Integration Engineer

Palo Alto Integration Engineer (Senior)Koniag Data Solutions, a Koniag Government Services company, is seeking an experienced Palo Alto Integration Engineer (Senior) to support enterprise network security operations and IT administrative and operational support services for a federal government client. This position requires an active security clearance or the ability to obtain and maintain a government background investigation and all requisite IT access authorizations prior to performing work. Primary work will be performed at the client site in Washington DC and approved remote/telework locations.We offer competitive compensation and an extraordinary benefits package including health, dental and vision insurance, 401K with company matching, flexible spending accounts, paid holidays, three weeks paid time off, and more.The ideal candidate is a highly experienced and technically authoritative network security engineer with deep, hands-on expertise across the full Palo Alto Networks portfolio—including Next-Generation Firewalls (NGFW), Panorama, Prisma Access, Prisma Cloud, Cortex XDR, and related platforms—combined with a comprehensive understanding of enterprise network security architecture, Zero Trust principles, and Federal cybersecurity compliance requirements. This individual must possess the technical depth, architectural vision, and operational discipline required to lead the design, implementation, and sustained operation of enterprise-grade Palo Alto Networks security capabilities that protect Government networks, systems, and data in a highly regulated federal IT environment.The Palo Alto Integration Engineer (Senior) will serve as the program's primary subject matter expert and technical authority for all Palo Alto Networks platform capabilities, leading the architecture, engineering, implementation, administration, and continuous improvement of enterprise Palo Alto Networks security infrastructure. This individual works closely with network engineers, security engineers, cloud operations teams, DevSecOps engineers, cybersecurity leadership, and Government stakeholders to ensure Palo Alto Networks platforms are architected, deployed, and operated in a manner that delivers maximum security value, operational resilience, and compliance with Federal cybersecurity frameworks and Zero Trust Architecture objectives across the full enterprise environment.Principal responsibilities will include but are not limited to:Architecture & Engineering LeadershipServe as the program's technical authority and subject matter expert for all Palo Alto Networks platform capabilities, providing authoritative architectural guidance, engineering leadership, and expert technical recommendations to program leadership, functional teams, and Government stakeholders.Lead the design and architecture of enterprise Palo Alto Networks security solutions, including NGFW deployments, Panorama management infrastructure, Prisma Access SASE implementations, Prisma Cloud security posture management, and Cortex XDR endpoint and network detection capabilities.Develop and maintain enterprise Palo Alto Networks architecture documentation, including network security architecture diagrams, data flow diagrams, firewall zone models, security policy frameworks, and platform configuration baselines, ensuring documentation is current, accurate, and aligned with operational reality.Lead security architecture reviews for new systems, applications, infrastructure changes, and cloud migrations, assessing Palo Alto Networks platform impact, identifying security risks, and recommending policy and configuration changes to maintain security posture.Design and implement Zero Trust network security architectures leveraging Palo Alto Networks capabilities, including App-ID based application control, User-ID based identity-aware policy enforcement, micro-segmentation, encrypted traffic inspection, and continuous threat prevention.Evaluate emerging Palo Alto Networks technologies, platform capabilities, and industry security trends, providing well-researched recommendations to program leadership and Government stakeholders on opportunities to enhance security posture and operational efficiency.Provide senior technical leadership and mentorship to junior and mid-level network security engineers, sharing expertise, guiding technical development, and ensuring consistent application of security engineering best practices across the team.Next-Generation Firewall Engineering & AdministrationLead the engineering, implementation, and administration of enterprise Palo Alto Networks Next-Generation Firewall (NGFW) infrastructure across all deployment contexts, including perimeter, internal segmentation, data center, and cloud-attached firewall deployments.Design, implement, and maintain comprehensive NGFW security policy frameworks, including application-based policies using App-ID, user-based policies using User-ID, content inspection policies using Content-ID, and threat prevention policies, ensuring policies are well-structured, consistently applied, and aligned with least-privilege access control principles.Implement and maintain advanced NGFW security profiles, including antivirus, anti-spyware, vulnerability protection, URL filtering, file blocking, WildFire malware analysis, and DNS security profiles, ensuring profiles are tuned to maximize threat prevention effectiveness while minimizing operational