RemoteLeaf Logo
Log in Sign up

^E01 Network Engineer IV

2 months ago
United States
Full-time
Senior
Network Engineer
DevOps and Infrastructure
Azure Cisco DevSecOps DNS Fortinet Linux Load Balancing Palo Alto PowerShell Python SIEM TCP/IP Terraform
Apply Now
TalentWerx

TalentWerx

TalentWerx is a staffing and recruiting company that provides fast, accurate, and innovative solutions to help organizations find the right people to join their teams. We aim to solve the existing problems with traditional talent acquisition firms, suc...

Professional Services
11-50
Founded 2018
View All Jobs 4

Description

  • Design, implement, maintain, and document the hybrid Azure Government network architecture connecting cloud services, on-premises systems, remote users, and external mission partners.
  • Engineer private connectivity using Azure ExpressRoute, site-to-site VPN, redundant gateways, and approved network virtual appliances.
  • Configure and troubleshoot BGP routing, route propagation, user-defined routes, gateway transit, route filtering, failover, and asymmetric routing.
  • Design and administer Azure virtual networks, subnets, peering, route tables, NAT, load balancing, gateways, and hub-and-spoke or Virtual WAN patterns.
  • Implement secure network segmentation and manage Cloud Upload & Staging networks as the controlled boundary for secure content ingestion.
  • Develop and maintain network diagrams, data-flow diagrams, trust-zone diagrams, interface-control information, and related documentation.
  • Design and maintain NSGs, ASGs, Azure Firewall policies, security-admin rules, and rule governance artifacts.
  • Implement Private Endpoint, Private Link, Private DNS, DNS forwarding, and remote-access connectivity controls.
  • Configure monitoring, SIEM integrations, alerts, and performance troubleshooting for network health, latency, DNS, traffic, and connectivity issues.
  • Develop infrastructure as code and integrate network changes into DevSecOps, source control, testing, approval, deployment, and rollback processes.

Requirements

  • Active Secret clearance.
  • Bachelor's degree in computer science, information systems, engineering, cybersecurity, or related field with 8-10 years of relevant experience, or a master's degree with 6-8 years of relevant experience.
  • Extensive experience designing, implementing, securing, and sustaining enterprise hybrid-cloud networks.
  • Hands-on experience with Azure virtual networks, subnets, peering, route tables, NSGs, ASGs, Azure Firewall Policy, VPN Gateway, ExpressRoute, private endpoints, private DNS, and network monitoring.
  • Strong knowledge of TCP/IP, BGP, IPsec, DNS, routing, switching, firewalls, NAT, network segmentation, load balancing, high availability, and hybrid name resolution.
  • Experience developing network diagrams, traffic-flow documentation, firewall and security-group rule matrices, IP plans, implementation plans, rollback plans, and test procedures.
  • Experience analyzing security rules and troubleshooting interactions among NSGs, Azure Firewall, routing, NAT, private endpoints, DNS, and hybrid connectivity.
  • Experience implementing network and security-rule configurations through infrastructure as code, source control, peer review, and controlled deployment pipelines.
  • Working knowledge of NIST SP 800-171, NIST SP 800-53, RMF, CMMC, DoD Cloud SRG, and DISA STIG requirements.
  • Preferred: Microsoft Azure Network Engineer Associate, Azure Solutions Architect, Azure Security Engineer, or equivalent experience; CCNP Enterprise or CCNP Security; experience with Azure Government, DoW cloud environments, CUI, classified networks, Terraform, Bicep, PowerShell, Python, Azure CLI, Linux, Bash, Azure Firewall Premium, Azure Virtual Network Manager, Network Watcher, Connection Monitor, Log Analytics, Palo Alto, Cisco, Fortinet, MBSE, PLM, HPC, or RMF evidence production.

Benefits

  • Remote full-time/permanent role.
  • Immediate start date.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

B Lab

IT Security & Compliance Lead (Amsterdam, NLD)

B Lab 51-250 Diversified Consumer Services

B Lab is seeking a full-time IT Security & Compliance Lead in Amsterdam to establish consistent security governance, compliance, and risk management across its consolidating global network.

Netherlands Full-time Lead Compliance Manager Security Engineer
$55k-$66k
Cybersecurity Penetration Testing Salesforce
3 hours, 59 minutes ago
B Lab

IT Security & Compliance Lead (São Paulo, BR)

B Lab 51-250 Diversified Consumer Services

B Lab is seeking an IT Security & Compliance Lead in São Paulo to establish consistent security governance, compliance, risk management, and incident-response practices across its consolidating global nonprofit network.

United Kingdom Netherlands Brazil Full-time Lead Compliance Manager Security Engineer
$31k-$38k
Cybersecurity Penetration Testing Salesforce
3 hours, 59 minutes ago
Edmentum

Information Security Engineer

Edmentum 1K-5K Diversified Consumer Services

Edmentum is seeking a Remote First Information Security Engineer to protect the systems, data, and learning platforms supporting millions of students while strengthening security operations and compliance.

United States Full-time Mid Level Security Engineer
$105k-$120k
Agile Penetration Testing
4 hours, 44 minutes ago
Boosta

Middle+/Senior DevSecOps Engineer | TechCore

Boosta 501-1000 information technology & services

Boosta is hiring a Middle+/Senior DevSecOps Engineer for its service team to secure and support infrastructure and digital projects across the holding.

Poland Ukraine Full-time Senior DevOps Engineer Security Engineer
AWS Azure Bash CI/CD Cloudflare DNS Docker GCP GitHub Actions GitLab CI HashiCorp Vault Helm JavaScript Jenkins Kubernetes Python SIEM SOC SonarQube Terraform TLS WAF
1 day, 4 hours ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers