Palo Alto Integration Engineer, Senior

Palo Alto Integration Engineer, Senior

Location:

Washington, DC – On-Site

Work Schedule:

Full-Time, On-Site – Daily Commute Required

Employment Type:

Full-Time

Clearance:
Active security clearance or ability to obtain and maintain required Government background investigation and IT access

Salary Range: $135,000 – $160,000 annually

Digital Global Connectors (DGC) is seeking a Palo Alto Integration Engineer, Senior to serve as a senior technical authority responsible for the architecture, engineering, implementation, administration, and continuous improvement of enterprise Palo Alto Networks security infrastructure supporting a Federal Government IT environment.

This is a local, on-site position requiring a daily commute to the customer site in the Washington, DC area. Only candidates who currently reside within a reasonable daily commuting distance of the worksite will be considered. This position is not remote or hybrid, and candidates planning to relocate to the area at a later date will not be considered for this opening.

• Serve as a senior technical authority and subject matter expert for Palo Alto Networks security technologies.
• Lead the architecture, engineering, implementation, and optimization of enterprise Palo Alto Networks security solutions.
• Develop network security architectures, firewall zone models, security policy frameworks, data-flow diagrams, and platform configuration baselines.
• Lead security architecture reviews for new systems, applications, infrastructure changes, and cloud migrations.
• Design and implement Zero Trust network security architectures using Palo Alto Networks capabilities.
• Evaluate emerging Palo Alto Networks technologies and recommend improvements to security posture and operational effectiveness.
• Provide technical guidance and mentorship to junior and mid-level network security engineers.

• Lead engineering and administration of Palo Alto Networks NGFW infrastructure across perimeter, internal segmentation, data center, and cloud environments.
• Design, implement, and maintain NGFW security policies using App-, User-, and Content-.
• Design and maintain advanced threat-prevention profiles, including antivirus, anti-spyware, vulnerability protection, URL filtering, file blocking, Wild Fire, and DNS Security.
• Design and implement SSL/TLS decryption policies.
• Lead firewall security-policy lifecycle management, optimization, rule-base cleanup, and policy audits.
• Identify overly permissive rules, unused policies, shadow rules, and policy gaps and implement appropriate remediation.
• Develop and maintain firewall engineering standards, operational runbooks, and troubleshooting procedures.

• Lead engineering, implementation, and administration of Palo Alto Networks Panorama.
• Design and maintain Panorama device-group and template hierarchies.
• Develop scalable shared-policy, pre-rule, post-rule, and device-specific policy structures.
• Configure and maintain role-based administrative access.
• Lead Panorama upgrades, patches, configuration changes, and platform maintenance.
• Develop operational dashboards, security reports, and compliance reporting capabilities.

• Lead engineering and administration of Palo Alto Networks Prisma Access.
• Design and implement Global Protect configurations, gateways, agent configurations, split-tunneling policies, and authentication integrations.
• Configure and maintain Prisma Access security policies, threat prevention, URL filtering, and other cloud-delivered security controls.
• Integrate Prisma Access with enterprise identity platforms such as Microsoft Entra  Okta.
• Troubleshoot complex remote-access,…