The posting
Revolutional delivers advanced technology solutions and mission support to federal agencies across civilian, health, and national security environments. We apply modern capabilities, including AI/ML, cloud, cybersecurity, and IT modernization to solve complex challenges, enable faster and more secure operations, and drive measurable mission outcomes.
We are redefining how federal technology gets built and delivered by operating with a product mindset, prioritizing speed, ownership, and execution over bureaucracy.
Title: Cloud Network Security Engineer
Location: Onsite (Washington, D.C. or Bethesda, MD)
Terms: Full-time
Salary: 175k - 200k DOE
Clearance: Active Top Secret with SCI eligibility required
Citizenship: U.S. citizenship required
Travel: 0-10%
Position Description
Revolutional has an exciting full time opportunity for a Cloud Network Security Engineer to own network connectivity between our federal government customer’s on-premises environment and its cloud environments (currently Azure and AWS). This is a senior, hands-on ownership role: the engineer will serve as the primary technical bridge between the customer’s on-premises network team and Revolutional’s cloud/platform team, taking day-to-day responsibility for configuration, troubleshooting, firewall policy, and lifecycle management of hybrid, multi-cloud network infrastructure. A strong understanding of how cloud networking affects application design, routing, and capacity planning is central to this role.
What You'll Do
As a Cloud Network Security Engineer you will:
- Configure and maintain core hybrid and multi-cloud networking components, virtual networks, gateways, and site-to-site or dedicated circuit connections (e.g., Azure VNets/ExpressRoute/Virtual WAN, AWS VPCs/Transit Gateways), along with DNS, IP address management, load balancing, and private connectivity to platform services.
- Configure and manage firewall and network security policy across platforms (NSGs, Azure Firewall, and enterprise platforms including Palo Alto and Cisco), including policy configuration, log analysis, and troubleshooting of connectivity issues.
- Design and optimize routing and traffic engineering (BGP, route tables, user-defined routes), accounting for how application and data traffic patterns affect bandwidth-constrained on-premises circuits, and support secure, high-throughput connectivity for priority mission initiatives.
- Manage DNS configuration (Azure DNS, Private DNS Zones) and IP address management (IPAM) across Azure subscriptions.
- Deploy and maintain Private Link / Private Endpoint configurations to secure connectivity to PaaS services.
- Monitor network health, performance, and security posture across on-premises and cloud environments, and develop and maintain Infrastructure-as-Code for repeatable, auditable configuration changes.
- Document configurations, network diagrams, and standard operating procedures; respond to and resolve network incidents within defined SLAs; interface with telecommunications carriers and/or colocation providers as needed.
- Collaborate with security and infrastructure teams to support network design for new workloads, migrations, and the program’s long-term multi-cloud strategy.
What You Bring (Requirements):
- Active Top Secret (TS) clearance with SCI eligibility. Must be a U.S. citizen.
- Bachelor's degree in a related technical field, or equivalent professional experience.
- 8+ years of overall network engineering experience.
- 5+ years of hands-on experience configuring, administering, and troubleshooting cloud networking environments.
- Security+ Certification.
Nice to Have (Differentiators):
- Demonstrated experience configuring both Azure (VNets, subnets, NSGs, ExpressRoute, VPN Gateway, Azure Firewall) and AWS (VPCs, Transit Gateways, Site-to-Site VPN, Security Groups) networking environments.
- Solid understanding of core networking fundamentals (TCP/IP, routing, switching, DNS, DHCP, BGP, VPN protocols) and experience troubleshooting hybrid connectivity between on-premises and multi-cloud environments.
- Hands-on experience administering and troubleshooting enterprise firewall platforms (Palo Alto and Cisco), including policy configuration and firewall log analysis.
- Experience with Infrastructure-as-Code (ARM templates, Bicep, Terraform, or CloudFormation) and working knowledge of network security best practices (segmentation, least-privilege access, firewall policy management).
- Demonstrated ability to independently own and lead network engineering efforts for a customer environment.
- Microsoft Certified: Azure Network Engineer Associate or Azure Administrator Associate; AWS Certified Advanced Networking – Specialty.
- Experience with multi-region/multi-cloud network architectures (Azure Virtual WAN, Azure Front Door, AWS Transit Gateway/Direct Connect) or carrier cloud-connect and colocation solutions (e.g., AT&T NetBond, Verizon Software-Defined Interconnect, Equinix, Digital Realty).
- Scripting experience (PowerShell, Python, Azure CLI, or AWS CLI) for network automation; familiarity with Trusted Internet Connection (TIC) 3.0 and Policy Enforcement Point (PEP) concepts.
- Experience supporting federal government, regulated, or compliance-driven environments (FedRAMP, NIST 800-53, etc.).
___________________________________________________________________________________________________________
Here at Revolutional we are pleased to have been repeatedly recognized for our outstanding work culture, the innovative work we do, and the employees on our team who make a difference each day. Some of these recognitions include:
- Recognized as a Top 20 "Best Place to Work in Virginia"
- Recipient of Department of Labor's HireVets Gold Medallion
- Great Place to Work Certification for five years running
- A Virginia Chamber of Commerce Fantastic 50 company
- A Northern Virginia Technology Council Tech 100 company
- Inc. 5000 list of fastest growing companies for eleven years
- Two-time SBA SBIR Tibbett's Award winner
- Virginia Values Veterans (V3) Certification
We recognize that every bit of our success is the result of our teams of hard-working, motivated, and innovative professionals who are proud to call themselves part of the Revolutional family! In addition to competitive compensation, a family-focused culture, and a dynamic, productive work environment, we offer all full-time employees a variety of benefits including, but not limited to
- Traditional and HSA- eligible medical insurance plans
- 100% employer-paid dental and vision insurance options
- 100% employer-sponsored STD, LTD, and life insurance
- 5% 401(k) company matching
- Flexible-schedules and teleworking options
- Paid holidays and PTO Accrual Plans
- Paid Parental Leave
- Professional development and career growth opportunities
- Team and company-wide events, recognition, and appreciation-- and so much more!
Check out our Revolutional | LinkedIn to find out a little more about who we are and if we are the right next step for your career!
Revolutional is an Equal Opportunity Employer providing equal employment opportunity to all employees and applicants for employment without regard to race, color, religion, national origin, age, gender, gender identity, sexual orientation, disability, or genetics. Revolutional does and will take affirmative action to employ and advance in employment individuals with disabilities and protected veterans. To perform the above job successfully, an individual must possess the knowledge, skills, and abilities listed; meet the education and work experience required; and must be able to perform each essential duty and responsibility satisfactorily. Other duties in addition to those listed may be assigned as necessary to meet business needs. Reasonable accommodation will be made to enable an applicant with a disability to successfully apply for and/or perform the essential duties of the job. If you are in need of an accommodation, please contact [email protected].
“Know Your Rights: Workplace Discrimination is Illegal” Poster | U.S. Equal Employment Opportunity Commission
