Senior Firewall Architect & Team Lead

GCyber; Arlington (VA); On-site; USD 140,000 - 200,000; Full time

Benefits offered by this job

Paid leave

Parental leave

Disability insurance

Health insurance

401(k) matching

Professional development

Commuter benefits

Parking

Job summary

GCyber is seeking a Senior Firewall Engineer / Team Lead to support the J6 Pentagon enterprise. You will lead a team of firewall engineers, act as the senior technical authority for firewall design, security, operations, and modernization in classified and unclassified environments.

You will manage change control end‑to‑end, ensure policy compliance with STIG/NIST/PPSM guidance, and mentor staff in design patterns and troubleshooting. DoD TS/SCI clearance and relevant certifications are required.

Qualifications

• Active DoD TS/SCI clearance.
• DoD 8140 IAT II certification (Security+, CCNA‑Security, CySA+, CND, GICSP, GSEC, SSCP).
• Industry Firewall Certification (CCNP, Palo Alto, Juniper, etc.).
• BA/BS degree or equivalent experience.
• 7+ years in enterprise firewall engineering/operations, with 3+ years in a DoD environment.
• Experience leading firewall engineers or security staff.
• Deep knowledge of firewall architecture, zones, DMZs, NAT, HA, logging, and traffic analysis.
• Hands-on with Cisco ASA & Cisco Firepower; familiarity with FireMon, Stealthwatch, SIEM; DoD STIGs/NIST/PPSM.
• Strong leadership, writing, and customer communication skills.
• Willingness for after-hours support.

Responsibilities

• Lead a team of firewall engineers and administrators; prioritize work and mentor staff.
• Serve as technical authority for firewall architecture and security controls.
• Own firewall change management end-to-end including risk and approvals.
• Maintain rule base hygiene; remediate issues.
• Escalate and diagnose complex connectivity and performance issues with packet analysis.
• Manage firewall platform lifecycle including upgrades and migrations.
• Ensure configurations meet STIG/NIST/PPSM/NSA requirements; produce artifacts.
• Lead Cisco ASA/Firepower configurations and integration with FireMon/Stealthwatch/SIEM.
• Author SOPs, reports, change records, diagrams and docs.
• Interface with Government customers and stakeholders on requirements and status.

Education

BA/BS degree or equivalent experience

DoD 8140 IAT II certification

Industry Firewall Certification (CCNP, Palo Alto, Juniper)

Tools

Cisco ASA

Cisco Firepower

FireMon

Stealthwatch

Enterprise SIEM

Job description

GCyber is seeking a Senior Firewall Engineer / Team Lead to support the J6 Pentagon enterprise. You will lead a team of firewall engineers, act as the senior technical authority for firewall design, security, operations, and modernization in classified and unclassified environments.

You will manage change control end‑to‑end, ensure policy compliance with STIG/NIST/PPSM guidance, and mentor staff in design patterns and troubleshooting. DoD TS/SCI clearance and relevant certifications are required.