Mid-Level Network Engineer

Clearance Level Must Currently Possess:

Clearance Level Must Be Able to Obtain:

Job Family:

Job Description:

Own the opportunity as a Mid-Level Network Engineer and help ensure the mission is never interrupted. At GDIT, we deliver clarity with our cloud solutions and provide meaningful work. Your work will be an important part of transforming our clients for the modern age and help them face any obstacle.

At GDIT, people are our differentiator. As a Mid-Level Network Engineer you will help ensure today is safe and tomorrow is smarter. Our work depends on a Mid-Level Network Engineer joining our dynamic team to work in a fast-paced environment focused on engineering, migration, and operations of enterprise network security services. We're looking for a self-starter who works both as part of the team and on individual assignments, in an environment of customer mission delivery, integrity, and clear communications.

We're looking to fill this role with someone who currently has deep experience with next-generation firewalls, SASE/SSE platforms, network visibility and micro segmentation technologies, and the certifications and skills to execute in large multi-tenant enterprise environments. You should be flexible, enjoy tackling complex transition challenges, and want to join a large team that is building, migrating, and sustaining enterprise managed security services. If this sounds like you and you love to learn and grow with a team while delivering program milestones, then we'd love to hear from you!

• Designs, deploys, configures, and maintains cloud and on-premises network security solutions including Palo Alto NGFW, Panorama / Strata Cloud Manager, Prisma Access, GlobalProtect, Juniper SRX, Gigamon visibility components, ExtraHop sensors, Illumio Virtual Enforcement Nodes, and related policy and automation tooling.

• Maintains the integrity and security of the network device estate (Palo Alto firewalls and management planes, Juniper SRX, Gigamon TA/HC platforms, ExtraHop appliances, F5, and supporting infrastructure).

• Executes day-to-day implementation tasks for service takeovers and phased migrations: inventory and re-baselining of firewall and tunnel policies, GlobalProtect / Prisma Access policy changes, Gigamon/ExtraHop installation and feed validation, Illumio visibility deployment, and AlgoSec-driven policy cleanup.

• Creates, maintains, and updates documentation (diagrams, user guides, SOPs, and runbooks).

• Supports and develops automation for configuration, validation, and reporting tasks.

• Maintains and enhances knowledge of core network security technologies (Palo Alto, Juniper, Gigamon/ExtraHop, Illumio, F5, AlgoSec).

• Monitors and improves existing and new deployments; participates in agency phased rollouts under the direction of Principal / Lead engineers.

• Works across teams and external customer groups to implement solutions and support infrastructure build-outs.

• Handles escalations; makes assessments, recommendations, or provides solutions to resolve issues.

• May coach and provide guidance to less-experienced professionals.

• Coordinates the acquisition of hardware and software as well as subcontractor services as needed.

• Required Education: BA/BS or equivalent experience

• Required Experience: 2+ years experience with Next Generation Firewalls and enterprise network security technologies required; 3+ years strongly preferred

• Required Technical Skills: Networking (Routing, Firewall, and Switching), Palo Alto Networks (NGFW, Panorama / Strata Cloud Manager, Prisma Access, GlobalProtect)

• Security Clearance Level: Must be able to submit to a background investigation and obtain customer clearance prior to onboarding

• Required Skills and Abilities: Excellent communication skills with demonstrated experience delivering presentations and technical briefings to diverse audiences at various levels of an organization; strong documentation discipline

• Required Availability: Must be able to participate in on-call rotations at the needs of management and the customer

• Required Certification: Must possess or able to obtain (within 6 months of hire) applicable Intermediate DoW 8140 or DoW 8570 Certification (e.g., Security+ CE, CySA+, or equivalent)

• Candidates within Virginia who reside within 60 miles of GDIT's office in Richmond, VA Ashburn, VA or Falls Church, VA will follow a hybrid work model (approximately 2 days per week)
• Candidates within Virginia who reside more than 60 miles from GDIT's offices will follow a remote work model with some travel as needed at customer request

At GDIT, the mission is our purpose, and our people are at the center of everything we do.

Scheduled Weekly Hours:

Work Location:

Additional Work Locations:

gdit.com/tc.