Cybersecurity Boundary Defense Technical Lead

GCyber is seeking a Cybersecurity Boundary Defense Technical Lead to support a large Department of War agency. You will lead engineers responsible for next-generation firewalls, web application firewalls, and DoD internet access points. You will combine technical leadership with hands-on engineering to maintain effective boundary protection and reliable network access.

As the Cybersecurity Boundary Defense Technical Lead, you will:

• Lead boundary defense across 12 Palo Alto firewalls, 4 Panorama managers, and F5 and AWS web application firewalls.
• Dedicate approximately half of your time to hands-on architecture, complex changes, and incident response.
• Manage boundary change control, quarterly rule reviews, and ports, protocols, and services documentation.
• Design segmentation and boundary controls that advance zero trust.
• Work with DISA on internet access point and proxy changes.
• Support incident responders with approved boundary blocks and relevant evidence.
• Lead a team responsible for firewall, proxy, WAF, and segmentation engineering, and share the on-call rotation.

Minimum Requirements and Experience

• 7+ years of network security experience, including 4+ in DoD.
• Bachelor's degree (4 additional years of experience may substitute).
• PCNSE and CISSP.
• Active Secret clearance; complete Palo Alto and Panorama tool training before system access.

Required Knowledge and Skills

• Deep Palo Alto NGFW and Panorama skills: security and NAT policy, App-ID, User-ID, security profiles, HA.
• Web application firewall policy on F5 Advanced WAF and AWS WAF.
• Network segmentation and zero trust network design.
• DoD boundary requirements: DISA STIGs, PPSM and cloud access points.
• Leading engineering changes through controlled maintenance windows while maintaining service availability.

Preferred Qualifications

• F5 or AWS Security certification; DISA boundary (CBII) experience.