Senior Firewall Engineer

Leidos; United States; On-site; USD 160,000 - 230,000; Full time

Job summary

Leidos Homeland Sector seeks a senior engineer to lead design, integration, and hands-on implementation of enterprise firewall and network security for private cloud SDDC modernization in a NATO-secured environment.

You will work with ECS, CPS, IaaS, and SMC teams, delivering secure, automated data protection solutions and security controls across the platform, with ~25% travel to The Hague and other NATO locations.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, Engineering, Cybersecurity, or related discipline with 8–12 years of relevant experience.
• Active NATO Secret clearance (or higher).
• Demonstrated experience designing and implementing enterprise firewall and network security solutions.
• Strong experience with Palo Alto Networks firewalls, including policy management, threat prevention, and security architecture.
• Experience with VMware NSX Distributed Firewall, Cisco security technologies, or equivalent enterprise network security platforms.
• Strong understanding of enterprise security architecture, defence-in-depth principles, network segmentation, identity and access management, and secure systems design.
• Experience integrating firewall solutions into VMware private cloud, SDN, or hybrid cloud environments.
• Extensive experience with implementing security automation using IaC (Terraform, Ansible, Python).
• Strong understanding of enterprise networking, routing, switching, VPNs, PKI, and cybersecurity practices.
• Experience operating within Agile, SAFe, or DevSecOps delivery frameworks.

Responsibilities

• Lead the design, automation, integration, and hands-on implementation of enterprise firewall and network security solutions for private cloud SDDC modernization.
• Design and implement secure firewall architectures spanning ECS, CPS, IaaS, DevOps platforms, and SMC.
• Develop and implement network segmentation strategies using Palo Alto, NSX, Cisco, or equivalent security platforms.
• Design and integrate enterprise security controls, identity-based access, and defence-in-depth for NATO ON security requirements.
• Collaborate with cybersecurity, networking, virtualization, and infrastructure teams to integrate security services.
• Develop security automation using IaC, Ansible, Terraform, APIs, to standardize firewall configuration and policy management.
• Integrate COTS security solutions into secure enterprise environments ensuring NATO policy compliance.
• Develop and maintain firewall architectures, security designs, implementation plans, and engineering docs.
• Participate in Agile development activities including sprint planning and security architecture reviews.
• Mentor engineers on enterprise firewall engineering and secure-by-design practices.
• Travel to NATO sites to install, configure, integrate, validate, and troubleshoot firewall solutions; support deployment and acceptance activities.
• Support cybersecurity planning, infrastructure modernization, security accreditation, and proposal development.

Skills

NATO security clearance

Firewall design

Palo Alto firewalls

VMware NSX DF

Network security architecture

IaC automation

Ansible

Terraform

Python scripting

DevSecOps

Leadership

Education

Bachelor's degree in CS/IT/Engineering

Master's degree

Tools

Palo Alto Networks

VMware NSX

Cisco security

Terraform

Ansible

Python

Job description

Description

Join the Leidos Homeland Sector and contribute to a high-impact international program delivering secure, next-generation private cloud capabilities within a NATO-secured environment. This senior-level role offers the opportunity to apply deep technical expertise to the design, integration, and hands-on implementation of enterprise backup, recovery, and cyber resilience solutions supporting a Software-Defined Data Center (SDDC).

You will help deliver secure, resilient, and automated data protection capabilities across Enterprise Core Services (ECS), Client Provisioning Services (CPS), Infrastructure as a Service (IaaS), and Service Management Control (SMC). Working closely with infrastructure, virtualization, cybersecurity, and DevOps teams, you will support the full delivery lifecycle—from solution design and integration through site deployment, testing, disaster recovery validation, and customer acceptance.

This position offers an exciting opportunity to work directly with international customers and technical partners, with approximately 25% travel to The Hague, Netherlands, and other NATO locations as needed to support solution integration, implementation, testing, and customer acceptance. It is an ideal opportunity for a senior engineering leader interested in advancing mission-critical cloud capabilities while gaining valuable international program experience.

Responsibilities

• Lead the design, automation, integration, and hands-on implementation of enterprise firewall and network security solutions supporting private cloud SDDC modernization initiatives.


• Design and implement secure firewall architectures supporting Enterprise Core Services (ECS), Client Provisioning Services (CPS), Infrastructure as a Service (IaaS), DevOps platforms, and Service Management Control (SMC).


