Palo Alto Network Security Engineer

Description:

Mid–Level Palo Alto Network Security Engineer

Location: MD & VA

BENEFITS: 401K, Life/Health/ Dental/Disability Insurance, Flexible Paid Leave, and Tuition Reimbursement.

TRAVEL REQUIREMENTS: Up to 25%

Clearance Required: Active TS/SCI Security Clearance Employment Type: Full-Time

About the Opportunity

Sedulous Consulting Services, LLC is seeking a Mid-Level Palo Alto Network Security Engineer to provide network and cybersecurity engineering support within a Department of Defense (DoD) environment. The successful candidate will provide hands-on engineering, configuration, administration, maintenance, and troubleshooting of Palo Alto Networks security technologies supporting mission-critical and classified networks.

Primary duties will include (but not limited to):

• Configure, administer, maintain, and troubleshoot Palo Alto Networks Next-Generation Firewalls (NGFWs).


• Configure and maintain PAN-OS.


• Develop, implement, and maintain security and NAT policies.


• Configure and support App-ID and User-ID.


• Configure and maintain GlobalProtect.


• Configure and troubleshoot VPN/IPsec connectivity.


• Configure and support High Availability (HA).


• Configure and troubleshoot routing, zones, and interfaces.


• Implement and maintain Threat Prevention capabilities.


• Monitor and analyze firewall logging and security events.


• Manage firewall environments using Panorama and/or Strata Cloud Manager.


• Perform firewall upgrades, maintenance, and troubleshooting.


• Support secure network operations within classified and DoD environments.


• Coordinate with network, cybersecurity, and systems engineering personnel to resolve technical issues and maintain secure network operations.

EDUCATION / EXPERIENCE

• 3–5+ years of network and/or security engineering experience.


• 2+ years of hands-on Palo Alto NGFW/PAN-OS experience.


• Demonstrated hands-on experience with:
  
  
  
  • PAN-OS
  
  
  • Security/NAT policies
  
  
  • App-ID
  
  
  • User-ID
  
  
  • GlobalProtect
  
  
  • VPN/IPsec
  
  
  • High Availability
  
  
  • Routing
  
  
  • Zones/interfaces
  
  
  • Threat Prevention
  
  
  • Logging
  
  
  • Panorama and/or Strata Cloud Manager
  
  
  • Firewall upgrades and troubleshooting
  
  
  
  

Must possess an active Palo Alto Networks Certified Next-Generation Firewall Engineer certification or active legacy PCNSE certification.

Preferred Qualifications

• Palo Alto Networks Network Security Analyst certification.


• CCNP Security or CCNP Enterprise.


• CISSP for more senior candidates.


• Experience with DoD STIGs.


• Experience with ACAS/Nessus.


• Experience supporting Risk Management Framework (RMF) requirements.


• Experience with DISA infrastructure.


• Experience supporting classified networks.

PHYSICAL REQUIREMENTS AND WORK ENVIRONMENT:

This is primarily sedentary work requiring the ability to perform tasks involving: reaching, lifting, finger dexterity, grasping, repetitive motions, standing, talking, hearing, and visual acuity. Must be able to lift up to 20 pounds occasionally.

Employees must be able to read, write, and communicate effectively in English. Work requires dependability, accuracy, strong judgment, and the ability to apply oral and written instructions. Must be able to make decisions that significantly impact the immediate work unit.

Company EEO Statement:

Sedulous Consulting Services is an EEO/AA/Disability/Veterans Employer. All qualified applicants receive consideration for employment without regard to race, color, religion, gender, national origin, age, sexual orientation, gender identity, protected veteran status, status as a qualified individual with a disability, or any other category protected by law. Sedulous hires and promotes individuals solely on the basis of their qualifications for the job.