Firewall Engineer with Security Clearance

RMantra Solutions; Alexandria (VA); On-site; USD 120,000 - 180,000; Full time

Job summary

RMantra Solutions seeks a senior cybersecurity engineer for 100% onsite work in the Arlington area. The role requires hands-on Cisco and Palo Alto firewall experience, active DoD Top Secret clearance, and 8570 IAT Level II Baseline Certification.

You will support DISA CESO architectures, perform monthly firewall assessments, and interact with mission partner groups to shape secure roadmaps. Ideal candidates have 8+ years of relevant experience, a strong posture in firewall/HW/SW maintenance, and

Qualifications

• Bachelor’s degree and 8+ years of directly relevant experience.
• 5+ years of hands-on Cisco / Palo Alto Firewall experience in engineering and operations.
• Active DoD Top Secret clearance and eligibility for TS/SCI.
• 8570 IAT Level II Baseline Certification required or equivalent.

Responsibilities

• Identify and remediate misconfigurations, security gaps, and optimize firewall and load balancer rules.
• Provide Tier 3 support to the operations network administrations.
• Maintain HW/SW at vendor-supported levels and support COOP.
• Conduct monthly firewall assessments and generate improvement reports.
• Develop network performance and traffic reports and participate in AARs.
• Advise on Palo Alto devices within the DISA CESO architecture and roadmap.
• Engage with DISA CESO and mission partner groups to set objectives.

Skills

Firewall expertise

Palo Alto Concepts

Cisco / Palo Alto Firewall experience

DOD Top Secret clearance

CI/Poly readiness

Education

Bachelor's degree

Tools

Panorama

Palo Alto Configuration

Job description

This position is 100% Onsite. This position is in Arlington, VA, with occasional/situational travel. Certificate 8570 IAT Level II Baseline Certification (e.g. CCNA Security, CySA+, GICSP, GSEC, Security+ CE, CND, SSCP) Location: 4800 Mark Center Drive, Alexandria, VA 22311 Schedule 100% onsite Clearance US Citizens with DOD Top Secret/SCI Responsibilities Qualifications * Identify and remediate misconfigurations, conflicting rules, security gaps, firewall and load balancer security issues, optimize rule-sets, and enhance the overall security posture and performance of Firewalls and Load Balancers

• Provide Tier 3 support to members of the operations network administrations.
• Maintain all HW and SW components at vendor supported levels.
• Support mission-critical Continuity of Operations (COOP).
• Conduct a minimum of two (2) assessment of firewall each month on CESO and customer devices and generate assessment reports and provide recommendations for improvements.
• Support the creation of network device performance and traffic utilization monthly reports.
• Develop and/or participate in After Action Reports (AARs)
• Provide expert advice and direction regarding the management and operation of all Palo Alto devices in the DISA CESO enterprise architecture.
• Interact with the customer point of contact to set objectives/goals based on Palo Alto Networks technologies and available technology roadmap for architecture and design discussions.
• Evaluate current technologies and processes associated with DISA CESO to identify gaps. * Provide requirements and strategies for future cybersecurity operations.
• Active participant in meetings with DISA CESO and mission partner working groups.
• Adhere to applicable DOD STIGs, DISA applicable orders, and JSIG policy, guidelines, and regulations. Basic Qualifications * Bachelor’s degree and 8+ years of directly relevant experience. Add’l experience may be considered in lieu of degree.
• 5+ years of hands-on Cisco / Palo Alto Firewall experience in both engineering and Operations and maintenance roles.
• Strong knowledge of Palo Alto concepts and best practices:
• Panorama Installation
• Panorama HA Config
• Panorama Template and Template Stacks
• Panorama Policy creation and push to group of Firewalls and Verify Push
• Palo Alto Route configuration
• Palo Alto IPSec Site to Site VPN Config and Troubleshooting
• Palo Alto VM in AWS
• Palo Alto IPS Configuration
• Palo Alto Virtual Router / Systems
• Palo Alto Firewall HA
• Experience working in a high op-temp, Top Secret environment.
• Candidate must possess an active DOD Top Secret level security clearance, and be eligible to obtain and maintain a TS/SCI
• Candidate must be willing to take and maintain a CI/Poly
• 8570 IAT Level II Baseline Certification (e.g. CCNA Security, CySA+, GICSP, GSEC, Security+ CE, CND, SSCP) Preferred Qualifications * Prior experience with DISA and DISA’s support to mission partners