Infrastructure Security Engineer

Marine Corps Community Services (MCCS) is looking for the best and brightest to join our Team! MCCS is a comprehensive program that supports and enhances the quality of life for Marines, their families, and others in the Marine Corps Community. We offer a team oriented environment comprised of military personnel, civilian employees, contractors and volunteers who keep the organization functioning smoothly and effectively.The Infrastructure Security Engineer is responsible for protecting the organization's core technology environment by designing, implementing, and maintaining security controls across networks, systems, and cloud platforms. This role ensures the confidentiality, integrity, and availability of enterprise infrastructure through proactive risk identification, secure architecture design, continuous monitoring, and rapid response to security events. The engineer works closely with IT, network, and system teams to embed security into infrastructure operations, strengthen defenses, and support mission critical systems. This position plays a key role in safeguarding organizational assets, improving resilience, and ensuring compliance with Marine Corps, DoD, and industry security standards. Firewall Administration - Architect, deploy, and maintain next generation firewalls; create and optimize security policies; manage segmentation, VPN configurations, and threat prevention services; monitor logs for anomalies and policy violations. Zero Trust Architecture - Implement and maintain Zero Trust principles across identity, network, and application layers; enforce least privilege access; support continuous authentication and authorization controls. Endpoint Protection & EDR - Manage enterprise anti-virus and endpoint detection and response platforms; tune detection rules; investigate alerts; coordinate containment and remediation of endpoint threats. Tokenization & Data Protection - Support tokenization platforms to secure sensitive data; ensure proper integration with applications; maintain key management processes; enforce data handling and privacyrequirements. Web Proxies & WAF - Administer secure web gateways, proxy services, and web application firewalls; configure filtering policies; monitor for malicious traffic; protect web applications from internal & external threats. NTP Infrastructure - Maintain secure and reliable Network Time Protocol servers; ensure accurate time synchronization across systems; implement hardening and monitoring to prevent tampering or drift. RADIUS Authentication Services - Manage RADIUS servers for network authentication; integrate with identity providers; maintain policies for secure access to network devices and wireless infrastructure. Security Monitoring & Incident Response - Analyze logs and alerts across all security platforms; collaborate with SOC teams; support investigations, root cause analysis, and corrective actions. Documentation & Compliance - Maintain detailed documentation of configurations, sta