Mid-Shift Firewall Engineer

Conceras, LLC; Beltsville, Springfield (MD, VA); Hybrid; USD 90,000 - 130,000; Full time

Job summary

Conceras, LLC seeks a Firewall Operations Engineer to support a Department of State Diplomatic Technology program. You will provide Tier 2 monitoring, configuration, and maintenance for Palo Alto, FortiGate, and related perimeter devices, with on-site duties in Beltsville, MD and Springfield, VA.

Hybrid schedule, 3 days/week on-site, 3:00 PM–11:30 PM shifts, training period initially 7:00 AM–3:30 PM. You will collaborate with cross-agency teams, update diagrams, and respond to incidents from

Qualifications

• Bachelor's degree with 5+ years IT experience or Master's with 3+ years.
• Experience with Palo Alto Firewalls and Panorama.
• 3–5 years IT customer support (Tier I/II).
• Experience supporting Firewall/DMZ infrastructure including Palo Alto, Palo Alto Cloud FW, FortiGate, Azure Firewall, Cloudflare, Cisco ESA, A10 Load Balancer, and proxy devices.
• CLI experience preferred.
• Experience with TCP/IP networking.

Responsibilities

• Provide Tier 2 monitoring, configuration, and support for firewall devices.
• Monitor FWOPS incidents and service requests in ServiceNow.
• Implement firewall rules and policies for various devices and proxies.
• Escalate issues to Tier 3 and monitor lifecycle.
• Perform maintenance on devices and update documentation.
• Update architecture diagrams using Visio.
• Collaborate across Bureaus and Agencies on network changes.
• Support CIRT by blocking IPs, websites, emails.
• Attend troubleshooting calls with FWOPS team.

Skills

Palo Alto Firewalls

Panorama monitoring

Networking knowledge

Proxy/packet filtering

CLI experience

NeuralStar monitoring

TCP/IP troubleshooting

Education

Bachelor's degree with 5+ years experience

Master's degree with 3+ years experience

Tools

Azure Firewall

Cloudflare

FortiGate

Cisco Email Security Appliance

A10 Load Balancer

Job description

Firewall Operations Engineer

Job Description

This is an opening for a Firewall Operations Engineer to support a Department of State (DoS) Bureau of Diplomatic Technology (DT) program. This program provides transparent, interconnected systems and security supporting the DoS in successfully carrying out its U.S. foreign policy mission. DT provides enterprise architecture design, engineering, operations, and maintenance support services for servers, networks, firewalls, and enterprise applications across the Department.

This position provides general Tier 2 monitoring, configuration, and support to multiple firewalls and perimeter security systems. The position directly supports DoS on-site to provide perimeter security protection to over 80,000 customers globally.

Location: Beltsville, MD or Springfield, VA

Work Arrangement: Hybrid position requiring approximately 3 days on-site per week.

Work Schedule: Tuesday–Saturday, 3:00 PM–11:30 PM, subject to mission priorities. During the approximately 6–8-week training period, the schedule will be Monday–Friday, 7:00 AM–3:30 PM, with 5 days on-site.

Responsibilities

• Provide Tier 2 support in the monitoring, management, and troubleshooting of perimeter devices, including firewalls, proxies, and mail transport agents.

• Monitor ServiceNow application for Firewall Operations (FWOPS) incident and service requests.

• Implement firewall rules and policies, perform troubleshooting of firewalls (Palo Alto, Cloud Palo Alto, and FortiGate), Cisco Email Security Appliance (ESA), A10 load balancers, proxy platforms, URL filtering across platforms, and analyze network traffic captures.

• Escalate issues as required to Tier 3 staff and monitor issues throughout a problem's life cycle.

• Perform recurring maintenance activities such as device reboots and software upgrades on all devices managed by the Firewall Operations Team.

• Record and report on firewall operations, utilization, and maintenance.

• Collaborate across Bureaus and Agencies to implement and repair network changes as they relate to perimeter security devices.

• Support Diplomatic Security Computer Incident Response Team (CIRT) by implementing block requests for IP addresses, websites, and email addresses.

• Update architecture diagrams using Visio.

• Monitor and perform health checks on multiple perimeter security devices.

• Draft, coordinate, and publish outage notifications as required.

• Update shift logs and provide reports to leadership as needed.

• Maintain standard operating procedures (SOPs), work instructions, and other working documents.

• Attend calls requiring FWOPS team participation, including troubleshooting calls.

Qualifications

Required Education & Experience

• Bachelor's degree and five (5) years or more of experience; Master's degree and three (3) years or more of experience. Additional experience may be accepted in lieu of a degree.

• In-depth experience using Palo Alto Firewalls and Panorama monitoring tools to troubleshoot and configure firewall infrastructure. Strong understanding of networking, proxy, and packet filtering technologies.

• Minimum 3–5 years of IT Customer Support experience (Tier I and/or Tier II).

• First‑hand experience supporting the monitoring and configuration of Firewall/DMZ infrastructure, including Network and Application Firewall Packet Filtering technologies (Palo Alto, Palo Alto virtual FW (cloud), FortiGate, Azure Firewall, Cloudflare, Cisco Email Security Appliances (ESA), A10 Load Balancer, and proxy devices).

• CLI experience preferred.

• Experience utilizing network monitoring tools such as NeuralStar.

• Experience with TCP/IP network implementation and troubleshooting.

Required Clearance

• U.S. Citizenship.

• Active interim Secret clearance with the ability to obtain a Top Secret clearance.