Firewall Operations Engineer – Hybrid, Secret Clearance

Conceras, LLC; Beltsville (MD); Hybrid; USD 85,000 - 110,000; Full time

Job summary

Conceras, LLC in Beltsville, MD seeks a Network Operations – Firewall Operations Engineer to support a DoS program. Hybrid role with ~3 on-site days, day shift Tue–Sat after training, providing Tier 2 monitoring and configuration for perimeter devices.

The role covers firewall rule implementation for Palo Alto, Panorama, FortiGate, ESA, and proxies; health checks, log reporting, and outage updates. Requires 3–5 years IT support and Palo Alto expertise.

Qualifications

• BA degree and 2–4 years of experience, or additional experience in lieu of degree.
• Experience with Palo Alto Firewalls and Panorama for troubleshooting and configuration.
• 3–5 years IT Customer Support (Tier I/II) experience.

Responsibilities

• Provides Tier 2 support in monitoring, management, and troubleshooting of perimeter devices including firewalls, proxies, and ESA.
• Implements firewall rules and policies for Palo Alto, Palo Alto cloud, FortiGate, and related proxies; analyzes traffic captures.
• Escalates issues to Tier 3, maintains logs, SOPs, and outage communications.
• Performs device maintenance and software upgrades; maintains health checks across perimeter devices.
• Update architecture diagrams using Visio and coordinate network changes with Bureaus/Agencies.

Skills

Palo Alto Firewalls

Panorama monitoring

Networking fundamentals

TCP/IP troubleshooting

CLI experience

Security incident response

Education

Bachelor's degree

Tools

Palo Alto Panorama

FortiGate

Azure Firewall

Cloudflare

Cisco ESA

A10 Load Balancer

Proxy platforms

Job description

Conceras, LLC in Beltsville, MD seeks a Network Operations – Firewall Operations Engineer to support a DoS program. Hybrid role with ~3 on-site days, day shift Tue–Sat after training, providing Tier 2 monitoring and configuration for perimeter devices.

The role covers firewall rule implementation for Palo Alto, Panorama, FortiGate, ESA, and proxies; health checks, log reporting, and outage updates. Requires 3–5 years IT support and Palo Alto expertise.