\nDemonstrated ability to manage competing priorities and deliver complex technical initiatives.\nExperience documenting network and security architectures using Visio, PowerPoint, Cameo, or similar tools.\nExcellent written and verbal communication skills.\nExperience briefing senior leadership, cybersecurity authorities, stakeholders, and approval boards.\nExperience with wireless security and authentication, including WPA2/WPA3, 802.1X, RADIUS, and enterprise NAC platforms.\nExperience integrating wireless infrastructure with enterprise networking services, including DNS, DHCP, NTP, routing, and monitoring platforms.\nExperience developing and executing engineering designs, implementation plans, migration procedures, test plans, and production deployments.\nStrong troubleshooting and analytical skills with the ability to resolve complex wireless connectivity, authentication, and network performance issues.\nStrong written and verbal communication skills.\nExperience providing technical guidance and developing engineering documentation.\nMust meet applicable cybersecurity workforce qualification requirements for the assigned position.\n How you will wow us:CISSP, Palo Alto PCNSE, Cisco CCNP Security, or equivalent advanced security certification.\nExperience implementing Comply-to-Connect, 802.1X, or comparable network access control and device-posture enforcement solutions at enterprise scale.\nExperience with zero-trust architecture, micro-segmentation, SASE, or secure cloud connectivity designs.\nExperience integrating network security platforms with SIEM, SOAR, ITSM, and analytics platforms.\nExperience utilizing Python, Ansible, REST APIs, or similar technologies for security automation and infrastructure-as-code initiatives.\nExperience with automated firewall policy management.\nExperience supporting enterprise certificate management, PKI environments, encrypted-traffic inspection, and key management services.\nExperience supporting RMF, eMASS, continuous monitoring, audits, assessments, and inspection activities.\nExperience utilizing Jira, Confluence, or similar project management and knowledge-sharing platforms.\nExperience developing engineering execution frameworks, implementation playbooks, migration runbooks, technical standards, and risk-reduction methodologies.\nJCS Solutions (JCS) is a premier technology firm providing innovative solutions and high-quality services in defense, national security, and civilian sectors. JCS offers enterprise-wide solutions including cloud computing, software development, cybersecurity, digital modernization, and management consulting for the federal government. At JCS, we elevate our customers’ mission through the application of technology and professional services. Our commitment to investing in our workforce drives innovation and progress for our clients, employees, and communities.JCS is both a Great Place to Work and a Top Places to Work certified company.\nOur employees embody our core values, and we are looking for others who do too!\nCustomer Experience: Strive for excellence and delight our clients \nInnovation: Embrace creative thinking to enable continual growth and powerful solutions \nAccountability: Take ownership of and pride in our actions and service delivery \nInspire: Be inspired to be your best self and have fun in the process \nIntegrity: Do the right thing, the right way, every time! \nStewardship: The careful and responsible management of something entrusted to our care. \nAt JCS Solutions, compensation is based on a number of factors such as location, qualifications, and applicable contract terms. The general salary range for this position is as follows: $104,000.00 - $149,000.00Commitment to Non-Discrimination\nAll qualified applicants will receive consideration for employment without regard to any protected status protected by applicable federal, state, or local laws.\nNOTICE: Please be aware that all JCS Solutions communications related to job interviews and offers from our recruiting team will only come from @JCSSolutions.com. We want to emphasize that we do not conduct any interviews over Discord, Slack, Skype, Zoom, or any chat app.","description_format":"text","description_chars":10980,"description_truncated":false,"requirements":{"experience_years_min":12,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"master","optional":true},"security_clearance":true,"languages":[]},"benefits":["401k plan","Life insurance","Professional development","Retirement plans","Vision insurance"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Network Security","IT Help Desk & Service Desk","Security Operations"],"lifecycle":[{"event":"open","at":"2026-10-15T00:45:05Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":2,"expected_fill_days":11,"reasons":["conf:15","velocity","win:early"],"computed_at":"2026-10-17T05:46:00Z"},"pay":{"stated_usd_annual":149000,"is_top_pay":false},"html_url":"https://alion.io/job/jcs-solutions-principal-network-security-engineer-jcs-solutions-llc","json_url":"https://alion.io/job/jcs-solutions-principal-network-security-engineer-jcs-solutions-llc.json","meta":{"generated_at":"2026-10-18T07:16:34Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":10919,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-19T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3854787},"rest":"https://alion.io/mcp/rest/get_company?id=3854787"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fjcs-solutions-principal-network-security-engineer-jcs-solutions-llc"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fjcs-solutions-principal-network-security-engineer-jcs-solutions-llc"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fjcs-solutions-principal-network-security-engineer-jcs-solutions-llc"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/jcs-solutions-principal-network-security-engineer-jcs-solutions-llc\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fjcs-solutions-principal-network-security-engineer-jcs-solutions-llc"}]}