1

Network Segmentation Jobs in Washington (NOW HIRING)

Senior Network Engineer

Washington, DC · On-site

$117K - $160K/yr

Responsibilities : • Design, configure, monitor, troubleshoot, and sustain secure enterprise network infrastructure. • Support routing, switching, firewall, network segmentation, connectivity ...

Showing results 41-60

Network Segmentation information

What is the difference between Network Segmentation vs Network Security Engineer?

AspectNetwork SegmentationNetwork Security Engineer
Primary FocusDividing a network into segments to control trafficDesigning, implementing, and managing security measures
Required SkillsNetworking protocols, VLANs, firewallsFirewall configuration, intrusion detection, security policies
Work EnvironmentNetwork infrastructure, data centers, enterprise networksSecurity teams, IT departments, cybersecurity environments
CertificationsCCNA, CompTIA Network+CISSP, CEH, CompTIA Security+

Network segmentation involves dividing a network into smaller parts to improve performance and security, while a Network Security Engineer focuses on protecting the network through security measures. Both roles require networking knowledge, but their primary objectives differ: segmentation manages network structure, whereas security engineers safeguard it from threats.

What are the key skills and qualifications needed to thrive in a network segmentation role, and why are they important?

To thrive in a Network Segmentation role, you need a solid understanding of networking concepts, security best practices, and experience with firewalls and VLAN configuration, often supported by certifications like CCNA or CISSP. Familiarity with tools such as network monitoring systems, segmentation platforms, and security information and event management (SIEM) solutions is typically required. Strong analytical thinking, attention to detail, and effective communication are essential soft skills for collaborating with IT teams and identifying security gaps. These skills ensure that network environments are properly segmented to minimize security risks and maintain organizational compliance.

What is network segmentation?

Network segmentation is the practice of dividing a computer network into smaller, isolated subnetworks to improve security and performance. By separating systems and data, organizations can limit the spread of cyber threats and control user access to sensitive information. This approach helps contain breaches, simplifies compliance, and enhances the efficiency of network management. Common techniques include using VLANs, firewalls, and access control lists to enforce boundaries between segments.

What are some common challenges faced by professionals working in network segmentation roles, and how can they be addressed?

Professionals in network segmentation roles often encounter challenges such as effectively balancing security with business operations, managing legacy systems, and ensuring seamless communication between segmented zones. Addressing these challenges typically involves working closely with IT and business units to understand critical workflows, implementing robust access controls and monitoring, and regularly updating segmentation policies to adapt to organizational changes. Staying current with industry best practices and leveraging automation tools can also help streamline the process and minimize human error.

What cities in Washington are hiring for Network Segmentation jobs?

Cities in Washington with the most Network Segmentation job openings:

Infographic showing various Network Segmentation job openings in Washington as of August 2026, with employment types broken down into 1% As Needed, 80% Full Time, 11% Part Time, and 8% Contract. Highlights an 92% Physical, 3% Hybrid, and 5% Remote job distribution.

Network Engineer- Security Services

Baltimore Aircoil Company

Jessup, MD • On-site

Full-time

Medical, Dental, Vision, Retirement, PTO

Re-posted 11 days ago


Baltimore Aircoil Company rating

6.7

Company rating: 6.7 out of 10

Based on 15 frontline employees who took The Breakroom Quiz

378th of 488 rated machine equipment manufacturers


Job description

Position Purpose

The Network Engineer is the technical co-owner of Baltimore Aircoil Company’s global network. This is a hands-on subject matter expert role responsible for the design, implementation, operation, and lifecycle management of all routing, switching, wireless, firewall, and WAN infrastructure across our corporate offices and manufacturing plants.

The ideal candidate is a true network generalist who can architect a global solution in the morning, troubleshoot a plant-floor connectivity issue in the afternoon, and harden a firewall configuration before the day ends. They are equally comfortable working independently on long-term projects and collaborating with global teams to keep the business running.

