Cyber Defense/Network Security Engineer

Description

Job Title: Cyber Defense/Network Security Engineer

Place of Performance: Springfield, VA

Mandatory Requirements: TS/SCI Clearance

Experience Level: Mid-Sr Level (5+ years)

Travel: Up to 10-20% (CONUS & OCONUS) travel

About JFL Consulting: With more than 20 years of securing some of the U.S. Department of Defense and the Intelligence Community’s most critical networks, JFL Consulting, LLC provides advanced network security solutions to a range of US Government and US commercial clients. Our cybersecurity operators are experts at assessing and defending mission-critical data and the networks that facilitate their operation. We are focused on delivering advanced products and industry best practices that meet each customer’s unique requirements. Visit www.jflconsulting.com

What We Offer:

• Salary: $155k- $175k
• 100% employer-paid medical, dental, and vision premiums for employees and dependents
• Flexible Spending Accounts (healthcare, dependent care, and commuter)
• Life insurance, short-term disability and long-term disability
• 401(k) with immediate vesting of company contribution
• Generous PTO policy (15 vacation, 5 sick, 2 personal days, 11 holidays)
• We support your growth through certification reimbursement, dedicated professional development funding, and company-provided access to online learning platforms

Job Overview: JFL Consulting is seeking a skilled Cyber Defense/Network Security Engineer to lead and support site configurations across secure government environments. This position is focused on configuring, deploying, and optimizing both Linux and Windows-based systems, with a heavy emphasis on on-site system setup, hardware implementation, and secure environment integration. Candidates should have experience working hands-on with servers, virtualization technologies, and scripting, while applying cybersecurity best practices in accordance with DoD standards.

Key Responsibilities:

Site Configuration & Infrastructure Management

• Perform on-site configuration of servers, storage, and networking hardware in secure environments
• Install, cable, and maintain rack-mounted hardware, including power and cooling components
• Deploy, configure, and support infrastructure for Linux and Windows systems
• Build and administer virtualized environments using Proxmox, VMware ESXi, and Hyper-V
• Apply system hardening, OS patching, logging, and backup strategies across physical and virtual systems
• Implement network monitoring tools such as SPAN ports and Gigamon taps
• Ensure infrastructure aligns with DoD cybersecurity frameworks, including RMF and STIGs
• Automate configuration tasks and infrastructure deployments using Bash, Python, or PowerShell
• 5-10% Conus Travel

Security Operations & Monitoring

• Operate and maintain security platforms: Security Onion, Zeek, Suricata, Wazuh, Splunk, Elastic Stack
• Conduct vulnerability scans and implement appropriate security remediation in support of STIGs and RMF
• Monitor system health, identify performance or security issues, and execute timely remediation
• Support incident response, security audits, and continuous compliance efforts

Documentation & Technical Communication

• Develop and maintain detailed documentation: SOPs, network/system diagrams, and baselines
• Present technical recommendations to stakeholders with varying levels of technical expertise
• Contribute to compliance reporting and audit readiness through accurate documentation

Requirements

Required Certifications:

• Minimum DoD 8140/8570 IAT Level II certification (e.g., Security+, GCIH, CYSA+)

Experience:

• 5+ years in a systems engineering or infrastructure role
• Experience with Active Directory, DNS, SSO, and authentication protocols
• Hands-on experience with virtualization platforms (ESXi, Hyper-V, or Proxmox)
• Experience with cloud platforms (AWS, Azure, or GCP desirable)

Technical Skills:

• Advanced knowledge of Linux and Microsoft environments
• Strong scripting skills (Python, Bash, or PowerShell)
• Familiarity with networking concepts: VLANs, routing, NAT, subnetting
• Proficiency with configuration management tools (e.g., Ansible, Puppet)
• Understanding of cybersecurity fundamentals, system hardening, and monitoring practices

Communication:

• Strong written and verbal communication skills
• Ability to produce clear technical documentation and reports
• Strong written and verbal communication skills, with the ability to produce technical documentation and reports

Preferred Education, Experience, & Skills:

• Bachelor’s or Master’s degree in a related field preferred
• Systems engineering certifications (e.g., Microsoft, Red Hat, VMware, CompTIA Advanced credentials)

JFL Consulting, LLC is an Equal Opportunity Employer. We do not discriminate against any applicant for employment on any legally recognized basis including, but not limited to: race, religion or creed, color, national origin, sex, age, disability, marital status, sexual orientation, genetic information, veteran status, status with regard to public assistance or any other protected class under federal, state or local statute. It is also the policy of JFL Consulting, LLC to provide reasonable accommodations for qualified individuals with disabilities.