Cybersecurity Boundary Defense Technical Lead

GCyber•Shiloh, IL

About The Position

GCyber is seeking a Cybersecurity Boundary Defense Technical Lead to support a large Department of War agency. The role combines technical leadership with hands-on engineering to maintain effective boundary protection and reliable network access. The lead oversees engineers responsible for next-generation firewalls, web application firewalls, and DoD internet access points. Approximately half of the role is dedicated to hands-on architecture, complex changes, and incident response. The position leads boundary defense across 12 Palo Alto firewalls, 4 Panorama managers, and F5 and AWS web application firewalls. It also manages boundary change control, quarterly rule reviews, and ports, protocols, and services documentation; designs segmentation and boundary controls that advance zero trust; works with DISA on internet access point and proxy changes; and supports incident responders with approved boundary blocks and relevant evidence. The lead manages a team responsible for firewall, proxy, WAF, and segmentation engineering and shares the on-call rotation.

Requirements

At least 7 years of network security experience, including at least 4 years in DoD.
Bachelor's degree, or 4 additional years of experience in place of the degree.
PCNSE and CISSP certifications.
Active Secret clearance.
Complete Palo Alto and Panorama tool training before system access.
Deep Palo Alto NGFW and Panorama skills, including security and NAT policy, App-ID, User-ID, security profiles, and HA.
Experience with web application firewall policy on F5 Advanced WAF and AWS WAF.
Knowledge of network segmentation and zero trust network design.
Knowledge of DoD boundary requirements, including DISA STIGs, PPSM, and cloud access points.
Ability to lead engineering changes through controlled maintenance windows while maintaining service availability.

Nice To Haves

F5 or AWS Security certification.
DISA boundary (CBII) experience.

Responsibilities

Lead boundary defense across 12 Palo Alto firewalls, 4 Panorama managers, and F5 and AWS web application firewalls.
Dedicate approximately half of working time to hands-on architecture, complex changes, and incident response.
Manage boundary change control, quarterly rule reviews, and ports, protocols, and services documentation.
Design segmentation and boundary controls that advance zero trust.
Work with DISA on internet access point and proxy changes.
Support incident responders with approved boundary blocks and relevant evidence.
Lead a team responsible for firewall, proxy, WAF, and segmentation engineering.
Share the on-call rotation.

Benefits

26 days of paid leave, plus an annual PTO increase.
An additional day of paid leave for every year of employment with GCyber.
Paid parental leave.
Additional leave allowances for military duty, jury duty, and bereavement leave.
401(k) matching.
100% company-funded disability insurance.
90% company-funded health, dental, and vision insurance, with contributions to insurance benefits for spouses, children, and family members.
Training and professional development plans.
Commuter benefits plan.
Parking and transportation allowance.