Security Engineer and Firewall SME

Booz Allen Hamilton•Washington, DC

1d•Hybrid

About The Position

Booz Allen is seeking a Senior Security Engineer and Firewall SME to advise a government client on building and maintaining a reliable network that supports critical missions. The role works with clients and a team to understand strategic goals and operational needs, translate them into network requirements, and assist with planning the acquisition, installation, configuration, and maintenance of network and security components. The engineer will address interoperability issues across platforms, support hardware acquisition, and contribute in-depth network security expertise while expanding network engineering capabilities. The position focuses on next-generation firewall deployments and cloud network security, including Palo Alto platforms, Prisma Access or SASE solutions, Panorama, and AWS networking. The engineer will own firewall incidents from triage through resolution, diagnose connectivity and policy issues using packet captures, traffic logs, and command-line tools, and mentor junior and mid-level engineers. This hybrid position is based in Washington, DC. Applicants may be subject to a government investigation and must be able to obtain and maintain a Public Trust or Suitability/Fitness determination as required by the client.

Requirements

At least 6 years of experience configuring, managing, and troubleshooting NGFW deployments, including Security Policies, App-ID, User-ID, Threat Prevention, or URL Filtering.
Experience deploying and operating Prisma Access or SASE solutions, including SD-WAN integration, remote access such as GlobalProtect, and cloud-delivered security services.
Experience managing multi-device environments through Panorama, including device groups, templates, and policy-push workflows.
Knowledge of VPC architecture, Transit Gateway, AWS Network Firewall, Security Groups, NACLs, and deploying Palo Alto VM-Series or Cloud NGFW in AWS.
Knowledge of BGP, OSPF, static routing, NAT, and IPsec or SSL VPN as they apply to firewall design.
Ability to own firewall incidents end-to-end, including participating in on-call rotations, triaging network security events, and resolving issues under pressure.
Ability to diagnose connectivity and policy issues using packet captures, traffic logs, and CLI tooling across physical and cloud-based firewalls.
Ability to mentor junior and mid-level engineers and take ownership of smaller scoped projects and workstreams.
Ability to obtain and maintain a Public Trust or Suitability/Fitness determination based on client requirements.
High school diploma or GED.

Nice To Haves

Experience deploying firewall configurations or AWS networking resources via Terraform, Ansible, or CloudFormation.
Experience designing or operating a ZTNA model, including using Prisma Access.
Experience integrating security policy changes into a pipeline such as PAN-OS XML API, Terraform provider, or Expedition tooling.
Experience with Azure or GCP networking in addition to AWS.
Experience with SIEM or monitoring, including forwarding PAN logs to Splunk or Cortex XSIAM and building alerting around firewall events.
PCNSE, AWS Networking Specialty, or Security Specialty certification.

Responsibilities

Advise the client on developing a reliable network that supports critical missions.
Work with clients and the team to understand strategic goals and operational needs that shape network requirements.
Assist with planning the acquisition, installation, configuration, and maintenance of network and security components.
Resolve interoperability issues across platforms and support hardware acquisition.
Configure, manage, and troubleshoot next-generation firewall deployments and related security features.
Deploy and operate Prisma Access or SASE solutions, including SD-WAN integration, remote access, and cloud-delivered security services.
Manage multi-device environments through Panorama, including device groups, templates, and policy-push workflows.
Own firewall incidents end-to-end, participate in on-call rotations, triage network security events, and drive issues to resolution.
Diagnose connectivity and policy issues using packet captures, traffic logs, and CLI tooling across physical and cloud-based firewalls.
Mentor junior and mid-level engineers and take ownership of smaller scoped projects and workstreams.
Help grow the team's network security knowledge base.