Job description

This position may be filled prior to the posted deadline. Interested candidates are encouraged to apply as soon as possible. Koniag Management Solutions, LLC (KMS), a Koniag Government Services (KGS) company, is hiring a Senior Network Engineer (Security). Position requires an active Top Secret/SCI clearance with ability to obtain additional security requirements. Please do not apply if you do not possess the required Top-Secret Clearance. Benefits include medical, dental, and vision insurance, 401(k) retirement plan, paid time off, paid parental leave, life and disability insurance, flexible spending accounts, commuter benefits and tuition reimbursement. Position Summary: We are seeking a highly skilled Senior Network Engineer (Security) who will serve as the Subject Matter Expert (SME) for enterprise network security infrastructure. The engineer will design, implement, manage, and optimize critical security controls, including firewalls, VPN systems, intrusion prevention systems (IPS), and network access control (NAC). This role is responsible for securing both perimeter and internal network segments, ensuring resilient, compliant, and mission-ready operations. The selected candidate will support security operations at Joint Base Anacostia–Bolling and must maintain an active TS/SCI clearance. Candidates who do not hold a TS/SCI please do not apply. Key Responsibilities: Serve as the Subject Matter Expert (SME) for network security infrastructure across mission systems. Design, deploy, configure, and maintain enterprise firewalls, IPS, NAC, VPNs, and segmentation technologies. Engineer secure network architectures that protect the perimeter and internal network segments from advanced threats. Administer and maintain Palo Alto Networks next‑generation firewalls (PA‑5000 series) and Cisco Adaptive Security Appliance (ASA) platforms. Manage site‑to‑site and remote‑access VPN solutions, including security policy enforcement and identity-based access controls. Analyze security logs, events, and packet data to detect and respond to threats. Support zero-trust initiatives, access segmentation, and least-privilege network design. Develop, implement, and maintain security baselines and configuration standards. Provide Tier III operational support and perform root cause analysis for complex network security issues. Collaborate with cybersecurity teams to ensure compliance with DoD security frameworks, STIGs, and enterprise policies. Document configurations, changes, engineering updates, and architectural decisions. Required Technical Certifications (at least one): CISSP (or CCNP Security + CASP+) Platform‑specific certification (e.g., Palo Alto, Cisco, or equivalent) Preferred Technical Certifications (Plus): CCNP Security GCIH or GCIA CySA+ CCIE Security GIAC advanced certifications (e.g., GCIA, GWAPT) CCSP Required Technical Knowledge:Strong understanding of: Palo Alto Networks PA‑5000 series next‑generation firewall platforms Cisco ASA firewall technologies VPN design and management (IPsec, SSL/TLS, DMVPN) Intrusion Prevention Systems (IPS) Network Access Control (NAC) technologies Security zoning, segmentation, micro‑segmentation, and zero‑trust principles Secure routing, switching, and firewall policy design Network monitoring, packet capture, and threat detection tools Preferred Experience: Designing enterprise network security architectures in DoD or IC environments. Implementing segmentation in hybrid or multi-site mission networks. Performing threat analysis, incident response, or vulnerability mitigation for network infrastructure. Supporting enterprise security toolsets, SIEM, and intrusion-detection platforms. Working with STIGs, SRGs, compliance frameworks, and accreditation processes. Requirements: TS/SCI security clearance required, candidate will not be considered without. Our Equal Employment Opportunity Policy: The company is an equal opportunity employer. The company shall not discriminate against any employee or applicant because of race, color, religion, creed, ethnicity, sex, sexual orientation, gender or gender identity (except where gender is a bona fide occupational qualification), national origin or ancestry, age, disability, citizenship, military/veteran status, marital status, genetic information or any other characteristic protected by applicable federal, state, or local law. We are committed to equal employment opportunity in all decisions related to employment, promotion, wages, benefits, and all other privileges, terms, and conditions of employment. The company is dedicated to seeking all qualified applicants. If you require an accommodation to navigate or to apply to a position on our website, please contact Heaven Wood via e-mail at accommodations@koniag-gs.com or by calling 703-488-9377 to request accommodations. About our Company: Koniag Government Services (KGS) is an Alaska Native Owned corporation supporting the values and traditions of our native communities through an agile employee and corporate culture that delivers Enterprise Solutions, Professional Services and Operational Management to Federal Government Agencies. As a wholly owned subsidiary of Koniag, we apply our proven commercial solutions to a deep knowledge of Defense and Civilian missions to provide forward leaning technical, professional, and operational solutions. KGS enables successful mission outcomes for our customers through solution-oriented business partnerships and a commitment to exceptional service delivery. We ensure long-term success with a continuous improvement approach while balancing the collective interests of our customers, employees, and native communities. For more information, please visit www.koniag-gs.com. Equal Opportunity Employer/Veterans/Disabled. Shareholder Preference in accordance with Public Law 88-352 #LI-CT1

Requirements

Must-haves

This position may be filled prior to the posted deadline. Interested candidates are encouraged to apply as soon as possible.
Serve as the Subject Matter Expert (SME) for network security infrastructure across mission systems.
Design, deploy, configure, and maintain enterprise firewalls, IPS, NAC, VPNs, and segmentation technologies.
Engineer secure network architectures that protect the perimeter and internal network segments from advanced threats.
Administer and maintain Palo Alto Networks next‑generation firewalls (PA‑5000 series) and Cisco Adaptive Security Appliance (ASA) platforms.
Manage site‑to‑site and remote‑access VPN solutions, including security policy enforcement and identity-based access controls.
Analyze security logs, events, and packet data to detect and respond to threats.
Support zero-trust initiatives, access segmentation, and least-privilege network design.
Develop, implement, and maintain security baselines and configuration standards.
Provide Tier III operational support and perform root cause analysis for complex network security issues.
Collaborate with cybersecurity teams to ensure compliance with DoD security frameworks, STIGs, and enterprise policies.
Document configurations, changes, engineering updates, and architectural decisions.
Required Technical Certifications (at least one):
CISSP (or CCNP Security + CASP+)
Platform‑specific certification (e.g., Palo Alto, Cisco, or equivalent)
CCNP Security
GCIH or GCIA
CCIE Security
GIAC advanced certifications (e.g., GCIA, GWAPT)

Nice-to-haves

Designing enterprise network security architectures in DoD or IC environments.
Implementing segmentation in hybrid or multi-site mission networks.
Performing threat analysis, incident response, or vulnerability mitigation for network infrastructure.
Supporting enterprise security toolsets, SIEM, and intrusion-detection platforms.
Working with STIGs, SRGs, compliance frameworks, and accreditation processes.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

agile

Platform: dayforce
Effort: medium

Benefits

Benefits detected in the listing.

Dental

Vision

401(K)

Paid Time Off

Parental Leave