> Markdown version of [/jobs/ext/3288635-sr-principal-network-engineer](https://www.wearedevelopers.com/jobs/ext/3288635-sr-principal-network-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Sr. Principal Network Engineer - **Company:** Northrop Grumman - **Location:** Orlando, FL, United States - **Experience:** Expert - **Salary:** $111,700.0 - $167,500.0 - **Contract:** Permanent contract - **Skills:** Apple IOS, Systems Engineering, Border Gateway Protocol, Spanning Tree Protocols, CompTIA Security+, System Configuration, Network Address Translation, Enhanced Interior Gateway Routing Protocol, Trunking, Virtual Private Networks (VPN), Network Security, NetFlow, Network Architecture, Network Monitoring, Routing, Packet Analyzer, Open Shortest Path First (OSPF), Simple Network Management Protocols, Systems Integration, Transmission Control Protocol (TCP), Test Execution Engine, Wireshark, Virtual Local Area Networks, Software Troubleshooting, Integration Tests, Information Technology, SolarWinds (Software), Palo Alto Networks, Firewall Services Module, Cisco - **Published:** September 16, 2026 - **Apply:** https://www.clearancejobs.com/jobs/9177538/sr-principal-network-engineer ## About the Role * Bachelor's degree in Computer Science, Information Technology, Electrical Engineering, or related STEM discipline with 8+ years of relevant network engineering experience OR Master's degree in STEM and 6+ years of experience OR 12 years of experience in lieu of a degree. * U.S. citizenship and Active DoD Secret Clearance * Extensive hands-on experience configuring, operating, and troubleshooting Cisco-based network infrastructure, including enterprise-/mission-scale switches and routers (IOS/IOS-XE/NX-OS). * Deep understanding of TCP/IP networking, routing protocols (e.g., OSPF, BGP, EIGRP), VLANs, trunking, spanning-tree, and QoS. * Demonstrated experience supporting and troubleshooting a fully defined/fielded network architecture in a production or mission environment. * Proven ability to perform end-to-end fault isolation and root cause analysis, including clearly determining whether issues originate within the supported product/system or in the customer's external network. * Experience supporting systems under a Contractor Logistics Support (CLS) or similar sustainment contract, including incident/ticket management and documentation of findings. * Working knowledge of firewall concepts (e.g., security zones, ACLs, NAT, VPNs) and secure external connectivity. * Familiarity with DoD end-to-end encryption devices (e.g., TACLANE or equivalent) and their role in secure network architectures. * Willingness and ability to cross-train as a system/test engineer and support execution of formal and informal test activities (e.g., test setup, test execution, defect documentation). * Strong written and verbal communication skills, including the ability to interface with customers, operations staff, and internal engineering/test teams. Preferred Qualifications: * Current Cisco certification (e.g., CCNP Enterprise, CCNP Security, or higher). * Current DoD 8570/8140-compliant cybersecurity certification, such as: CompTIA Security+ * Ability to obtain and maintain a higher DoD clearance status as required * (ISC)² CISSP (or Associate of CISSP) * Hands-on experience with Palo Alto Networks firewalls, including configuration of security policies, NAT, VPNs, and routing, and troubleshooting using logs, packet captures, and CLI/GUI tools. * Experience integrating Cisco routing/switching with Palo Alto (or similar next-generation firewalls) to provide secure external connectivity for deployed systems. * Experience in a senior network engineer role, including reviewing/approving network changes and mentoring junior engineers. * Experience operating in DoD or other secure/regulated network environments, including exposure to RMF, DISA STIGs, or equivalent cybersecurity/compliance requirements. * Proficiency with network monitoring and analysis tools (e.g., Wireshark, SolarWinds, NetFlow, SNMP) for proactive issue detection and performance troubleshooting. * Hands-on experience with TACLANE or similar DoD end-to-end encryption devices, including configuration, operational management, and integration with routing and firewall policies. * Experience managing and handling COMSEC material, including key loading/changes, adherence to handling and storage procedures, and coordination with COMSEC custodians. * Experience supporting system and integration test activities, such as: * Building and configuring test network environments * Executing test procedures and capturing objective evidence * Reproducing and troubleshooting defects found during test * Experience coordinating with multi-disciplinary teams (systems engineering, software, cybersecurity, logistics, test) to resolve complex field and test issues under CLS or similar support constructs. ## Description * The Sr Principal Network Engineer serves as a senior technical resource responsible for sustaining and troubleshooting a fully defined network architecture, including secure external connectivity through next-generation firewalls (preferably Palo Alto) and DoD end-to-end encryption devices such as TACLANE. * Manages and handles COMSEC material in accordance with DoD directives, and cross-trains as a tester to support system and integration test activities alongside multi-disciplinary engineering teams * The engineer also performs end-to-end fault isolation to distinguish product issues from customer network issues under a CLS contract. ## Related Videos - [How Cisco embraced a DevOps culture within its network engineering team](https://www.wearedevelopers.com/videos/99-how-cisco-embraced-a-devops-culture-within-its-network-engineering-team) - [Creating a routing app with Google Maps API from scratch](https://www.wearedevelopers.com/videos/831-creating-a-routing-app-with-google-maps-api-from-scratch) - [Your Infrastructure Is Not a Playground: AI Agents for Infra Done Right](https://www.wearedevelopers.com/videos/2084-your-infrastructure-is-not-a-playground-ai-agents-for-infra-done-right) - [Computer Vision from the Edge to the Cloud done easy](https://www.wearedevelopers.com/videos/263-computer-vision-from-the-edge-to-the-cloud-done-easy) - [A Technical Introduction to Bitcoin's 2nd Layer- The Lightning Network](https://www.wearedevelopers.com/videos/15-a-technical-introduction-to-bitcoin-s-2nd-layer-the-lightning-network) - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) ## Related Articles - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [What’s the Difference between a Junior, Mid, and Senior Developer?](https://www.wearedevelopers.com/magazine/238-what-s-the-difference-between-a-junior-mid-and-senior-developer) - [7 Important Tips That Every Software Developer Should Know](https://www.wearedevelopers.com/magazine/101-7-important-tips-that-every-software-developer-should-know) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology)