Job description

As a Sr. Network Engineer III , you’ll provide hands-on expertise securing mission-critical networks for a high-visibility customer with the goal of making an impact across the federal government. Our team is responsible for designing, operating, and hardening complex security environments, and you’ll play a critical role in strengthening, scaling, and protecting these environments while enabling secure mission delivery across the organization. We know that you can’t have great technology services without amazing people. At MetroStar, we are obsessed with our people and have led a two-decade legacy of building the best and brightest teams. Because we know our future relies on our deep understanding and relentless focus on our people, we live by our mission: A passion for our people. Value for our customers. If you think you can see yourself delivering our mission and pursuing our goals with us, then check out the job description below! What you’ll do: Design, implement, and manage firewalls, VPNs, IPS, and NAC solutions in mission-critical environments Secure network perimeters and internal network segments using defense-in-depth strategies Respond rapidly to security incidents, vulnerabilities, and operational needs with urgency and discipline Support continuous security hardening and improvement of network infrastructure Participate in Agile execution, technical planning, and security risk discussions Communicate security impacts, risks, and mitigation strategies clearly to technical and non-technical stakeholders Recommend and implement security architecture and operational improvements Serve as a hands-on technical SME, contributing immediately with minimal ramp-up Establish and maintain a high level of customer trust and confidence through reliable, secure delivery Apply creativity and engineering judgment to deliver practical, mission-focused security solutions Demonstrated subject matter expertise designing, implementing, and managing next-generation firewalls, VPN solutions, intrusion prevention systems, and network access control platforms. Hands-on experience securing network perimeters and internal network segments, including policy design, segmentation, and threat mitigation. Operational experience deploying and managing firewall rule sets, VPN tunnels, and security policies in mission-critical environments. Hands-on experience with at least one enterprise security platform, such as Palo Alto Networks, Fortinet, or Cisco security technologies. Hands-on experience with Cisco ISE and Cisco ASA environments. Hands-on experience with IDS and IPS solutions and endpoint configuration hardening in secure environments. Experience supporting Zero Trust architectures and identity-centric network security patterns. Ability to contribute immediately with minimal ramp-up in a mission-critical operational environment. What you’ll need to succeed: Active U.S. Government Issued Top Secret security clearance (or higher level classification). Required technical certifications include Security+ and at least one platform-specific security certification, such as PCNSE/Network Security Professional or a Cisco security certification. Possess DoD 8140 certification aligned to the 441 Network Operations Specialist work role, such as Network+, Security+, Cloud+, SSCP, CASP+, CISSP, or CCNP Security. 10+ years of experience in network engineering with a primary focus on enterprise network security infrastructure. Demonstrated subject matter expertise designing, implementing, and managing next-generation firewalls, VPN solutions, intrusion prevention systems, and network access control platforms. Hands-on experience securing network perimeters and internal network segments, including policy design, segmentation, and threat mitigation. Operational experience deploying, managing, maintaining, and upgrading firewall rule sets, VPN tunnels, and security policies in mission-critical environments. Deep hands-on experience managing, maintaining, and upgrading Palo Alto Networks enterprise security platforms, as well as working with Cisco security technologies. Hands-on experience with Cisco ISE and Cisco ASA environments. Hands-on experience with IDS and IPS solutions and endpoint configuration hardening in secure environments. Experience supporting Zero Trust architectures and identity-centric network security patterns. Bachelor’s degree in a technical field is preferred. Relevant experience may substitute for education requirements. Ability to contribute immediately with minimal ramp-up in a mission-critical operational environment. This position is designated as essential personnel supporting continuity of operations and may require work during government shutdowns, emergencies, or other critical situations. SALARY RANGE: $207,000 - $320,000 The salary range for this position is determined based on qualifications, skills, and relevant experience. The final salary offered will be determined based on several factors including: The candidate's professional background and relevant work experience The specific responsibilities of the role and organizational needs Internal equity and alignment with current team compensation This role is also eligible for additional compensation, subject to the terms and policies of MetroStar, which may include: Performance-based bonuses Company-paid training and/or certifications Referral bonuses Application Deadline: Applications will be accepted on a rolling basis until the position is filled; candidates are encouraged to apply as early as possible for full consideration. Additional Compensation : This role may also be eligible for bonuses and/or additional incentives based on individual and company performance. Benefits : All full-time employees are eligible to participate in our benefits programs: Health, dental, and vision insurance 401(k) retirement plan with company match Paid time off (PTO) and holidays Parental Leave and dependent care Flexible work arrangements Professional development opportunities Employee assistance and wellness programs Like we said, we are big fans of our people. That’s why we offer a generous benefits package, professional growth, and valuable time to recharge. Learn more about our company culture code and benefits . Plus, check out our accolades. Commitment to Non-Discrimination All qualified applicants will receive consideration for employment based on merit and without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, status as a protected veteran, or any other status protected by applicable federal, state, local, or international law. What we want you to know: In compliance with federal law, all persons hired will be required to verify identity and eligibility to work in the United States and to complete the required employment eligibility verification form upon hire. Not ready to apply now? Sign up to join our newsletter here .

Requirements

Must-haves

If you think you can see yourself delivering our mission and pursuing our goals with us, then check out the job description below!
Design, implement, and manage firewalls, VPNs, IPS, and NAC solutions in mission-critical environments
Secure network perimeters and internal network segments using defense-in-depth strategies
Respond rapidly to security incidents, vulnerabilities, and operational needs with urgency and discipline
Support continuous security hardening and improvement of network infrastructure
Participate in Agile execution, technical planning, and security risk discussions
Communicate security impacts, risks, and mitigation strategies clearly to technical and non-technical stakeholders
Recommend and implement security architecture and operational improvements
Serve as a hands-on technical SME, contributing immediately with minimal ramp-up
Establish and maintain a high level of customer trust and confidence through reliable, secure delivery
Apply creativity and engineering judgment to deliver practical, mission-focused security solutions
Demonstrated subject matter expertise designing, implementing, and managing next-generation firewalls, VPN solutions, intrusion prevention systems, and network access control platforms.
Hands-on experience securing network perimeters and internal network segments, including policy design, segmentation, and threat mitigation.
Operational experience deploying and managing firewall rule sets, VPN tunnels, and security policies in mission-critical environments.
Hands-on experience with at least one enterprise security platform, such as Palo Alto Networks, Fortinet, or Cisco security technologies.
Hands-on experience with Cisco ISE and Cisco ASA environments.
Hands-on experience with IDS and IPS solutions and endpoint configuration hardening in secure environments.
Experience supporting Zero Trust architectures and identity-centric network security patterns.
Ability to contribute immediately with minimal ramp-up in a mission-critical operational environment.
Active U.S. Government Issued Top Secret security clearance (or higher level classification).
Required technical certifications include Security+ and at least one platform-specific security certification, such as PCNSE/Network Security Professional or a Cisco security certification.
Possess DoD 8140 certification aligned to the 441 Network Operations Specialist work role, such as Network+, Security+, Cloud+, SSCP, CASP+, CISSP, or CCNP Security.
10+ years of experience in network engineering with a primary focus on enterprise network security infrastructure.

Nice-to-haves

Bachelor’s degree in a technical field is preferred. Relevant experience may substitute for education requirements.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

agile

Platform: greenhouse
Effort: quick

Benefits

Benefits detected in the listing.

Dental

Vision

401(K)

Pto

Paid Time Off

Parental Leave

Wellness

Professional Development