Senior Security Engineer

Onsite, Washington, DC Part-time · $110/hour Project: 200 hours Clearance:
Secret

Lead firewall engineering and validation for secure enterprise networks, designing supportable policies and high-availability controls in collaboration with network engineers.

• Assess firewall architecture, security zones, traffic flows, policies, logging, high-availability behavior, and dependencies.
• Co-design secure network integration with the network lead, accounting for routing, inspection, multicast and unicast traffic, logging, validation, and rollback.
• Develop a firewall rule matrix covering sources, destinations, protocols, ports, applications, inspection, logging, and approvals.
• Engineer and administer Cisco Secure Firewall and Firepower Management Center (FMC), including high-availability configuration.
• Document approved changes and support pilot testing, staged cutovers, failover testing, and controlled rollback.
• Validate security policy and application connectivity, investigate post-change issues, and document residual risks and mitigations.
• Maintain configuration records, design documentation, test evidence, operational guidance, and knowledge-transfer materials.

• Hands-on experience with Cisco Secure Firewall, FMC, high-availability operations, and firewall policy development.
• Experience designing security zones and segmentation and translating approved traffic requirements into firewall rules.
• Ability to plan and validate security changes, including failover, logging, rollback, and end-to-end application connectivity.
• U.S. person status, active Secret clearance, and ability to meet secure-facility access requirements.

• CCIE Security, CompTIA Security+, or CISSP certification.
• Experience with TACLANEs and inline network encryption.

• Work takes place in a closed, secure network environment.