Network Defense and Firewall Security Engineer

** Security Clearance Required

Company Overview

Systems Technology Forum LTD (STF) is an established industry partner with a passion for exceptional performance and an unwavering commitment to our clients. As a premier provider of management, engineering, information technology, and logistics services, STF is committed to delivering high-quality systems engineering, technical and professional support services that meet and exceed deliverable requirements.

STF offers superior out-of-the-box solutions to end-to-end problems and customer-centric support to the United States Government, Military, Department of Defense (DoD), and other federal agencies.

Job Summary

The Network Defense and Firewall Security Engineer is responsible for safeguarding enterprise and mission networks within the PMW 790/STACC environment. This position designs, configures, monitors, and maintains network-security systems that protect classified and unclassified Navy information systems. The engineer ensures compliance with DoD cybersecurity policies, implements Zero Trust principles, and collaborates with Cyber and Network Operations teams to maintain resilient, accredited network infrastructures.

Responsibilities and Duties

• Configure, operate, and maintain enterprise firewalls, intrusion detection/prevention systems (IDS/IPS), and other boundary-defense appliances (e.g., Cisco ASA, Palo Alto, Fortinet, Snort, Suricata).
• Perform vulnerability scanning, security-event correlation, and analysis using ACAS, HBSS, and SIEM tools.
• Develop and maintain firewall and access-control policies that align with DoD RMF and STIG requirements.
• Conduct incident detection, response, and root-cause analysis to mitigate network threats or anomalies.
• Support Cross-Domain Solution (CDS) operations and data-transfer controls across classification levels.
• Coordinate with Network Engineering, System Administration, and Cybersecurity teams to ensure a consistent security posture across the enterprise.
• Document network-security configurations, change-control records, and security standard operating procedures (SOPs).
• Participate in security assessments, inspections, and accreditation activities.
• Recommend network security improvements, automation, and modernization initiatives aligned with Zero Trust Architecture guidance.
• Maintain ASA, IPS/IDS, HBSS, and CDS solutions; perform vulnerability scanning and remediation; and support Zero Trust network segmentation and incident response in coordination with enterprise cyber teams.

Qualifications and Skills

Required knowledge and years of experience

Five years experience required.

• Cisco ASA or Palo Alto experience.
• Experience with ACAS/HBSS tools.
• IAT Level II certification (Security +).
• 5+ years of network security engineering experience supporting DoD or Navy environments.
• Experience supporting RMF accreditation or network ATO sustainment within NAVWAR or PEO C4I programs preferred.
• Ability to work both independently and as part of a cross-functional team; ready for occasional travel or onsite support as required.
• Proven problem-solving abilities with strong analytical and troubleshooting skills.
• Excellent communication skills: able to explain technical issues to technical and non-technical stakeholders.

Education Requirements

Bachelor’s degree in Cybersecurity, Computer Engineering, or related discipline (or equivalent technical experience).

Certifications

IAT Level II certification (Security +).

Clearance Requirement

Secret (eligible for TS/SCI)

Benefits and Perks

At STF, we recognize that talented employees are the foundation of our success . STF provides benefits and compensation packages to help our employees meet the diverse and changing needs throughout their careers and lives.

Benefits packages include the following:

• Medical Plans administered through United HealthCare
• Vision and Dental Plan Benefits
• 401(k) Tax-Deferred Retirement Plan
• Accidental Death and Dismemberment Insurance
• Dependent / Medical Care Flexible Spending Account
• Direct Deposit
• Health and Welfare Medical
• Holiday Leave
• Industry Competitive Salaries
• Life Insurance (basic and supplemental)
• Paid Time Off / Annual Comprehensive Personal Leave
• Performance / Award Bonuses
• Professional Development Coursework
• Technical Training
• Tuition Assistance Program
• TotalChoice™ Voluntary Benefits
• STF Cares / Paid Time Off to Volunteer

Equal opportunity employer as to all protected groups, including protected veterans and individuals with disabilities

#IND123