Firewall Engineer

Job Title: Firewall Engineer Bill Rate: $50 -52/hr on c2c Location: Various 2401 Mill Road, Alexandria, VA 22314 Duration: Close Date: May 11, 2026 @4pm Projected Start Date: March 30, 2026 Interview Type: In Person Project: Digital Modernization - Operations On Site Position There is one opening herewith up to Two submissions ONLY with PCN. Client is looking for a resource to deploy and support the replacement of routers with a firewall. Partner's router replacement with a Firewall Project The Washington Metropolitan Area Transit Authority (WMATA) is seeking resources to build, test, support, and deploy Palo Alto firewalls to support the WMATA partners' Router replacement project. The candidate for this task order will have extensive information about the requirements, architecture, and design developed for the firewalls' configuration and implementation. Client iis looking for a resource to deploy and support the replacement of routers with a firewall. This resource will be responsible for

• Working with the security team to install and cable the firewall at the partner sites.
• Configure Palo Alto firewall from the box.
• Test and document all the implementation with updated drawings.

Duties/Responsibilities:

• Perform router replacement with firewall, policy configurations, software updates, and health monitoring.
• Collaborate with internal teams and external partners to plan and execute firewall replacement projects at partner sites.
• Implement secure network designs, including site-to-site VPNs, DMZs, and segmentation policies.
• Serve as the subject matter expert (SME) for firewall-related security incidents, troubleshooting, and root cause analysis (RCA).
• Conduct periodic firewall reviews and ensure compliance with organizational security policies and standards.
• Work with the cybersecurity team to ensure firewall configurations align with audit, compliance, and regulatory requirements (e.g., PCI, NIST).
• Support testing at data centers and prepare documentation to aid implementation at remote or partner sites.
• Design, configure, implement, install, and manage Palo Alto devices including firewalls and support any needed integration with existing tools in both on-premises and remote locations.
• Support device migration, troubleshooting, and diagnosis which may include site surveys, site-to-site visits, and testing validation.
• Continuous monitoring and assessment of network security by testing and implementing security technologies and management of device operations and maintenance.
• Provide customers with Palo Alto security solutions based on infrastructure requirements.
• Collaborate in the design and implementation of complex network technologies (Data Center, Cloud, Hybrid)
• Develop and maintain technical documentation, network diagrams, Standard Operating Procedures (SOP), Firewall Rules, Configurations, Change Control records, and Work Instructions
• Perform platform lifecycle management activities (patching, monitoring, upgrades, policy configuration, etc.)

Bachelor's degree in computer science, information technology, management information systems, or a related discipline. Or minimum of 8 years of demonstratable experience in Palo Alto security solutions or equivalent work experience demonstrating expertise in Palo Alto Firewall configurations and device management. Minimum Requirements:

• 5-7 years in enterprise network engineering roles with a focus on firewalls; and
• Three (3) years of hands-on experience configuring and supporting Palo Alto Networks

firewalls (PA-series or VM-series).

• Familiarity with Panorama, Palo Alto's centralized management solution.
• Knowledge of network segmentation, NAT, SSL decryption, and IPsec tunnels.
• Must be able to travel to multiple sites as needed.
• May require work outside standard business hours during deployments or maintenance

windows.

• Strong proficiency in on prem and cloud Panorama management
• Ability to reconcile complex data sets
• Strong analytical skills and attention to detail
• Excellent organizational and time-management skills with ability to manage multiple tasks

and priorities simultaneously • Strong communication and interpersonal skills with the ability to collaborate effectively across teams and levels

• Knowledge of industry best practices for IT Network security
• Technical proficiency in using office productivity software (e.g., Microsoft Office Suite,

Google Workspace) • Preferable professional certifications in Palo Alto firewall management. 5 years in enterprise network engineering roles with a focus on firewalls; Required 5 Years Hands-on experience configuring and supporting Palo Alto Networks firewalls (PA-series or VM-series). Required 5 Years Familiarity with Panorama, Palo Alto's centralized management solution. Required 2 Years Knowledge of network segmentation, NAT, SSL decryption, and IPsec tunnels. Required 5 Years Strong proficiency in on prem and cloud Panorama management Required 5 Years Knowledge of industry best practices for IT Network security Required 5 Years Exceptional Firewall configuration and management skills. Required 5 Years Proven ability to review router configuration and migrate to a firewall. Required 5 Years Preferable professional certifications in Palo Alto firewall management. Required Bachelor's degree in computer science, information technology, management information systems, or a related discipline. Required Anveta