Senior Check Point Firewall Engineer Lead - Secret or Top Secret Cleared
Job Description
Job Description
Job Title: Senior Check Point Firewall Engineer (Cleared)
Location: New Cumberland, PA OR Ft. Belvoir, VA OR Columbus, OH (On-Site)
Clearance Required: Active Secret or Top-Secret clearance required Salary Range: $130K-$160K
Application Deadline: April 8, 2026
To apply, please follow these steps:
- Select the position you are interested in
- Review the job details, then click Apply Now
- Complete and submit your application
Description:
Join a mission-critical cybersecurity program supporting one of the largest logistics operations in the world. You'll work in a 35,000+ user enterprise environment, driving next-gen firewall security, cloud integration, and automation for the Defense Logistics Agency.
Responsibilities:
- - Engineer and manage Check Point firewalls (R81/R82) in a large-scale enterprise
- - Own policy management, rule optimization, VPNs, and SmartConsole operations
- - Support incident response, troubleshooting, and Tier III escalations
- - Ensure compliance with STIGs, DISA requirements, and DoD cybersecurity standards
- - Implement and manage multi-cloud security (AWS, Azure, GCP, OCI)
- - Build automation workflows (Ansible, IaC) to improve security operations
- - Lead and mentor junior engineers while supporting mission-critical deployments
Required Skills and Experience:
- - Seven (7+) years in firewall administration / network security engineering
- - Strong hands-on experience with Check Point (R81/R82)
- - Deep understanding of LAN/WAN, network security, and enterprise environments
- - Experience with DoD IA, STIG compliance, DISA VMS, INFOCON
- - On-Call: 24x7x365 on-call with 2-hour response requirement.
- - SIPR access - Secret Internet Protocol Router Network
- - Automation (Ansible, scripting, IaC)
Required Certifications (No Exceptions):
- - IAT Level II (Security+ CE, OR CISSP, OR CASP+, etc.) only 1 current required
- - Check Point CCSE or CCSM R81 (only 1 current required)
- - Cloud Certification (AWS, OR Azure, OR OCI, OR Check Point Cloud) only 1 required
Nice to Have:
- - Experience in large enterprise (30K+ users)
- - Prior team leadership / supervisory experience
Travel Requirement:
- - Program requires annual Check Point training in Dallas and one-time SecureView training in Rome, NY for new hires.
About S2i2
S2i2 is a growing company with a supportive and inclusive culture and many opportunities for professional development and growth. We have created a supportive, family-like work environment where contributions are recognized. Regular company updates and open lines of communication with leadership fosters collaboration within the company.
We are proud to include:
- Support to achieve professional certifications and degrees
- Leadership that is accessible to all employees
- Regular company updates
- Client networking social engagements
- Monthly team-building activities (past examples: Top Golf)
- Supporting our community - including veterans
All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, disability, age, sexual orientation, gender identity, national origin, veteran status, or genetic information.