Senior Network Security Engineer

Paragon Cyber Solutions is a woman-, veteran-, and minority-owned cybersecurity and IT services firm that supports government and commercial clients with compliance, cyber defense, and mission-focused technology solutions. Our team takes pride in solving complex technical challenges and delivering innovative, customer-focused outcomes.

The Senior Network Security Engineer is responsible for designing, implementing, and maintaining secure enterprise network architectures across on-premises, cloud, and hybrid environments. This role serves as a technical leader for network security initiatives, driving Zero Trust adoption, secure remote access solutions, firewall strategy, segmentation, and advanced threat protection capabilities.

This position is contingent upon contract award.

Responsibilities

• Design, implement, and support secure network architectures across enterprise and cloud environments.
• Engineer and maintain firewalls, VPNs, proxies, IDS/IPS solutions, and network access control technologies.
• Lead network segmentation and Zero Trust initiatives.
• Perform firewall rule reviews, policy optimization, and attack surface reduction efforts.
• Design secure remote access and multi-factor authentication solutions.
• Integrate security telemetry into SIEM platforms for monitoring, alerting, and incident response.
• Support cloud networking security controls across AWS, Azure, and hybrid environments.
• Lead major security infrastructure upgrades and architecture modernization efforts.
• Collaborate with cybersecurity, infrastructure, and cloud teams to implement enterprise security standards.
• Develop technical documentation, network diagrams, and security design artifacts.

• Bachelor's degree in Networking, Cybersecurity, Information Technology, or related field.

• 6 to 10 years of network security engineering experience.
• Proven experience leading enterprise security architecture upgrades or transformation projects.

Knowledge of:

• Firewalls
• Routers and switches
• VPN technologies
• Proxy solutions
• IDS/IPS platforms
• Network Access Control (NAC)
• Segmentation technologies

Strong understanding of:

• Secure network architecture
• Zero Trust principles
• Cloud networking
• Hybrid environments

Preferred Experience

Hands-on experience with:

• Palo Alto Prisma Access
• Palo Alto Virtual Firewalls

Knowledge of:

• NIST SP 800-160
• Executive Order 14028
• CISA Binding Operational Directives

Experience with additional SASE platforms:

• Zscaler
• Fortinet
• Cloudflare
• VMware

Additional Eligibility Qualifications

• Must be United States Citizen.
• The flexibility to work occasional non-duty hours or on weekends to support specific project or mission requirements.