Job DescriptionOverviewWe are seeking an experienced Firewall Engineer to support mission-critical network security operations within a high-tempo Department of Defense environment. This role focuses on the engineering, administration, assessment, optimization, and sustainment of enterprise firewall and load-balancing technologies supporting DISA CESO and mission partners.
The ideal candidate will bring extensive hands-on experience with Palo Alto and Cisco firewall technologies, including Panorama, high availability, IPSec VPNs, routing, IPS, virtual systems, AWS-based Palo Alto deployments, firewall assessments, rule-set optimization, and Tier 3 operational support.
Key Responsibilities- Identify and remediate firewall and load balancer misconfigurations, conflicting rules, security gaps, performance issues, and other vulnerabilities while optimizing enterprise rule sets.
- Provide Tier 3 engineering and troubleshooting support to network operations and administration teams.
- Maintain firewall hardware and software components at vendor-supported versions and lifecycle levels.
- Support mission-critical Continuity of Operations (COOP) requirements and cybersecurity operations.
- Conduct at least two firewall assessments per month across CESO and customer devices; develop assessment reports and recommendations for security and performance improvements.
- Support development of monthly network-device performance, utilization, and traffic reports.
- Develop and participate in After Action Reports (AARs) following operational events, incidents, or exercises.
- Provide expert technical guidance regarding the administration, architecture, configuration, and operation of Palo Alto devices across the DISA CESO enterprise.
- Collaborate with customer stakeholders to establish objectives, technical roadmaps, architecture strategies, and design recommendations based on Palo Alto Networks technologies.
- Evaluate current DISA CESO technologies and operational processes to identify capability gaps and recommend future cybersecurity requirements and strategies.
- Participate in DISA CESO and mission-partner technical meetings, engineering discussions, and working groups.
- Ensure firewall configurations and operational practices comply with applicable DoD STIGs, DISA orders, JSIG policies, cybersecurity guidelines, and regulatory requirements.
RequirementsRequired Qualifications- Bachelor's degree with 8+ years of directly relevant experience; additional relevant experience may be considered in lieu of a degree.
- Minimum 5+ years of hands-on Cisco and Palo Alto firewall experience supporting both engineering and operations/maintenance environments.
- Strong hands-on experience with Palo Alto technologies and best practices, including Panorama installation/administration, HA configuration, Templates and Template Stacks, policy creation and deployment, routing, IPSec site-to-site VPNs, AWS Palo Alto VMs, IPS configuration, Virtual Routers/Systems, and Firewall High Availability.
- Experience supporting highly operational, mission-critical environments involving classified systems.
- Active DoD Top Secret security clearance with eligibility to obtain and maintain TS/SCI.
- Willingness and ability to obtain and maintain a CI Polygraph.
- Current DoD 8570 IAT Level II Baseline Certification, such as Security+ CE, CySA+, CCNA Security, GICSP, GSEC, CND, SSCP, or equivalent.
- Strong troubleshooting, technical documentation, communication, and customer-facing skills.
Preferred Qualifications- Prior experience supporting DISA and DISA mission partners, with familiarity in DISA CESO enterprise architecture, cybersecurity operations, and engineering processes.
BenefitsCore Benefits:- Paid Time OffPTO):TEN (10) Paid days off & FIVE (5) Floating days off.
- Holidays: 11 Paid Holidays. Flex time can be utilized instead of holiday time usage.
- Payroll: Paid Bi-Monthly.
- 401(k): Partnered with the SECOND LARGEST Retirement plan provider in the U.S. Guaranteed 3% match. Eligibility - 21 years of age or older, after 3 months of employment
- Individual or company-wide performance and recognition awards (Quarterly)
Health Benefits:- UNITED HEALTHCARE PPO, extensive national coverage.
- INCLUDES: Medical/Dental/Vision/HSA.
- Eligible on the first of the month, immediately after the start date.
- Submit the enrollment form within 30 days of your start date otherwise, you will have to wait until October for the new year enrollment.
Quality of Life Benefits:- Training & Career Development Reimbursement of Tuition and training needed to support career development.
- $150 monthly reimbursement contribution paid monthly towards parking expenses.
- Receipts must be submitted by the close of business on the 25th of each month.
- Reimbursements will be paid on the first payroll AFTER reimbursements are submitted each month.
Special Benefits:- Performance bonus - Project-based
- Yearly bonus - Company based
