Apply on Employer Site

Systems Technology Forum, Ltd. (STF) · 1 month ago

Network Defense and Firewall Security Engineer

San Diego, CA | Norfolk, VA | Charleston, SC | Pearl Harbor, HI | Panama City, FL

Full-time

Onsite

Mid, Senior Level

5+ years exp

Systems Technology Forum, Ltd. (STF) is an established industry partner committed to delivering high-quality systems engineering and technical support services. The Network Defense and Firewall Security Engineer is responsible for safeguarding enterprise networks, ensuring compliance with DoD cybersecurity policies, and collaborating with teams to maintain secure network infrastructures.

ConsultingIndustrial EngineeringInformation TechnologyIT Management

Growth Opportunities

No H1B

Security Clearance Required

U.S. Citizen Only

Responsibilities

Configure, operate, and maintain enterprise firewalls, intrusion detection/prevention systems (IDS/IPS), and other boundary-defense appliances (e.g., Cisco ASA, Palo Alto, Fortinet, Snort, Suricata)

Perform vulnerability scanning, security-event correlation, and analysis using ACAS, HBSS, and SIEM tools

Develop and maintain firewall and access-control policies that align with DoD RMF and STIG requirements

Conduct incident detection, response, and root-cause analysis to mitigate network threats or anomalies

Support Cross-Domain Solution (CDS) operations and data-transfer controls across classification levels

Coordinate with Network Engineering, System Administration, and Cybersecurity teams to ensure a consistent security posture across the enterprise

Document network-security configurations, change-control records, and security standard operating procedures (SOPs)

Participate in security assessments, inspections, and accreditation activities

Recommend network security improvements, automation, and modernization initiatives aligned with Zero Trust Architecture guidance

Maintain ASA, IPS/IDS, HBSS, and CDS solutions; perform vulnerability scanning and remediation; and support Zero Trust network segmentation and incident response in coordination with enterprise cyber teams