Firewall Engineer

• Identify and remediate firewall and load balancer misconfigurations, conflicting rules, security gaps, performance issues, and other vulnerabilities while optimizing enterprise rule sets.
  
• Provide Tier 3 engineering and troubleshooting support to network operations and administration teams.
  
• Maintain firewall hardware and software components at vendor-supported versions and lifecycle levels.
  
• Support mission-critical Continuity of Operations (COOP) requirements and cybersecurity operations.
  
• Conduct at least two firewall assessments per month across CESO and customer devices; develop assessment reports and recommendations for security and performance improvements.
  
• Support development of monthly network-device performance, utilization, and traffic reports.
  
• Develop and participate in After Action Reports (AARs) following operational events, incidents, or exercises.
  
• Provide expert technical guidance regarding the administration, architecture, configuration, and operation of Palo Alto devices across the DISA CESO enterprise.
  
• Collaborate with customer stakeholders to establish objectives, technical roadmaps, architecture strategies, and design recommendations based on Palo Alto Networks technologies.
  
• Evaluate current DISA CESO technologies and operational processes to identify capability gaps and recommend future cybersecurity requirements and strategies.
  
• Participate in DISA CESO and mission-partner technical meetings, engineering discussions, and working groups.
  
• Ensure firewall configurations and operational practices comply with applicable DoD STIGs, DISA orders, JSIG policies, cybersecurity guidelines, and regulatory requirements.
  

Requirements

• Bachelor’s degree with 8+ years of directly relevant experience; additional relevant experience may be considered in lieu of a degree.
  
• Minimum 5+ years of hands-on Cisco and Palo Alto firewall experience supporting both engineering and operations/maintenance environments.
  
• Strong hands-on experience with Palo Alto technologies and best practices, including Panorama installation/administration, HA configuration, Templates and Template Stacks, policy creation and deployment, routing, IPSec site-to-site VPNs, AWS Palo Alto VMs, IPS configuration, Virtual Routers/Systems, and Firewall High Availability.
  
• Experience supporting highly operational, mission-critical environments involving classified systems.
  
• Active DoD Top Secret security clearance with eligibility to obtain and maintain TS/SCI.
  
• Willingness and ability to obtain and maintain a CI Polygraph.
  
• Current DoD 8570 IAT Level II Baseline Certification, such as Security+ CE, CySA+, CCNA Security, GICSP, GSEC, CND, SSCP, or equivalent.
  
• Strong troubleshooting, technical documentation, communication, and customer-facing skills.
  

• Prior experience supporting DISA and DISA mission partners, with familiarity in DISA CESO enterprise architecture, cybersecurity operations, and engineering processes.
  

Benefits

• Paid Time Off  PTO):TEN (10) Paid days off & FIVE (5) Floating days off.
  
• Holidays: 11 Paid Holidays. Flex time can be utilized instead of holiday time usage.
  
• Payroll: Paid Bi-Monthly.
  
• 401(k): Partnered with the SECOND LARGEST Retirement plan provider in the U.S. Guaranteed 3% match. Eligibility – 21 years of age or older, after 3 months of employment
  
• Individual or company-wide performance and recognition awards (Quarterly)
  

• UNITED HEALTHCARE PPO, extensive national coverage.
  
• INCLUDES: Medical/Dental/Vision/HSA.
  
• Eligible on the first of the month, immediately after the start date.
  
• Submit the enrollment form within 30 days of your start date otherwise, you will have to wait until October for the new year enrollment.
  

• Training & Career Development Reimbursement of Tuition and training needed to support career development.
  
• $150 monthly reimbursement contribution paid monthly towards parking expenses.
  
• Receipts must be submitted by the close of business on the 25th of each month.
  
• Reimbursements will be paid on the first payroll AFTER reimbursements are submitted each month.
  

• Performance bonus – Project-based
  
• Yearly bonus – Company based