Firewall Engineer

Firewall Engineer

We are seeking an experienced Firewall Engineer to support mission-critical network security operations within a high-tempo Department of Defense environment. This role focuses on the engineering, administration, assessment, optimization, and sustainment of enterprise firewall and load-balancing technologies supporting DISA CESO and mission partners. The ideal candidate will bring extensive hands-on experience with Palo Alto and Cisco firewall technologies, including Panorama, high availability, IPSec VPNs, routing, IPS, virtual systems, AWS-based Palo Alto deployments, firewall assessments, rule-set optimization, and Tier 3 operational support.

Identify and remediate firewall and load balancer misconfigurations, conflicting rules, security gaps, performance issues, and other vulnerabilities while optimizing enterprise rule sets. Provide Tier 3 engineering and troubleshooting support to network operations and administration teams. Maintain firewall hardware and software components at vendor-supported versions and lifecycle levels. Support mission-critical Continuity of Operations (COOP) requirements and cybersecurity operations. Conduct at least two firewall assessments per month across CESO and customer devices; develop assessment reports and recommendations for security and performance improvements. Support development of monthly network-device performance, utilization, and traffic reports. Develop and participate in After Action Reports (AARs) following operational events, incidents, or exercises. Provide expert technical guidance regarding the administration, architecture, configuration, and operation of Palo Alto devices across the DISA CESO enterprise. Collaborate with customer stakeholders to establish objectives, technical roadmaps, architecture strategies, and design recommendations based on Palo Alto Networks technologies. Evaluate current DISA CESO technologies and operational processes to identify capability gaps and recommend future cybersecurity requirements and strategies. Participate in DISA CESO and mission-partner technical meetings, engineering discussions, and working groups. Ensure firewall configurations and operational practices comply with applicable DoD STIGs, DISA orders, JSIG policies, cybersecurity guidelines, and regulatory requirements.

Required Qualifications Bachelor's degree with 8+ years of directly relevant experience; additional relevant experience may be considered in lieu of a degree. Minimum 5+ years of hands-on Cisco and Palo Alto firewall experience supporting both engineering and operations/maintenance environments. Strong hands-on experience with Palo Alto technologies and best practices, including Panorama installation/administration, HA configuration, Templates and Template Stacks, policy creation and deployment, routing, IPSec site-to-site VPNs, AWS Palo Alto VMs, IPS configuration, Virtual Routers/Systems, and Firewall High Availability. Experience supporting highly operational, mission-critical environments involving classified systems. Active DoD Top Secret security clearance with eligibility to obtain and maintain TS/SCI. Willingness and ability to obtain and maintain a CI Polygraph. Current DoD 8570 IAT Level II Baseline Certification, such as Security+ CE, CySA+, CCNA Security, GICSP, GSEC, CND, SSCP, or equivalent. Strong troubleshooting, technical documentation, communication, and customer-facing skills. Preferred Qualifications Prior experience supporting DISA and DISA mission partners, with familiarity in DISA CESO enterprise architecture, cybersecurity operations, and engineering processes.

Paid Time Off (PTO): TEN (10) Paid days off & FIVE (5) Floating days off. Holidays: 11 Paid Holidays. Flex time can be utilized instead of holiday time usage. Payroll: Paid Bi-Monthly. 401(k): Partnered with the SECOND LARGEST Retirement plan provider in the U.S. Guaranteed 3% match. Eligibility – 21 years of age or older, after 3 months of employment Individual or company-wide performance and recognition awards (Quarterly) Health Benefits: UNITED HEALTHCARE PPO, extensive national coverage. INCLUDES: Medical/Dental/Vision/HSA. Eligible on the first of the month, immediately after the start date. Submit the enrollment form within 30 days of your start date otherwise, you will have to wait until October for the new year enrollment. Training & Career Development Reimbursement of Tuition and training needed to support career development. $150 monthly reimbursement contribution paid monthly towards parking expenses. Receipts must be submitted by the close of business on the 25th of each month. Reimbursements will be paid on the first payroll AFTER reimbursements are submitted each month. Performance bonus – Project-based Yearly bonus – Company based