Firewall Engineer

Alexandria, VA, US • Posted 1 day ago • Updated 3 hours ago
Full Time
On-site
Fitment

Dice Job Match Score™

🔢 Crunching numbers...

Job Details

Skills

  • Network Security
  • Optimization
  • Load Balancing
  • Tier 3
  • Network Operations
  • Computer Hardware
  • Network
  • Collaboration
  • Roadmaps
  • STIG
  • Cisco
  • Stacks Blockchain
  • Policy Writing
  • Routing
  • IPsec
  • Virtual Private Network
  • Amazon Web Services
  • Palo Alto
  • Virtual Machines
  • IPS
  • Routers
  • Firewall
  • High Availability
  • Security Clearance
  • Continuous Integration
  • DoD
  • Security+
  • Customer Engagement
  • Cisco Certifications
  • GSEC
  • SSCP
  • Technical Writing
  • Communication
  • Customer Facing
  • Enterprise Architecture
  • Cyber Security
  • Apache Flex
  • Business Intelligence
  • Health Care
  • PPO
  • Training
  • Payroll

Summary

Job Description
Overview

We are seeking an experienced Firewall Engineer to support mission-critical network security operations within a high-tempo Department of Defense environment. This role focuses on the engineering, administration, assessment, optimization, and sustainment of enterprise firewall and load-balancing technologies supporting DISA CESO and mission partners.

The ideal candidate will bring extensive hands-on experience with Palo Alto and Cisco firewall technologies, including Panorama, high availability, IPSec VPNs, routing, IPS, virtual systems, AWS-based Palo Alto deployments, firewall assessments, rule-set optimization, and Tier 3 operational support.

Key Responsibilities

  • Identify and remediate firewall and load balancer misconfigurations, conflicting rules, security gaps, performance issues, and other vulnerabilities while optimizing enterprise rule sets.
  • Provide Tier 3 engineering and troubleshooting support to network operations and administration teams.
  • Maintain firewall hardware and software components at vendor-supported versions and lifecycle levels.
  • Support mission-critical Continuity of Operations (COOP) requirements and cybersecurity operations.
  • Conduct at least two firewall assessments per month across CESO and customer devices; develop assessment reports and recommendations for security and performance improvements.
  • Support development of monthly network-device performance, utilization, and traffic reports.
  • Develop and participate in After Action Reports (AARs) following operational events, incidents, or exercises.
  • Provide expert technical guidance regarding the administration, architecture, configuration, and operation of Palo Alto devices across the DISA CESO enterprise.
  • Collaborate with customer stakeholders to establish objectives, technical roadmaps, architecture strategies, and design recommendations based on Palo Alto Networks technologies.
  • Evaluate current DISA CESO technologies and operational processes to identify capability gaps and recommend future cybersecurity requirements and strategies.
  • Participate in DISA CESO and mission-partner technical meetings, engineering discussions, and working groups.
  • Ensure firewall configurations and operational practices comply with applicable DoD STIGs, DISA orders, JSIG policies, cybersecurity guidelines, and regulatory requirements.

Requirements

Required Qualifications
  • Bachelor's degree with 8+ years of directly relevant experience; additional relevant experience may be considered in lieu of a degree.
  • Minimum 5+ years of hands-on Cisco and Palo Alto firewall experience supporting both engineering and operations/maintenance environments.
  • Strong hands-on experience with Palo Alto technologies and best practices, including Panorama installation/administration, HA configuration, Templates and Template Stacks, policy creation and deployment, routing, IPSec site-to-site VPNs, AWS Palo Alto VMs, IPS configuration, Virtual Routers/Systems, and Firewall High Availability.
  • Experience supporting highly operational, mission-critical environments involving classified systems.
  • Active DoD Top Secret security clearance with eligibility to obtain and maintain TS/SCI.
  • Willingness and ability to obtain and maintain a CI Polygraph.
  • Current DoD 8570 IAT Level II Baseline Certification, such as Security+ CE, CySA+, CCNA Security, GICSP, GSEC, CND, SSCP, or equivalent.
  • Strong troubleshooting, technical documentation, communication, and customer-facing skills.

Preferred Qualifications

  • Prior experience supporting DISA and DISA mission partners, with familiarity in DISA CESO enterprise architecture, cybersecurity operations, and engineering processes.

Benefits

Core Benefits:

  • Paid Time OffPTO):TEN (10) Paid days off & FIVE (5) Floating days off.
  • Holidays: 11 Paid Holidays. Flex time can be utilized instead of holiday time usage.
  • Payroll: Paid Bi-Monthly.
  • 401(k): Partnered with the SECOND LARGEST Retirement plan provider in the U.S. Guaranteed 3% match. Eligibility - 21 years of age or older, after 3 months of employment
  • Individual or company-wide performance and recognition awards (Quarterly)

Health Benefits:

  • UNITED HEALTHCARE PPO, extensive national coverage.
  • INCLUDES: Medical/Dental/Vision/HSA.
  • Eligible on the first of the month, immediately after the start date.
  • Submit the enrollment form within 30 days of your start date otherwise, you will have to wait until October for the new year enrollment.

Quality of Life Benefits:

  • Training & Career Development Reimbursement of Tuition and training needed to support career development.
  • $150 monthly reimbursement contribution paid monthly towards parking expenses.
  • Receipts must be submitted by the close of business on the 25th of each month.
  • Reimbursements will be paid on the first payroll AFTER reimbursements are submitted each month.

Special Benefits:

  • Performance bonus - Project-based
  • Yearly bonus - Company based
Employers have access to artificial intelligence language tools (“AI”) that help generate and enhance job descriptions and AI may have been used to create this description. The position description has been reviewed for accuracy and Dice believes it to correctly reflect the job opportunity.
  • Dice Id: 80183962
  • Position Id: d51c11d7c61d40223c84b0044afcc0f4
  • Posted 1 day ago
Create job alert
Set job alertNever miss an opportunity! Create an alert based on the job you applied for.

Similar Jobs

Arlington, Virginia

Today

Full-time

USD 115,000.00 - 125,000.00 per year

Arlington, Virginia

Today

Full-time

USD 116,500.00 per year

Springfield, Virginia

10d ago

Easy Apply

Contract

Depends on Experience

Springfield, Virginia

Today

Full-time

Search all similar jobs