Senior DoD Firewall Engineer – Palo Alto & TS/SCI

Leidos; Arlington (VA); On-site; USD 92,000 - 167,000; Full time

Job summary

Leidos is seeking a seasoned Firewall Engineer to support the CESO GSM-O II task order in Arlington, VA. The role requires 10+ years in firewall engineering, hands-on Palo Alto experience, and DoD security clearances. Onsite work is required with occasional travel in the Washington DC area.

The candidate will lead security posture improvements, remediation of misconfigurations, and coordination with DISA CESO teams, ensuring ITIL/DevSecOps aligned processes and service delivery excellence.

Qualifications

• Bachelor's degree and 8+ years of directly relevant experience.
• 5+ years of hands-on Cisco / Palo Alto Firewall experience in both engineering and operations.
• Active DoD Top Secret security clearance; eligible for TS/SCI; CI/Poly may be required.

Responsibilities

• Identify and remediate misconfigurations, security gaps, and firewall/load balancer issues.
• Provide Tier 3 support to operations network administrations.
• Maintain HW/SW components at vendor-supported levels.
• Support Continuity of Operations (COOP).
• Conduct monthly firewall assessments and generate reports with improvement recommendations.
• Develop/participate in After Action Reports (AARs).
• Provide guidance on Palo Alto devices within DISA CESO enterprise architecture.
• Engage with DISA CESO and mission partner groups; adhere to STIGs/JSIG.

Skills

Palo Alto Firewall

Panorama

VPN Configuration

Firewalls

AWS VM

Education

Bachelor's degree

Tools

Panorama

Cisco

AWS

Job description

Leidos is seeking a seasoned Firewall Engineer to support the CESO GSM-O II task order in Arlington, VA. The role requires 10+ years in firewall engineering, hands-on Palo Alto experience, and DoD security clearances. Onsite work is required with occasional travel in the Washington DC area.

The candidate will lead security posture improvements, remediation of misconfigurations, and coordination with DISA CESO teams, ensuring ITIL/DevSecOps aligned processes and service delivery excellence.