Firewall Engineer

SkyePoint Decisions; Springfield (VA); Hybrid; USD 150,000 - 174,000; Full time

Benefits offered by this job

Certification incentive

PTO

Floating federal holidays

Health insurance

HSAs

FSAs

401(k) matched

Life Insurance

Disability insurance

Job summary

SkyePoint Decisions in Springfield, VA seeks a Firewall Engineer to support a Department of State customer. This is a hybrid role based in Springfield, VA, contingent upon customer approval.

The candidate will design and configure firewall solutions (Palo Alto, ForcePoint), analyze logs, and implement cloud security measures. U.S. citizenship and ability to obtain Top Secret are required.

Qualifications

• Firewall engineering experience including design and configuration.
• Experience with Palo Alto and ForcePoint firewall installation, configuration and administration.
• Experience pulling firewall logs and analyzing effectiveness.
• Understanding of cloud security solutions and firewall engineering.
• Secret clearance with ability to obtain Top Secret.
• Experience delivering firewall engineering services in a cloud environment.
• Experience with Microsoft Cloud App Security.
• Experience delivering services to a federal client.
• 5–10 years hands-on IT security experience.
• U.S. citizenship required.

Responsibilities

• Engage in attacks against the infrastructure, develop security tools, analyze access patterns and hacking behavior, audit source code for vulnerabilities.
• Identify cyber security problems and recommend modifications to reduce risks.
• Implement security solutions to integrate into the existing network.
• Review policies and write guidance and standards; enforce security requirements.
• Review new systems for security risks and resolve integration issues.
• Investigate and respond rapidly to security incidents using packet captures and logs.

Skills

Firewall engineering

Palo Alto firewalls

ForcePoint firewall

Firewall logs analysis

Cloud security

Microsoft Cloud App Security

Federal client experience

US citizenship

Security clearance eligibility

Cloud deployment in security

Top Secret eligibility

Citizenship verification

Tools

CCNA

CCIE

Network+

Job description

SkyePoint Decisions is a leading Cybersecurity Architecture and Engineering, Critical Infrastructure and Operations, and Applications Development and Maintenance IT service provider headquartered in Dulles, Virginia with operations across the U.S. We provide innovative enterprise-wide solutions as well as targeted services addressing the complex challenges faced by our federal government clients. Our focus is on enabling our clients to deliver their mission most efficiently and effectively – anytime, anywhere, securely. We combine technical expertise, mission awareness, and an empowered workforce to produce meaningful results.

This is a contingent position based upon customer approval.

SkyePoint Decisions is seeking a Firewall Engineer to support a Department of State customer.

This position is hybrid located in Springfield, VA.

Responsibilities

• Engage in attacks against the infrastructure, develop security tools, analyze access patterns and hacking behavior, audit source code for vulnerabilities, work with the team to improve best practices and deploy attack detection and prevention tools.
• Identify significant, actual, and potential cyber security problems, trends and weaknesses and recommend specific modifications and solutions to reduce information systems security risks.
• Implement security solutions to integrate into existing network environment. Establish requirements and make recommendations on the appropriate infrastructure protection tools, methods and technologies.
• Review established policies, write policy guidance and standards. Establish technical or procedural enforcements for pertinent policies.
• Review proposed new systems, networks and software designs for potential security risks and resolve integration security issues across disciplines. Define the scope and level of detail for applicable security plans and policies.
• Investigate and respond rapidly to security incidents. Acquire, analyze and interpret packet captures and logs to accomplish rapid and accurate incident response.

Required Qualifications

• Firewall engineering experience to include design and configuration of firewall solutions
• Experience with Palo Alto/ForcePoint firewall installation, configuration, and administration
• Experience pulling firewall logs and performing analysis on the effectiveness of firewall solutions
• Understanding of cloud security solutions and associated firewall engineering
• Secret security clearance with ability to obtain a Top Secret
• Experience delivering and deploying firewall engineering services in a cloud environment
• Experience with Microsoft Cloud Access Security
• Experience delivering services to federal client
• 5-10 years hands‑on experience in the IT security space
• Must be a U.S. citizen

Preferred Qualifications

• CCNA
• CCIE
• Network+
• Networking Experience in cloud environments
• Microsoft Express Route
• Zero Trust Networking
• SD-WAN

Compensation

Salary Range: $150,000-$174,000

The SkyePoint Decisions salary range for this position is a general guideline only. It represents an estimated range for this position and is just one piece of our total compensation package.

Salary at SkyePoint is determined by various factors, including but not limited to location, work schedule, the candidate’s combination of education, knowledge, skills, competencies, and experience, as well as contract‑specific affordability, market data and business considerations.

In addition to a competitive salary, SkyePoint offers benefits including a certification incentive program, PTO, floating federal holiday options, several insurance options including HMO and High Deductible plans with Health Savings Accounts (HSAs), Flex Spending Accounts (FSAs), Full Dental Plans, Vision, ST/LT Disability, Life Insurance, and 401(k) matched.

What We Can Offer You

• At SkyePoint, we foster a culture of gratitude and give back to our employees, families, and communities.
• Comprehensive benefits package with several insurance options, PTO, floating federal holidays, and 401(k) matching.
• Certificate Incentive Program to support professional development and reward new certifications aligned with business needs.

SkyePoint Decisions is a participating E‑Verify Employer.

U.S. Citizenship is required for most positions.

Equal Opportunity Employer / Veterans / Disabled.

SkyePoint Decisions is ISO 9001:2015 and ISO/IEC 27001:2013 certified. The company is appraised at CMMI Level 3 for Services and Development.