Next Generation Firewall Engineer

Leidos is seeking a Next Generation Firewall Engineer to join our AGUN Migration team.  This position will be 100% remote with some associated travel.

PROGRAM SUMMARY:
The AGUN program is a highly demanding mission and requires expert technical and professional management to support the Army’s global wide area network and security infrastructure. This role is remote and will be supporting a large and complex network migration and operations for the US Army. 

CLEARANCE REQUIREMENT: 
• Must currently possess and be able to maintain an active DoD SECRET security clearance. (US Citizenship required)

PRIMARY RESPONSIBILITIES:
•Operate and maintain secure network solutions operated as a centralized enterprise capability for the United States Army
•Partner with key stakeholders and technical experts to perform legacy environment discovery, assessing current capabilities, configurations, and requirements to provide network firewall migration support for the Army global network.   
•Analyze and understand complex firewall security zones and policies with the ability to transform policies between multiple vendor firewall devices while meeting mission requirements.  
•Support secure access solutions leveraging zero trust network access (ZTNA) including support for creation of new access policies and maintenance of existing policies.  
•Integrate capacity planning and scaling of network and security stack environments into the overall operational support processes and staff.
•Collect, investigate, and identify network resource management strategies and techniques to meet capacity and performance requirements 
•Work with information assurance teams and the AGUN cybersecurity service provider (CSSP) to ensure compliance to DoD standards to assist with maintenance of the network security posture.
•Document designs, diagrams, drawings, and technical narratives using wiki technologies and common diagram and drawing tools.

BASIC QUALIFICATIONS:
•Minimum of a Bachelor’s degree with 12+ years' experience or Master's degree with 10+ years of experience (additional years of directly applicable experience may be accepted in lieu of a degree).

• Hands on experience with Palo Alto Next Generation Firewalls (NGFW)
• Require active DoD IAT Level II (i.e. Security+) certification or equivalent prior to start.
• Expert understanding of networking and virtualization of firewalls including VSYS in a multi-tenant environment
• Demonstrated experience with networking concepts such as LAN, WAN, BGP, TCP/UDP, IPSec, VPN, Routing(L2/L3), and firewalls in a virtualized environment.
• Demonstrate experience in one or more of the following enterprise network management tools such as Palo Alto Panorama, Cisco Prime, Cisco DNA, or Junos Space.
• Demonstrate experience in system hardening of network infrastructure to include DoD STIG implementation
• Must have experience in working with two or more of the following vender network technologies: Cisco, Juniper, Palo Alto, Dell, RAVPN, Global Protect, or AppGate.
• Experience with the following protocols: SFTP, SSH, SCP, MPLS, SNMP, NTP.
• Must be able to work as part of a team to execute troubleshooting and resolve complex network security issues.
• Must have excellent written and verbal communication skills. 
• Must be willing to work non-standard shifts to accomplish network migration objectives and goals
• Must be able to interface with customers.
• Must be willing to travel up to 10% of the time.

PREFERRED QUALIFICATIONS:

• Army/DISA migration experience.
• Knowledge and use of NetSecOps technologies including git, Gitlab CI/CD, Ansible, Terraform, Puppet, and network element managers
• Working knowledge and understanding of Python
• Demonstrate expertise in design and improvement of complex and geographically enterprise networks.
• Expert knowledge of US Army security requirements for network infrastructure.

We’re not looking for perfectly polished resumes or perfect fits. We’re looking for people who break limits, ask hard questions, and don’t wait to be told what’s next. At Leidos, we’re not following the roadmap — we’re redrawing it. 

The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.