Principal Network Security Engineer (TS/SCI CI Poly)

Zachary Piper Solutions is seeking a Principal Network Security Engineer to support a CSOC for an Intelligence customer in Chantilly, VA. The team is seeking network engineering expert, who has advanced knowledge of maintaining network infrastructure across various devices including comply-to-connect services, load balancers, Firewalls, and Cisco products to optimize and maintain the critical infrastructure.

Clearance: Active TS/SCI CI Polygraph Clearance

Location: Chantilly, VA

This job opens for applications on 2/23/2026. Applications for this job will be accepted for at least 30 days from the posting date

Responsibilities of the Network Engineer:

• Engineer, design, implement, integrate, and sustain Comply-to-Connect (C2C) capabilities, supporting migration, deployment, enhancement, and ongoing operations. Responsibilities include administering appliances, applications, servers, and infrastructure across both classified and unclassified environments.
• Work closely with the network service provider to create and maintain network architecture documentation and diagrams.
• Analyze current technologies and recommend updates, improvements, or modernization strategies to enhance performance, consistency, and alignment with industry best practices.
• Monitor C2C system health, investigate performance issues, and propose corrective actions or optimization measures.
• Collaborate with internal teams and customers at multiple organizational levels to exchange information, coordinate tasks, and support mission objectives.
• Bring strong communication and customer service skills, ensuring effective engagement and coordination across diverse teams and stakeholders.
• Contribute to cybersecurity Assessment and Authorization (A&A) efforts for relevant technologies, as needed.

Qualifications of the Network Engineer:

• Active TS/SCI CI Polygraph required in order to be considered
• Bachelor's degree from an accredited college in a related discipline and 10+ years of prior relevant experience
• IAT Level II (GSEC, Security+, SSCP, or CCNA-Security) certification required
• Minimum/general experience: 10 years of related network experience (firewalls, routers, switches and load balancers)
• Experience with vendor-neutral C2C capabilities and services, open-source components, DoD integration and networks, and DoD engineering and sustainment procedures to provide real-time C2C expertise is advantageous.
• Cisco Identity Services Engine (ISE) experience is preferred but not mandatory.
• Strong understanding of Windows and Linux systems, operating system security practices, TCP/IP networking, 802.1x, and network security concepts is essential.
• Expertise in technologies for large-scale enterprise deployments and data centers.
• Experience deploying and supporting enterprise security software products, including firewalls, IPS, antivirus solutions, application firewalls, high availability solutions, network management systems, and virtual systems.
• Proficiency with tools such as Nmap, Nessus, and tcpdump.
• Working knowledge of shell, Perl, and XML scripting.

Compensation of the Network Engineer:

• Total compensation based on experience level - $150,000 - $175,000+ **based on experience level**
• Full Benefits: PTO, 11 Paid Holidays, Cigna Medical, Dental, and Vision, 401k with ADP
• Certification reimbursement
• Contract mobility and job stability - Contract through 2027

#LI-MK1 #LI-Onsite

Keywords: cyber, NIST, NETWORK, networking, network engineer, engineering, network administration, firewalls, routers, switches, TCP/IP, NOC, RMF, risk management framework, network architecture, compliance, opentowork, hiring, W2, onsite, DoD, ISE, Cisco, comply-to-connect, load balancer, F5, security, NIST, splunk, cyber, FISMA, FEDRAMP, Cisco, ISE, Identity services engine, XML, Perl, network, firewalls, comply to connect, c2c, tcpdump, nessus, nmap, nessus, wireshark, IPS, virtual, Chantilly, on-site, onsite, networking, palo alto, cybersecurity, networks, threat analysis, trend analysis, arcsight, splunk, wireshark, sharepoint, windows, vulnerability, vulnerability exploitation, ITIL, ITIL v3, sec+, security+ CE, CCNA Security, CySA+, GICSP, GSEC, SSCP, stigs, stig, ts/sci, top secret/sci, security clearance, bachelors, network defense, network defense operations, triage of events, CEH, APT, TTP, advanced persistent threat, tactics, techniques, procedures, information assurance, CND, computer network defense, CI polygraph, counter intelligence, counterintelligence, SOC, security operations center, intelligence, intelligence agency, threat reporting, cyber threat, COTS, security principles, threat hunting, reporting, briefing, protocols, operating system, OS, DOD, department of defense, Chantilly, springfield, Virginia, cyber intelligence, security tools, GSEC, SSCP, CCNA, NOC, network operations center, network traffic, bachelors, masters, government, Federal, federal systems, ACAS, NESSUS, exploitation, exploit, network monitoring