Senior Network Security Engineer

Start to End Networks LLC supports a large federal customer in Washington, DC and is building a team that values secure, reliable network operations and work-life balance. This hybrid role pairs Tier 3 network security support with hands-on enterprise infrastructure work, backed by competitive pay, robust benefits, and professional development support.

In this position, you will help maintain enterprise network security infrastructure, provide escalation support for complex issues, and support compliance activities tied to SSPs and ATO documentation. The work is performed in Washington, DC (hybrid) with a Monday–Friday schedule.

Responsibilities

• Administer, configure, maintain, and troubleshoot Check Point firewalls in high-availability (HA) configurations.
• Manage firewall security policies, access rules, NAT policies, routing, software upgrades, and security patches.
• Support Check Point Harmony for remote-access VPN connectivity.
• Configure, monitor, and troubleshoot Check Point Intrusion Prevention and Intrusion Detection (IPS/IDS).
• Investigate network security incidents, connectivity problems, and service outages.
• Provide Tier 3 escalation support for complex network security issues.
• Configure and support Cisco Catalyst switches and other enterprise network infrastructure.
• Implement and troubleshoot IEEE 802.1X network access control integrated with Cisco Identity Services Engine (ISE).
• Use network tools such as Cisco DNA center to identify network gear upgrades and IAVA/PSIRTS.
• Configure and support security logging, monitoring, and analysis using SIEM platforms such as Microsoft Sentinel.
• Respond to cybersecurity incidents and coordinate remediation activities.
• Support Continuity of Operations (COOP) planning and implementation.
• Maintain and support System Security Plans (SSPs) and Authorization to Operate (ATO) documentation and compliance activities.
• Manage security incidents, service requests, and change-management tickets.
• Collaborate with engineering teams, federal stakeholders, and project managers to maintain a secure and reliable network environment.

Requirements

• 10+ years of professional experience in network engineering, network security, or cybersecurity infrastructure.
• Active Top Secret security clearance (or ability to obtain one).
• Strong, hands-on experience administering and troubleshooting Check Point firewalls.
• Experience managing firewall policies, software upgrades, patch management, routing, and VPN connectivity.
• Solid understanding of enterprise networking technologies, including TCP/IP, VLANs, routing, switching, and network troubleshooting.
• Experience supporting enterprise network security operations and resolving complex technical issues.
• Ability to communicate effectively with federal customers, technical teams, and project leadership.
• Strong analytical, troubleshooting, and problem-solving skills.
• Demonstrated ability to collaborate, mentor junior engineers, and work effectively in a team environment.

Technologies

• Check Point firewalls (HA)
• Check Point Harmony
• Check Point IPS/IDS
• Cisco Catalyst
• IEEE 802.1X
• Cisco Identity Services Engine (ISE)
• Cisco DNA center
• IAVA/PSIRTS
• Microsoft Sentinel (SIEM)
• System Security Plans (SSPs), Authorization to Operate (ATO)
• COOP planning

Benefits

• Highly competitive compensation with overtime opportunities
• Three weeks of Paid Time Off (PTO)
• 10 paid federal holidays
• 401(k) retirement plan with company matching
• Comprehensive medical, dental, and vision insurance
• PPO, HMO, and Health Savings Account (HSA) plan options
• Flexible Spending Account (FSA)
• Short-term and long-term disability insurance
• Life insurance and Accidental Death & Dismemberment (AD&D) coverage
• Annual tuition reimbursement
• Professional development and certification support
• 100% employer-paid parking
• A supportive team environment with an emphasis on work-life balance
• Dental insurance, Health insurance, Life insurance, Paid time off, Vision insurance
• Referral program
• Retirement plan

Preferred Qualifications

• Industry certifications such as Check Point CCSA/CCSE, Cisco CCSP/CCIE, or equivalent certifications.
• Experience with Cisco ISE and 802.1X.
• Experience with Microsoft Sentinel or other SIEM platforms.
• Experience with SolarWinds and Cisco Catalyst Center.
• Familiarity with federal cybersecurity requirements, SSPs, ATO processes, and COOP planning.
• Previous experience supporting federal government customers.

Work Schedule / Location

• Job Type: Full-Time
• Schedule: Monday–Friday
• Location: Hybrid remote in Washington, DC 20266

Application Questions

• Do you have hands on experience with Checkpoint Firewalls?
• Do you have hands on experience with Cisco ISE and 802.1x?
• Do you hold an active Secret or Top-Secret clearance?