Senior Firewall Engineer

M9 Solutions is seeking a Senior Firewall Engineer to work on a government contract for a client located in Suitland, MD. An active Secret clearance is required.

Responsibilities

• This position involves designing, implementing, and managing security infrastructure to safeguard the client’s critical operations.
• Join a team tasked with implementing and managing advanced CheckPoint firewall solutions, Cisco FirePower remote VPN systems, and AWS cloud-based firewall security.
• Architect, design, and implement CheckPoint firewall solutions.
• Configure and manage CheckPoint firewalls, including policy creation, rule management, and system upgrades.
• Configure, manage, and troubleshoot Cisco FirePower remote VPN solutions and Cisco AnyConnect deployments.
• Deploy and manage CheckPoint firewalls in AWS environments to ensure secure operations.
• Monitor firewall performance, troubleshoot security events, and implement corrective actions.
• Develop and enforce security policies and ensure compliance with industry standards.
• Lead security incident response activities, including investigation, mitigation, and reporting.
• Maintain detailed documentation of firewall configurations, changes, and incidents.
• Collaborate with IT teams to ensure seamless integration and operation of security solutions.
• Provide training and mentorship on CheckPoint, Cisco, and AWS best practices.
• Stay updated on developments in CheckPoint, Cisco, and AWS technologies and network security trends.

Required Skills & Qualifications

• Active TS/SCI security clearance.
• 10+ years of experience designing scalable and reliable network infrastructure for large environments.
• Bachelor’s degree.
• Expertise in designing, implementing, and managing CheckPoint firewall solutions, Cisco FirePower remote VPN solutions, and Cisco AnyConnect deployments.
• Strong understanding of network security principles.
• Required Tools: MS Teams, MS Visio, MS Excel, MS PowerPoint, and network monitoring tools (e.g., SolarWinds).
• Experience supporting CheckPoint firewalls in AWS environments.
• Candidates must hold or be able to achieve relevant certifications for this role, including:
  • CheckPoint Certified Security Expert (CCSE) or CheckPoint Certified Security Master (CCSM).
  • Cisco Certified Network Professional (CCNP) Security or equivalent.
  • AWS Certified Solutions Architect or AWS Certified Security Specialty (highly desirable).
• Advanced hands-on experience with:
  • CheckPoint enterprise firewalls.
  • Cisco FirePower VPN appliances.
  • Cisco AnyConnect client.
  • Remote management solutions, including two-factor authentication, AAA servers, and log reporting.
  • AWS-hosted firewall solutions.
• Proficiency in:
  • Enterprise security solutions.
  • IPv4 and dynamic routing.
  • Integrated firewall technologies: PKI, OCSP responders, Active Directory (AD), LDAP, YubiKey, and SecureID servers.
• Advanced troubleshooting using SolarWinds, Wireshark, tcpdump, fw monitor, and similar tools.
• Expertise in firewall device installations.
• Expertise in network security operations, including:
  • Patch management, vulnerability remediation, client-to-site/site-to-site VPNs, IPSEC tunnels.
  • CheckPoint clustering, Cisco FirePower clustering, McAfee Web Proxy, and CheckPoint URL filtering blade.
• Passion for delivering exceptional results, outcome-driven, quality-focused, and relentless in driving innovation for high-value delivery and mission success.
• Eager to make an impact while working in a team-oriented environment.