Network Security Engineer – Firewall, Vulnerability Management

Peraton

. Execute critical cybersecurity improvement initiatives in a hybrid Microsoft, AWS, and Azure federal enterprise environment .

Posted 10/27/2026full-timeUnited StatesSeniorLead💰 $135,000 - $216,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive expertise in executing cybersecurity improvement initiatives, including vulnerability management, endpoint protection, and security governance within hybrid Microsoft, AWS, and Azure environments. Proficient in configuring and optimizing enterprise security technologies, conducting vulnerability assessments, and developing technical documentation.

Highest-signal resume keywords

Vulnerability AssessmentEndpoint SecurityCheck Point Firewall ExperienceMicrosoft Defender ConfigurationTenable Nessus Optimization

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Vulnerability ManagementSystem HardeningPenetration TestingSecurity Configuration ChangesFirewall Policy ConfigurationScripting with PythonPowerShellC#Cloud Security Posture ReviewChange Management Processes

Soft Skills

Independent ExecutionEffective CommunicationProject Management

Tools & Technologies

Microsoft SentinelVaronisSplunkMECMIvantiJamfMicrosoft Entra IDActive DirectoryConditional AccessMFA

Industry Keywords

NIST SP 800-53NIST RMFZero Trust PrinciplesIRS Publication 1075Public Trust Background Investigation

Tech Stack

Tools & technologies

AWSAzureCloudCyber SecurityDNSJamfLinuxMacOSPythonSplunkSQL

About the role

Key responsibilities & impact

Execute critical cybersecurity improvement initiatives in a hybrid Microsoft, AWS, and Azure federal enterprise environment
Independently execute ten security improvement projects spanning vulnerability management, endpoint protection, patch management, firewall and network security, IAM, and security governance
Conduct authenticated and unauthenticated vulnerability assessments across servers, endpoints, network devices, SQL Server, VDI, and AWS/Azure workloads
Implement and validate secure configuration changes, system hardening, and vulnerability remediation
Develop vulnerability prioritization matrices using CVSS, asset criticality, and exploitability
Establish vulnerability remediation governance, ownership models, SLA targets, closure standards, and escalation workflows
Deliver a Vulnerability Remediation Governance Plan within the first 60 days
Configure, tune, and optimize Tenable Nessus scanning policies and infrastructure
Correlate vulnerability findings with Microsoft Sentinel, Varonis, and Splunk
Develop dashboards and metrics for MTTR, vulnerability aging, patch compliance, and security exceptions
Configure and optimize MECM, Ivanti, and Jamf patch management solutions
Design patch deployment rings, maintenance windows, and automated patching workflows
Execute Windows and Linux server patching and endpoint/server hardening
Prepare and track formal change requests, including testing, validation, and rollback documentation
Configure, implement, troubleshoot, and harden Check Point firewall policies and related network security controls
Configure Microsoft Defender security policies for Windows and macOS
Assess and improve ACLs, NAT, DNS, segmentation, routing, VPNs, proxy services, and IPS/IDS
Review AWS and Azure cloud security posture and implement approved improvements
Assess and enhance ZTNA gateway configurations
Configure and enhance Microsoft Entra ID and Active Directory controls, including Conditional Access, PIM, and MFA
Support penetration testing and red team exercises, including findings validation and technical remediation
Prepare Security Assessment Reports
Develop runbooks, playbooks, SOPs, secure configuration baselines, implementation procedures, and knowledge-transfer documentation
Deliver weekly project status reports, monthly patch compliance and vulnerability management reports, and critical vulnerability notifications
Document security configuration changes, remediation outcomes, and technical deliverables

Requirements

What you’ll need

Bachelor's degree and 12 years of relevant experience; an additional 4 years of experience may be considered in lieu of the bachelor's degree
Minimum 5 years of hands-on enterprise cybersecurity experience, including vulnerability assessment, endpoint security, system hardening, and penetration testing
Experience configuring, implementing, hardening, troubleshooting, and validating enterprise security technologies and controls
Ability to independently execute technical security improvement initiatives from assessment and design through implementation, validation, and documentation
Experience performing security configuration changes and remediation in production enterprise environments
Hands-on enterprise firewall experience with Check Point, Palo Alto Networks, or Cisco technologies
Experience configuring firewall policies, rules, access controls, and hardening measures
Experience with Microsoft Defender for Windows and macOS
Experience with Tenable Nessus, including credentialed scanning and optimization
Experience with MECM, Ivanti, and Jamf
Experience with Microsoft Entra ID / Active Directory, Conditional Access, PIM, and MFA
Experience identifying, prioritizing, and directly remediating enterprise vulnerabilities
Knowledge of change-management processes, testing, implementation, rollback planning, and documentation
Experience developing technical runbooks, SOPs, and secure configuration documentation
Working knowledge of NIST SP 800-53 Revision 5, NIST RMF, Zero Trust principles, and IRS Publication 1075
Experience with Microsoft Sentinel, Varonis, or Splunk
Hands-on scripting experience with Python, PowerShell, or C#
Experience with firewall rules, network segmentation, DNS, routing, and cloud networking
Experience supporting hybrid on-premises and AWS/Azure environments
Experience configuring Conditional Access, PIM, MFA, and identity security controls
Must be a U.S. citizen
Must meet Tier 2 Public Trust background investigation requirements
Must work on-site in Washington, DC, Monday through Wednesday, with up to two remote workdays per week
Ability to work independently, manage multiple technical deliverables, and communicate effectively with technical and customer stakeholders

Benefits

Comp & perks

Medical insurance
Dental insurance
Vision insurance
Life insurance
Health savings account
Short-term disability
Long-term disability
Employee Assistance Program (EAP)
Parental leave
401(k)
Paid time off (PTO) for vacation
Company-paid holidays
Potential overtime
Potential shift differential
Discretionary bonus