Lead Firewall Engineer
About The Position
Valiant Solutions is seeking a Lead Firewall Engineer to join a program providing network and cybersecurity services to an Intelligence Community customer. The program supports transport and cybersecurity IT services across multiple networks and security domains, at locations worldwide, including new facilities and building construction supporting the IC mission. The position is based in Springfield, Virginia, and requires a TS/SCI clearance with the ability to obtain and maintain a CI Polygraph. The Lead Firewall Engineer is the focal point for firewall tasks, operations, and projects, and leads daily operations, troubleshooting, and maintenance for the NSS Boundary work center. The role designs and manages security solutions using F5, Juniper SRX, and Palo Alto platforms; oversees configuration management and compliance; monitors platform health and security; and provides technical recommendations, reports, and briefings to leadership. The position also evaluates emerging technologies and coaches personnel. The role requires a relevant bachelor's or master's degree, a current DoD 8140.01 and DoD 8570.01-M IAT Level II-compliant certification, and the ability to obtain and maintain a CSSP Infrastructure Support certification within 120 days. Candidates need at least eight years of related network security experience and five years working with large-scale enterprise or global networks. Weekend and evening work may be needed.
Requirements
- Bachelor's or master's degree in Computer Science, Cyber Security, Network Security, or a related field.
- Current DoD 8140.01 and DoD 8570.01-M IAT Level II-compliant certification.
- Ability to successfully obtain and maintain CSSP Infrastructure Support certification within 120 days.
- At least 8 years of related technical experience with network security technologies, tools, and techniques.
- At least 5 years of experience with large-scale enterprise or global networks in a high-paced, diverse environment.
- Understanding and experience with the DoD Architecture Framework and other key DoD network architecture and strategic planning instructions.
- Demonstrated knowledge of planning, directing, and managing a Firewall/Boundary Security Team in an organization of similar size.
- Firewall experience within the DoW or Intelligence Community.
- Demonstrated knowledge of implementing perimeter and internal firewalls in physical and virtual contexts.
- Advanced experience managing baseline configurations across numerous firewalls.
- Advanced experience evaluating firewall rules to maximize security while minimizing redundancy and processing overhead.
- Experience researching and fielding new firewall technologies.
- Experience with F5 platforms and technologies, including APM, AFM, and SSLO.
- Experience with Palo Alto platforms and technologies, including Threat Prevention, WildFire, URL Filtering, and GlobalProtect.
- Experience with Juniper SRX platforms and technologies.
- Experience with Online Certificate Status Protocol (OCSP) revocation.
- Familiarity with DoD PKI, Kerberos, LDAP, Active Directory, and authentication methods such as SAML and OAuth.
- Ability to describe and troubleshoot TLS/SSL handshake and connection issues.
- Advanced-level network design, engineering, and implementation skills.
- Ability to create network-related Rough Order of Magnitude equipment lists and costing, and estimate labor Level of Effort.
- Understanding of DoW, DISA, and IC standards and processes.
- Ability to work weekends and evening hours as needed.
- TS/SCI clearance and ability to obtain and maintain a CI Polygraph.
Nice To Haves
- Juniper JNCIS or JNCIP, Palo Alto PCNSE, or equivalent certification.
- F5 network certifications.
Responsibilities
- Serve as the focal point for all firewall tasks, operations, and projects.
- Lead, direct, and manage daily operations, troubleshooting, and maintenance activities for the NSS Boundary work center.
- Design, implement, and manage security solutions using F5, Juniper SRX, and Palo Alto to meet project requirements.
- Ensure systems, devices, and applications within the team's responsibility meet applicable STIG/SRG and organizational configuration baselines.
- Lead regular compliance evaluations and audits.
- Develop, oversee, maintain, and enforce configuration management processes, Standard Operating Procedures, and other required documentation.
- Monitor platform performance, logs, software versions, and configuration drift to identify and mitigate performance, compliance, and security issues.
- Develop and maintain network architecture diagrams, inventories, and licensing status for capabilities within the team's scope.
- Provide written reports and oral briefings to contract and government leadership.
- Coordinate with stakeholders to ensure task completion and customer satisfaction.
- Provide recommendations on newly submitted customer requests.
- Evaluate and report on emerging network and communication technologies to enhance network capacity, performance, and reliability.
- Evaluate and recommend changes or technology upgrades to address performance, standardization, and industry best practices.
- Conduct performance assessments and mentor and coach personnel.
Benefits
- Choice of medical plans, including an HSA option and a PPO, with company contributions.
- Dental and vision coverage for employees and their families.
- Company-paid life, short-term disability, and long-term disability insurance.
- Optional supplemental life, accident, and critical illness coverage.
- 401(k) retirement plan with company match.
- Paid time off that increases with years of service.
- Paid federal holidays.
- Paid certifications and professional development.
- Valiant University training portal.
- Flexible spending accounts.
- Wellness and fitness program.
- Referral bonuses.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
