Cyber Defense/Network Security Engineer

JFL Consulting LLC is seeking a Cyber Defense/Network Security Engineer to support secure government environments from an on-site role in Springfield, VA. This position focuses on building and maintaining infrastructure configurations across physical and virtual systems, while also strengthening security operations and compliance alignment with DoD cybersecurity requirements.

Role focus

• Handle on-site configuration of servers, storage, and networking hardware within secure environments
• Manage Linux and Windows infrastructure, including deployment, configuration, and operational support
• Build and administer virtualized environments using Proxmox, VMware ESXi, and Hyper-V
• Support security monitoring and operations using platforms including Security Onion, Zeek, Suricata, Wazuh, Splunk, and the Elastic Stack
• Maintain infrastructure alignment with DoD cybersecurity frameworks including RMF and STIGs

Key responsibilities

• Install, cable, and maintain rack-mounted hardware, including power and cooling components
• Apply system hardening, OS patching, logging, and backup strategies across physical and virtual systems
• Implement network monitoring using SPAN ports and Gigamon taps
• Automate configuration tasks and infrastructure deployments using Bash, Python, or PowerShell
• Conduct vulnerability scans and implement security remediation in support of STIGs and RMF
• Monitor system health, identify performance or security issues, and remediate in a timely manner
• Support incident response, security audits, and continuous compliance efforts
• Develop and maintain detailed documentation, including SOPs, network/system diagrams, and baselines
• Provide technical recommendations to stakeholders with varying technical expertise
• Contribute to compliance reporting and audit readiness through accurate documentation

Required qualifications

• TS/SCI Clearance
• DoD 8140/8570 IAT Level II certification (examples include Security+, GCIH, CYSA+)
• 5+ years in a systems engineering or infrastructure role
• Experience with Active Directory, DNS, SSO, and authentication protocols
• Hands-on virtualization experience with ESXi, Hyper-V, or Proxmox
• Cloud platform experience desired: AWS, Azure, or GCP
• Advanced knowledge of Linux and Microsoft environments
• Strong scripting skills in Python, Bash, or PowerShell
• Familiarity with networking concepts including VLANs, routing, NAT, and subnetting
• Proficiency with configuration management tools such as Ansible and Puppet
• Understanding of cybersecurity fundamentals, system hardening, and monitoring practices
• Strong written and verbal communication skills
• Ability to produce clear technical documentation and reports
• Bachelor’s or Master’s degree in a related field preferred
• Systems engineering certifications (examples include Microsoft, Red Hat, VMware, or CompTIA Advanced credentials)

Technologies

• Linux, Windows
• Proxmox, VMware ESXi, Hyper-V
• Bash, Python, PowerShell
• Security Onion, Zeek, Suricata, Wazuh, Splunk, Elastic Stack
• SPAN ports, Gigamon taps
• RMF, STIGs
• Active Directory, DNS, SSO
• VLANs, routing, NAT, subnetting
• Ansible, Puppet
• AWS, Azure, GCP

Compensation and benefits

• Salary: $155,000 - $175,000 per year
• 100% employer-paid medical, dental, and vision premiums for employees and dependents
• Flexible Spending Accounts (healthcare, dependent care, and commuter)
• Life insurance, short-term disability, and long-term disability
• 401(k) with immediate vesting of company contribution
• Generous PTO policy: 15 vacation, 5 sick, 2 personal days, and 11 holidays
• Certification reimbursement, dedicated professional development funding, and company-provided access to online learning platforms

Travel

• Up to 10-20% travel (CONUS & OCONUS)

Location: Springfield, VA (on-site)