Palo Alto Integration Engineer - Mid

Koniag Government Services; Washington (District of Columbia); Hybrid; USD 110,000 - 160,000; Full time

Benefits offered by this job

Health insurance (medical, dental, and

Job summary

Koniag Data Solutions is seeking an experienced Palo Alto Integration Engineer (Mid) to support enterprise network security operations for a federal government client. Primary work will be performed at the client site with approved remote/telework options.

The role focuses on engineering, implementation, administration, and ongoing optimization of Palo Alto Networks security platforms across on-prem, cloud, and hybrid environments, under the guidance of senior engineers.

Qualifications

• Experience with Palo Alto Networks NGFWs in large-scale enterprise environments.
• Ability to engineer and administer NGFW infrastructure across on-prem, data center, cloud, and hybrid deployments.
• Experience configuring App-ID, User-ID, Content-ID based policies and security profiles.

Responsibilities

• Engineer, implement, administer, and support enterprise Palo Alto Networks security platforms across on-prem, cloud, and hybrid environments.
• Configure NGFW policies (App-ID, User-ID, Content-ID) and maintain security profiles.
• Manage SSL/TLS decryption policies and certificate trust considerations.
• Support Panorama device groups, templates, and policy configurations across managed NGFW instances.
• Monitor, analyze, and report on NGFW logs, threat prevention results, and security events.
• Assist in Prisma Access and GlobalProtect configurations.

Skills

Palo Alto Networks

NGFW

Panorama

GlobalProtect

Prisma Access

SSL/TLS decryption

Policy management

Threat prevention

Security architecture

Tools

Panorama

GlobalProtect

Prisma Access

Job description

Koniag Data Solutions, a Koniag Government Services company, is seeking an experiencedPalo Alto Integration Engineer (Mid)to support enterprise network security operations and IT administrative and operational support services for a federal government client. This position requires an active security clearance or the ability to obtain and maintain a government background investigation and all requisite IT access authorizations prior to performing work. Specific clearance requirements will be confirmed at time of offer. Primary work will be performed at the client site and approved remote/telework locations.

We offer competitive compensation and an extraordinary benefits package including health, dental and vision insurance, 401K with company matching, flexible spending accounts, paid holidays, three weeks paid time off, and more.

This role serves as an important technical function responsible for the engineering, implementation, administration, and operational support of enterprise Palo Alto Networks security platform capabilities across a complex, geographically distributed federal IT environment spanning on-premises infrastructure, cloud platforms, and hybrid network environments.

The Palo Alto Integration Engineer (Mid) will serve as a contributing technical engineer within the program's network security team, supporting the engineering, implementation, administration, and continuous improvement of enterprise Palo Alto Networks security infrastructure under the technical leadership of the Senior Palo Alto Integration Engineer. This individual works closely with network engineers, security engineers, cloud operations teams, and Government stakeholders to ensure Palo Alto Networks platforms are properly configured, reliably operated, and continuously improved in alignment with enterprise security requirements, Federal cybersecurity frameworks, and Zero Trust Architecture objectives.

Principal responsibilities will include but are not limited to:

Next-Generation Firewall Engineering & Administration

• Assist in and independently execute the engineering, implementation, and administration of enterprise Palo Alto Networks Next-Generation Firewall (NGFW) infrastructure across perimeter, internal segmentation, data center, and cloud-attached deployment contexts under the technical guidance of the Senior Palo Alto Integration Engineer.
• Develop, implement, and maintain NGFW security policies, including application-based policies using App-ID, user-based policies using User-ID, and content inspection policies using Content-ID, ensuring policies are aligned with enterprise security requirements and least-privilege access control principles.
• Configure and maintain NGFW security profiles, including antivirus, anti-spyware, vulnerability protection, URL filtering, file blocking, WildFire malware analysis, and DNS security profiles, tuning profiles to balance threat prevention effectiveness with operational performance.
• Assist in the design and implementation of SSL/TLS decryption policies, ensuring encrypted traffic is inspected in accordance with security requirements while appropriately managing certificate trust and performance considerations.
• Support NGFW security policy lifecycle management activities, including policy review cycles, rule base optimization, shadow rule identification, and policy documentation updates.
• Troubleshoot NGFW connectivity, performance, and security policy issues, conducting root cause analysis and implementing corrective actions to restore service or resolve security gaps within defined SLA requirements.
• Execute firewall rule changes, security profile updates, and configuration modifications in accordance with the change management process, preparing implementation plans, test procedures, and rollback documentation for CAB submission.
• Generate and analyze NGFW logs, traffic reports, and threat prevention reports to support security monitoring, incident investigation, and operational performance analysis activities.
• Assist in and support the administration of the Panorama centralized management platform, ensuring managed NGFW devices are properly onboarded, configured, and maintained through Panorama under the guidance of senior engineers.
• Implement and maintain Panorama device group and template configurations, ensuring management policies are consistently applied across managed NGFW instances in alignment with the enterprise security policy framework.
• Support the development and maintenance of Panorama-based policy configurations, including shared policies, pre-rules, and post-rules, ensuring policy management practices are consistent, auditable, and aligned with enterprise security requirements.
• Monitor Panorama platform health and managed device connectivity, identifying and escalating platform issues and managed device synchronization failures that may impact policy consistency or management capability.
• Support Panorama platform upgrades, patches, and configuration changes, assisting in change preparation, testing, and documentation activities under the guidance of the Senior Palo Alto Integration Engineer.
• Leverage Panorama logging and reporting capabilities to generate operational reports, compliance evidence artifacts, and security dashboards supporting program leadership and Government stakeholder visibility requirements.

Prisma Access Administration & Support

• Support the administration and maintenance of Palo Alto Networks Prisma Access Secure Access Service Edge (SASE) capabilities, assisting in the configuration, monitoring, and troubleshooting of cloud‑delivered security services for distributed users and locations.
• Assist in the configuration and maintenance of GlobalProtect remote access configurations, including gateway settings, agent configurations, and authentication integrations, ensuring remote users receive consistent security policy enforcement.
• Monitor Prisma Access service health, connectivity, and security effectiveness, identifying and escalating service disruptions, performance issues, and security policy gaps to senior engineers for resolution.
• Support the troubleshooting of GlobalProtect connectivity issues, analyzing logs and diagnostic data to identify root causes and implement corrective actions under the guidance of senior engineers.
• Assist in the maintenance and optimization of Prisma Access security policies, URL filtering configurations, and threat prevention profiles.

Threat Prevention & Security Operations Support

• Monitor and analyze NGFW and Panorama threat prevention logs, WildFire analysis results, and security event data, identifying security events requiring escalation, investigation, or policy response in accordance with defined monitoring procedures.
• Support