Firewall Engineer - WMATA

Job Title:

Firewall Engineer - WMATA

Location:

Various 2401 Mill Road, Alexandria, VA 22314
Duration: 12 months
Interview Type:
In Person
Visa : USC and GC only

Note :
Candidates Local to DMV area only

WMATA is looking for a resource to deploy and support the replacement of routers with a firewall.
This resource will be responsible for

• Working with the security team to install and cable the firewall at the partner sites.

• Configure Palo Alto firewall from the box.

• Test and document all the implementation with updated drawings.

Duties/Responsibilities:

• Perform router replacement with firewall, policy configurations, software updates, and health monitoring.

• Collaborate with internal teams and external partners to plan and execute firewall replacement projects at partner sites.

• Implement secure network designs, including site-to-site VPNs, DMZs, and segmentation policies.

• Serve as the subject matter expert (SME) for firewall-related security incidents, troubleshooting, and root cause analysis (RCA).

• Conduct periodic firewall reviews and ensure compliance with organizational security policies and standards.

• Work with the cybersecurity team to ensure firewall configurations align with audit, compliance, and regulatory requirements (e.g., PCI, NIST).

• Support testing at data centers and prepare documentation to aid implementation at remote or partner sites.

• Design, configure, implement, install, and manage Palo Alto devices including firewalls and support any needed integration with existing tools in both on-premises and remote locations.

• Support device migration, troubleshooting, and diagnosis which may include site surveys, site-to-site visits, and testing validation.

• Continuous monitoring and assessment of network security by testing and implementing security technologies and management of device operations and maintenance.

• Provide customers with Palo Alto security solutions based on infrastructure requirements.

• Collaborate in the design and implementation of complex network technologies (Data Center, Cloud, Hybrid)

• Develop and maintain technical documentation, network diagrams, Standard Operating Procedures (SOP), Firewall Rules, Configurations, Change Control records, and Work Instructions

• Perform platform lifecycle management activities (patching, monitoring, upgrades, policy configuration, etc.)
Bachelor's degree in computer science, information technology, management information systems, or a related discipline. Or minimum of 8 years of demonstratable experience in Palo Alto security solutions or equivalent work experience demonstrating expertise in Palo Alto Firewall configurations and device management.

Minimum Requirements:

• 5-7 years in enterprise network engineering roles with a focus on firewalls; and

• Three (3) years of hands-on experience configuring and supporting Palo Alto Networks
firewalls (PA-series or VM-series).

• Familiarity with Panorama, Palo Alto's centralized management solution.

• Knowledge of network segmentation, NAT, SSL decryption, and IPsec tunnels.

• Must be able to travel to multiple sites as needed.

• May require work outside standard business hours during deployments or maintenance
windows.

• Strong proficiency in on prem and cloud Panorama management

• Ability to reconcile complex data sets

• Strong analytical skills and attention to detail

• Excellent organizational and time-management skills with ability to manage multiple tasks
and priorities simultaneously

• Strong communication and interpersonal skills with the ability to collaborate effectively
across teams and levels

• Knowledge of industry best practices for IT Network security

• Technical proficiency in using office productivity software (e.g., Microsoft Office Suite,
Google Workspace)

• Preferable professional certifications in Palo Alto firewall management.

5 years in enterprise network engineering roles with a focus on firewalls;
Required 5 Years
Hands-on experience configuring and supporting Palo Alto Networks firewalls (PA-series or VM-series). Required 5 Years

Familiarity with Panorama, Palo Alto's centralized management solution. Required 2 Years
Knowledge of network segmentation, NAT, SSL decryption, and IPsec tunnels. Required 5 Years

Strong proficiency in on prem and cloud Panorama management Required 5 Years
Knowledge of industry best practices for IT Network security Required 5 Years

Exceptional Firewall configuration and management skills. Required 5 Years
Proven ability to review router configuration and migrate to a firewall. Required 5 Years

Preferable professional certifications in Palo Alto firewall management. Required
Bachelor's degree in computer science, information technology, management information systems, or a related discipline. Required