Security Engineer and Firewall SME

Booz Allen Hamilton•Washington, DC

21d

About The Position

Security Engineer and Firewall SME The Opportunity: A well-designed network is critical to move data and enable the US government to achieve their mission, but how can an organization make sure their network will fit their current and evolving needs? Crafting the right network, with the right equipment and software, requires a combination of technical skill and careful planning. That’s why we need you, a firewall engineer who knows how to craft the exact network DoD needs. As a network engineer on our team, you’ll advise the DoD as they work on a reliable network to support DoD critical missions. You’ll lead a team assisting clients with learning the strategic goals and operational needs that shape the network requirements. You’ll then lead the planning of acquisition, installation, configuration, and maintenance of the network and security components. From resolving interoperability issues across platforms, to supporting the acquisition of hardware, you’ll put your hardware and software talents to good use. This is your chance to support your team with growing their knowledge base within depth network security expertise while broadening the scope of your network engineering work. Join us as we help protect DoD critical missions. Join us. The world can’t wait.

Requirements

6+ years of experience configuring, managing, and troubleshooting NGFW deployments, including Security Policies, App-ID, User-ID, Threat Prevention, or URL Filtering
Experience deploying and operating Prisma Access or SASE solutions, including SD-WAN integration, remote access, such as GlobalProtect, and cloud-delivered security services
Experience managing multi-device environments through Panorama, including device groups, templates, and policy push workflows
Knowledge of VPC architecture, Transit Gateway, AWS Network Firewall, Security Groups, NACLs, and deploying Palo Alto VM-Series or Cloud NGFW in AWS
Knowledge of BGP, OSPF, static routing, NAT, and IPsec/SSL VPN as they apply to firewall design
Ability to own firewall incidents end-to-end, including participating in on-call rotations, triaging network security events, and driving issues to resolution under pressure
Ability to diagnose connectivity and policy issues using packet captures, traffic logs, and CLI tooling across both physical and cloud-based firewalls.
Ability to mentor junior and mid-level engineers and take ownership of smaller scoped projects and workstreams
Ability to obtain and maintain a Public Trust or Suitability/Fitness determination based on client requirements
HS diploma or GED

Nice To Haves

Experience deploying firewall configs or AWS networking resources via Terraform, Ansible, or CloudFormation.
Experience designing or operating a ZTNA model, including using Prisma Access or similar
Experience integrating security policy changes into a pipeline, such as PAN-OS XML API, Terraform provider, or Expedition tooling
Experience with Azure or GCP networking in addition to AWS
Experience with SIEM or monitoring, including forwarding PAN logs to Splunk, Cortex XSIAM, or similar and building alerting around firewall events
PCNSE, AWS Networking Specialty or Security Specialty certification

Responsibilities

Lead a team assisting clients with learning the strategic goals and operational needs that shape the network requirements.
Lead the planning of acquisition, installation, configuration, and maintenance of the network and security components.
Resolving interoperability issues across platforms
Supporting the acquisition of hardware
Support your team with growing their knowledge base within depth network security expertise while broadening the scope of your network engineering work.