Palo Alto Network Security Engineer
Job Description
This role provides network and cybersecurity engineering support in a Department of Defense environment, focused on hands-on administration and troubleshooting of Palo Alto Networks security technologies supporting mission-critical and classified networks.
Location and Employment
- Site: Fort Belvoir, VA (onsite)
- Employment Type: Full-Time
- Travel: Up to 25%
Compensation
- Salary: USD 90,000 - 160,000 per yearly
Minimum Experience
- Experience: 2 years
Responsibilities
- Configure, administer, maintain, and troubleshoot Palo Alto Networks Next-Generation Firewalls (NGFWs).
- Configure and maintain PAN-OS.
- Develop, implement, and maintain security and NAT policies.
- Configure and support App-ID and User-ID.
- Configure and maintain GlobalProtect.
- Configure and troubleshoot VPN/IPsec connectivity.
- Configure and support High Availability (HA).
- Configure and troubleshoot routing, zones, and interfaces.
- Implement and maintain Threat Prevention capabilities.
- Monitor and analyze firewall logging and security events.
- Manage firewall environments using Panorama and/or Strata Cloud Manager.
- Perform firewall upgrades, maintenance, and troubleshooting.
- Support secure network operations within classified and DoD environments.
- Coordinate with network, cybersecurity, and systems engineering personnel to resolve technical issues and maintain secure network operations.
Required Qualifications
- Experience: 3–5+ years of network and/or security engineering experience.
- Hands-on Palo Alto: 2+ years of hands-on Palo Alto NGFW/PAN-OS experience.
- Certification: Active Palo Alto Networks Certified Next-Generation Firewall Engineer certification or active legacy PCNSE certification.
- Demonstrated hands-on experience with: PAN-OS; Security/NAT policies; App-ID; User-ID; GlobalProtect; VPN/IPsec; High Availability; Routing; Zones/interfaces; Threat Prevention; Logging; Panorama and/or Strata Cloud Manager; Firewall upgrades and troubleshooting.
- Clearance: Active TS/SCI Security Clearance.
Preferred Qualifications
- Palo Alto Networks Network Security Analyst certification.
- CCNP Security or CCNP Enterprise.
- CISSP (for more senior candidates).
- Experience with DoD STIGs.
- Experience with ACAS/Nessus.
- Experience supporting Risk Management Framework (RMF) requirements.
- Experience with DISA infrastructure.
- Experience supporting classified networks.
Technologies
- Palo Alto Networks Next-Generation Firewalls (NGFWs)
- PAN-OS
- App-ID
- User-ID
- GlobalProtect
- VPN/IPsec
- High Availability (HA)
- Threat Prevention
- Firewall logging
- Panorama
- Strata Cloud Manager
- Palo Alto Networks Certified Next-Generation Firewall Engineer certification
- PCNSE
Benefits
- 401K
- Life/Health/ Dental/Disability Insurance
- Flexible Paid Leave
- Tuition Reimbursement
Physical Requirements and Work Environment
- Primarily sedentary work requiring tasks involving reaching, lifting, finger dexterity, grasping, repetitive motions, standing, talking, hearing, and visual acuity.
- Ability to lift up to 20 pounds occasionally.
- Ability to read, write, and communicate effectively in English.
- Dependability, accuracy, strong judgment, and ability to apply oral and written instructions.
- Ability to make decisions that significantly impact the immediate work unit.
EEO Statement
Sedulous Consulting Services is an EEO/AA/Disability/Veterans Employer.