Senior Firewall Engineer with Security Clearance

Crimson Phoenix; Springfield (VA); On-site; USD 110,000 - 170,000; Full time

Job summary

Crimson Phoenix is seeking a Senior Firewall Engineer to join the Network Security Services team. You will research, analyze, and implement enterprise-wide security solutions to support customer missions and corporate goals.

Responsibilities include designing secure architectures, conducting risk assessments, and managing security infrastructure across WAN/LAN/CAN and remote sites. You will document incidents, develop SOPs, and liaise with customers and government authorities on security status

Qualifications

• Bachelor's degree in a technical field or related experience.
• DoD 8140/8570 IAT II certifications required or in process.
• CSSP Infrastructure Certification must be obtained within 120 days of start date.

Responsibilities

• Design, analyze, test, and implement secure network architectures.
• Conduct risk assessments and provide design recommendations.
• Manage WAN, LAN, CAN, and remote network security; incident and problem management.
• Oversee security infrastructure sustainment and configuration (firewalls, F5, gateways, IDS).
• Oversee incident reporting, documentation, and investigation; drive corrective actions.
• Develop and implement SOPs for security tools.
• Evaluate new network security technologies to enhance capabilities.
• Liaise with contract and customer management and the DAA on security status, policies, and procedures.

Skills

Security architecture design

Risk assessment

Incident management

Security policy liaison

Network security

Education

Bachelor's degree in a related field

DoD 8140.01 & DoD 8570.01‑M IAT Level II certified

CSSP Infrastructure Certification (within 120 days)

Tools

Palo Alto Networks

Juniper Networks

Cisco devices

F5 Big-IP Load Balancer

FireEye IDS

Windows Server / Active Directory

VMware

RHEL

Job description

Senior Firewall Engineer

What You Will Be Doing: As a member of the Network Security Services team, you will work with both corporate and customer leadership to research, analyze, and implement enterprise-wide network security solutions/capabilities/enhancements to support customer business/mission goals and objectives.

• Assist with design, analysis, testing, and implementation of state-of-the‑art secure network architectures.
• Conduct risk assessment and provide design recommendations.
• Manage WAN, LAN, CAN, and remote network security as well as incident and problem management.
• Oversee security infrastructure sustainment, maintenance, and advanced configuration. (firewalls, F5 load balancers, web gateways, mail gateways, IDS, and management tools).
• Oversee the reporting, documentation, and investigation of all security‑related incidents; lead the development and implementation of corrective measures.
• Develop and execute standard operating procedures (SOPs) for security tools.
• Evaluate and report on new network Security technologies to enhance the capabilities of the network.
• Act as liaison to the contract and customer management, and government Designated Approving Authority (DAA) regarding network security status, policies, and procedures.

Must Have:

• TS/SCI (current)
• Must be able to successfully pass/maintain a U.S. Government Polygraph (post‑hire)
• BA/BS Degree and typically between Two (2) and Eight (8) years of related technical experience in Network Security with large-scale enterprise/global networks in a high‑paced, diverse environment. (Additional experience may be considered instead of a degree.)
• DoD 8140.01 and DoD 8570.01‑M IAT Level II compliant certification (current)
• Must be able to successfully obtain/maintain CSSP Infrastructure Support certification within 120 days of start date (post‑hire)
• Firewalls (e.g. Palo Alto, Juniper, Cisco, etc.)
• Routers/Switches (e.g. Juniper, Cisco, etc.)
• Intrusion Detection Systems / IDS Products (e.g. FireEye, F5 Load Balancer, Cisco FTD, etc.)
• Unix, RHELS OS, Windows Enterprise AD, VMware