Firewall Engineer

Novul Solutions•Alexandria, VA

About The Position

We are seeking an experienced Firewall Engineer to support mission-critical network security operations within a high-tempo Department of Defense environment. This role focuses on the engineering, administration, assessment, optimization, and sustainment of enterprise firewall and load-balancing technologies supporting DISA CESO and mission partners. The ideal candidate will bring extensive hands-on experience with Palo Alto and Cisco firewall technologies, including Panorama, high availability, IPSec VPNs, routing, IPS, virtual systems, AWS-based Palo Alto deployments, firewall assessments, rule-set optimization, and Tier 3 operational support.

Requirements

Bachelor’s degree with 8+ years of directly relevant experience; additional relevant experience may be considered in lieu of a degree.
Minimum 5+ years of hands-on Cisco and Palo Alto firewall experience supporting both engineering and operations/maintenance environments.
Strong hands-on experience with Palo Alto technologies and best practices, including Panorama installation/administration, HA configuration, Templates and Template Stacks, policy creation and deployment, routing, IPSec site-to-site VPNs, AWS Palo Alto VMs, IPS configuration, Virtual Routers/Systems, and Firewall High Availability.
Experience supporting highly operational, mission-critical environments involving classified systems.
Active DoD Top Secret security clearance with eligibility to obtain and maintain TS/SCI.
Willingness and ability to obtain and maintain a CI Polygraph.
Current DoD 8570 IAT Level II Baseline Certification, such as Security+ CE, CySA+, CCNA Security, GICSP, GSEC, CND, SSCP, or equivalent.
Strong troubleshooting, technical documentation, communication, and customer-facing skills.

Nice To Haves

Prior experience supporting DISA and DISA mission partners, with familiarity in DISA CESO enterprise architecture, cybersecurity operations, and engineering processes.

Responsibilities

Identify and remediate firewall and load balancer misconfigurations, conflicting rules, security gaps, performance issues, and other vulnerabilities while optimizing enterprise rule sets.
Provide Tier 3 engineering and troubleshooting support to network operations and administration teams.
Maintain firewall hardware and software components at vendor-supported versions and lifecycle levels.
Support mission-critical Continuity of Operations (COOP) requirements and cybersecurity operations.
Conduct at least two firewall assessments per month across CESO and customer devices; develop assessment reports and recommendations for security and performance improvements.
Support development of monthly network-device performance, utilization, and traffic reports.
Develop and participate in After Action Reports (AARs) following operational events, incidents, or exercises.
Provide expert technical guidance regarding the administration, architecture, configuration, and operation of Palo Alto devices across the DISA CESO enterprise.
Collaborate with customer stakeholders to establish objectives, technical roadmaps, architecture strategies, and design recommendations based on Palo Alto Networks technologies.
Evaluate current DISA CESO technologies and operational processes to identify capability gaps and recommend future cybersecurity requirements and strategies.
Participate in DISA CESO and mission-partner technical meetings, engineering discussions, and working groups.
Ensure firewall configurations and operational practices comply with applicable DoD STIGs, DISA orders, JSIG policies, cybersecurity guidelines, and regulatory requirements.

Benefits

10 Paid days off
5 Floating days off
11 Paid Holidays
Flex time can be utilized instead of holiday time usage.
Paid Bi-Monthly.
401(k) with guaranteed 3% match.
Individual or company-wide performance and recognition awards (Quarterly)
Medical/Dental/Vision/HSA through UNITED HEALTHCARE PPO.
Training & Career Development Reimbursement of Tuition and training needed to support career development.
$150 monthly reimbursement contribution paid monthly towards parking expenses.
Performance bonus – Project-based
Yearly bonus – Company based