Lead Firewall Engineer

About the role

Leidos' Digital Modernization sector is seeking a Senior Firewall Engineer to support the GSM-O effort. The position is located at the Pentagon and is 100% on-site. The engineer designs, implements and manages complex firewall solutions to protect the security and integrity of network infrastructure, and also acts as a people leader for the Firewall Task Area.

Key responsibilities

• Design, implement and manage firewall solutions using Cisco ASA/Firepower, Juniper SRX and Palo Alto.
• Monitor firewall performance and security logs to identify and mitigate threats.
• Develop and enforce network security policies and procedures, and perform compliance audits.
• Collaborate with IT, Security and Network teams to integrate firewall solutions.
• Troubleshoot network and firewall issues and document them in ticket systems.
• Maintain and update firewall configurations, including security policies and ACLs, as approved by Change Management.
• Serve as the focal point for firewall tasks, operations, projects and assessments, delivering them on schedule.
• Provide written reports and oral briefings to the Government Task Lead and PMO, conduct annual performance assessments, validate time charging for Leidos and vendor personnel, and coach and mentor personnel.
• Develop and execute continual service improvement strategies.

Required profile

• Active DoD TS/SCI security clearance.
• Meets DoD 8140 Cyber Defense Infrastructure Specialist Intermediate requirements before start (CEH, CySA+, Security+ accepted).
• Juniper, Cisco or Palo Alto certification before start.
• Bachelor's degree and 12+ years of directly relevant experience; additional military or relevant work experience may be considered in lieu of a degree.
• 3+ years of firewall experience in a DoD environment.
• Demonstrated knowledge of planning, directing and managing a firewall team in an organization of similar size.
• Demonstrated experience implementing perimeter and internal firewalls (physical and virtual) and managing baseline configurations across many firewalls.
• Experience researching and fielding new firewall technology.

Required skills

• Cisco ASA/Firepower, Juniper SRX and Palo Alto firewalls
• Network security policy development and firewall rule evaluation
• Change management and ticket-based issue tracking

The program provides IT products, services and solutions to the Pentagon and other DoD offices through the J6 PHISH support services task order on the GSM-O contract. Pay range: $131,300 - $237,350.