Team Lead Firewall Administrator

We are looking for a Team Lead Firewall Administrator to join our team in support of a program with a DoD customer. Responsibilities Provide overall supervision for vendor employees, including planning, managing the project professionally, scheduling work to maximize resources, and ensuring timely and accurate reports. Resolve problems, allocate resources, manage personnel, and monitor operational performance under government direction to ensure complete satisfaction. Develop product requirements from inception to conclusion under general supervision. Create specifications for simple to moderately complex problems. Coordinate with the Vendor PM, TPOCs, and government user representatives to ensure accurate solutions and user satisfaction on technical matters. Provide input to the PM on schedule, weekly and monthly reports, transition plans, 8570/8140 reports, IPR briefings, and kick-off meetings. Plan and deploy Enclave Boundary Defense systems and programs, including firewall, proxy server, cloud services, and other devices and applications. Plan and deploy De‑Militarized Zones (DMZs) for each managed firewall as required. Provide onsite and remote support to boundary security programs, which include Checkpoint Firewalls, Aviatrix Product Suite, various types of cloud security, security controls, and other platforms. Participate in development, testing, and implementation of firewalls and proxy servers. Verify device configurations comply with DISA Security Technical Implementation Guides (STIGs). Manage product lifecycle and upgrades, including installation of hotfixes, patches, and other performance‑improving features. Evaluate and recommend firewall solutions for technology refreshes. Deploy and sustain new firewall solutions as prescribed by the government. Coordinate with Tier III support teams and government customers throughout design, planning, implementation, and sustainment phases. Research and provide quotes and documents necessary to renew licenses and equipment maintenance for firewall, proxy, and cloud services. Maintain current firewall, proxy appliance, and cloud services policies, including DoD requirements, and implement secure remote access for off‑site employees. Develop and deliver briefings to upper‑level management on Enclave Boundary Defense topics. Provide firewall troubleshooting (24x7x365 on‑call support). Review and resolve automated firewall log issues related to threats or potential compromises. Provide daily maintenance and support for all Enterprise Boundary Defense systems, monitoring system and log files. Notify appropriate personnel of potential threats or system vulnerabilities. Respond to reported or identified incidents in accordance with the Incident Response Plan. Conduct comprehensive security assessments of CSP deployments, identify vulnerabilities, and recommend remediation actions aligned with NIST CSF, CIS, and benchmarks. Document, design, implement, and maintain secure network architectures for CSP environments, including secure connectivity, segmentation, IDS/IPS, and DLP solutions. Provide continuous security monitoring and incident response capabilities for CSP environments, including log analysis, threat intelligence integration, vulnerability management, and incident response planning and execution. Ensure compliance with FedRAMP, FISMA, NIST, and other relevant standards, and cooperate fully with authorized government audits and assessments, following DoD Cloud Computing Security Requirements Guide (SRG). Provide training and knowledge transfer to government personnel on securing CSP environments, covering fundamentals, secure configuration, threat detection, response, and incident management. Required Skills, Qualifications, and Experience Experience: Five (5) years of relevant experience including: Working knowledge of CheckPoint firewalls (R80.40 and R81.10) and standard enterprise network environments. In‑depth knowledge of LAN and WAN operations, incident ticket tracking systems, and DOD/DLA security regulations and policies. Hands‑on experience installing, configuring, and sustaining network equipment, including firewalls, proxy servers, cloud services, and other appliances. Security Clearance: Must possess IT‑I Critical Sensitive clearance or have a current NACLC. Clearance required: DoD Secret. Certifications: IAT Level II or higher, or one of the following: CCNA Security, CySA+, GICSP, GSEC, Security+CE, CND, SSCP, CASP+ CE, CCNP Security, CISA, CISSP (or Associate), GCED, GCIH, or CCSP. One of the following computing environment certifications: CCSA, CCSE, or CCSM. Location: Candidates must reside within commuting distance of one of the following locations to work onsite full time: Columbus, OH; Fort Belvoir, VA; or New Cumberland, PA. Preferred Qualifications One of the following: AWS Cloud Practitioner, Microsoft Certified: Azure Fundamentals, or CompTIA Cloud+. Work Environment and Physical Demand Must be able to lift 50 lbs. Compensation: $90,000+ Benefits 26 Days Paid Leave: Includes vacation, sick, personal time, and holidays. Performance Bonuses: Awarded based on individual contributions and company results. 401(k) with Match: Company matches 3% of contributions with immediate vesting. Financial Protection: Company‑paid life insurance up to $300K and options for additional coverage. Health Benefits: Multiple medical plans, dental, vision, FSA, and HSA options. Parental Leave: 15 days of fully paid leave for new parents. Military Differential Pay: Pay bridge for employees on active duty. Professional Growth: Paid training and certifications, tuition reimbursement, and necessary tools and tech. Shared Success: In the event of a company sale, 80% of net proceeds are returned to employees. #J-18808-Ljbffr Agecareers