disruption.Design and implement SSL/TLS decryption policies, ensuring encrypted traffic is inspected in accordance with security requirements while managing certificate trust, performance impact, and privacy considerations.Manage NGFW security policy lifecycle, including policy review and optimization cycles, rule base cleanup, shadow rule identification, and policy documentation maintenance, ensuring the rule base remains clean, efficient, and security-effective over time.Conduct regular NGFW security policy audits and optimization reviews, identifying overly permissive rules, unused policies, and policy gaps, and implementing improvements to strengthen network segmentation and least-privilege access enforcement.Develop and maintain NGFW operational runbooks, troubleshooting guides, and standard operating procedures, ensuring the team has the documentation needed to operate and maintain NGFW infrastructure reliably and consistently.Panorama Management Platform EngineeringLead the engineering, implementation, and administration of the Panorama centralized management platform, ensuring Panorama is properly configured, maintained, and leveraged to provide consistent, scalable, and auditable management of all deployed NGFW and related platform instances.Design and maintain Panorama device group and template hierarchies, ensuring management configurations are logically organized, consistently applied, and aligned with enterprise security policy requirements and operational management needs.Develop and maintain Panorama-based policy management frameworks, including shared policy structures, pre-rules, post-rules, and device group-specific policy configurations, ensuring policy management is efficient, consistent, and auditable.Implement and maintain Panorama role-based administration controls, ensuring administrative access privileges are properly configured and aligned with least-privilege principles and applicable Federal security requirements.Support Panorama platform upgrades, patches, and configuration changes, coordinating with the change management process and ensuring all changes are properly tested, documented, and approved prior to production implementation.Leverage Panorama logging and reporting capabilities to develop operational dashboards, security reports, and compliance evidence artifacts that support program leadership and Government stakeholder visibility requirements.Prisma Access & SASE EngineeringLead the engineering, implementation, and administration of Palo Alto Networks Prisma Access Secure Access Service Edge (SASE) capabilities, ensuring secure, reliable, and high-performance remote access and cloud-delivered security services for distributed users and locations.Design and implement Prisma Access GlobalProtect configurations, including gateway deployments, agent configurations, split tunneling policies, and authentication integrations, ensuring remote users receive consistent security policy enforcement regardless of location.Configure and maintain Prisma Access security policy, threat prevention, URL filtering, and data loss prevention capabilities, ensuring cloud-delivered security services provide comprehensive protection aligned with enterprise security requirements.Support the integration of Prisma Access with enterprise identity platforms, including Microsoft Entra ID and Okta, ensuring identity-aware security policy enforcement and multi-factor authentication are consistently applied for all remote access scenarios.Monitor Prisma Access service health, performance, and security effectiveness, proactively identifying and resolving connectivity issues, performance degradation, and security policy gaps that may impact remote user experience or security posture.Prisma Cloud Security EngineeringLead the engineering, implementation, and administration of Palo Alto Networks Prisma Cloud cloud security posture management (CSPM) and cloud workload protection (CWPP) capabilities across enterprise cloud environments, including AWS and Microsoft Azure Government.Configure and maintain Prisma Cloud compliance frameworks, security policies, and alert configurations, ensuring continuous visibility into cloud security posture, configuration compliance, and threat activity across all monitored cloud accounts and workloads.Develop and maintain Prisma Cloud custom compliance policies and security alerts aligned with applicable Federal security frameworks, including NIST SP 800-53, FedRAMP, CIS Benchmarks, and client-specific cloud security requirements.Integrate Prisma Cloud findings with the enterprise SIEM platform and vulnerability management program, ensuring cloud security posture data is incorporated into the program's broader security monitoring and remediation workflows.Support cloud security posture remediation activities, working with cloud operations teams to prioritize and remediate Prisma Cloud findings in accordance with defined risk-based remediation timelines.Cortex XDR Engineering & AdministrationLead the engineering, implementation, and administration of Palo Alto Networks Cortex XDR extended detection and response capabilities, ensuring the platform provides comprehensive endpoint, network, and cloud telemetry integration and high-fidelity threat detection across the enterprise environment.Configure and maintain Cortex XDR prevention policies, behavioral threat protection rules, and detection analytics, ensuring endpoint protection and