Cleared Palo Alto Network (PANW) Firewall Engineer - Reston, VA

MSCCN; Reston (VA); On-site; USD 90,000 - 190,000; Full time

Job summary

Virtual Service Operations in Reston, VA seeks a Palo Alto Networks Firewall Engineer to deploy and manage a complex NGFW environment using PA-1400/3400/5500 via Panorama M-700, plus VM Series in virtual environments.

You will migrate policies, optimize security, and coordinate production cutovers in a DoD setting, with the TAC team support and customer-facing collaboration.

Qualifications

• 7–9 years of experience with network and security solutions and technologies.
• 5+ years of experience with BGP, SD-WAN concepts, VXLAN, and general routing and switching.
• 3+ years of experience leading security solutions in large, complex environments.
• Extensive hands-on knowledge of Palo Alto Networks products including PA-7000 Series, PA-5500 Series, PA-3400 Series, and VM Series.
• High-level experience with Panorama and log collectors.
• Proficiency with NGFW and GlobalProtect.
• Detailed technical experience in the installation, configuration, and operation of high-end firewall appliances.
• Strong experience in internetworking, LAN, and WAN technologies.

Responsibilities

• Configure, implement, and maintain the Security Operating Platform in a complex DoD environment
• Optimize and migrate security policies and objects from legacy environments to Next-Gen Firewalls
• Deploy and manage PA-1400, PA-3400, PA-5500, and PA-7000 Series firewalls via Panorama M-700
• Manage VM Series firewalls and VM Flex Credits in virtual firewall environments
• Test and validate migration environments and coordinate cutover to production
• Provide guidance on code upgrades and develop new application/threat signatures
• Interact with the TAC to resolve support cases
• Understand customer environments and security roadmaps to implement solutions
• Communicate with customers, sales teams, peers, engineering, and support teams
• Work with security and network teams to build confidence across business units
• Some travel may be required depending on customer request

Skills

Firewall engineering

Panorama management

DoD networks

Security policy design

BGP/SD-WAN

Education

Bachelor's degree in Computer Science, MIS, or related field

Tools

Palo Alto PAN-OS

Panorama

VM Series

VM Flex Credits

TAC systems

Job description

Description:

Are you looking to take the next steps in your career as a Palo Alto Networks Firewall Engineer? Let’s chat and see if we are a good match!

Opportunity:

Virtual Service Operations is searching for a skilled Palo Alto Networks (PANW) Firewall Engineer to join our team in Reston, VA. In this role, you will deploy and manage a complex firewall environment—including PA-1400, PA-3400, and PA-5500 PQC-capable devices—via a Panorama M-700 with 1,000 device licenses, along with VM Series firewalls utilizing VM Flex Credits. You will work directly with security and network teams to migrate, optimize, and maintain Next-Generation Firewall infrastructure in a mission-critical DoD environment. If you have extensive experience with Palo Alto Networks products and a passion for enterprise network security, we want to hear from you!

Responsibilities:

• Configure, implement, and maintain the Security Operating Platform in a complex DoD environment
• Optimize and migrate security policies and objects from legacy environments to Next-Gen Firewalls
• Deploy and manage PA-1400, PA-3400, PA-5500, and PA-7000 Series firewalls via Panorama M-700
• Manage VM Series firewalls and VM Flex Credits in virtual firewall environments
• Test and validate migration environments and coordinate cutover to production
• Provide guidance on code upgrades and facilitate development of new application and threat signatures
• Interact with the Technical Assistance Center (TAC) to understand and resolve support cases
• Understand customer environments, requirements, and security roadmaps to implement appropriate security solutions
• Communicate effectively with customers, sales teams, peers, engineering, and support teams
• Work with security and network teams to build confidence across business units impacted by changes
• Some travel may be required depending on customer request

Required Experience

Qualifications:

• 7–9 years of experience with network and security solutions and technologies
• Minimum 5 years of experience with BGP, SD-WAN concepts, VXLAN, and general routing and switching
• Minimum 3 years of experience leading security solutions in large, complex environments
• Extensive hands-on knowledge of Palo Alto Networks products including PA-7000 Series, PA-5500 Series, PA-3400 Series, and VM Series
• High-level experience with Panorama and log collectors
• Proficiency with NGFW and GlobalProtect
• Detailed technical experience in the installation, configuration, and operation of high-end firewall appliances
• Strong experience in internetworking, LAN, and WAN technologies
• Solid understanding of internet protocols and applications
• Excellent written and verbal communication skills; ability to communicate effectively with senior leaders and technical peers
• Ability to manage multiple projects simultaneously and work calmly under pressure
• Bachelor’s degree in Computer Science, MIS, Business, or equivalent education, training, or experience

Requirements:

• Must be within driving distance of Reston, VA or willing to relocate
• Must be willing to work fully on-site
• Active TS-SCI clearance with CI Polygraph — required at time of application
• Minimum Security+ certification required (SecurityX / CASP+ acceptable)
• Required certification: CNSE/PCSNE or Palo Alto Networks Next-Generation Firewall Engineer
• Preferred additional certifications: CISSP, CCNA, JNCIE-SEC
• Strong written and verbal communication skills with excellent attention to detail
• Ability to work independently and collaboratively in a mission-focused environment
• Must be willing and able to travel as required

What is Important to Us:

• You are an excellent communicator in writing and speaking.
• You have the ability to work independently but also value teamwork.
• Your problem-solving skills are excellent.
• You are looking for a job where performance appraisals occur regularly, and you look forward to advancing your career.
• You seek a community of virtue-centered co-workers and clients.

What we offer you:

As part of the VSO company, you will be part of a virtue-centered team who value their work and teammates. This is a no-jerk zone. We provide ongoing learning and development opportunities to foster continuous growth. We offer competitive salaries, health benefits, and flexible work arrangements.

More About VSO:

VSO is a hybrid cloud and managed services consulting firm. Much of VSO’s success can be attributed to our deep partnerships with IT services industry leaders such as AWS, IBM, Microsoft and others. VSO leverages numerous other partner relationships so as to provide our customers with optimal support. Additionally, we take pride in taking care of our employees. We offer a wide variety of benefits for eligible employees related to health, retirement, professional development, and more!

Salary Description

• $90,000 - $190,000

Preferred Experience

Preferred Qualifications:

• Experience with PA-1400 and PA-5500 PQC-capable devices
• Familiarity with DoD security frameworks and classified network environments
• Experience supporting large-scale firewall migrations in enterprise or government settings

Certificates/Security Clearances/Other

Required:

• Active TS-SCI clearance with CI Polygraph — required at time of application
• Minimum Security+ certification required (SecurityX / CASP+ acceptable)
• Required certification: CNSE/PCSNE or Palo Alto Networks Next-Generation Firewall Engineer

Preferred:

• Preferred additional certifications: CISSP, CCNA, JNCIE-SEC