Senior Cybersecurity Engineer – Network Security, Zero Trust, Automation

General Dynamics Information Technology

. Provide senior-level technical expertise for the design, implementation, integration, operation, sustainment, and modernization of enterprise cybersecurity platforms in a complex federal environment .

Posted 11/10/2026full-timeRemote • United StatesSenior💰 $149,469 - $184,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive expertise in enterprise cybersecurity platforms, including next-generation firewalls, Zero Trust/SASE technologies, and security automation. Proficient in firewall policy management, network engineering fundamentals, and integration of security capabilities across various platforms.

Highest-signal resume keywords

Next-Generation Firewall EngineeringFirewall Policy Lifecycle ManagementZero Trust/SASE TechnologiesSecurity Automation and SOARNetwork Engineering Fundamentals

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Next-Generation Firewall EngineeringFirewall Policy ManagementNetwork SecuritySecurity AutomationPythonREST APIJSONNATVPNTLS/SSL

Soft Skills

Analytical SkillsTroubleshootingDocumentationCommunicationCross-Functional Collaboration

Tools & Technologies

Palo Alto NetworksSIEMXDRDLPNACCloud SecurityAPI IntegrationsConfiguration ManagementVulnerability ManagementIncident Response

Certifications & Qualifications

Relevant Professional Certifications

Industry Keywords

CybersecurityFederal EnvironmentCompliance RequirementsNIST SP 800-207Change ManagementTechnical StandardsCyber HygieneHigh AvailabilityGreenfield DeploymentsRegulated Enterprise Experience

Tech Stack

Tools & technologies

CloudCyber SecurityDNSFirewallsITSMPythonTCP/IP

About the role

Key responsibilities & impact

Provide senior-level technical expertise for the design, implementation, integration, operation, sustainment, and modernization of enterprise cybersecurity platforms in a complex federal environment
Engineer, administer, troubleshoot, optimize, and sustain enterprise firewall technologies
Provide hands-on engineering for next-generation firewalls, secure remote access, segmentation, and network-security services
Manage firewall policy lifecycle, including rules, objects, NAT, security profiles, recertification, cyber hygiene, optimization, and removal of obsolete or overly permissive policies
Lead firewall and security-platform changes through impact analysis, testing, change control, rollback, validation, and documentation
Support Zero Trust and SASE capabilities including ZTNA, Secure Web Gateway, Firewall-as-a-Service, secure remote access, segmentation, device posture, and policy enforcement
Troubleshoot complex routing, NAT, VPN, DNS, authentication, PKI/certificates, TLS/SSL inspection, logging, performance, and high-availability issues
Support platform deployments, upgrades, patching, hardening, configuration management, vendor escalation, and vulnerability remediation
Engineer and support SOAR, security automation, workflow orchestration, and API-based integrations
Develop automation for alert enrichment, IOC analysis/blocking, incident triage, ticket creation, containment, remediation, policy changes, and reporting
Integrate security capabilities and telemetry across SIEM/XDR, endpoint, identity, ITSM, vulnerability management, DLP, NAC, threat intelligence, cloud, and enterprise logging/data platforms
Evaluate AI-assisted security operations while maintaining human validation and guardrails
Support greenfield deployments, migrations, environment separation, coexistence, testing, and transition to operations
Collaborate with Security Operations, network engineering, IAM/ICAM, endpoint, NAC, vulnerability management, cloud, and infrastructure teams
Serve as a senior technical escalation point and may serve as a technical or project lead
Develop architecture diagrams, SOPs, implementation/test plans, runbooks, troubleshooting guides, configuration baselines, and as-built documentation
Support security assessments, authorization activities, audits, evidence collection, and compliance requirements
Ensure configurations and engineering changes align with cybersecurity policies, technical standards, approved architectures, and change-management requirements

Requirements

What you’ll need

Bachelor’s degree in Computer Science, Cybersecurity, IT, Engineering, or related STEM discipline and 10+ years of relevant experience; allowable substitutions may apply per contractual labor-category requirements
7+ years of related experience listed in job qualifications
Significant hands-on experience engineering and troubleshooting enterprise next-generation firewalls in complex production environments
Strong experience with firewall policy lifecycle management, NAT, zones, segmentation, logging, optimization, and change control
Strong network-engineering fundamentals including TCP/IP, routing, BGP, DNS, DHCP, NAT, VPN, TLS/SSL, PKI/certificates, packet analysis, and high availability
Experience with Zero Trust/SASE technologies and working knowledge of NIST SP 800-207 or comparable Zero Trust principles
Working knowledge of SOAR, security automation, APIs, workflow orchestration, and security-platform integration
Python, REST API, JSON, webhooks, or similar experience strongly preferred
Experience integrating enterprise security platforms and telemetry strongly preferred
Experience with greenfield deployments, migrations, environment separation, or independently managed security environments strongly preferred
Palo Alto Networks or comparable enterprise network-security and SASE experience strongly preferred; direct Palo Alto experience highly desirable
Federal, government, or highly regulated enterprise experience preferred
Relevant professional certifications preferred; no specific certification required
Strong analytical, troubleshooting, documentation, communication, and cross-functional collaboration skills
Ability to support planned maintenance and change windows, including occasional after-hours activities
Ability to provide senior technical support for priority incidents or service-impacting security-platform issues
Must be able to obtain and maintain the required federal suitability determination/background investigation
US citizenship required
Public Trust/Other Required: BI Full 6C (T4)

Benefits

Comp & perks

Medical plan options, some with Health Savings Accounts
Dental plan options
Vision plan
401(k) plan with pre- and post-tax contributions and company match
Full flex work weeks where possible
Vacation, sick, personal, holiday, paid parental, military, bereavement, and jury duty leave
Typically 15 days of paid leave per calendar year
10 paid holidays per year
Up to 160 hours of paid family leave in a rolling 12-month period for eligible employees
Short- and long-term disability benefits
Life insurance
Accidental death and dismemberment insurance
Personal accident insurance
Critical illness insurance
Business travel and accident insurance
Remote work/telecommuting