Firewall Engineer
Job Summary
- Identify and remediate firewall/load balancer misconfigurations conflicting rules security gaps and performance issues.
- Optimize firewall rule-sets to improve enterprise firewall and load balancer security posture and performance.
- Provide Tier 3 technical support to network operations and network administration teams.
- Maintain hardware and software components at vendor-supported levels.
- Support mission-critical Continuity of Operations initiatives.
- Conduct at least two monthly firewall assessments across CESO and customer devices including reports and improvement recommendations.
- Support monthly network device performance and traffic utilization reporting.
- Develop and/or contribute to After Action Reports.
- Provide expert guidance on Palo Alto management operations architecture optimization technology roadmaps and design discussions within the DISA CESO environment.
- Evaluate DISA CESO technologies and processes provide future cybersecurity operations recommendations participate in DISA CESO/mission partner working groups and ensure compliance with DoD STIGs DISA orders JSIG policies and applicable regulations.
- Bachelors degree and 8 years of directly relevant experience; additional experience may be considered in lieu of degree.
- 5 years of hands-on Cisco and Palo Alto firewall experience in engineering and operations/maintenance roles.
- Experience supporting high operational tempo Top Secret DoD environments.
- Ability to obtain and maintain TS/SCI eligibility.
- Willingness to take and maintain a CI Polygraph.
- Active DoD 8570 IAT Level II Baseline Certification such as Security CE CySA CCNA Security GSEC CND SSCP or equivalent.
- Strong Palo Alto experience including Panorama installation HA configuration templates/template stacks policy creation and push verification route configuration IPSec site-to-site VPN troubleshooting Palo Alto VM in AWS IPS configuration virtual routers/systems and firewall HA.
- Experience with Cisco firewall operations troubleshooting rule-set analysis optimization and remediation.
- Experience conducting firewall security assessments reporting load balancer security issue identification and remediation.
- Experience supporting network traffic utilization/performance reporting and compliance with DoD STIGs DISA requirements and JSIG policies.
- Prior experience supporting DISA DISA CESO or DISA mission partners in classified enterprise cybersecurity environments.
- Experience providing senior-level technical recommendations for firewall architecture security posture improvements and future-state cybersecurity operations.
- Paid Time Off PTO):TEN (10) Paid days off & FIVE (5) Floating days off.
- Holidays: 11 Paid Holidays. Flex time can be utilized instead of holiday time usage.
- Payroll: Paid Bi-Monthly.
- 401(k): Partnered with the SECOND LARGEST Retirement plan provider in the U.S. Guaranteed 3% match. Eligibility 21 years of age or older after 3 months of employment
- Individual or company-wide performance and recognition awards (Quarterly)
- UNITED HEALTHCARE PPO extensive national coverage.
- INCLUDES: Medical/Dental/Vision/HSA.
- Eligible on the first of the month immediately after the start date.
- Submit the enrollment form within 30 days of your start date otherwise you will have to wait until October for the new year enrollment.
- Training & Career Development Reimbursement of Tuition and training needed to support career development.
- $150 monthly reimbursement contribution paid monthly towards parking expenses.
- Receipts must be submitted by the close of business on the 25th of each month.
- Reimbursements will be paid on the first payroll AFTER reimbursements are submitted each month.
- Performance bonus Project-based
- Yearly bonus Company based
Required Skills:
Palo Alto firewall engineering and administration Panorama installation HA configuration templates policy creation and push verification Cisco firewall operations and troubleshooting Firewall rule-set analysis optimization and remediation IPSec site-to-site VPN configuration and troubleshooting Palo Alto routing IPS virtual routers/systems and firewall HA Palo Alto VM deployment/support in AWS Load balancer security issue identification and remediation Firewall security assessments reporting and performance monitoring Network traffic utilization and monthly performance reporting Tier 3 network/security operations support
Required Education:
Bachelors degree and 8 years of directly relevant experience. Addl experience may be considered in lieu of degree.