Firewall Engineer

CRI Advantage • Idaho Falls, ID

1d • $60 - $70 • Onsite

About The Position

The Firewall Engineer is responsible for implementing and supporting IPv4/IPv6 dual-stack networking across an enterprise Palo Alto Networks firewall environment. Working primarily in Palo Alto Panorama, you will design, build, deploy, validate, and troubleshoot firewall policies - developing IPv6 rulesets based on the organization's existing IPv4 policy and deploying them to firewalls throughout the environment. This role keeps a mission-critical production network secure and available while modernizing it to support IPv6.

Requirements

• Bachelor's degree plus 2 years of relevant experience, or an equivalent combination of education and experience.
• Hands-on experience administering Palo Alto Networks firewalls and Panorama centralized management.
• Demonstrated experience implementing and supporting IPv4/IPv6 dual-stack networking within an enterprise environment.
• Demonstrated experience designing, deploying, validating, and troubleshooting enterprise firewall policies.
• U.S. citizenship; ability to complete standard site onboarding and background screening prior to starting.

Nice To Haves

• Palo Alto Networks Certified Network Security Engineer (PCNSE) or comparable certification.
• Experience administering Palo Alto Panorama Device Groups and Templates.
• Experience planning or executing enterprise firewall migrations.
• Experience supporting large, highly available production environments.
• Experience with enterprise IPv6 migrations or large dual-stack rollouts.
• Prior experience in a government, national laboratory, or other regulated IT environment.

Responsibilities

• Build, deploy, and maintain firewall rules and policies across the enterprise Palo Alto Networks environment (approx. 70% of time).
• Develop IPv6 rulesets in Palo Alto Panorama, mirroring current IPv4 policy, and deploy them to firewalls enterprise-wide.
• Build and configure IPv6 interfaces on firewall devices to support dual-stack operation (approx. 10% of time).
• Validate and troubleshoot firewall traffic to confirm rulesets function as intended and to resolve policy or connectivity issues (approx. 20% of time).
• Participate in change planning, implementation, and validation activities to minimize operational risk during firewall deployments.
• Document configurations, changes, and troubleshooting steps to support ongoing operations and knowledge transfer.
• Comply with all environmental, safety, health, security, and quality requirements, and apply Integrated Safety Management System principles when performing job duties.
• Perform other related duties as assigned in support of the network security team.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level