Firewall Engineer Principal

SAIC is seeking a Firewall Engineer in Suffolk, VA with experience in US Navy IT networks to support the sustained operation and maintenance of a newly deployed naval enterprise transport network, ensuring 24/7/365 availability and reliability.

Responsibilities include:

• Build, design, test and deploy perimeter security systems.


• Directs compilation of records and reports concerning perimeter operations and maintenance to analyze the performance of perimeter security systems.


• Provides input to the problem management process, including assessing and evaluating software and hardware anomalies. Supports the root cause analysis efforts to determine problems and develop remediation activities. Interfaces with vendor support service groups to ensure proper support during outages or periods of degraded system performance.


• Supports the configuration and testing of replacement perimeter devices.


• Plans, documents, and implements hardware and software build and refresh cycles.


• Create and maintain standard operating procedures and guides for new and/or existing perimeter hardware and software.


• Attend weekly teleconferences, onsite meetings, and participate in working groups, as related to constant changing security environment.

Required Education & Experience:

• Bachelor’s degree and nine (9) years of experience.
• Expert experience in one or more of the following security devices: Palo Alto firewalls, Panorama management console, Fortinet FortiGate NGFW, A10 Encrypted Traffic Inspection/Application Delivery, and Cisco ESA & ASA.
• Experience developing and configuring SSL encryption/decryption solutions for traffic inspection.
• Experience supporting the configuration and maintenance of Firewall/DMZ infrastructure including Network and Application Firewall Packet Filtering technologies (Palo Alto, FortiNet FortiGate.)
• Firsthand experience in developing and providing quality assurance review of engineering change orders relating to the replacement or enhancement of perimeter security hardware and software.
• Experienced with performing root cause analysis, risk identification, and risk mitigation.
• Knowledgeable with configuring Cisco switches.
• Ability to obtain an approved Operating System certification (e.g., CCNA or Linux+) within 6 months of hire.

Required Clearance:

• US Citizenship.
• Active Top Secret clearance with the ability to obtain TS/SCI.