Palo Alto Network Security Engineer

This role provides network and cybersecurity engineering support in a Department of Defense environment, focused on hands-on administration and troubleshooting of Palo Alto Networks security technologies supporting mission-critical and classified networks.

Location and Employment

• Site: Fort Belvoir, VA (onsite)
• Employment Type: Full-Time
• Travel: Up to 25%

Compensation

• Salary: USD 90,000 - 160,000 per yearly

Minimum Experience

• Experience: 2 years

Responsibilities

• Configure, administer, maintain, and troubleshoot Palo Alto Networks Next-Generation Firewalls (NGFWs).
• Configure and maintain PAN-OS.
• Develop, implement, and maintain security and NAT policies.
• Configure and support App-ID and User-ID.
• Configure and maintain GlobalProtect.
• Configure and troubleshoot VPN/IPsec connectivity.
• Configure and support High Availability (HA).
• Configure and troubleshoot routing, zones, and interfaces.
• Implement and maintain Threat Prevention capabilities.
• Monitor and analyze firewall logging and security events.
• Manage firewall environments using Panorama and/or Strata Cloud Manager.
• Perform firewall upgrades, maintenance, and troubleshooting.
• Support secure network operations within classified and DoD environments.
• Coordinate with network, cybersecurity, and systems engineering personnel to resolve technical issues and maintain secure network operations.

Required Qualifications

• Experience: 3–5+ years of network and/or security engineering experience.
• Hands-on Palo Alto: 2+ years of hands-on Palo Alto NGFW/PAN-OS experience.
• Certification: Active Palo Alto Networks Certified Next-Generation Firewall Engineer certification or active legacy PCNSE certification.
• Demonstrated hands-on experience with: PAN-OS; Security/NAT policies; App-ID; User-ID; GlobalProtect; VPN/IPsec; High Availability; Routing; Zones/interfaces; Threat Prevention; Logging; Panorama and/or Strata Cloud Manager; Firewall upgrades and troubleshooting.
• Clearance: Active TS/SCI Security Clearance.

Preferred Qualifications

• Palo Alto Networks Network Security Analyst certification.
• CCNP Security or CCNP Enterprise.
• CISSP (for more senior candidates).
• Experience with DoD STIGs.
• Experience with ACAS/Nessus.
• Experience supporting Risk Management Framework (RMF) requirements.
• Experience with DISA infrastructure.
• Experience supporting classified networks.

Technologies

• Palo Alto Networks Next-Generation Firewalls (NGFWs)
• PAN-OS
• App-ID
• User-ID
• GlobalProtect
• VPN/IPsec
• High Availability (HA)
• Threat Prevention
• Firewall logging
• Panorama
• Strata Cloud Manager
• Palo Alto Networks Certified Next-Generation Firewall Engineer certification
• PCNSE

Benefits

• 401K
• Life/Health/ Dental/Disability Insurance
• Flexible Paid Leave
• Tuition Reimbursement

Physical Requirements and Work Environment

• Primarily sedentary work requiring tasks involving reaching, lifting, finger dexterity, grasping, repetitive motions, standing, talking, hearing, and visual acuity.
• Ability to lift up to 20 pounds occasionally.
• Ability to read, write, and communicate effectively in English.
• Dependability, accuracy, strong judgment, and ability to apply oral and written instructions.
• Ability to make decisions that significantly impact the immediate work unit.

EEO Statement

Sedulous Consulting Services is an EEO/AA/Disability/Veterans Employer.