Reports to: Manager of IT Infrastructure, North America

Location: On-site at Jessup, MD

Key Responsibilities

Responsibilities include but are not limited to:

  • Design, implement, and maintain global network architecture across LAN, WAN, WLAN, and data center environments, with primary stacks built on Cisco (routing, switching, wireless) and Cato Networks (SD-WAN/SASE).
  • Serve as the technical lead for all network projects, including site builds, refreshes, migrations, and acquisitions — from initial design through implementation, testing, and documentation.
  • Own day-to-day network operations: monitoring, capacity planning, performance tuning, configuration management, patching, and lifecycle management of all network hardware and software.
  • Configure and manage firewalls, VPNs, ACLs, and network segmentation (including VLANs and OT/IT separation) to support both connectivity and security requirements.
  • Lead network incident response — triage outages, perform root cause analysis, implement permanent fixes, and maintain runbooks and incident playbooks.
  • Partner with manufacturing and controls engineering teams to design, deploy, and support Operational Technology (OT) network infrastructure on the plant floor, applying segmentation and reliability best practices appropriate to industrial environments.
  • Collaborate with the BAC Global Business Services (GBS) team and global network peers on shared standards, remediation of identified gaps, and adherence to enterprise architecture.
  • Support hybrid cloud connectivity, including site-to-cloud and inter-cloud networking for our cloud environments as required.
  • Maintain accurate, up-to-date network documentation: diagrams, IP schemas, circuit inventories, configuration backups, and change records.
  • Participate in disaster recovery planning, testing, and execution for all network-dependent systems.
  • Contribute to internal and Amsted-driven audit and compliance activities by providing evidence, remediating findings, and maintaining controls within the network domain.
  • Mentor junior IT staff and provide technical guidance on networking topics across the broader infrastructure team.
Required Qualifications
  • Bachelor’s degree in Computer Science, Network Engineering, Information Technology, or a related field. Equivalent professional experience and certifications will be considered in lieu of a degree.
  • Minimum of 5–7 years of progressive experience as a Network Engineer, Network Architect, or comparable hands-on network role.
  • Deep, hands-on expertise with Cisco routing and switching (IOS / IOS-XE), including Catalyst switches and ISR/ASR routers.
  • Strong working knowledge of enterprise wireless (Cisco Catalyst, Meraki, or Aironet) including controller configuration, RF planning, and troubleshooting.
  • Production experience with SD-WAN, ideally Cato Networks. Equivalent experience with Velocloud, Viptela, Versa, or Silver Peak will be considered.
  • Expert-level understanding of TCP/IP, routing protocols, switching (VLANs, STP, trunking, EtherChannel), and modern network design principles.
  • Hands-on firewall configuration and management experience — rule design, NAT, VPN (site-to-site and remote access), and policy auditing.
  • Experience designing and supporting network segmentation, including VLANs, ACLs, and IT/OT separation in a manufacturing environment.
  • Working knowledge of network monitoring and management platforms (e.g., SolarWinds, PRTG, Cisco DNA Center, Cato Management Application, or similar).
  • Demonstrated experience with network incident response and structured root cause analysis.
  • Familiarity with disaster recovery planning and testing for network infrastructure.
  • Strong written and verbal communication skills, with the ability to translate complex technical concepts for non-technical stakeholders, plant leadership, and executive audiences.
  • Ability to work independently, prioritize across multiple concurrent projects, and collaborate effectively across global teams and time zones.
  • Willingness to support occasional after-hours change windows and on-call rotation for critical network incidents.
Preferred Qualifications
  • Active Cisco certifications: CCNP Enterprise required level of knowledge; CCIE Enterprise Infrastructure strongly preferred.
  • Cato Networks certification (CNSE / Cato Certified SASE Expert) or equivalent vendor-specific SD-WAN/SASE certification.
  • Experience supporting OT networks in a manufacturing environment, including familiarity with the Purdue model, industrial protocols, and coordination with controls/automation engineers.
  • Cloud networking experience in Azure and/or AWS (VNets/VPCs, ExpressRoute/Direct Connect, transit gateways, hybrid routing).
  • Experience with network automation and infrastructure-as-code tools (Ansible, Python scripting, Terraform, Cisco DNA Center, or similar).
  • Familiarity with security frameworks and standards relevant to network controls (NIST CSF, ISO 27001, CIS Benchmarks).
  • Prior experience supporting a global, multi-site enterprise (manufacturing or industrial vertical preferred).
Working Conditions
  • On-site role based at the BAC Jessup, MD location.
  • Occasional travel to other BAC sites and manufacturing plants as required for projects, deployments, and incident support.
  • Periodic after-hours and weekend work for change windows, maintenance, and incident response.

BAC Hiring Compensation Range $75,300-$129,100

BAC offers a comprehensive benefits package to include medical, dental, vision, paid time off, 401k, employee stock ownership plan, and more. Please see additional details on the BAC website at www.Baltimoreaircoil.com.  

BAC Employees are eligible to participate in an annual bonus incentive program.


What Baltimore Aircoil Company employees say

Pay

Benefits

Hours and flexibility

Workplace

Get the full story on Breakroom