Principal Network Security Engineer

Global Enterprise Services, LLC (GES)

. Design, engineer, and implement enterprise network security architecture across firewalls, intrusion detection and prevention, web and TLS proxies, VPN and encryption services, network access control, DNS security, and east-west security controls .

Posted 10/17/2026full-timeFort Meade • Maryland • United StatesLead💰 $160,000 - $175,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in designing and implementing enterprise network security architecture, including advanced security controls and compliance with regulatory standards. Proven ability to lead security engineering projects and mentor technical teams while ensuring secure connectivity across diverse environments.

Highest-signal resume keywords

Network Security Architecture DesignNext-Generation Firewall ImplementationSecurity Engineering Project LeadershipTCP/IP and Routing Protocols KnowledgeIAT Level II Certification

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Network SegmentationIntrusion Detection and Prevention SystemsVPN and Encryption ServicesNetwork Access Control PlatformsData-Flow MappingSecurity-Zone DesignFirewall Standards DevelopmentRisk AssessmentVulnerability RemediationChange Documentation

Soft Skills

Excellent Written CommunicationVerbal Communication SkillsStakeholder EngagementMentoring and Guidance

Tools & Technologies

Palo AltoCiscoArubaDellInfobloxBrocadeVisioPowerPointCameo

Certifications & Qualifications

Security+CISSP

Industry Keywords

NISTFedRAMPFISMARMFDISA STIGsDoD Cybersecurity Requirements

Tech Stack

Tools & technologies

CloudCyber SecurityDNSFirewallsSwitchingTCP/IP

About the role

Key responsibilities & impact

Design, engineer, and implement enterprise network security architecture across firewalls, intrusion detection and prevention, web and TLS proxies, VPN and encryption services, network access control, DNS security, and east-west security controls
Evaluate network security architecture, identify gaps, assess risks, estimate effort, and develop engineering plans
Lead network segmentation and secure connectivity efforts, including data-flow mapping, security-zone and enclave design, firewall and ACL review, routing coordination, cutover sequencing, validation, and stakeholder approval
Design and implement network access control and device-posture enforcement
Advance zero-trust-aligned networking, micro-segmentation, least-privilege access policy, and encrypted-transport strategies
Engineer secure connectivity between on-premises, cloud, and remote environments
Tune security controls to reduce false positives, close coverage gaps, and improve detection and enforcement
Drive security engineering projects from concept through implementation, including requirements analysis, planning, execution, validation, and transition to operations
Develop implementation plans, schedules, cutover strategies, contingency plans, rollback procedures, validation steps, stakeholder communications, and change documentation
Coordinate change windows, maintenance activities, testing, and rollback procedures
Partner with network architecture, cybersecurity, operations, project management, and technical SME teams
Support accreditation and compliance activities, including security control implementation, STIG application, vulnerability remediation, POA&M support, and authorization artifacts
Serve as senior technical authority, providing technical direction, mentoring, and guidance to engineers, administrators, and analysts
Brief government stakeholders, cybersecurity authorities, technical leadership, stakeholders, and approval boards
Develop and maintain architecture diagrams, data-flow diagrams, security-zone models, firewall standards, PPS requirements, implementation plans, test plans, risk registers, accreditation artifacts, playbooks, runbooks, and transition documentation

Requirements

What you’ll need

Bachelor's degree or equivalent experience and 12+ years of prior relevant experience, or Master's degree with 10+ years of experience
Significant experience designing and implementing network security architecture in complex, large-scale enterprise environments
Experience serving as a senior technical lead directing network and security engineers, administrators, analysts, or implementation resources
Experience leading security engineering projects from planning through implementation
Hands-on experience with next-generation firewalls, intrusion detection and prevention systems, proxies and TLS inspection, VPN and encryption services, and network access control platforms
Experience with network segmentation or similar secure connectivity efforts
Strong working knowledge of TCP/IP, routing protocols, switching, VLANs, DNS/DHCP/IPAM, NAT, QoS, and software-defined and cloud-connected network environments
Hands-on experience with two or more of Palo Alto, Cisco, Aruba, Dell, Infoblox, and Brocade
Working knowledge of NIST, FedRAMP, FISMA, RMF, DISA STIGs, and DoD cybersecurity requirements
Experience documenting security and network designs using Visio, PowerPoint, Cameo, or similar
Excellent written and verbal communication skills, including briefing technical leadership, cybersecurity authorities, stakeholders, and approval boards
Current IAT Level II or higher certification, such as Security+ or CISSP
Active DoD Secret clearance
Specific experience, education, and training may be considered in lieu of a degree