Firewall Engineer

• Identify and remediate firewall/load balancer misconfigurations, conflicting rules, security gaps, and performance issues.
  
• Optimize firewall rule-sets to improve enterprise firewall and load balancer security posture and performance.
  
• Provide Tier 3 technical support to network operations and network administration teams.
  
• Maintain hardware and software components at vendor-supported levels.
  
• Support mission-critical Continuity of Operations initiatives.
  
• Conduct at least two monthly firewall assessments across CESO and customer devices, including reports and improvement recommendations.
  
• Support monthly network device performance and traffic utilization reporting.
  
• Develop and/or contribute to After Action Reports.
  
• Provide expert guidance on Palo Alto management, operations, architecture, optimization, technology roadmaps, and design discussions within the DISA CESO environment.
  
• Evaluate DISA CESO technologies and processes, provide future cybersecurity operations recommendations, participate in DISA CESO/mission partner working groups, and ensure compliance with DoD STIGs, DISA orders, JSIG policies, and applicable regulations.
  

Requirements

• Bachelor’s degree and 8+ years of directly relevant experience; additional experience may be considered in lieu of degree.
  
• 5+ years of hands-on Cisco and Palo Alto firewall experience in engineering and operations/maintenance roles.
  
• Experience supporting high operational tempo, Top Secret DoD environments.
  
• Ability to obtain and maintain TS/SCI eligibility.
  
• Willingness to take and maintain a CI Polygraph.
  
• Active DoD 8570 IAT Level II Baseline Certification, such as Security+ CE, CySA+, CCNA Security, GSEC, CND, SSCP, or equivalent.
  
• Strong Palo Alto experience, including Panorama installation, HA configuration, templates/template stacks, policy creation and push verification, route configuration, IPSec site-to-site VPN troubleshooting, Palo Alto VM in AWS, IPS configuration, virtual routers/systems, and firewall HA.
  
• Experience with Cisco firewall operations, troubleshooting, rule-set analysis, optimization, and remediation.
  
• Experience conducting firewall security assessments, reporting, load balancer security issue identification, and remediation.
  
• Experience supporting network traffic utilization/performance reporting and compliance with DoD STIGs, DISA requirements, and JSIG policies.
  

• Prior experience supporting DISA, DISA CESO, or DISA mission partners in classified enterprise cybersecurity environments.
  
• Experience providing senior-level technical recommendations for firewall architecture, security posture improvements, and future-state cybersecurity operations.
  

Benefits

• Paid Time Off  PTO):TEN (10) Paid days off & FIVE (5) Floating days off.
  
• Holidays: 11 Paid Holidays. Flex time can be utilized instead of holiday time usage.
  
• Payroll: Paid Bi-Monthly.
  
• 401(k): Partnered with the SECOND LARGEST Retirement plan provider in the U.S. Guaranteed 3% match. Eligibility – 21 years of age or older, after 3 months of employment
  
• Individual or company-wide performance and recognition awards (Quarterly)
  

• UNITED HEALTHCARE PPO, extensive national coverage.
  
• INCLUDES: Medical/Dental/Vision/HSA.
  
• Eligible on the first of the month, immediately after the start date.
  
• Submit the enrollment form within 30 days of your start date otherwise, you will have to wait until October for the new year enrollment.
  

• Training & Career Development Reimbursement of Tuition and training needed to support career development.
  
• $150 monthly reimbursement contribution paid monthly towards parking expenses.
  
• Receipts must be submitted by the close of business on the 25th of each month.
  
• Reimbursements will be paid on the first payroll AFTER reimbursements are submitted each month.
  

• Performance bonus – Project-based
  
• Yearly bonus – Company based