> Markdown version of [/jobs/ext/4604869-lead-firewall-engineer](https://www.wearedevelopers.com/jobs/ext/4604869-lead-firewall-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Lead Firewall Engineer

- **Company:** Valiant Solutions, LLC
- **Location:** Springfield, VA, United States (Remote available)
- **Experience:** Expert
- **Salary:** $101,300 - $144,800
- **Contract:** Permanent contract
- **Skills:** Active Directory, User Authentication, Configuration Management, Cyber Security, Intrusion Detection and Prevention, Kerberos (Protocol), Network Security, Lightweight Directory Access Protocols (LDAP), Network Architecture, Network Planning and Design, OAuth, Public Key Infrastructure, Security Assertion Markup Language (SAML), Transport Layer Security, Firewalls (Computer Science), Juniper, Information Technology, BIG-IP Advanced Firewall Manager (AFM)
- **Published:** November 6, 2026
- **Apply:** https://www.clearancejobs.com/jobs/9297256/lead-firewall-engineer

## About the Role

Required Clearance: TS/SCI with the ability to obtain and maintain a CI Polygraph.

Required Education and Certifications:

 * BS or MS degree in Computer Science, Cyber Security, Network Security, or a related field.
 * S6DoD 8140.01 and DoD 8570.01-M IAT Level II compliant certification (current).
 * Must be able to successfully obtain/maintain CSSP Infrastructure Support certification within 120 days., * 8+ years of related technical experience with network security technologies, tools, and techniques.
 * 5+ years' experience with large-scale enterprise/global networks in a high-paced, diverse environment.
 * Understanding and experience with the DoD Architecture Framework and other key DoD network architecture and strategic planning instructions.
 * Demonstrated knowledge in planning, directing, and managing a Firewall / Boundary Security Team in an organization similar in size.
 * Firewall experience within the DoW or IC.
 * Demonstrated knowledge of implementation of Perimeter and Internal Firewalls (both physical and virtual contexts)
 * Demonstrated advanced experience in managing baseline configurations across numerous firewalls.
 * Demonstrated advanced experience in evaluating rules to ensure maximum security while minimizing redundancy and processing overhead.
 * Demonstrated experience with researching and fielding new and innovative firewall technology.
 * Experience with F5 platforms/technologies (APM, AFM, SSLO, etc.)
 * Experience with Palo Alto platforms/technologies (Threat Prevention, Wildfire, URL Filtering, Global Protect)
 * Experience with Juniper SRX platforms/technologies.
 * Experience with Online Certificate Status Protocol OCSP revocation.
 * Familiar with DoD PKI, Kerberos, LDAP, Active Directory, Authentication (SAML, OAuth)
 * Ability to describe and troubleshoot TLS/SSL handshake/connection issues.
 * Network design, engineering, and implementation (Advanced Level)
 * Creation of network-related Rough Order of Magnitude (ROM) equipment lists and costing, and Level of Effort (LOE) estimation for labor.
 * Understanding of DoW, DISA, and IC standards and processes.
 * Ability to work weekends and evening hours as needed.

Desired Skills:

 * Juniper JNCIS/JNCIP, Palo Alto PCNSE (or equivalent)
 * F5 Network Certifications

## Description

The Lead Firewall Engineer will join a program providing Network and Cybersecurity services supporting an Intelligence Community customer. The team will work together to support transport and cybersecurity information technology (IT) services across multiple networks and security domains, at multiple locations worldwide, including new facilities and building construction to support the IC mission., * Serves as the focal point for all firewall tasks, operations, and projects.

 * Leads, directs, and manages daily operations, troubleshooting, and maintenance activities for the NSS Boundary work center.
 * Designs, implements, and manages security solutions using F5, Juniper SRX, and Palo Alto to meet project requirements.
 * Ensures systems, devices, and applications under your responsibility and span of control meet applicable STIG/SRG and organizational configuration baselines.
 + Leads regular compliance evaluations and audits.
 + Develops, oversees, maintains, and enforces configuration management processes, Standard Operating Procedures (SOPs), and other documentation as needed/required.
 * Monitors platform performance, logs, software version(s), and configuration drift to identify and mitigate performance, compliance, and security issues.
 * Develops and maintains network architecture diagrams, inventories, and licensing status for capabilities within the team's scope.
 * Provides written reports and oral briefings to contract and government leadership.
 * Coordinates with appropriate stakeholders to ensure task completion and overall customer satisfaction.
 * Provides recommendations on newly submitted customer requests.
 * Evaluates and reports on new/emerging network/communication technologies to enhance capacity, performance, and reliability of the network.
 * Evaluates and recommends changes and/or technology upgrades to address performance, standardization, and industry best practices.
 * Conducts performance assessments, mentors, and coaches personnel.