Cypress Consulting Inc. · 1 day ago
Network Security Engineer -90% remote – Must be US Citizen due to Secret Clearance required
Alexandria, VA
Full-time
Hybrid
Senior Level, Lead/Staff
$145K/yr - $175K/yr
8+ years expCypress Consulting is seeking a highly specialized secret-cleared F5 Big-IP Network Security Engineer/Architect to serve as the subject matter expert for their application delivery and security infrastructure. This role involves designing, implementing, and managing solutions to ensure critical applications are available, secure, and performant, leveraging the F5 Big-IP platform.
Cloud ManagementConsultingInformation Technology
No H1B
Security Clearance RequiredU.S. Citizen Only
Responsibilities
Design, implement and manage advanced traffic management solutions using F5 Big-IP Local Traffic Manager (LTM). This includes writing and maintaining complex iRules, developing custom health monitors and configuring advanced persistence profiles
Deploy, tune and manage F5 Big-IP Application Security Manager (ASM) policies to protect web applications against the OWASP Top 10, zero-day attacks and other vulnerabilities (WAF)
Engineer and maintain secure remote and internal access solutions using F5 Big-IP Access Policy Manager (APM), integrating with Two-Factor (2FA) and Multi-Factor Authentication (MFA) services to enforce strong authentication
Configure and administer F5 Big-IP DNS (formerly GTM) for intelligent DNS resolution and global server load balancing (GSLB) across multiple data centers
Serve as the primary point of contact for integrating the F5 Big-IP platform with other critical infrastructure, including NGFWs (Palo Alto, Cisco Firepower), DDI solutions (Infoblox) and enterprise monitoring tools
Manage the SSL/TLS traffic lifecycle, including certificate management, implementing Break and Inspect policies and offloading SSL processing from backend servers
Lead advanced troubleshooting efforts for application availability and performance issues, utilizing tools like Wireshark and F5-specific diagnostics to isolate and resolve problems
Collaborate with network and security teams to design and enforce Zero Trust security models and the principle of least privilege access
Assist in implementing and troubleshooting certificate-based authentication (TLS/SSL, OpenSSL operations and PKI infrastructure)
Conduct deep-dive traffic analysis using tools like Riverbed, Wireshark, TCPDump and SolarWinds to diagnose authentication issues and identify network anomalies
Qualification
Required
Bachelor's degree in computer science, cybersecurity, information technology or a related field + 8 years of professional experience; or 12 years equivalent professional experience
Must meet or exceed DoD 8140 IAT Level II minimum Security+ certification
A minimum of 3 years of dedicated experience in application delivery and network security, with a primary focus on the F5 Big-IP platform
Clearance Required: Active Secret
Bachelor's Degree and 12 years of experience
Expert-level, hands-on experience with the F5 Big-IP platform and its core modules: LTM, ASM, APM and DNS (GTM)
Proficiency in iRules development and scripting to customize traffic handling and implement business logic
In-depth knowledge of core application protocols (HTTP/S, DNS, SSL/TLS, TCP/IP) and the ability to perform deep-dive packet analysis
Demonstrable experience integrating F5 solutions with external authentication services (e.g., RADIUS, SAML, LDAP) for 2FA/MFA
Strong understanding of security infrastructure integration, including experience working with Palo Alto NGFWs, Cisco Firepower and Infoblox DDI
Experience managing Load Balancing, WAF, Reverse Proxy and Forward Proxy functions within an enterprise DMZ
Preferred
F5 Certified Administrator (F5-CA) or F5 Certified Technology Specialist (F5-CTS) certifications
Experience with F5 automation using AS3, Declarative Onboarding and BIG-IP's iControl REST API
Familiarity with F5 BIG-IQ for centralized management, monitoring, and analytics
Hands-on experience with secure remote access solutions like Palo Alto Networks Global Protect
Knowledge of adjacent technologies, including VERSA (SD-WAN), FortiGate firewalls, Riverbed (WAN Optimization) and NetBrain (Network Automation)
Experience working in large government or enterprise environments with strict change control and compliance frameworks
Benefits
401(k)
401(k) matching
Flexible schedule
Health insurance
Life insurance
Paid time off
Professional development assistance
Referral program
Retirement plan
Vision insurance
Company
Cypress Consulting Inc.
Cypress Consulting: Your Trusted Partner for Cloud & Network Solutions Let us be your trusted partner in the design, implementation, and automation of next generation IT infrastructure.
11-50 employees
Funding
Current Stage
Early StageTotal Funding
unknown2026-01-05Acquired
Leadership Team
A
Amir Tabdili
Founder and CEO
Recent News
2026-01-06
2026-01-05
Company data provided by crunchbase