Palo Alto Firewall Engineer – TS/SCI, DoD Expert

cyber; Arlington (VA); On-site; USD 140,000 - 190,000; Full time

Benefits offered by this job

Paid Parental Leave

401(k) Matching

Health, Dental, and Vision Insurance

Training and Professional Development

Job summary

GCyber is seeking a Palo Alto Engineer to support a high-profile DISA customer in managing Palo Alto devices and improving collaboration across defense and intelligence organizations.

The engineer will identify misconfigurations, optimize firewall rules, and perform regular evaluations while ensuring compliance with DoD STIGs and JSIG guidelines, coordinating with stakeholder teams to align on architectural direction.

Qualifications

• Active DoD Top Secret/SCI clearance.
• BA/BS and 8+ years IT experience; additional experience may replace degree.
• 5+ years hands-on Cisco and/or Palo Alto Firewall experience in engineering and ops.
• DoD 8570 IAT II certification (e.g., Security+, CCNA Security, CySA+, GICSP, GSEC).
• Strong knowledge of Palo Alto technologies and best practices.

Responsibilities

• Identify and remediate misconfigurations, security gaps, and conflicting rules; optimize firewall and load balancer rule-sets to enhance performance and security posture.
• Perform bi-monthly evaluations of firewalls and provide actionable recommendations for improvement.
• Track device performance and traffic utilization; provide Tier 3 escalation support for complex network issues.
• Collaborate with customer points of contact and participate in meetings to align on goals and architectural direction, particularly with Palo Alto Networks technologies.
• Follow DoD STIGs, DISA orders, and JSIG guidelines to maintain regulatory compliance.

Skills

Palo Alto Firewall

Cisco Firewall

Troubleshooting

Education

BA/BS or higher

Tools

Palo Alto Networks

DoD STIGs

Job description

GCyber is seeking a Palo Alto Engineer to support a high-profile DISA customer in managing Palo Alto devices and improving collaboration across defense and intelligence organizations.

The engineer will identify misconfigurations, optimize firewall rules, and perform regular evaluations while ensuring compliance with DoD STIGs and JSIG guidelines, coordinating with stakeholder teams to align on architectural direction.