Networking/Security Engineer

Networking/Security Engineer

This is a remote position.

Ad Hoc is a technology company that empowers organizations to deliver scalable, impactful digital services. Using modern, agile methods, our team creates products that meet people’s needs and transform their experience of government.

Work on things that matter

Our collaborations have shaped some of the defining moments in public-sector service delivery. We’ve helped build products that connect Veterans to tailored services, help millions access affordable health care, and support important programs like Head Start. As we work with agencies to deliver critical services, we’re also changing how the government approaches technology.

Built for a remote life

Our culture, communications, and tools are built for remote work, enabling us to bring together top talent nationwide. At Ad Hoc, remote life empowers our teams to design work environments that fit their lives and that foster flexibility and collaboration to achieve positive outcomes for our customers.

Committed to high expectations and a welcoming culture

Ad Hoc values acceptance, accountability, and humility. We aren’t heroes. We learn from our mistakes and improve the process for the next time. We build small, inclusive teams to collaborate closely with our partners to solve the right problems and deliver software that works.

The Federal Civilian business unit supports many customers spanning the federal, commercial, and nonprofit space. Our customers include NASA, the General Services Administration, Office of Personnel Management, the Library of Congress, Health & Human Services, and the FDIC. We partner with these agencies to build new capabilities, deliver products, establish data as a strategic asset for informed decision-making, modernize legacy systems, and build the digital service infrastructure necessary to scale their mission impact.

Primary Responsibilities:

In this role, you will serve as an emerging subject matter expert, while serving as an individual contributor that exhibits a high level of trust, autonomy and empowerment. With minimal oversight from leadership, you will be responsible for leading and monitoring the ability to meet scope, schedule and delivery requirements and may support adjacent programs with the business unit. A Staff Security and Compliance Manager exhibits strong influential skills to represent the security and compliance practice in planning sessions, advocating for the best technical solution, while communicating tradeoffs. You will serve as the primary lead and proactively communicate with stakeholders; while utilizing strong influential skills to drive improvements in security and compliance processes and practices. Primary expectations of a Staff Security and Compliance Manager include:

Basic Qualifications:

• Bachelor’s degree in computer science, information assurance, cybersecurity or related field, 9+ years of experience

• Relevant years of experience may be substituted for education

Mandatory Qualifications

• Skyhigh SWG (SkyHigh)
  • 3+ years administering Skyhigh Secure Web Gateway in production (>10k users).
  • Expert in policy hierarchy/inheritance, object & list management, staged rollout (test?pilot?prod), logging export, versioning, rollback.
• Proxy Engineering
  • Forward/reverse proxy modes; explicit vs transparent; PAC/WPAD design and distribution.
  • SSL/TLS inspection: cert chains, pinning impacts, ALPN, HTTP/2 behavior, auth flows (Kerberos/NTLM, SAML/OIDC).
  • Safe bypass strategies (domain/SNI/IP/risk-based) without degrading coverage.
• Layer 3 & Internet Fundamentals
  • Routing & addressing (CIDR, MTU/fragmentation/PMTUD, NAT44/66, VRFs), basic BGP/OSPF, DNS recursion/forwarding and failure modes.
• Ports & Protocols
  • TCP/UDP behavior, ephemeral ranges, TLS handshake/SNI, and middlebox interactions (no QUIC/HTTP-3 requirement).
• PCRE
  • Writes and reviews complex PCRE (lookarounds, backreferences, atomic groups) with an eye for performance (avoid catastrophic backtracking).
• Troubleshooting: Packets + Analytics
  • tcpdump/Wireshark proficiency (TLS/HTTP analysis, TCP dynamics).
  • Log correlation at scale (e.g., Splunk/ELK) to isolate issues off-box (client, network, IdP, upstream).
  • Can distinguish origin response