Firewall Engineer in Washington, D.C. *

Virtual Service Operations • Washington, DC

70d

About The Position

We are seeking an experienced Firewall Engineer to support the Next-Generation Firewall Modernization Project, migrating from Cisco Firepower to Palo Alto PA-5430 NGFWs. In this role you will lead all phases of planning, migration, implementation, testing, stabilization, and knowledge transfer in Washington, D.C.

Requirements

• Experience in network engineering with a focus on firewalls and security infrastructure.
• Hands-on with Palo Alto Networks firewalls (installation, configuration, troubleshooting).
• Prior experience leading enterprise firewall migration projects (Cisco to Palo Alto preferred).
• Proven ability to serve as Tier-3 escalation and mentor government/contractor teams.
• Must be willing to work onsite in Washington, D.C.
• Must possess an active DoD Secret Clearance or above.
• This specific position requires U.S. citizenship status.

Responsibilities

• Lead migration from Cisco Firepower to Palo Alto PA-5430 devices across two campuses.
• Perform pre-migration planning: export/mapping of existing Cisco configs, creation of RFCs, network documentation.
• Oversee implementation: racking/cabling hardware, Panorama setup, HA configuration, security zone design, AD/ISE integration.
• Support cutover & stabilization: application whitelisting, NAT policy tuning, App-ID rules, troubleshooting, backups.
• Deliver as-built documentation, rollback plans, and knowledge transfer to staff.
• Provide daily onsite Tier-3 firewall support during stabilization and optimization.
• Ensure operational resiliency, performance monitoring, and compliance with DoD security requirements.

Benefits

• Ongoing learning and development opportunities to foster continuous growth.
• Competitive salaries.
• Health benefits.
• Flexible work arrangements.

What This Job Offers

• Career Level: Mid Level
• Number of Employees: 501-1,000 employees