Palo Alto Network Security Engineer
$90,000–$160,000 year
On-siteFort Belvoir, Virginia, United States
Job Summary
Configure, administer, maintain, and troubleshoot Palo Alto Networks Next-Generation Firewalls, PAN-OS, security policies, and App-ID/User-ID within a Department of Defense environment. Manage GlobalProtect, VPN/IPsec connectivity, High Availability, and routing zones while monitoring logging events and performing upgrades via Panorama or Strata Cloud Manager. Coordinate with engineering personnel to resolve technical issues and support secure network operations in classified settings. Requires active TS/SCI clearance and 2+ years of hands-on Palo Alto NGFW experience. Full-time role with up to 25% travel, located in Maryland and Virginia.
Required Qualifications
- Active TS/SCI Security Clearance
- 3–5+ years of network and/or security engineering experience
- 2+ years of hands-on Palo Alto NGFW/PAN-OS experience
- Demonstrated hands-on experience with PAN-OS
- Demonstrated hands-on experience with Security/NAT policies
- Demonstrated hands-on experience with App-ID
- Demonstrated hands-on experience with User-ID
- Demonstrated hands-on experience with GlobalProtect
- Demonstrated hands-on experience with VPN/IPsec
- Demonstrated hands-on experience with High Availability
- Demonstrated hands-on experience with Routing
- Demonstrated hands-on experience with Zones/interfaces
- Demonstrated hands-on experience with Threat Prevention
- Demonstrated hands-on experience with Logging
- Demonstrated hands-on experience with Panorama and/or Strata Cloud Manager
- Demonstrated hands-on experience with Firewall upgrades and troubleshooting
- Must possess an active Palo Alto Networks Certified Next-Generation Firewall Engineer certification or active legacy PCNSE certification
- Must be able to lift up to 20 pounds occasionally
- Must be able to read, write, and communicate effectively in English
- Work requires dependability, accuracy, strong judgment, and the ability to apply oral and written instructions
- Must be able to make decisions that significantly impact the immediate work unit
- Up to 25% travel
Desired Qualifications
- Palo Alto Networks Network Security Analyst certification
- CCNP Security or CCNP Enterprise
- CISSP for more senior candidates
- Experience with DoD STIGs
- Experience with ACAS/Nessus
- Experience supporting Risk Management Framework (RMF) requirements
- Experience with DISA infrastructure
- Experience supporting classified networks
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.