Lead Firewall Engineer

SITEC Consulting, LLC.; Springfield (VA); On-site; USD 150,000 - 210,000; Full time

Job summary

SITEC Consulting, LLC in Virginia seeks a senior Network Security Lead with an active TS/SCI clearance to drive firewall operations for a large enterprise. You will guide design, risk assessment, and modernization efforts while mentoring staff and coordinating with stakeholders to maintain secure, reliable network performance.

The role requires advanced expertise with Palo Alto, Juniper SRX, and F5 platforms, plus strong knowledge of TLS/SSL, PKI, Kerberos, LDAP, SAML, OAuth and network

Qualifications

• Active TS/SCI clearance with the ability to obtain and maintain a CI polygraph.
• Eight+ years of network security experience, including five years on large enterprise networks.
• Experience leading a firewall or boundary security team.
• Advanced experience with Palo Alto, Juniper SRX, and F5 platforms.
• Strong knowledge of firewall policy, TLS/SSL, PKI, Kerberos, LDAP, SAML, OAuth, and network architecture.
• Experience with network design, cost estimates, and labor estimates.
• Current DoD 8140/8570 IAT Level II certification.
• Ability to obtain CSSP Infrastructure Support certification within 120 days.
• Availability for occasional evening or weekend work.

Responsibilities

• Lead daily firewall operations, maintenance, troubleshooting, and project execution.
• Design and implement solutions using Palo Alto, Juniper SRX, and F5 technologies.
• Review network changes and assess operational and security impacts.
• Maintain secure configuration baselines, architecture diagrams, inventories, procedures, and technical documentation.
• Monitor performance, logs, software versions, and configuration drift.
• Lead compliance reviews, technical evaluations, and modernization efforts.
• Brief stakeholders and mentor engineering personnel.

Skills

Leadership

Firewall operations

Network security

Technical direction

Mentoring

Stakeholder communication

Education

Bachelor's or master's degree in computer science or cybersecurity

Tools

Palo Alto

Juniper SRX

F5

TLS/SSL

PKI

Kerberos

LDAP

SAML

OAuth

Job description

Clearance: Active TS/SCI

Experience: 8+ years

Lead an enterprise boundary security team responsible for firewall operations, engineering, compliance, and modernization. You will provide technical direction, oversee complex troubleshooting, and support secure, reliable network performance.

What You Will Do

• Lead daily firewall operations, maintenance, troubleshooting, and project execution.
• Design and implement solutions using Palo Alto, Juniper SRX, and F5 technologies.
• Review network changes and assess operational and security impacts.
• Maintain secure configuration baselines, architecture diagrams, inventories, procedures, and technical documentation.
• Monitor performance, logs, software versions, and configuration drift.
• Lead compliance reviews, technical evaluations, and modernization efforts.
• Brief stakeholders and mentor engineering personnel.

What You Bring

• Active TS/SCI clearance with the ability to obtain and maintain a CI polygraph.
• At least eight years of network security experience, including five years supporting large enterprise networks.
• Experience leading a firewall or boundary security team.
• Advanced experience with Palo Alto, Juniper SRX, and F5 platforms.
• Strong knowledge of firewall policy, TLS/SSL, PKI, Kerberos, LDAP, Active Directory, SAML, OAuth, and network architecture.
• Experience with network design, implementation, cost estimates, and labor estimates.
• Current DoD 8140/8570 IAT Level II certification.
• Ability to obtain CSSP Infrastructure Support certification within 120 days.
• Availability for occasional evening or weekend work.

Preferred Qualifications

• Bachelor's or master's degree in computer science, cybersecurity, network security, or a related field.
• F5, Juniper, or Palo Alto professional certification.