Firewall Architect

Belcan LLC; Springfield (VA); On-site; USD 170,000 - 204,000; Full time

Benefits offered by this job

Health care

Dental

Vision

401(k)

Education assistance

Paid time off

Job summary

A leading engineering services firm in Springfield, VA is seeking an experienced Firewall Architect to design robust security solutions. The ideal candidate will have a BS in Computer Science and over 10 years of experience in network security, specifically with technologies like Palo Alto and Cloudflare. This position offers a competitive salary range of $170,000 - $204,000 along with comprehensive benefits.

Qualifications

• 10+ years of relevant experience in firewall architecture and network security.
• Proven experience as a firewall architect or similar focused role.
• Relevant certifications are a plus.

Responsibilities

• Design and architect firewall solutions including access control.
• Develop and review security policies for firewall deployment.
• Oversee installation and maintenance of firewalls and network security devices.
• Lead and mentor the firewall engineering team.

Skills

Deep technical knowledge of firewall technologies

Experience engineering Cloudflare solutions

Experience integration with Okta

Experience with Azure Portal based integrations

Demonstrated experience with NAT'ing

Experience with TLS inspection on Palo Alto firewalls

Engagement with Palo Alto Vendor

Experience with AWS-S

Expertise with PDNS and Zscaler

Familiarity with MDCA logs

Education

BS in Computer Science

Tools

Palo Alto

Fortinet

Cloudflare

Zscaler

AWS

Job description

Innovative, Secure, and Outcome-Based Solutions

Job Summary:

A Firewall Architect job in Springfield, VA is currently available through Belcan at one of our key Federal Civilian clients. To be considered for this role, you will have a BS in Computer Science and 10+ years of relevant experience.

Job Duties:

• Design and architect robust firewall solutions, including network segmentation, access control, and for both on-prem and cloud-based solutions.
• Develop, review, and approve security policies and standards for firewall deployment.
• Create and maintain comprehensive network firewall diagrams, flow charts, and documentation for all products.
• Provide subject matter expertise and technical consultation to other teams on design and best practices.
• Oversee the installation, configuration, and maintenance of firewalls, VPNs, and other network security devices.
• Design the firewall rule base, ensuring adherence to least privilege principles and business requirements.
• Upon request by Division management, participate in security incident response, post-event analysis, and the development of incident response procedures.
• Stay current with emerging technologies, and industry trends.
• Conduct security assessments and testing to identify and mitigate vulnerabilities.
• Collaborate with vendors to evaluate and implement new products.
• Communicate technical solutions and risks to both technical and executive audiences.
• Lead and mentor the firewall engineering team, offering guidance and technical expertise.
• Work closely with network engineers to design the best solutions for the network.

Required Qualifications:

• Deep technical knowledge of firewall technologies (e.g., Palo Alto, Fortinet).
• Experience engineering Cloudflare solutions leveraging RBI and implementations
• Experience integration with Okta integrations
• Experience with Azure Portal based integrations.
• Ability to work with network engineers to understand design and impacts on firewall architecture
• Demonstrated experience with NAT'ing, URI redirect and Origin rules
• Experience with TLS inspection on the Palo Alto firewalls
• Provided guidance to NPA on creating a "new zone" with Cloudflare for the first time
• Engaged with Palo Alto Vendor on TLS Inspection sizing effort
• Experience with integration of vCenter with Okta and Cloudflare
• Experienced with designing solutions leveraging AWS-S
• Expertise with PDNS and Zscaler to support global deployments.
• Experienced with Zscaler and Zscaler's DNS gateway and converting unencrypted, plaintext DNS queries into encrypted DNS-over-HTTPS (DoH)traffic
• Deep knowledge of Panorama
• Experience with asymmetric routing issues
• Familiarity with usage of MDCA logs.

Preferred Qualifications & Skills:

• Proven experience as a firewall architect, network architect, or similar role focused on network security.
• Proficiency in network protocols, routing, and network segmentation.
• Familiarity with cloud networking and SD-WANtechnologies.
• Experience with security incident response and vulnerability management.
• Strong documentation and diagramming skills.
• Excellent communication and leadership skills.
• Relevant certifications are a plus.

Compensation:

We provide a competitive pay and benefits package. This position is offering a salary range of $170,000 - $204,000. Belcan considers several factors when extending an offer, including but not limited to education, experience, geographic location, and discipline. Benefits offered may include health care, dental, vision, life insurance; 401(k); education assistance; paid time off including PTO, holidays, and any other paid leave required by law.

Belcan is an equal opportunity employer. Your application and candidacy will not be considered based on race, color, sex, religion, creed, sexual orientation, gender identity, national origin, disability, genetic information, pregnancy, veteran status or any other characteristic protected by federal, state or local laws.