Senior DoD Firewall Architect - On-Site Pentagon

Socket.dev; Arlington (VA); On-site; USD 120,000 - 180,000; Full time

Job summary

Socket.dev in Arlington, VA is seeking a Senior Firewall Engineer to design, implement, and manage complex firewall solutions for a Department of Defense environment. This role is 100% on-site at the Pentagon, requiring deep expertise with Cisco ASA/Firepower, Juniper SRX, and Palo Alto technologies.

The candidate will monitor firewall performance, enforce security policies, and collaborate with IT and security teams to ensure robust, compliant network protections.

Qualifications

• Bachelor’s degree with 12+ years of directly relevant experience.
• Minimum of 3 years of firewall experience within a Department of Defense environment.
• Advanced experience managing firewall configurations across multiple devices.

Responsibilities

• Design, implement, and manage firewall solutions using Cisco ASA/Firepower, Juniper SRX, and Palo Alto technologies.
• Monitor firewall performance and security logs to identify, evaluate, and mitigate threats.
• Develop, maintain, and enforce network security policies and procedures.
• Perform system audits to ensure compliance with applicable standards and regulations.
• Collaborate with IT, security, and network teams to integrate firewall solutions across the environment.
• Troubleshoot and resolve network and firewall-related issues and document actions.

Skills

Firewall design

Security networking

Team leadership

DoD environment

Education

Bachelor’s degree

Tools

Cisco ASA/Firepower

Juniper SRX

Palo Alto

Job description

Socket.dev in Arlington, VA is seeking a Senior Firewall Engineer to design, implement, and manage complex firewall solutions for a Department of Defense environment. This role is 100% on-site at the Pentagon, requiring deep expertise with Cisco ASA/Firepower, Juniper SRX, and Palo Alto technologies.

The candidate will monitor firewall performance, enforce security policies, and collaborate with IT and security teams to ensure robust, compliant network protections.