Description Job Description:Leidos is looking to improve and advance our organization. Our program is focused on the delivery of data center services to our CMS customers and is structured around both current and legacy platforms in a consumption-based services model.A' We are looking to add skilled, energetic leaders and technologist who believe in cross functional teams, exhibit broad-based skills, maintain a customer-focused mindset, and have a willingness to step out of their work stream to get the job done.With a "no downtime, zero outages"A' vision and mantra, we support a range of data center needs ranging from self-service to managed services, all of which are based on our customer's required level of support.A' Our organization is comprised of teams supporting PMO, Security, Quality, Intake, Service Delivery, Engineering, and Service Operations.A' With these teams access resources from our functional teams supporting Network, Security, Firewall, z/OS and z/VM operations, Unix Operations, Change Management, Monitoring, Capacity Management, x86 Operations, Storage Operations and Cloud Management.A' Part of everyone's responsibility is to help drive the new consumption-based services oriented model.Now to you - your mission, if you choose to accept it as a Firewall Engineer, will require you to coordinate closely with leadership to help establish clear objectives and effectively communicate program needs, management program logs, interact with contract management, and establish effective, bi-directional, collaborative communication within our Program Team.A' Ultimately, these activities will be extended in communication to the customer.A' You will interact daily with technical resource which are fulfilling technical requirements for the customer.A' Your goal will be to work with all stakeholders to help Leidos ensure delivery of high-quality, robust and scalable solutions with minimal business impact.The current work environment is on-site at Leidos in Winsor Mill / Woodlawn, Maryland with potential for on-site work at CMS (in the same location).A' Telecommute opportunities are currently being evaluated and may become available based upon teams supported, work hours, and work performance.Primary ResponsibilitiesThe successful candidate will work with stakeholders to review and implement security policy on firewall devices. Design, implement and maintain security standards/policies/procedures. Participate in security zone architecture and on-going design changes to ensure adequate security protections while enabling business value and outcomes. Implement designed solutions including device configurations while following a change management process. The candidate must be a self-starter, disciplined worker and have a professional reputation for integrity. Ability to adhere to the highest standards of ethics and professional conduct is a must.The successful candidate is must have extensive experience with firewalls (at least Palo Alto, Cisco ASAs, and Juniper) and an in-depth understanding of computer/network security concepts, VPNs, proxies, and networking.Experience designing, deploying, and maintaining boundary security solutions and exposure to enterprise network architecture.Experience analyzing network traffic, using a variety of network tools to assess security-related events to assist in rapid identification and isolation of issues during incidents and outages.A' Strong troubleshooting skills specific to network security and ability to effectively work in cross functional teams as needed to resolve issuesMust have the ability to analyze information from multiple sources and apply it to the operational environment in developing and maintaining the security posture of the networkExperience with IPSEC, VPN, and SSLMust have the ability to work independently on multiple tasksPreferred QualificationsBS degree and 8-10 years of prior relevant experience.A' Experience may be substituted in lieu of degree.Experience configuring/administrating various firewall technologies including: Palo Alto, Firepower, Fortinet.Strong communication skills (both written and verbal), customer service and teaming skills and strong attention to detail.Experience as mentor/team lead providing work direction and guidance to other personnel.Industry Security Certifications (CCNA, CCNP, GSEC, CISSP, GCIA, GCFW, or other security certifications)All candidates supporting the CMS programs must haveA' lived in theA' United StatesA' atA' leastA' threeA' (3)A' out ofA' theA' lastA' fiveA' (5)A' yearsA' prior in order to be considered.External Referral Bonus:EligibleExternal Referral Bonus $:2000Potential for Telework:Yes, 50%Clearance Level Required:Public TrustTravel:NoScheduled Weekly Hours:40Shift:DayRequisition Category:ProfessionalJob Family:Security Architecture and EngineeringPay Range: