Network Security Engineer - Palo Alto

Join to apply for the Network Security Engineer - Palo Alto role at Jobs via Dice
.

Contract to Hire

Location: On‑site Arlington, VA / Dallas, TX

W2 Hourly Contract Rate: $60 to $65 per hour. Benefits available.

Conversion Salary: $105,000 to $110,000 annually, plus benefits.

The Network Security Engineer role requires extensive experience with Palo Alto Panorama, Firewalls, and Global Protect, as well as advanced networking skills. Knowledge of Palo Alto Prisma Access and Zero Trust Network Access is highly desired. The Engineer will provide architectural, technical, and problem‑resolution support for a Federal Agency network and security infrastructure, promoting a secure and scalable environment that aligns with our client’s security requirements.

This position focuses on both short‑term and long‑term strategy, recommends technology solutions and improvements to the network and security environments, and delivers clear, concise, timely communications that demonstrate operational excellence.

The day‑to‑day responsibilities include design, implementation, operation, troubleshooting, and resolution activities across multiple domains. The Engineer may be required to participate in system upgrades, deployments, and enhancements while focusing on delivery objectives, critical issues, and policy adherence. All team members occasionally work after hours to support system outages and critical infrastructure upgrades; on‑site presence one or more days per week may be required.

BS Degree in Computer Science or Engineering, or equivalent work experience (required).

• 10+ years of relevant technical Network/Security Engineering experience (required).

Desired: three or more of the following: CCNP, CCDP, CCSP, CISSP, OSCP, PCNSE, PCNSA, ITIL.

• Extensive experience with Palo Alto Firewalls (e.g., 3200 and 5200/5400/5600 series).
• Extensive experience with Palo Alto Panorama 9.x and above.
• Extensive experience with Palo Alto Global Protect.
• Extensive experience with Palo Alto Firewall Threat Protection, URL filtering, and related security features.
• Extensive experience with decryption/TLS/Security Profiles/PKI and deep understanding of PCAPS.
• Extensive experience with application‑based traffic and designing firewall solutions for internal, perimeter, and external networks.
• Experience with Palo Alto Prisma Access‑based infrastructure, supporting multiple data centers and numerous offices.

• Vendor hardware and software support, such as Cisco, Juniper, Palo Alto, and others.
• Data center, WAN, LAN, WLAN, firewall, and load balancer system support.
• Experience with analysis and forensic tools and effective troubleshooting of ingress/egress and zoned traffic.
• Knowledge of Azure infrastructure, VNETs, routing, and firewalling.
• Microsoft Entra  SAML authentication.
• Laptop setup and configuration.
• Implementing Zero Trust Network Access with understanding of all integration points (endpoint, identity, workloads).
• Developing Zero Trust security policies that incorporate telemetry from identity systems, endpoints, and external management systems.
• Listing IP space for various project teams to access external vendors and ensuring safe and secure connectivity.
• Creating zones and policies for various network segments and troubleshooting connectivity across security zones.
• Collaborating with internal application teams to design and implement a Zero Trust program with PA Prisma Access.
• Developing documents that describe design, security controls, and operational manuals.
• Participating in internal and external testing of applicable applications to ensure sufficient security.
• Effective time management, organizational skills, and ability to translate technical issues for business users.
• Ability to work independently and in a team environment with strong interpersonal communication skills.
• Analytical, communication, and problem‑solving skills.
• Support Info Sec standards and best practices.
• Thrives in a fast‑paced environment and looks for ways to improve efficiency (Current and Future Mode).

Successful completion of a Public Trust background investigation and/or a…