Senior Firewall Administrator

Systems Engineering Solutions Corporation•Alexandria, VA

About The Position

The Senior Firewall Administrator manages and maintains the organization’s Palo Alto-based firewall infrastructure. The role oversees the deployment, configuration, and support of Palo Alto firewall devices to ensure performance, security, and availability. It also includes IT infrastructure support across help desk, end-user support, server, platform, and network infrastructure tiers, including technical assistance, incident and problem resolution, service request management, infrastructure monitoring, lifecycle support, and escalations. The administrator works with other IT teams on network security and integration needs and provides guidance to junior administrators and IT staff.

Requirements

At least 5 years of experience.
Bachelor’s degree in computer science, information systems, engineering, or a related field.
Public trust security clearance.
Expertise configuring, managing, and troubleshooting enterprise firewalls, such as Palo Alto, Cisco ASA/Firepower, Fortinet, Check Point, or Juniper SRX.
Strong understanding of network security principles, including segmentation, IPSec/SSL VPNs, NAT, ACLs, and IDS/IPS.
Working knowledge of routing protocols (BGP, OSPF, EIGRP) and Layer 2 technologies.
Ability to design, implement, and optimize security policies, objects, and rulesets while maintaining compliance and minimizing overlap or conflicts.
Experience with log analysis, packet captures, and network traffic inspection for threat identification and remediation.
Familiarity with SIEM tools such as Splunk, QRadar, or ELK for centralized event monitoring and alert correlation.
Proficiency administering Linux/Unix and Windows Server environments.
Experience following structured change-control processes and documenting work in ITIL or ISO environments.
Basic to intermediate scripting skills in Python, PowerShell, or Bash for configuration or monitoring automation.
Ability to create and maintain detailed network diagrams, firewall rule documentation, and standard operating procedures.

Nice To Haves

Palo Alto Networks Certified Network Security Engineer (PCNSE) certification.
Experience with cloud firewalls and network security configurations in AWS, Azure, or Google Cloud.
Advanced knowledge of next-generation firewall technologies, including threat prevention, URL filtering, SSL decryption, application control, and user-ID mapping.
Understanding of zero-trust principles and micro-segmentation strategies.
Experience integrating firewalls with network access control solutions such as Cisco ISE or Aruba ClearPass.
Familiarity with F5, Citrix Netscaler, or reverse proxy systems.
Certifications such as PCNSE, Cisco Certified Network Professional – Security (CCNP Security), Fortinet NSE 4–7, CompTIA Security+, CySA+, or CASP+, or CISSP or equivalent.
Understanding of compliance requirements in regulated environments, including FISMA, FedRAMP, NIST 800-53, PCI-DSS, or HIPAA.

Responsibilities

Monitor and optimize network and firewall performance, resource allocation, and availability.
Lead installation, configuration, and maintenance of Palo Alto firewall devices and cloud firewall configurations.
Manage Palo Alto platforms and services, including PAN-OS, VPN, Prisma Access, and GlobalProtect, and provide lifecycle support through end-of-support timelines.
Diagnose and resolve complex firewall connectivity, performance, and security issues.
Apply patches, updates, and security configurations to Palo Alto devices.
Maintain documentation of firewall configurations, procedures, policies, network diagrams, rules, and standard operating procedures.
Work with other IT teams to support network security needs and integrate firewall solutions with other systems.
Provide guidance and mentorship to junior network and firewall administrators and other IT staff.
Support IT infrastructure services, including technical assistance, incident and problem resolution, service requests, infrastructure monitoring, hardware and software lifecycle support, and escalation management.