Senior Firewall Engineer - Cisco Secure & FMC (Part-time)

Cypress Consulting; Washington (District of Columbia); Hybrid; USD 145,000 - 158,000; Part time

Job summary

Cypress Consulting in Washington, DC is seeking a part-time firewall engineer to lead design and validation of secure enterprise networks. You will implement high-availability controls and write robust firewall policies in collaboration with network engineers.

Responsibilities include building rule matrices, configuring Cisco Secure Firewall and FMC, and documenting changes with pilot tests and controlled rollouts. A Secret clearance is required for on-site work.

Qualifications

• Active Secret clearance and U.S. person status are required.
• Hands-on experience with Cisco Secure Firewall and FMC.
• Ability to plan and validate security changes including failover and rollback.

Responsibilities

• Assess firewall architecture, security zones, traffic flows, policies, logging and high-availability behavior.
• Co-design secure network integration with the network lead for routing, inspection and logging.
• Develop a firewall rule matrix covering sources, destinations, protocols and ports.
• Engineer and administer Cisco Secure Firewall and FMC, including HA configuration.
• Document changes and support pilot testing, staged cutovers and rollback.
• Validate policy and connectivity, investigate post-change issues and document mitigations.
• Maintain configuration records, design docs and knowledge-transfer materials.

Skills

Firewall policy development

Security zones & segmentation

Traffic analysis

Failover planning

Compliance & risk mitigation

Tools

Cisco Secure Firewall

Firepower Management Center (FMC)

High-availability configurations

Job description

Cypress Consulting in Washington, DC is seeking a part-time firewall engineer to lead design and validation of secure enterprise networks. You will implement high-availability controls and write robust firewall policies in collaboration with network engineers.

Responsibilities include building rule matrices, configuring Cisco Secure Firewall and FMC, and documenting changes with pilot tests and controlled rollouts. A Secret clearance is required for on-site work.