Cloud Network Automation Engineer

Amatriot Group; Homeland Park (MD); On-site; USD 130,000 - 170,000; Full time

Job summary

The Amatriot Group in Linthicum Heights, MD is seeking a Cloud Network Automation Engineer to provision, manage, and secure Palo Alto firewalls with automation. You will develop Ansible playbooks, monitor services, and investigate incidents across connected and disconnected networks and cloud providers.

Requirements include CaC tooling expertise, experience with Palo Alto environments, and a TS clearance eligibility.

Qualifications

• Active CompTIA Security+ certification.
• Attach a copy of the certification to the Beeline submission.
• Active TS clearance/SCI eligible.
• Bachelor's degree with 8+ years of experience, or Master's with 6+ years, or PhD with 3+ years, or equivalent experience.
• Experience in CaC tooling and Palo Alto firewall administration in disconnected environments.
• Experience with networking in regulated environments and strong communication skills.

Responsibilities

• Provision, manage, and support Palo Alto firewalls and Panorama servers across internet-connected and internet-disconnected networks and Cloud Service Providers.
• Develop, use, and maintain Ansible playbooks to secure, patch, and configure Palo Alto appliances.
• Manage and configure connected services, including network adapters, storage, and firewalls.
• Deploy, configure, and support monitoring capabilities to detect anomalous conditions or service disruptions.
• Investigate service disruptions, provide root cause analysis reports, and implement measures to prevent recurring issues.

Skills

CaC tooling

Palo Alto firewalls

Regulated environments

Communication skills

Education

Bachelor's degree + 8+ years

Master's degree + 6+ years

PhD + 3+ years

4 extra years experience in lieu of degree

Tools

Ansible

Terraform

Splunk

Grafana

SolarWinds

GitHub

GitLab

Job description

Location: Linthicum Heights, MD
Security Clearance: Active TS or higher [Required]
Job Type: Full-Time
Target Salary Range*:$130,000 - $170,000

*This represents the potential salary range for this position depending on education level, years of experience and/or certifications in addition to other position specific requirements which may impact salary

Position Overview

The Cloud Network Automation Engineer provisions, manages, and supports Palo Alto firewalls and Panorama servers across internet-connected and internet-disconnected networks and Cloud Service Providers. The role uses automation to secure, patch, and configure appliances, monitors services, and investigates disruptions.

Key Responsibilities

Firewall Administration and Automation

Provision, manage, and support Palo Alto firewalls and Panorama servers across several internet-connected and internet-disconnected networks and Cloud Service Providers.

Develop, use, and maintain Ansible playbooks to secure, patch, and configure Palo Alto appliances.

Manage and configure connected services, including network adapters, storage, and firewalls.

Monitoring and Incident Resolution

Deploy, configure, and support monitoring capabilities to detect anomalous conditions or service disruptions.

Investigate service disruptions, provide root cause analysis reports, and implement measures to prevent recurring issues.

Qualifications

Education and Experience

Meet one of the following education and experience combinations: [Required]

Bachelor's degree with 8+ years of experience.

Master's degree with 6+ years of experience.

PhD with 3+ years of experience.

In lieu of a degree, an additional 4 years of relevant experience or specialized training may be considered.

Skills

Expertise with Configuration as Code (CaC) tooling. [Required]

Expertise managing Palo Alto firewalls in disconnected environments. [Required]

Expertise with network requirements and configuration in regulated environments. [Required]

Strong oral and written communication skills. [Required]

Certifications

Active CompTIA Security+ certification. [Required]

Attach a copy of the certification to the Beeline submission. [Required]

Clearance

Active TS clearance/SCI eligible. [Required]

Other Requirements

Task Order: XT.

Working Conditions

Location: Linthicum Heights, MD (full-time on-site). [Required]

Preferred Qualifications

Education

A degree in Information Technology, Cybersecurity, Computer Science, Information Systems, Data Science, or Software Engineering is highly desired.

Skills and Experience

Ansible as the CaC tooling.

Experience with network requirements and configuration within Department of War agencies.

Experience with Infrastructure as Code (IaC) tooling, preferably Terraform.

Experience managing secure computing environments in accordance with DISA STIGs and NIST 800-53 controls.

Experience monitoring system uptime and performance using tools such as Splunk, Grafana, and SolarWinds.

Experience providing detailed technical after-action reports with root cause analysis following outages or security incidents.

Familiarity with host-level networking, such as instance firewalls.

Familiarity with source code management tools, such as GitHub or GitLab.