Senior Check Point Firewall Engineer - Secret or Top Secret Cleared

S2i2•Fort Belvoir, VA

5d•$130,000 - $160,000•Onsite

About The Position

Join a mission-critical cybersecurity program supporting one of the largest logistics operations in the world. You'll work in a 35,000+ user enterprise environment , driving next-gen firewall security, cloud integration, and automation for th e Defense Logistics Agency.

Requirements

Seven ( 7+ ) years in firewall administration / network security engineering
Strong hands-on experience with Check Point (R81/R82)
Deep understanding of LAN/WAN, network security, and enterprise environments
Experience with DoD IA, STIG compliance, DISA VMS, INFOCON
On-Call: 24x7x365 on-call with 2-hour response requirement.
SIPR access - Secret Internet Protocol Router Network
Automation ( Ansible , scripting, IaC )
IAT Level II (Security+ CE, OR CISSP, OR CASP+, etc.) o nly 1 current
Check Point CCSE or CCSM R81 (o nly 1 current required )
Cloud Certification (AWS , OR Azure , OR OCI , OR Check Point Cloud) o nly 1
Active Secret or Top-Secret clearance required

Nice To Haves

Experience in large enterprise (30K+ users)
Prior team leadership / supervisory experience

Responsibilities

Engineer and manage Check Point firewalls (R81/R82) in a large-scale enterprise
Own policy management, rule optimization, VPNs, and SmartConsole operations
Support incident response, troubleshooting, and Tier III escalations
Ensure compliance with STIGs, DISA requirements, and DoD cybersecurity standards
Implement and manage multi-cloud security (AWS, Azure, GCP, OCI)
Build automation workflows (Ansible, IaC ) to improve security operations
Lead and mentor junior engineers while supporting mission-critical deployments