Firewall Engineer

Alexandria, United States | Posted on 07/09/2026

We are seeking an experienced Firewall Engineer to support mission‑critical network security operations within a high‑tempo DoD environment. This role focuses on firewall engineering, Palo Alto administration, load balancer security, rule‑set optimization, configuration assessments, incident support, and enterprise cybersecurity improvements.

The ideal candidate will bring strong hands‑on experience with Cisco and Palo Alto firewall technologies, including Panorama, HA configurations, IPSec VPNs, firewall routing, AWS Palo Alto VM deployments, IPS configuration, and firewall performance/security assessments.

• Identify and remediate firewall/load balancer misconfigurations, conflicting rules, security gaps, and performance issues.
• Optimize firewall rule‑sets to improve enterprise firewall and load balancer security posture and performance.
• Provide Tier 3 technical support to network operations and network administration teams.
• Maintain hardware and software components at vendor‑supported levels.
• Support mission‑critical Continuity of Operations initiatives.
• Conduct at least two monthly firewall assessments across CESO and customer devices, including reports and improvement recommendations.
• Support monthly network device performance and traffic utilization reporting.
• Develop and/or contribute to After Action Reports.
• Provide expert guidance on Palo Alto management, operations, architecture, optimization, technology roadmaps, and design discussions within the DISA CESO environment.
• Evaluate DISA CESO technologies and processes, provide future cybersecurity operations recommendations, participate in DISA CESO/mission partner working groups, and ensure compliance with DoD STIGs, DISA orders, JSIG policies, and applicable regulations.

• Bachelor’s degree and 8+ years of directly relevant experience; additional experience may be considered in lieu of degree.
• 5+ years of hands‑on Cisco and Palo Alto firewall experience in engineering and operations/maintenance roles.
• Experience supporting high operational tempo, Top Secret DoD environments.
• Ability to obtain and maintain TS/SCI eligibility.
• Willingness to take and maintain a CI Polygraph.
• Active DoD 8570 IAT Level II Baseline Certification, such as Security+ CE, CySA+, CCNA Security, GSEC, CND, SSCP, or equivalent.
• Strong Palo Alto experience, including Panorama installation, HA configuration, templates/template stacks, policy creation and push verification, route configuration, IPSec site‑to‑site VPN troubleshooting, Palo Alto VM in AWS, IPS configuration, virtual routers/systems, and firewall HA.
• Experience with Cisco firewall operations, troubleshooting, rule‑set analysis, optimization, and remediation.
• Experience conducting firewall security assessments, reporting, load balancer security issue identification, and remediation.
• Experience supporting network traffic utilization/performance reporting and compliance with DoD STIGs, DISA requirements, and JSIG policies.

• Prior experience supporting DISA, DISA CESO, or DISA mission partners in classified enterprise cybersecurity environments.
• Experience providing senior‑level technical recommendations for firewall architecture, security posture improvements, and future‑state cybersecurity operations.

• Paid Time Off PTO):
  
  TEN (10) Paid days off & FIVE (5) Floating days off.
• Holidays: 11 Paid Holidays. Flex time can be utilized instead of holiday time usage.
• Payroll:
  Paid Bi‑Monthly.
• 401(k):
  Partnered with the SECOND LARGEST Retirement plan provider in the U.S. Guaranteed 3% match. Eligibility – 21 years of age or older, after 3 months of employment.
• Individual or company‑wide performance and recognition awards (Quarterly).
• UNITED HEALTHCARE PPO, extensive national coverage.
• Eligible on the first of the month, immediately after the start date.
• Submit the enrollment form within 30 days of your start date otherwise, you will have to wait until October for the new year enrollment.

• Training & Career Development Reimbursement of Tuition and training needed to support career development.
• $150 monthly reimbursement contribution paid monthly towards parking expenses.
• Receipts must be submitted by the close of business on the 25th of each month.
• Reimbursements will be paid on the first payroll AFTER reimbursements are submitted each month.