Senior Firewall Architect for Secure NATO Private Cloud

Leidos; United States; On-site; USD 160,000 - 230,000; Full time

Job summary

Leidos Homeland Sector seeks a senior engineer to lead design, integration, and hands-on implementation of enterprise firewall and network security for private cloud SDDC modernization in a NATO-secured environment.

You will work with ECS, CPS, IaaS, and SMC teams, delivering secure, automated data protection solutions and security controls across the platform, with ~25% travel to The Hague and other NATO locations.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, Engineering, Cybersecurity, or related discipline with 8–12 years of relevant experience.
• Active NATO Secret clearance (or higher).
• Demonstrated experience designing and implementing enterprise firewall and network security solutions.
• Strong experience with Palo Alto Networks firewalls, including policy management, threat prevention, and security architecture.
• Experience with VMware NSX Distributed Firewall, Cisco security technologies, or equivalent enterprise network security platforms.
• Strong understanding of enterprise security architecture, defence-in-depth principles, network segmentation, identity and access management, and secure systems design.
• Experience integrating firewall solutions into VMware private cloud, SDN, or hybrid cloud environments.
• Extensive experience with implementing security automation using IaC (Terraform, Ansible, Python).
• Strong understanding of enterprise networking, routing, switching, VPNs, PKI, and cybersecurity practices.
• Experience operating within Agile, SAFe, or DevSecOps delivery frameworks.

Responsibilities

• Lead the design, automation, integration, and hands-on implementation of enterprise firewall and network security solutions for private cloud SDDC modernization.
• Design and implement secure firewall architectures spanning ECS, CPS, IaaS, DevOps platforms, and SMC.
• Develop and implement network segmentation strategies using Palo Alto, NSX, Cisco, or equivalent security platforms.
• Design and integrate enterprise security controls, identity-based access, and defence-in-depth for NATO ON security requirements.
• Collaborate with cybersecurity, networking, virtualization, and infrastructure teams to integrate security services.
• Develop security automation using IaC, Ansible, Terraform, APIs, to standardize firewall configuration and policy management.
• Integrate COTS security solutions into secure enterprise environments ensuring NATO policy compliance.
• Develop and maintain firewall architectures, security designs, implementation plans, and engineering docs.
• Participate in Agile development activities including sprint planning and security architecture reviews.
• Mentor engineers on enterprise firewall engineering and secure-by-design practices.
• Travel to NATO sites to install, configure, integrate, validate, and troubleshoot firewall solutions; support deployment and acceptance activities.
• Support cybersecurity planning, infrastructure modernization, security accreditation, and proposal development.

Skills

NATO security clearance

Firewall design

Palo Alto firewalls

VMware NSX DF

Network security architecture

IaC automation

Ansible

Terraform

Python scripting

DevSecOps

Leadership

Education

Bachelor's degree in CS/IT/Engineering

Master's degree

Tools

Palo Alto Networks

VMware NSX

Cisco security

Terraform

Ansible

Python

Job description

Leidos Homeland Sector seeks a senior engineer to lead design, integration, and hands-on implementation of enterprise firewall and network security for private cloud SDDC modernization in a NATO-secured environment.

You will work with ECS, CPS, IaaS, and SMC teams, delivering secure, automated data protection solutions and security controls across the platform, with ~25% travel to The Hague and other NATO locations.