Palo Alto Firewall Engineer

Overview

On Site
$$120,000-$160,000
Accepts corp to corp applications
Contract - W2
Contract - 4 Month(s)

Skills

SOPS

Job Details

Our goal is to solve problems and deliver results for our clients. At Cloud and Things, you can be a part of transforming the public sector's IT environment. Our team is on the forefront of helping to solve the government's most complex IT challenges. If you are seeking a role that offers the opportunity to work on rewarding projects, consider a career with Cloud and Things.

*This is an exempt position. Salary commensurate with experience*

Overview:

We are seeking a highly experienced Palo Alto Firewall Engineer to support our client. This role requires a process-driven professional with strong expertise in configuration, deployment, and troubleshooting. The ideal candidate will have demonstrated success in architecting and managing resilient Palo Alto firewall environments, including automated failover, while ensuring security best practices and operational excellence.

Duties:

  • Provide subject matter expertise (SME) in Palo Alto firewall technologies, including Panorama, App-ID, User-ID, threat prevention, and global protect VPN.

  • Review, configure and validate firewall configurations, security policies, NAT rules, and routing across various locations.

  • Design and implement optimized Palo Alto firewall policies aligned with security best practices and institutional requirements.

  • Collaborate with network leads at the various locations to plan and execute firewall migrations, including cutover planning and rollback procedures.

  • Analyze and translate existing firewall rulesets to Palo Alto syntax and logic.

  • Conduct pre-migration assessments, gap analysis, and post-migration validation and testing.

  • Assist in developing and refining Method of Procedures (MOPs), migration playbooks, and standard operating procedures (SOPs).

  • Participate in HANDS-ON troubleshooting, root cause analysis, and resolution of complex network or firewall-related issues.

  • Support knowledge transfer and mentoring of internal technical staff.

Mandatory Qualifications:

  • Bachelor's degree.

  • A minimum of 15+ years of related experience.

  • 2+ years of management experience OR 5+ years of program/project management experience.

  • 10+ years of experience in enterprise network engineering and firewall administration.

  • 5+ years of hands-on experience with Palo Alto Networks firewalls, including centralized management with Panorama.

  • Proven experience in complex firewall migrations, security policy design, and rulebase optimization.

  • Strong background in Layer 2/3 networking, VLANs, routing protocols (OSPF, BGP), NAT, VPNs, and high availability configurations.

  • Familiarity with security best practices (NIST, CIS Benchmarks) and modern threat prevention mechanisms.

  • Experience with packet capture analysis, log correlation, and advanced troubleshooting techniques.

  • Excellent communication, documentation, and collaboration skills.

  • Palo Alto certifications preferred (PCNSE, PSE, or equivalent).

Cloud and Things complies with all applicable federal, state, and local laws regarding recruitment and hiring. All qualified applicants are considered for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, protected veteran status, or any other category protected by applicable federal, state, or local laws.

AI-Assisted Resume Evaluation Notice

Cloud and Things Talent Management

Notice to Candidates

Cloud and Things utilizes artificial intelligence (AI) tools to assist our recruiting team in evaluating candidate applications for streamlining; consistency, efficiency, and thoroughness. All hiring decisions are ultimately made by our human recruiting professionals.

How AI Is Used

Our AI tools assist by:

  • Analyzing resumes against job requirements
  • Supporting our recruiters in candidate data evaluation
  • Ensuring consistent review standards across all applications

Important: AI serves as a support tool only. As noted above, all candidate selection and hiring decisions are made by experienced human recruiters. Your unedited resume will be processed by our AI tools as part of this evaluation.

Your Data and Privacy

Cloud and Things Data Handling:

  • Your information is processed securely and used exclusively for recruitment purposes
  • Cloud and Things may store your resume in our Applicant Tracking System (ATS) indefinitely for future job matching opportunities
    • You may opt out of long-term ATS storage by emailing your name and your request to opt out of storing your resume in the ATS to:
  • All personal information is handled confidentially in accordance with our privacy policy

AI Tool Data Processing:

  • AI processing data is retained for a maximum of 90 days, after which it is deleted
  • All data sent to AI tools is encrypted in transit and at rest
  • AI tools comply with applicable privacy laws including GDPR and CCPA
  • Personal data is anonymized or minimized wherever possible during AI processing

Your Participation

By submitting your application, you acknowledge this notice and consent to AI-assisted evaluation as part of our recruitment process.


Employers have access to artificial intelligence language tools (“AI”) that help generate and enhance job descriptions and AI may have been used to create this description. The position description has been reviewed for accuracy and Dice believes it to correctly reflect the job opportunity.