Firewall Engineer

Job Description
Overview

We are seeking an experienced Firewall Engineer to support mission-critical network security operations within a high-tempo Department of Defense environment. This role focuses on the engineering, administration, assessment, optimization, and sustainment of enterprise firewall and load-balancing technologies supporting DISA CESO and mission partners.

The ideal candidate will bring extensive hands-on experience with Palo Alto and Cisco firewall technologies, including Panorama, high availability, IPSec VPNs, routing, IPS, virtual systems, AWS-based Palo Alto deployments, firewall assessments, rule-set optimization, and Tier 3 operational support.

Key Responsibilities

• Identify and remediate firewall and load balancer misconfigurations, conflicting rules, security gaps, performance issues, and other vulnerabilities while optimizing enterprise rule sets.
• Provide Tier 3 engineering and troubleshooting support to network operations and administration teams.
• Maintain firewall hardware and software components at vendor-supported versions and lifecycle levels.
• Support mission-critical Continuity of Operations (COOP) requirements and cybersecurity operations.
• Conduct at least two firewall assessments per month across CESO and customer devices; develop assessment reports and recommendations for security and performance improvements.
• Support development of monthly network-device performance, utilization, and traffic reports.
• Develop and participate in After Action Reports (AARs) following operational events, incidents, or exercises.
• Provide expert technical guidance regarding the administration, architecture, configuration, and operation of Palo Alto devices across the DISA CESO enterprise.
• Collaborate with customer stakeholders to establish objectives, technical roadmaps, architecture strategies, and design recommendations based on Palo Alto Networks technologies.
• Evaluate current DISA CESO technologies and operational processes to identify capability gaps and recommend future cybersecurity requirements and strategies.
• Participate in DISA CESO and mission-partner technical meetings, engineering discussions, and working groups.
• Ensure firewall configurations and operational practices comply with applicable DoD STIGs, DISA orders, JSIG policies, cybersecurity guidelines, and regulatory requirements.

Requirements

Required Qualifications

• Bachelor's degree with 8+ years of directly relevant experience; additional relevant experience may be considered in lieu of a degree.
• Minimum 5+ years of hands-on Cisco and Palo Alto firewall experience supporting both engineering and operations/maintenance environments.
• Strong hands-on experience with Palo Alto technologies and best practices, including Panorama installation/administration, HA configuration, Templates and Template Stacks, policy creation and deployment, routing, IPSec site-to-site VPNs, AWS Palo Alto VMs, IPS configuration, Virtual Routers/Systems, and Firewall High Availability.
• Experience supporting highly operational, mission-critical environments involving classified systems.
• Active DoD Top Secret security clearance with eligibility to obtain and maintain TS/SCI.
• Willingness and ability to obtain and maintain a CI Polygraph.
• Current DoD 8570 IAT Level II Baseline Certification, such as Security+ CE, CySA+, CCNA Security, GICSP, GSEC, CND, SSCP, or equivalent.
• Strong troubleshooting, technical documentation, communication, and customer-facing skills.

Preferred Qualifications

• Prior experience supporting DISA and DISA mission partners, with familiarity in DISA CESO enterprise architecture, cybersecurity operations, and engineering processes.

Benefits

Core Benefits:

• Paid Time OffPTO):TEN (10) Paid days off & FIVE (5) Floating days off.
• Holidays: 11 Paid Holidays. Flex time can be utilized instead of holiday time usage.
• Payroll: Paid Bi-Monthly.
• 401(k): Partnered with the SECOND LARGEST Retirement plan provider in the U.S. Guaranteed 3% match. Eligibility - 21 years of age or older, after 3 months of employment
• Individual or company-wide performance and recognition awards (Quarterly)

Health Benefits:

• UNITED HEALTHCARE PPO, extensive national coverage.
• INCLUDES: Medical/Dental/Vision/HSA.
• Eligible on the first of the month, immediately after the start date.
• Submit the enrollment form within 30 days of your start date otherwise, you will have to wait until October for the new year enrollment.

Quality of Life Benefits:

• Training & Career Development Reimbursement of Tuition and training needed to support career development.
• $150 monthly reimbursement contribution paid monthly towards parking expenses.
• Receipts must be submitted by the close of business on the 25th of each month.
• Reimbursements will be paid on the first payroll AFTER reimbursements are submitted each month.

Special Benefits:

• Performance bonus - Project-based
• Yearly bonus - Company based