Network Firewall Engineer

Booz Allen Hamilton • Reston, VA

6d • $99,000 - $225,000

About The Position

The Network Firewall Engineer designs, develops, and implements network security solutions supporting critical infrastructure and national digital defenses. The role is responsible for enterprise-wide deployment of the Palo Alto Networks Security Operating Platform and its associated Panorama management framework, and for developing and implementing advanced security solutions that strengthen threat prevention and enterprise security posture.

The engineer supervises and mentors a team troubleshooting and analyzing complex network challenges, using knowledge of Palo Alto security features such as App-ID, User-ID, Threat Prevention, and GlobalProtect. The role also manages research into new technologies and market trends to refine security solutions and maintain alignment with the evolving threat landscape. It contributes to mission success by protecting data and networks from malicious payloads and actors.

The position develops relationships and communicates security concepts to diverse audiences, including senior management; manages enterprise infrastructure and cybersecurity controls; and leads risk and vulnerability assessments across network, system, and application areas. The engineer uses big data analytics and traditional security events to identify advanced threats and indicators of compromise.

Requirements

• Experience configuring, managing, and optimizing network firewalls.
• Experience with multi-domain architectures, including data center, WAN, and LAN in virtualized architectures.
• Active TS/SCI clearance and willingness to take a polygraph exam.
• One of the following education and experience combinations supporting IT projects and activities: high school diploma or GED and 7+ years; associate degree and 5+ years; bachelor's degree and 3+ years; or master's degree and 1+ years.
• Ability to obtain a DoD 8570 IAT Level III certification, such as Security X, CASP+, CCNP Security, CISA, CISSP, GCED, GCIH, or CCSP, within 45 days of the start date.
• Ability to obtain a DoD 8570 Cybersecurity Service Provider - Infrastructure Support (CSSP-IS) certification, such as CEH, CySA+, GICSP, SSCP, CHFI, CFR, Cloud+, or CND, within 30 days of the start date.

Nice To Haves

• Experience configuring, managing, and optimizing Palo Alto Firewalls directly and via Panorama.
• Experience with Linux OS administration and management.
• Knowledge of building and maintaining SolarWinds NPM and IPAM.
• Ability to work as a self-starter without considerable direction and as part of a team.
• Excellent verbal and written communication skills, including coordinating efforts and establishing customer relations.

Responsibilities

• Design, develop, and implement network security solutions.
• Oversee enterprise-wide deployment of the Palo Alto Networks Security Operating Platform and Panorama management framework.
• Develop and implement advanced security solutions to improve threat prevention and enterprise security posture.
• Supervise and mentor a team as it troubleshoots and analyzes complex network challenges.
• Manage research into new technologies and market trends to refine security solutions and align them with the evolving threat landscape.
• Build relationships with other teams and communicate security concepts to a wide range of audiences, including senior management.
• Manage infrastructure and cybersecurity controls, including enhanced detection and vulnerability capabilities and improved event correlation in large enterprises.
• Lead risk and vulnerability assessments across network, system, and application areas.
• Use big data analytics and traditional security event types to identify advanced threats and indicators of compromise.

Benefits

• Health, life, and disability benefits.
• Financial and retirement benefits.
• Paid leave.
• Professional development.
• Tuition assistance.
• Work-life programs.
• Dependent care.
• Recognition awards for exceptional performance and demonstration of company values.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: High school or GED