Senior Firewall Architect – DoD TS/SCI, On-Site Pentagon

Leidos; Washington; On-site; USD 131,000 - 237,000; Full time

Job summary

Leidos is seeking a Senior Firewall Engineer for the GSM-O program, located 100% on-site at the Pentagon. You will design, implement, and manage complex firewall solutions to protect DoD network infrastructure and ensure secure operations.

The role requires expertise with Cisco ASA, Juniper SRX, and Palo Alto, plus leadership of a firewall team, change-management governance, and strong security policy development. Applicants must hold an active TS/SCI clearance and relevant certifications.

Qualifications

• BS degree and 12+ years of directly relevant experience.
• 3+ years of firewall experience within the DoD environment.
• Experience leading a firewall team and implementing perimeter/internal firewalls.
• Active DoD TS/SCI clearance required; DoD 8140 certs preferred.
• Certification prior to start in Juniper, Cisco or Palo Alto.

Responsibilities

• Design, implement, and manage firewall solutions using Cisco ASA/Firepower, Juniper SRX and Palo Alto.
• Monitor firewall performance and security logs to identify and mitigate threats.
• Develop and enforce network security policies and procedures.
• Perform system audits to ensure compliance with standards and regulations.
• Collaborate with IT, Security and Network teams to integrate firewall solutions.
• Troubleshoot and resolve firewall issues and document in ticket systems.
• Maintain and update firewall configurations (policies/ACLs) as approved by Change Management.
• Lead and mentor personnel supporting the Firewall Task Area.

Skills

Firewall design

Cisco ASA

Juniper SRX

Palo Alto

Security networking

Education

BS degree

Tools

Ticketing systems

Job description

Leidos is seeking a Senior Firewall Engineer for the GSM-O program, located 100% on-site at the Pentagon. You will design, implement, and manage complex firewall solutions to protect DoD network infrastructure and ensure secure operations.

The role requires expertise with Cisco ASA, Juniper SRX, and Palo Alto, plus leadership of a firewall team, change-management governance, and strong security policy development. Applicants must hold an active TS/SCI clearance and relevant certifications.