• Develop and implement network segmentation strategies using Palo Alto Networks, VMware NSX Distributed Firewall, Cisco security technologies, or equivalent enterprise security platforms.


• Design and integrate enterprise security controls, micro-segmentation, identity-based access controls, and defence-in-depth principles supporting NATO Operational Network (ON) security requirements.


• Collaborate with cybersecurity, networking, virtualization, and infrastructure engineering teams to integrate enterprise security services into platform solutions.


• Develop security automation using Infrastructure as Code (IaC), Ansible, Terraform, APIs, or similar automation technologies to standardize firewall configuration and policy management.


• Integrate Commercial Off-The-Shelf (COTS) security solutions into secure enterprise environments while ensuring compliance with NATO security policies, programme requirements, and customer security architecture.


• Develop and maintain firewall architectures, security designs, implementation plans, configuration standards, and engineering documentation.


• Participate in Agile development activities including sprint planning, technical reviews, security architecture reviews, and cross-functional engineering collaboration.


• Mentor engineers and provide technical guidance on enterprise firewall engineering, network security, defence-in-depth principles, and secure-by-design engineering practices.


• Travel to NATO sites to install, configure, integrate, validate, and troubleshoot enterprise firewall and network security solutions while supporting deployment, commissioning, security testing, and customer acceptance activities.


• Support cybersecurity planning, infrastructure modernization initiatives, security accreditation activities, and proposal development.

Required Experience, Skills, And Education

• Bachelor's degree in Computer Science, Information Technology, Engineering, Cybersecurity, or related discipline with 8–12 years of relevant experience, or Master's degree with 6–10 years of relevant experience.


• Active NATO Secret clearance (or higher).


• Demonstrated experience designing and implementing enterprise firewall and network security solutions.


• Strong experience with Palo Alto Networks firewalls, including policy management, threat prevention, and security architecture.


• Experience with VMware NSX Distributed Firewall, Cisco security technologies, or equivalent enterprise network security platforms.


• Strong understanding of enterprise security architecture, defence-in-depth principles, network segmentation, identity and access management, and secure systems design.


• Experience integrating firewall solutions into VMware private cloud, SDN, or hybrid cloud environments.


• Extensive experience with implementing security automation using Infrastructure as Code (IaC), Ansible, Terraform, Python, or similar technologies.


• Strong understanding of enterprise networking, routing, switching, VPNs, PKI, and enterprise cybersecurity practices.


• Experience operating within Agile, SAFe, or DevSecOps delivery frameworks.


• Strong leadership, communication, stakeholder engagement, and technical collaboration skills.


• Experience supporting defence, government, or highly regulated development environments.

Preferred Experience, Skills, And Education

• Palo Alto Networks Certified Network Security Engineer (PCNSE) or equivalent certification.


• VMware NSX certification or equivalent SDN security certification.


• Experience supporting NATO environments and compliance frameworks.


• Experience with F5 Application Delivery Controllers (ADC) and Web Application Firewalls (WAF).


• Experience with Security Information and Event Management (SIEM), Security Orchestration, Automation and Response (SOAR), or enterprise security monitoring platforms.


• Familiarity with Python, REST APIs, and security automation technologies.


• Experience supporting large-scale infrastructure modernization and enterprise platform engineering initiatives.

If you believe you are the victim of a scam, contact your local law enforcement and report the incident to the U.S. Federal Trade Commission.

Securing Your Data

Beware of fake employment opportunities using Leidos’ name. Leidos will never ask you to provide payment-related information during any part of the employment application process (i.e., ask you for money), nor will Leidos ever advance money as part of the hiring process (i.e., send you a check or money order before doing any work). Further, Leidos will only communicate with you through emails that are generated by the Leidos.com automated system – never from free commercial services (e.g., Gmail, Yahoo, Hotmail) or via WhatsApp, Telegram, etc. If you received an email purporting to be from Leidos that asks for payment-related information or any other personal information (e.g., about you or your previous employer), and you are concerned about its legitimacy, please make us aware immediately by emailing us at [e-mail].

If you believe you are the victim of a scam, contact your local law enforcement and report the incident to the U.S. Federal Trade Commission.

Commitment to Non-Discrimination

All qualified applicants will receive consideration for employment without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, or any other basis prohibited by law. Leidos will also consider for employment qualified applicants with criminal histories consistent with relevant laws.