*Sr. Firewall Engineer**DHS-Federal Emergency Management Agency**Security Operations Center**Bluemont, VA**Program Overview*Department of Homeland Security (DHS), Federal Emergency Management Agency (FEMA) Security Operations Center (SOC) is a US Government program responsible to prevent, identify, contain and eradicate cyber threats to FEMA networks through monitoring, intrusion detection and protective security services to FEMA information systems including local area networks/wide area networks (LAN/WAN), commercial Internet connection, public facing websites, wireless, mobile/cellular, cloud, security devices, servers and workstations.The FEMA SOC is responsible for the overall security of FEMA Enterprise-wide information systems, and collects, investigates, and reports any suspected and confirmed security violations.*What is Mount Weather?*The Mount Weather Emergency Operations Centre is a major reallocation site for the highest level civilian and military officials in case of a national emergency. It is a 564-acre, high-security federal government facility along the Loudoun-Clarke County border in Virginia. The facility was built during the Cold War as a relocation site and consists of two parts: the above-ground FEMA complex and the 600,000-square-foot underground facility. It's used as the center of operations for the Federal Emergency Management Agency (FEMA) and run by the US Department of Homeland Security.*Job Description*Obsidian is seeking an experienced Firewall Engineer to join a dynamic team supporting large and complex security environments. This position, located at Bluemont, VA, supports the Federal Emergency Management Agency (FEMA) Security Operations, and requires an active TS in order to be considered.*Responsibilities** Implementing, managing, and securing enterprise firewalls and monitoring and tracking system performance via metrics.* Responsible for reviewing and architecting Firewall security for Software Defined Wide Area Network (SD WAN) in the FEMA Cloud Environment and On-Premises Architecture* Assisting strategy for edge deployments/security.*Qualifications** Bachelor's degree in a related discipline and at least 7 years of Firewall Administration Experience. Additional applicable military or relevant experience will be considered in lieu of degree* Security Operations experience considered a must* Ability to apply security first principles to solve complex technical challenges* Experience with CISCO ASA and Palo Alto Panorama* Experience and understanding of proxies* Experience with security standards, processes, and tools* Demonstrated experience with configuration build support and documentation* Experience with Amazon Web Services (AWS), Azure, VMware, or other virtualization platforms*Requirements** Top Secret clearance. Required to favorably pass a FEMA Background Investigation.* 5 years of experience in the areas of firewall engineering*Additional Qualifications** Knowledge and/or experience with Amazon Web Services (AWS), Azure, VMware and/or other virtualization platforms.* Zscaler experience is a plus* Global Protect experience is a plus* Scripting experience is a plus* Experience with Zero Trust Architecture a plus_Obsidian Global, LLC is an Equal Employment Opportunity and Affirmative Action Employer. All qualified applicants will receive consideration for employment without regards to that individual's race, color, religion or creed, national origin or ancestry, sex (including pregnancy), sexual orientation, gender identity, age, physical or mental disability, veteran status, genetic information, ethnicity, citizenship, or any other characteristic protected by law._Job Types: Full-time, ContractPay: $170,000.00 - $185,000.00 per yearBenefits:* 401(k)* 401(k) matching* Dental insurance* Flexible spending account* Health insurance* Health savings account* Life insurance* Paid time off* Parental leave* Professional development assistance* Referral program* Relocation assistance* Retirement plan* Vision insuranceSchedule:* 8 hour shiftAbility to commute/relocate:* Bluemont, VA: Reliably commute or planning to relocate before starting work (Required)Experience:* Cisco ASA Engineering: 5 years (Required)* Palo Alto: 5 years (Required)* AWS/Azure: 3 years (Required)Security clearance:* Top Secret (Required)Work Location: Hybrid remote in Bluemont, VA