Firewall Engineer

Position Summary The Firewall Engineer is responsible for implementing and supporting IPv4/IPv6 dual-stack networking across an enterprise Palo Alto Networks firewall environment. Working primarily in Palo Alto Panorama, you will design, build, deploy, validate, and troubleshoot firewall policies - developing IPv6 rulesets based on the organization's existing IPv4 policy and deploying them to firewalls throughout the environment. This role keeps a mission‑critical production network secure and available while modernizing it to support IPv6. Essential Duties & Responsibilities The approximate time allocations below reflect the primary focus of the role and may vary with project needs. Build, deploy, and maintain firewall rules and policies across the enterprise Palo Alto Networks environment (approx. 70% of time). Develop IPv6 rulesets in Palo Alto Panorama, mirroring current IPv4 policy, and deploy them to firewalls enterprise‑wide. Build and configure IPv6 interfaces on firewall devices to support dual‑stack operation (approx. 10% of time). Validate and troubleshoot firewall traffic to confirm rulesets function as intended and to resolve policy or connectivity issues (approx. 20% of time). Participate in change planning, implementation, and validation activities to minimize operational risk during firewall deployments. Document configurations, changes, and troubleshooting steps to support ongoing operations and knowledge transfer. Comply with all environmental, safety, health, security, and quality requirements, and apply Integrated Safety Management System principles when performing job duties. Perform other related duties as assigned in support of the network security team. Required Qualifications Bachelor's degree plus 2 years of relevant experience, or an equivalent combination of education and experience. Hands‑on experience administering Palo Alto Networks firewalls and Panorama centralized management. Demonstrated experience implementing and supporting IPv4/IPv6 dual‑stack networking within an enterprise environment. Demonstrated experience designing, deploying, validating, and troubleshooting enterprise firewall policies. U.S. citizenship; ability to complete standard site onboarding and background screening prior to starting. Preferred Qualifications Palo Alto Networks Certified Network Security Engineer (PCNSE) or comparable certification. Experience administering Palo Alto Panorama Device Groups and Templates. Experience planning or executing enterprise firewall migrations. Experience supporting large, highly available production environments. Experience with enterprise IPv6 migrations or large dual‑stack rollouts. Prior experience in a government, national laboratory, or other regulated IT environment. Knowledge, Skills & Abilities In-depth knowledge of Palo Alto Networks firewall administration and Panorama policy management. Strong understanding of IPv4 and IPv6 addressing, dual‑stack networking, and firewall policy design. Strong analytical, problem‑solving, and troubleshooting skills with close attention to detail. Ability to work independently, manage competing priorities, and follow change‑control processes in a production environment. Effective written and verbal communication and clear technical documentation. Work Environment & Physical Requirements Work is performed 100% onsite at a secure facility in Idaho Falls, Idaho; remote or hybrid work is not available for this position. Prolonged periods working at a computer and performing repetitive keyboard/mouse tasks. Occasional standing, bending, or lifting of equipment (typically up to 25 pounds) may be required. Must adhere to all site safety, security, and emergency‑action procedures. Travel is not anticipated beyond normal commuting to the Idaho Falls work location. #J-18808-Ljbffr