Palo Alto Firewall Engineer – TS/SCI, Arlington Onsite

Tetrad Digital Integrity LLC; Arlington (VA); On-site; USD 115,000 - 125,000; Full time

Job summary

Tetrad Digital Integrity, an Arlington-based cybersecurity firm, is seeking a Firewall Engineer to support the GSM-O II program. The role requires hands-on experience with Palo Alto firewalls, Panorama, and cloud/virtualized environments, and an active TS/SCI clearance.

You will identify misconfigurations, optimize rule-sets, provide Tier 3 support, and ensure hardware/software stay current. On-site five days a week in Arlington, VA, you will collaborate with DISA CESO teams and partners to

Qualifications

• Bachelor's degree required with 8+ years of directly relevant experience.
• 5+ years of hands-on Cisco / Palo Alto Firewall experience in both engineering and Operations and maintenance roles.
• Strong knowledge of Palo Alto concepts and best practices: Panorama Installation, HA Config, Template and Template Stacks; Policy creation and push; IPSec Site to Site VPN; Palo Alto VM in AWS, IPS Configuration, Virtual Router / Systems and Firewall HA.
• Experience in a high op-temp, Top Secret environment.
• 8570 IAT Level II Baseline Certification (e.g. CCNA Security, CySA+, GICSP, GSEC, Security+ CE, CND, SSCP)

Responsibilities

• Identify and remediate misconfigurations, conflicting rules, security gaps, firewall and load balancer security issues, optimize rule-sets, and enhance security posture and performance.
• Provide Tier 3 support to operations network administrations.
• Maintain all HW and SW components at vendor supported levels.
• Support mission-critical COOP operations.
• Conduct a minimum of two firewall assessments per month and generate reports with recommendations.
• Support the creation of network device performance and traffic utilization monthly reports.
• Develop/participate in After Action Reports (AARs).
• Provide expert direction for Palo Alto devices in the DISA CESO enterprise architecture.
• Interact with customer to align objectives based on Palo Alto technologies and roadmaps.
• Evaluate current technologies to identify gaps and future cybersecurity needs.
• Participate in DISA CESO meetings and partner working groups.
• Adhere to DOD STIGs, DISA orders, and JSIG policies.

Skills

Firewall engineering

Palo Alto

Panorama

VPN / IPSec

AWS/VPC

Disaster recovery / COOP

Top Secret environments

Education

Bachelor's degree

Tools

Palo Alto firewalls

Panorama

AWS VM

Job description

Tetrad Digital Integrity, an Arlington-based cybersecurity firm, is seeking a Firewall Engineer to support the GSM-O II program. The role requires hands-on experience with Palo Alto firewalls, Panorama, and cloud/virtualized environments, and an active TS/SCI clearance.

You will identify misconfigurations, optimize rule-sets, provide Tier 3 support, and ensure hardware/software stay current. On-site five days a week in Arlington, VA, you will collaborate with DISA CESO teams and partners to