Firewall Engineer - WMATA

Firewall Engineer

WMATA is looking for a resource to deploy and support the replacement of routers with a firewall. This resource will be responsible for:

• Working with the security team to install and cable the firewall at the partner sites.
• Configuring Palo Alto firewall from the box.
• Testing and documenting all the implementation with updated drawings.

Duties/

Responsibilities include:

• Performing router replacement with firewall, policy configurations, software updates, and health monitoring.
• Collaborating with internal teams and external partners to plan and execute firewall replacement projects at partner sites.
• Implementing secure network designs, including site-to-site VPNs, DMZs, and segmentation policies.
• Serving as the subject matter expert (SME) for firewall-related security incidents, troubleshooting, and root cause analysis (RCA).
• Conducting periodic firewall reviews and ensuring compliance with organizational security policies and standards.
• Working with the cybersecurity team to ensure firewall configurations align with audit, compliance, and regulatory requirements (e.g., PCI, NIST).
• Supporting testing at data centers and preparing documentation to aid implementation at remote or partner sites.
• Designing, configuring, implementing, installing, and managing Palo Alto devices including firewalls and supporting any needed integration with existing tools in both on-premises and remote locations.
• Supporting device migration, troubleshooting, and diagnosis which may include site surveys, site-to-site visits, and testing validation.
• Continuous monitoring and assessment of network security by testing and implementing security technologies and management of device operations and maintenance.
• Providing customers with Palo Alto security solutions based on infrastructure requirements.
• Collaborating in the design and implementation of complex network technologies (Data Center, Cloud, Hybrid).
• Developing and maintaining technical documentation, network diagrams, Standard Operating Procedures (SOP), Firewall Rules, Configurations, Change Control records, and Work Instructions.
• Performing platform lifecycle management activities (patching, monitoring, upgrades, policy configuration, etc.).

Minimum requirements include:

• 5-7 years in enterprise network engineering roles with a focus on firewalls.
• Three (3) years of hands-on experience configuring and supporting Palo Alto Networks firewalls (PA-series or VM-series).
• Familiarity with Panorama, Palo Alto's centralized management solution.
• Knowledge of network segmentation, NAT, SSL decryption, and IPsec tunnels.
• Must be able to travel to multiple sites as needed.
• May require work outside standard business hours during deployments or maintenance windows.
• Strong proficiency in on prem and cloud Panorama management.
• Ability to reconcile complex data sets.
• Strong analytical skills and attention to detail.
• Excellent organizational and time-management skills with ability to manage multiple tasks and priorities simultaneously.
• Strong communication and interpersonal skills with the ability to collaborate effectively across teams and levels.
• Knowledge of industry best practices for IT Network security.
• Technical proficiency in using office productivity software (e.g., Microsoft Office Suite, Google Workspace).
• Preferable professional certifications in Palo Alto firewall management.

Bachelor's degree in computer science, information technology, management information systems, or a related discipline is required.