Job Title: SR. NETWORK SECURITY ENGINEER
Location: McleanVA
Duration: 12 Months
Visa: USC GC H1B and EAD
Contract Type: W2
Key Responsibilities:
- Strong understanding of networking and DMZ setup ZTNA required Scripting skills with automation Bash Python Cloud AWS 3 Palo alto virtual firewall.
- Design and Implement Cloud DMZ Architectures: Build secure DMZ environments in AWS using services such as VPC Transit Gateway NACLs Security Groups AWS Network Firewall WAF and Application Load Balancers.
- Secure External Access Points: Configure ingress and egress traffic flow including NAT Gateways VPC endpoints and firewall rules for external-facing applications and services.
- Cloud Networking Expertise: Create and manage VPC peering route tables subnets and VPN/Direct Connect integrations ensuring secure and efficient communication across hybrid environments.
- Threat Mitigation & Monitoring: Implement logging monitoring and alerting using tools like AWS CloudWatch GuardDuty Security Hub and custom Lambda automation for DMZ-related events.
- Compliance and Best Practices: Ensure that the DMZ configurations align with industry standards (e.g. NIST CIS ISO 27001) and internal security policies.
- Collaboration and Documentation: Work closely with cloud architects application owners and InfoSec teams. Maintain up-to-date documentation for network topology security configurations and standard operating procedures.
Required Qualifications:
- 5 years of experience in cloud infrastructure and security with a focus on AWS Strong understanding of network and perimeter security concepts (DMZ firewalls IDS/IPS etc.)
- Hands-on experience with AWS networking services and security tools Deep knowledge of TCP/IP DNS HTTPS and VPN technologies Proficiency with Infrastructure as Code (IaC) tools such as Terraform or AWS CloudFormation Familiarity with CI/CD pipelines and DevSecOps practices AWS certifications (e.g. AWS Certified Advanced Networking Security Specialty) preferred
- Experience with hybrid cloud environments and on-prem to cloud migration Background in regulated industries such as finance healthcare or government Knowledge of Zero Trust Network Architecture (ZTNA) principles Strong scripting skills (Python Bash etc.) for automation and orchestration