Firewall Engineer

Novul Solutions•Alexandria, VA

1d•Onsite

About The Position

We are seeking an experienced Firewall Engineer to support mission-critical network security operations within a high-tempo DoD environment. This role focuses on firewall engineering, Palo Alto administration, load balancer security, rule-set optimization, configuration assessments, incident support, and enterprise cybersecurity improvements. The ideal candidate will bring strong hands-on experience with Cisco and Palo Alto firewall technologies, including Panorama, HA configurations, IPSec VPNs, firewall routing, AWS Palo Alto VM deployments, IPS configuration, and firewall performance/security assessments.

Requirements

Bachelor’s degree and 8+ years of directly relevant experience; additional experience may be considered in lieu of degree.
5+ years of hands-on Cisco and Palo Alto firewall experience in engineering and operations/maintenance roles.
Experience supporting high operational tempo, Top Secret DoD environments.
Ability to obtain and maintain TS/SCI eligibility.
Willingness to take and maintain a CI Polygraph.
Active DoD 8570 IAT Level II Baseline Certification, such as Security+ CE, CySA+, CCNA Security, GSEC, CND, SSCP, or equivalent.
Strong Palo Alto experience, including Panorama installation, HA configuration, templates/template stacks, policy creation and push verification, route configuration, IPSec site-to-site VPN troubleshooting, Palo Alto VM in AWS, IPS configuration, virtual routers/systems, and firewall HA.
Experience with Cisco firewall operations, troubleshooting, rule-set analysis, optimization, and remediation.
Experience conducting firewall security assessments, reporting, load balancer security issue identification, and remediation.
Experience supporting network traffic utilization/performance reporting and compliance with DoD STIGs, DISA requirements, and JSIG policies.

Nice To Haves

Prior experience supporting DISA, DISA CESO, or DISA mission partners in classified enterprise cybersecurity environments.
Experience providing senior-level technical recommendations for firewall architecture, security posture improvements, and future-state cybersecurity operations.

Responsibilities

Identify and remediate firewall/load balancer misconfigurations, conflicting rules, security gaps, and performance issues.
Optimize firewall rule-sets to improve enterprise firewall and load balancer security posture and performance.
Provide Tier 3 technical support to network operations and network administration teams.
Maintain hardware and software components at vendor-supported levels.
Support mission-critical Continuity of Operations initiatives.
Conduct at least two monthly firewall assessments across CESO and customer devices, including reports and improvement recommendations.
Support monthly network device performance and traffic utilization reporting.
Develop and/or contribute to After Action Reports.
Provide expert guidance on Palo Alto management, operations, architecture, optimization, technology roadmaps, and design discussions within the DISA CESO environment.
Evaluate DISA CESO technologies and processes, provide future cybersecurity operations recommendations, participate in DISA CESO/mission partner working groups, and ensure compliance with DoD STIGs, DISA orders, JSIG policies, and applicable regulations.

Benefits

Paid Time Off (PTO): TEN (10) Paid days off & FIVE (5) Floating days off.
Holidays: 11 Paid Holidays.
Flex time can be utilized instead of holiday time usage.
Paid Bi-Monthly.
401(k) with guaranteed 3% match.
Individual or company-wide performance and recognition awards (Quarterly).
Health Benefits: UNITED HEALTHCARE PPO, extensive national coverage. INCLUDES: Medical/Dental/Vision/HSA.
Training & Career Development Reimbursement of Tuition and training needed to support career development.
$150 monthly reimbursement contribution paid monthly towards parking expenses.
Performance bonus – Project-based
Yearly bonus – Company based