Tier III Boundary Protection Engineer


To Apply for this Job Click Here

Always Connecting, Always Evolving.

TECHEAD is seeking qualified applicants for the following Contract position – Tier III Boundary Protection Engineer / Chantilly VA – (JOB-20132). If you are looking for a new opportunity and this position looks to be a fit, please apply to see the TECHEAD difference that has made us successful for 30+ years!

You can find more about our team and values by checking us out at TECHEAD.com or on Glassdoor

Job Description:

Techead has partnered with a well-known client who is globally recognized to help support a long-term contract. We are looking for a skilled Tier 3 boundary protection engineer/Network firewall engineer. If interested in finding out more, please see the below job description for reference.

Job – 20132

Onsite Chantilly, VA

Long term contract

TS SCI CI Poly required

DoD 8570 Information Assurance Technical (IAT) Level 2 active certification required


Tier III Boundary Protection Engineers to support the customer’s various wide area networks (WANs) and local area networks (LANs). This position will provide boundary protection to an enterprise-level infrastructure across multiple classifications and act as subject matter experts in boundary technologies across multiple vendors.

The job duties of the Tier III Boundary Protection Engineer are as follows:                                                                                                       

  • Maintain the security and networking of enterprise boundary enclaves and devices.
  • Responsible for installing software, applying patches, managing file systems, and monitoring performance of firewall systems.
  • Provide support for Palo Alto, Cisco Adaptive Security Appliance (ASA), and Forcepoint firewall equipment and applications.
  • Generate, determine impact of, and implement custom proxy policies and/or policy exceptions in response to ongoing technology implementation activities on the program.
  • Proxy Subject Matter Expert (SME) for integration of other technologies within the program (function as an SME on ongoing technology projects)
  • Support the troubleshooting of web connectivity problems to determine root cause.
  • Perform Proxy solution component upgrades, testing and configuration.
  • Research and develop evidence collection, protection, and analysis techniques for customer owned and maintained hardware and/or software.
  • Provide real-time monitoring and alerting of security incident investigations on perimeter/internal infrastructure.
  • Provide day-to-day Operations and Maintenance (O&M) support for all incident management events and outages.
  • Collaborate with IT staff on projects and initiatives.
  • Provide input for monthly progress and status reporting of Service Level Agreements (SLAs)
  • Work with all corresponding technical support teams as required to resolve network traffic concerns.
  • Utilize monitoring tools and log collectors to provide in-depth analysis on traffic anomalies and issues.



-DoD 8570 Information Assurance Technical (IAT) Level 2 certification

Candidate must have 16 years of experience that can be a combination of work history and education. This equates to a Doctorate and 8 years, master’s and 10 years, bachelor’s and 12 years, associates and 14 years or HS diploma and 16 years.

Additional required qualifications include: 

  • Candidate must have 7 years of relevant boundary protection experience delivering fault-tolerant data network infrastructure solutions and incident response.
  • Must comply with DoD 8570 Information Assurance Technical (IAT) Level 2.
  • Experience in configuring and troubleshooting boundary protection technologies such as Palo Alto, Cisco ASA, and Forcepoint appliances.
  • Experience with proxy technologies such as Bluecoat proxies or equivalent applications.
  • Working knowledge or Routing and Networking fundamentals.
  • Working knowledge of boundary protection best practices.
  • Understanding of routing, switching, Internet Protocol (IP) subnet, Network Address Translation (NAT) and security technologies.
  • Demonstrated ability to engineer and modify rulesets to allow connectivity for new customer requirements.
  • Demonstrated ability to read, understand, and develop schematic diagrams, technical manuals, and documentation such that the supported equipment and software can be maintained with minimal training.
  • Working knowledge of Service Now or similar IT Service Management (ITSM) products
  • Superior verbal and written communication skills.
  • Intermediate-level knowledge of MS Office products Word, Excel, PowerPoint, and Visio.
  • Work rotating schedules and after-hours on-call support.


TECHEAD’s mission is to make our on-site associates successful by placing them in the right environment so they can grow and prosper. How we treat and respond to our clients and employees is a reflection of who we are and makes us stand out from the rest. Keeping our business focused on building and maintaining relationships with our employees and clients is the key to our success. We won’t strive for anything less.

TECHEAD provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, gender, sexual orientation, gender identity or expression, national origin, age, disability, genetic information, marital status, amnesty, or status as a covered veteran in accordance with applicable federal, state and local laws governing nondiscrimination in employment in every location in which the company has facilities. This policy applies to all terms and conditions of employment, including, but not limited to, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation, and training.

For more information on TECHEAD please visit www.techead.com.

No second parties will be accepted.

To Apply for this Job Click Here