Firewall Engineer

Description

Summary: Seeking a seasoned and self-motivated Firewall Engineer with extensive experience in virtualized and cloud environments to transform secure information sharing. Highlights: 1. Identify and remediate misconfigurations to enhance security posture 2. Provide expert advice on managing Palo Alto devices in enterprise architecture 3. Active participant in meetings with DISA CESO and mission partners Apply Now Description The DISA IT Operion within Leidos’ Digital Modernizion Group is seeking a Firewall Engineer to support the Compartmented Enterprise Services Office (CESO) Task Order for the GIG Service Management – Operions II (GSM-O II) contract.  This person should be a seasoned, self-motived, professional with least 10 years of hands-on engineering and testing experience in virtualized and cloud environments. A skilled engineer knowledgeable and experienced in developing and implementing Firewall/Networking Security Solutions.  With the CESO program, the Defense Informion System Agency (DISA) is looking to transform the existing Secure Web Services (SWS) environment, used to provide secure informion sharing to the community, into a more mure service offering to meet the DoD and IC community.  As part of this task order, Leidos will manage the commercial cloud migrion and fully autome the continuous development & continuous integrion environment, fourth este consolidion, professionalize services – ITIL/DevSecOps based processes, improve the customer experience 1st call resolution, and achieve development of a service calog for Defense Working Capital Fund (DWCF) Model. This position is 100% onsite in Arlington, VA with occasional/situional travel within the Washington Metro Area. PRIMARY RESPONSIBILITIES: Identify and remedie misconfigurions, conflicting rules, security gaps, firewall and load balancer security issues, optimize rule-sets, and enhance the overall security posture and performance of Firewalls and Load Balancers Provide Tier 3 support to members of the operions network administrions. Maintain all HW and SW components vendor supported levels. Support mission-critical Continuity of Operions (COOP). Conduct a minimum of two (2) assessment of firewall each month on CESO and customer devices and genere assessment reports and provide recommendions for improvements. Support the creion of network device performance and traffic utilizion monthly reports. Develop and/or participe in After Action Reports (AARs) Provide expert advice and direction regarding the management and operion of all Palo Alto devices in the DISA CESO enterprise architecture. Interact with the customer point of contact to set objectives/goals based on Palo Alto Networks technologies and available technology roadmap for architecture and design discussions. Evalue current technologies and processes associed with DISA CESO to identify gaps.    Provide requirements and stregies for future cybersecurity operions. Active participant in meetings with DISA CESO and mission partner working groups. Adhere to applicable DOD STIGs, DISA applicable orders, and JSIG policy, guidelines, and regulions. QUALIFICATIONS: Bachelor's degree and 8+ years of directly relevant experience. Add'l experience may be considered in lieu of degree. 5+ years of hands-on Cisco / Palo Alto Firewall experience in both engineering and Operions and maintenance roles. Strong knowledge of Palo Alto concepts and best practices:Panorama Installion Panorama HA Config Panorama Temple and Temple Stacks Panorama Policy creion and push to group of Firewalls and Verify Push Palo Alto Route configurion Palo Alto IPSec Site to Site VPN Config and Troubleshooting Palo Alto VM in AWS Palo Alto IPS Configurion Palo Alto Virtual Router / Systems Palo Alto Firewall HA Experience working in a high op-temp, Top Secret environment. Candide must possess an active DOD Top Secret level security clearance, and be eligible to obtain and maintain a TS/SCI Candide must be willing to take and maintain a CI/Poly 8570 IAT Level II Baseline Certificion (e.g. CCNA Security, CySA+, GICSP, GSEC, Security+ CE, CND, SSCP) Preferred Qualificions Prior experienced with DISA and DISA’s support to mission partners If you're looking for comfort, keep scrolling. At Leidos, we outthink, outbuild, and outpace the stus quo — because the mission demands it. We're not hiring followers. We're recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We're already step 30 — and moving faster than anyone else dares. Original Posting: May 21, 2026 For U.S. Positions: While subject to change based on business needs, Leidos reasonably anticipes th this job requisition will remain open for least 3 days with an anticiped close de of no earlier than 3 days after the original posting de as listed above. Pay Range: Pay Range $92,300.00 - $166,850.00 The Leidos pay range for this job level is a general guideline only and not a guarantee of compension or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, educion, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market da, applicable bargaining agreement (if any), or other law. About Leidos Leidos is an industry and technology leader serving government and commercial customers with smarter, more efficient digital and mission innovions. Headquartered in Reston, Virginia, with 47,000 global employees, Leidos reported annual revenues of approximely $16.7 billion for the fiscal year ended January 3, 2025. For more informion, visit www.Leidos.com. Pay and Benefits Pay and benefits are fundamental to any career decision. Th's why we craft compension packages th reflect the importance of the work we do for our customers. Employment benefits include competitive compension, Health and Wellness programs, Income Protection, Paid Leave and Retirement. More details are available www.leidos.com/careers/pay-benefits. Securing Your Da Beware of fake employment opportunities using Leidos’ name. Leidos will never ask you to provide payment-reled informion during any part of the employment applicion process (i.e., ask you for money), nor will Leidos ever advance money as part of the hiring process (i.e., send you a check or money order before doing any work). Further, Leidos will only communice with you through emails th are genered by the Leidos.com automed system – never from free commercial services (e.g., Gmail, Yahoo, Hotmail) or via WhsApp, Telegram, etc. If you received an email purporting to be from Leidos th asks for payment-reled informion or any other personal informion (e.g., about you or your previous employer), and you are concerned about its legitimacy, please make us aware immediely by emailing us LeidosCareersFraud@leidos.com. If you believe you are the victim of a scam, contact your local law enforcement and report the incident to the U.S. Federal Trade Commission. Commitment to Non-Discriminion All qualified applicants will receive considerion for employment without regard to sex, race, ethnicity, age, nional origin, citizenship, religion, physical or mental disability, medical condition, genetic informion, pregnancy, family structure, marital stus, ancestry, domestic partner stus, sexual oriention, gender identity or expression, veteran or military stus, or any other basis prohibited by law. Leidos will also consider for employment qualified applicants with criminal histories consistent with relevant laws. Apply Now