Lead Firewall Engineer

Qualifications:

• Required:
• Security Clearance: Active TS/SCI
• 8+ years related technical experience network security technologies, tools, and techniques
• 5+ years' experience with large-scale enterprise/global networks in a high paced diverse environment
• Understanding and experience with the DoD Architecture Framework and other key DoD network architecture and strategic planning instructions
• Demonstrated knowledge in planning, directing, and managing a Firewall / Boundary Security Team in an organization similar in size
• Firewall experience within the DoW or IC
• Demonstrated knowledge of implementation of Perimeter and Internal Firewalls (both physical and virtual contexts)
• Demonstrated advanced experience in managing baseline configurations across numerous firewalls
• Demonstrated advanced experience in evaluating rules to ensure maximum security while minimizing redundancy and processing overhead
• Demonstrated experience with researching and fielding new and innovative firewall technology
• Experience with F5 platforms/technologies (APM, AFM, SSLO, etc.)
• Experience with Palo Alto platforms/technologies (Threat Prevention, Wildfire, URL Filtering, Global Protect)
• Experience with Juniper SRX platforms/technologies
• Experience with Online Certificate Status Protocol OCSP revocation
• Familiar with DoD PKI, Kerberos, LDAP, Active Directory, Authentication (SAML, OAuth)
• Ability to describe and troubleshoot TLS/SSL handshake/connection issues
• Network design, engineering, and implementation (Advanced Level)
• Creation of network related Rough Order Magnitude (ROM) equipment lists and costing, Level of Effort (LOE) estimation for labor
• Understanding of DoW, DISA, and IC standards and processes
• Ability to work weekends and evening hours as needed
• Ability to obtain and maintain a CI polygraph
• S6DoD 8140.01 and DoD 8570.01-M IAT Level II compliant certification (current). Must be able to successfully obtain/maintain CSSP Infrastructure Support certification within 120 days.
• Desired:
• BS or MS degree in Computer Science, Cyber Security, Network Security or related field