Senior Cybersecurity Engineer – Network Security, Zero Trust, Automation

🔥 0 minutes ago

🇺🇸 United States – Remote

💵 $149.5k - $184k / year

⏰ Full Time

🟠 Senior

🛜 Network Engineer / Network Administrator

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 0%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.Why this score:

• Just posted.
• Jobs at this company usually fill in 21 days.

Apply Now

Find Similar Remote Jobs

General Dynamics Information Technology

WebsiteLinkedInAll Job Openings

10,000+ employees

Founded 1954

💼 Consulting

🏥 Healthcare

📦 Logistics

Consulting • Healthcare • Logistics

General Dynamics Information Technology is a company at the forefront of technological innovation, offering a wide range of services including consulting, digital modernization, and application services. The company is heavily involved in implementing solutions related to artificial intelligence, cloud computing, cybersecurity, high-performance computing, and quantum technologies. GDIT is committed to supporting government and defense sectors, providing mission-critical services such as logistics and supply chain management, intelligence, and homeland security. The company also focuses on diverse and inclusive hiring practices and actively promotes employee well-being. Through its digital accelerator solutions and pioneering use of emerging technologies, GDIT aims to propel agencies' missions forward and address complex technological challenges.

📋 Description

• Provide senior-level technical expertise for the design, implementation, integration, operation, sustainment, and modernization of enterprise cybersecurity platforms in a complex federal environment • Engineer, administer, troubleshoot, optimize, and sustain enterprise firewall technologies • Provide hands-on engineering for next-generation firewalls, secure remote access, segmentation, and network-security services • Manage firewall policy lifecycle, including rules, objects, NAT, security profiles, recertification, cyber hygiene, optimization, and removal of obsolete or overly permissive policies • Lead firewall and security-platform changes through impact analysis, testing, change control, rollback, validation, and documentation • Support Zero Trust and SASE capabilities including ZTNA, Secure Web Gateway, Firewall-as-a-Service, secure remote access, segmentation, device posture, and policy enforcement • Troubleshoot complex routing, NAT, VPN, DNS, authentication, PKI/certificates, TLS/SSL inspection, logging, performance, and high-availability issues • Support platform deployments, upgrades, patching, hardening, configuration management, vendor escalation, and vulnerability remediation • Engineer and support SOAR, security automation, workflow orchestration, and API-based integrations • Develop automation for alert enrichment, IOC analysis/blocking, incident triage, ticket creation, containment, remediation, policy changes, and reporting • Integrate security capabilities and telemetry across SIEM/XDR, endpoint, identity, ITSM, vulnerability management, DLP, NAC, threat intelligence, cloud, and enterprise logging/data platforms • Evaluate AI-assisted security operations while maintaining human validation and guardrails • Support greenfield deployments, migrations, environment separation, coexistence, testing, and transition to operations • Collaborate with Security Operations, network engineering, IAM/ICAM, endpoint, NAC, vulnerability management, cloud, and infrastructure teams • Serve as a senior technical escalation point and may serve as a technical or project lead • Develop architecture diagrams, SOPs, implementation/test plans, runbooks, troubleshooting guides, configuration baselines, and as-built documentation • Support security assessments, authorization activities, audits, evidence collection, and compliance requirements • Ensure configurations and engineering changes align with cybersecurity policies, technical standards, approved architectures, and change-management requirements

🎯 Requirements

• Bachelor’s degree in Computer Science, Cybersecurity, IT, Engineering, or related STEM discipline and 10+ years of relevant experience; allowable substitutions may apply per contractual labor-category requirements • 7+ years of related experience listed in job qualifications • Significant hands-on experience engineering and troubleshooting enterprise next-generation firewalls in complex production environments • Strong experience with firewall policy lifecycle management, NAT, zones, segmentation, logging, optimization, and change control • Strong network-engineering fundamentals including TCP/IP, routing, BGP, DNS, DHCP, NAT, VPN, TLS/SSL, PKI/certificates, packet analysis, and high availability • Experience with Zero Trust/SASE technologies and working knowledge of NIST SP 800-207 or comparable Zero Trust principles • Working knowledge of SOAR, security automation, APIs, workflow orchestration, and security-platform integration • Python, REST API, JSON, webhooks, or similar experience strongly preferred • Experience integrating enterprise security platforms and telemetry strongly preferred • Experience with greenfield deployments, migrations, environment separation, or independently managed security environments strongly preferred • Palo Alto Networks or comparable enterprise network-security and SASE experience strongly preferred; direct Palo Alto experience highly desirable • Federal, government, or highly regulated enterprise experience preferred • Relevant professional certifications preferred; no specific certification required • Strong analytical, troubleshooting, documentation, communication, and cross-functional collaboration skills • Ability to support planned maintenance and change windows, including occasional after-hours activities • Ability to provide senior technical support for priority incidents or service-impacting security-platform issues • Must be able to obtain and maintain the required federal suitability determination/background investigation • US citizenship required • Public Trust/Other Required: BI Full 6C (T4)

🏖️ Benefits

• Medical plan options, some with Health Savings Accounts • Dental plan options • Vision plan • 401(k) plan with pre- and post-tax contributions and company match • Full flex work weeks where possible • Vacation, sick, personal, holiday, paid parental, military, bereavement, and jury duty leave • Typically 15 days of paid leave per calendar year • 10 paid holidays per year • Up to 160 hours of paid family leave in a rolling 12-month period for eligible employees • Short- and long-term disability benefits • Life insurance • Accidental death and dismemberment insurance • Personal accident insurance • Critical illness insurance • Business travel and accident insurance • Remote work/telecommuting

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume