Lead Firewall Engineer

SITEC ConsultingSpringfield, Virginia🇺🇸United StatesPosted Sep 16, 2026

Why This Role Stands Out

As a Lead Firewall Engineer at SITEC Consulting, you will drive enterprise boundary security, leveraging your expertise with Palo Alto, Juniper SRX, and F5 to modernize critical infrastructure and mentor a talented team. This hybrid role offers significant growth potential and the chance to make a substantial impact on network security for a reputable organization. If you have a TS/SCI clearance and a passion for advanced network security, this is an excellent opportunity to advance your career.

Quick Overview

Seniority

Mid Senior

Employment type

Full Time

Work mode

Hybrid

Location

Springfield, Virginia, United States

Job Description

Job Description Job Description Lead Firewall EngineerClearance: Active TS/SCIExperience: 8+ yearsLead an enterprise boundary security team responsible for firewall operations, engineering, compliance, and modernization. You will provide technical direction, oversee complex troubleshooting, and support secure, reliable network performance. What You Will DoLead daily firewall operations, maintenance, troubleshooting, and project execution. Design and implement solutions using Palo Alto, Juniper SRX, and F5 technologies. Review network changes and assess operational and security impacts.

Maintain secure configuration baselines, architecture diagrams, inventories, procedures, and technical documentation. Monitor performance, logs, software versions, and configuration drift. Lead compliance reviews, technical evaluations, and modernization efforts. Brief stakeholders and mentor engineering personnel. What You BringActive TS/SCI clearance with the ability to obtain and maintain a CI polygraph. At least eight years of network security experience, including five years supporting large enterprise networks. Experience leading a firewall or boundary security team.

Advanced experience with Palo Alto, Juniper SRX, and F5 platforms. Strong knowledge of firewall policy, TLS/SSL, PKI, Kerberos, LDAP, Active Directory, SAML, OAuth, and network architecture. Experience with network design, implementation, cost estimates, and labor estimates. Current DoD 8140/8570 IAT Level II certification. Ability to obtain CSSP Infrastructure Support certification within 120 days. Availability for occasional evening or weekend work. Preferred QualificationsBachelor 's or master's degree in computer science, cybersecurity, network security, or a related field.

F5, Juniper, or Palo Alto professional certification. Job Posted by ApplicantPro