Network/ Firewall Engineer

Peraton; Reston (VA); On-site; USD 80,000 - 128,000; Full time

Job summary

Peraton is seeking a Network/Firewall Engineer to join the network security team. You will install, configure, and support LAN, WAN, and Internet segments to ensure availability and performance across the enterprise.

You will design, deploy, and manage firewall policies, NAC, and secure wireless connectivity, while coordinating with teams to meet security and compliance requirements and support incident response activities.

Qualifications

• 5 years with a Bachelor's degree or 9 years with a HS Diploma.
• Experience configuring, managing, and troubleshooting Palo Alto Networks firewalls.
• Experience with F5 load balancing and application delivery configuration.
• Designing, deploying and administering NAC solutions.
• Strong knowledge of Wi‑Fi engineering and wireless standards.
• Experience with ISE for policy enforcement and device profiling.
• Experience with AirWatch/Workspace ONE for MDM/MAM.
• Experience with Intune for MDM/MAM capabilities.
• Experience using Splunk for log analysis and monitoring.
• Understanding of SIEM tools and incident response processes.

Responsibilities

• Install, configure, and support LAN, WAN, and Internet segments for availability.
• Monitor network performance and maintenance to ensure uptime.
• Design and manage firewall policies and rule sets.
• Configure and maintain load balancing and app delivery.
• Manage NAC and secure wireless connectivity.
• Administer ISE for policy enforcement and guest access.
• Manage MDM/MAM with AirWatch and Intune.
• Use Splunk for log aggregation and threat detection.
• Support SIEM operations and incident response.

Skills

Firewall & Perimeter Security

NAC & Wireless

Endpoint & MDM

Security Monitoring

CDM Programs

Education

Bachelor's degree

HS Diploma

Tools

Palo Alto Networks

F5 BIG-IP

Cisco ISE

VMware AirWatch/Workspace ONE

Microsoft Intune

Splunk

SIEM

Job description

Responsibilities

Peraton is seeking a Network/ Firewall Engineer to serve as a key member of the network security engineering team supporting an enterprise-level environment. The Firewall Engineer will install, configure, and support the organization's LAN, WAN, and Internet network segments, ensuring network availability, performing necessary maintenance, and monitoring network and website performance to support continuous operations.

Peraton provides maintenance and operational IT support, including engineering services for network systems, security infrastructure, and endpoint management. This engineer will serve as a key member of the network security team, leading the processes that ensure efficient management of firewall and network access control services, effective monitoring and incident response, and robust security and compliance measures across the environment.

Responsibilities:

The Network and Computer Systems Architect (Firewall Engineer) will provide technical expertise and hands‑on support to drive consistent network performance and timely security improvements across the enterprise. You will be joining a forward‑thinking, innovative team responsible for building and overseeing public and private servers and network infrastructure in a way that supports key business objectives.

The Engineer will:

Install, configure, and support the organization's LAN, WAN, and Internet network segments to meet organizational needs.

• Monitor network performance and availability, performing necessary maintenance to ensure continuous system uptime for all users.
• Monitor and test website performance to ensure availability and responsiveness.
• Design, deploy, and manage firewall policies and rule sets using Palo Alto Networks platforms to protect the enterprise perimeter and internal network segments.
• Configure and maintain F5 Networks load balancing and application delivery infrastructure to support high availability and secure traffic management.
• Implement and manage Network Access Control (NAC) and Wi‑Fi solutions to enforce endpoint compliance and secure wireless connectivity.
• Administer Cisco Identity Services Engine (ISE) for policy‑based network access control, device profiling, and guest access management.
• Configure and support wireless network standards and infrastructure, ensuring secure and reliable connectivity across the enterprise.
• Manage mobile device security and compliance using VMware AirWatch (Workspace ONE) and Microsoft Intune for cloud‑based mobile device management (MDM) and mobile application management (MAM).
• Utilize Splunk for log aggregation, correlation, and analysis to support network visibility and threat detection.
• Support Security Information and Event Management (SIEM) operations, including alert triage, correlation rule tuning, and incident response coordination.
• Support Continuous Diagnostics and Mitigation (CDM) program requirements, including asset visibility, vulnerability management, and compliance reporting.
• Develop and maintain technical documentation including methods of procedure, SOPs, network diagrams, and firewall rule documentation.
• Collaborate with cross‑functional engineering teams to implement security best practices and respond to network incidents.

Qualifications

Required Qualifications:

• 5 years with a Bachelor's degree or 9 years with a HS Diploma.

Strong demonstrated experience in the following:

• Firewall & Perimeter Security
  • Strong experience configuring, managing, and troubleshooting Palo Alto Networks firewalls.
  • Experience with F5 Networks load balancing and application delivery configuration.
• Network Access Control & Wireless
  • Experience designing, deploying, and administering Network Access Control (NAC) solutions.
  • Strong knowledge of Wi‑Fi engineering and wireless network standards.
  • Experience with Cisco Identity Services Engine (ISE) for policy enforcement and device profiling.
• Endpoint & Mobile Device Management
  • Experience with VMware AirWatch / Workspace ONE for mobile device management.
  • Experience administering Microsoft Intune, including MDM/MAM capabilities.
• Security Monitoring & Compliance
  • Experience using Splunk for log analysis and operational monitoring.
  • Strong understanding of Security Information and Event Management (SIEM) tools and processes.
• Experience supporting Continuous Diagnostics and Mitigation (CDM) programs.
• Excellent problem‑solving and analytical capabilities.
• Ability to thrive in a fast‑paced work environment. Strong written and verbal communication skills.
• Ability to collaborate effectively with cross‑functional departments and teams.
• Must be a U.S. citizen or a permanent resident for more than 3 years.
• Ability to obtain the required agency security clearance.

Desired Qualifications:

• Degree in IT, Cybersecurity, or a related field.
• Relevant industry certifications (e.g., Palo Alto PCNSE, F5 Certified, Cisco CCNP Security, or equivalent).

Peraton Overview

Peraton is a next‑generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world's leading mission capability integrator and transformative enterprise IT provider, we deliver trusted, highly differentiated solutions and technologies to protect our nation and allies. Peraton operates at the critical nexus between traditional and nontraditional threats across all domains: land, sea, space, air, and cyberspace. The company serves as a valued partner to essential government agencies and supports every branch of the U.S. armed forces. Each day, our employees do the can't be done by solving the most daunting challenges facing our customers. Visit peraton.com to learn how we're keeping people around the world safe and secure.

Target Salary Range

$80,000 - $128,000. This represents the typical salary range for this position. Salary is determined by various factors, including but not limited to, the scope and responsibilities of the position, the individual's experience, education, knowledge, skills, and competencies, as well as geographic location and business and contract considerations. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay.

EEO

EEO: Equal opportunity employer, including disability and protected veterans, or other characteristics protected by law.