Midlevel Firewall Engineer - Palo Alto & PAN-OS Specialist

Njvc LLC; Oakton (VA); On-site; USD 120,000 - 140,000; Full time

Job summary

Chenega MIOS in Oakton, VA is seeking an Intermediate Firewall Engineer to manage enterprise firewalls, conduct day‑to‑day administration, and lead ticketed changes across on‑premise and classified enclaves.

You will implement PAN‑OS, keep ATO posture under DISA STIGs, and mentor junior engineers while coordinating with senior staff on complex deployments. A DoD clearance and PCNSA/PCNSE certifications are preferred.

Qualifications

• Bachelor's degree in Cybersecurity or related field with 4+ years of hands‑on network security experience, or alternative 8+ years without degree.
• Active DoD clearance or eligibility for protection level TS/SCI/SAP is required.

Responsibilities

• Administer and maintain Palo Alto NGFW via Panorama per change control protocols.
• Deploy security policies, App-ID rules, TLS decryption, NAT/PAT across multi-tenant environments.
• Escalate as Tier 2/3, troubleshoot VPN tunnels, routing issues, and performance bottlenecks.
• Implement BGP/OSPF, VLANs, perimeter controls for mission enclaves.
• Lead remote site management for classified networks and maintain tunnels/GWs.
• Coordinate PAN-OS maintenance, content updates, and security patches.
• Maintain ATO posture per DISA STIGs and remediation of findings.
• Provide incident isolation support to SOC and validate telemetry pipelines.
• Maintain topology diagrams, SOPs, and change records in ticketing systems.
• Mentor junior firewall engineers on complex troubleshooting.

Skills

Palo Alto NGFW

Panorama

VPN

BGP/OSPF

DISA STIG

SIEM/SOAR

Jira/ServiceNow

Education

Bachelor's degree in Cybersecurity

DoD 8140/8570 IAT II baseline

PCNSA certification

PCNSE certification preferred

Active Secret clearance

Tools

PAN-OS

Job description

Chenega MIOS in Oakton, VA is seeking an Intermediate Firewall Engineer to manage enterprise firewalls, conduct day‑to‑day administration, and lead ticketed changes across on‑premise and classified enclaves.

You will implement PAN‑OS, keep ATO posture under DISA STIGs, and mentor junior engineers while coordinating with senior staff on complex deployments. A DoD clearance and PCNSA/PCNSE certifications are preferred.