Firewall Cybersecurity Engineer

Clear Focus Technologies , a HUBZone certified company, is located in Leesburg, VA. We specialize in cybersecurity and support multiple government and commercial clients for a variety of missions. We value our clients, integrity and employees and believe a single person can make a difference!

We are committed to attracting and retaining the best and brightest talent who desire to work with industry leading technology to stay on top of their profession. We provide an excellent benefit package which includes medical, dental, vision, paid time off, 401(k), paid professional development reimbursement and more!

We are seeking a Firewall Cybersecurity Engineer for an opportunity that is 100% onsite in Denver, Colorado. All applicants must have an active Top-Secret clearance and bachelor or higher degree. No exceptions!!

The Senior Cybersecurity Engineer (Firewall) serves as the primary technical authority for the design, deployment, configuration, and lifecycle management of enterprise-wide network security boundaries. This role focuses on engineering a resilient security posture while ensuring all firewall deployments adhere to stringent federal compliance frameworks and government security standards.

• Architecture & Design: Design, architect, and deploy comprehensive enterprise firewall solutions, ensuring proper network segmentation, robust perimeter defense, and alignment with Zero Trust principles.
• Firewall Lifecycle Management: Lead the engineering, administration, and maintenance of Palo Alto firewalls. Utilize Panorama for centralized policy management, configuration consistency, and enterprise-wide visibility.
• Compliance & Standardization: Ensure all firewall configurations strictly align with DISA Security Technical Implementation Guides (STIGs) and NIST SP 800‑series security requirements.
• Engineering Lifecycle: Integrate cybersecurity principles into infrastructure planning and SDLC processes to ensure all solutions meet defined performance, schedule, and quality benchmarks.

• Security Clearance: Active Top Secret clearance.
• Education & Experience:
  • Bachelor’s degree in a technical or scientific discipline plus 14 years of professional experience; OR
  • Master’s degree plus 12 years of professional experience.
• Palo Alto Expertise: Extensive experience deploying, managing, and integrating Palo Alto firewalls and Panorama in an enterprise environment.
• Federal Security Standards: Proven experience applying DISA STIGs and NIST guidelines to secure enterprise architectures.
• On-Site Presence: Ability to provide full-time, on-site support in a client environment.

• Automation: Experience using Linux, Python, or Ansible to automate firewall operations and policy auditing.
• Strategic Architecture: Knowledge of security architecture design principles to support complex, cross-functional infrastructure integration.
• Certifications: Palo Alto Networks Certified Network Security Engineer (PCNSE) or similar professional-level certifications.