Palo Alto Network Security Engineer

Sedulous Consulting Services, LLC; Fort Belvoir (VA); On-site; USD 90,000 - 130,000; Full time

Benefits offered by this job

401K

Life/Health/Dental/Disability

Flexible Paid Leave

Tuition Reimbursement

Job summary

Sedulous Consulting Services, LLC is seeking a Mid-Level Palo Alto Network Security Engineer to provide hands-on network and cybersecurity engineering support in a DoD environment. You will configure, manage, and troubleshoot Palo Alto NGFWs, PAN-OS, and related technologies to protect mission-critical networks.

The role requires active TS/SCI clearance and full-time employment, with travel up to 25% in a secure setting, and a focus on secure network operations and policy enforcement.

Qualifications

• 3-5+ years of network/security engineering experience.
• 2+ years hands-on Palo Alto NGFW/PAN-OS experience.
• Hands-on experience with PAN-OS, security/NAT policies, App-ID, User-ID, GlobalProtect, VPN/IPsec, HA, routing, zones/interfaces, Threat Prevention, logging, Panorama/Strata Cloud Manager, upgrades.

Responsibilities

• Configure, administer, and troubleshoot Palo Alto NGFWs and PAN-OS.
• Develop, implement, and maintain security and NAT policies.
• Configure and support App-ID, User-ID, GlobalProtect, VPN/IPsec, and high availability.

Skills

Network security engineering

Palo Alto firewall expertise

Policy development

Team collaboration

Analytical thinking

Education

Palo Alto Networks Certified Next-Generation Firewall Engineer (PCNSE) certification

Tools

PAN-OS

App-ID

User-ID

GlobalProtect

Panorama

Strata Cloud Manager

Job description

Description:

Mid-Level Palo Alto Network Security Engineer

Location: MD & VA

BENEFITS: 401K, Life/Health/ Dental/Disability Insurance, Flexible Paid Leave, and Tuition Reimbursement.

TRAVEL REQUIREMENTS: Up to 25%

Clearance Required: Active TS/SCI Security Clearance Employment Type: Full-Time

About the Opportunity

Sedulous Consulting Services, LLC is seeking a Mid-Level Palo Alto Network Security Engineer to provide network and cybersecurity engineering support within a Department of Defense (DoD) environment. The successful candidate will provide hands‑on engineering, configuration, administration, maintenance, and troubleshooting of Palo Alto Networks security technologies supporting mission‑critical and classified networks.

Primary duties will include (but not limited to):

• Configure, administer, maintain, and troubleshoot Palo Alto Networks Next-Generation Firewalls (NGFWs).
• Configure and maintain PAN-OS.
• Develop, implement, and maintain security and NAT policies.
• Configure and support App-ID and User-ID.
• Configure and maintain GlobalProtect.
• Configure and troubleshoot VPN/IPsec connectivity.
• Configure and support High Availability (HA).
• Configure and troubleshoot routing, zones, and interfaces.
• Implement and maintain Threat Prevention capabilities.
• Monitor and analyze firewall logging and security events.
• Manage firewall environments using Panorama and/or Strata Cloud Manager.
• Perform firewall upgrades, maintenance, and troubleshooting.
• Support secure network operations within classified and DoD environments.
• Coordinate with network, cybersecurity, and systems engineering personnel to resolve technical issues and maintain secure network operations.

EDUCATION / EXPERIENCE

• 3-5+ years of network and/or security engineering experience.
• 2+ years of hands‑on Palo Alto NGFW/PAN-OS experience.
• Demonstrated hands‑on experience with:
  • PAN-OS
  • Security/NAT policies
  • App-ID
  • User-ID
  • GlobalProtect
  • VPN/IPsec
  • High Availability
  • Routing
  • Zones/interfaces
  • Threat Prevention
  • Logging
  • Panorama and/or Strata Cloud Manager
  • Firewall upgrades and troubleshooting

Must possess an active Palo Alto Networks Certified Next‑Generation Firewall Engineer certification or active legacy PCNSE certification.

Preferred Qualifications

• Palo Alto Networks Network Security Analyst certification.
• CCNP Security or CCNP Enterprise.
• CISSP for more senior candidates.
• Experience with DoD STIGs.
• Experience with ACAS/Nessus.
• Experience supporting Risk Management Framework (RMF) requirements.
• Experience with DISA infrastructure.
• Experience supporting classified networks.

PHYSICAL REQUIREMENTS AND WORK ENVIRONMENT:

This is primarily sedentary work requiring the ability to perform tasks involving: reaching, lifting, finger dexterity, grasping, repetitive motions, standing, talking, hearing, and visual acuity. Must be able to lift up to 20 pounds occasionally.

Employees must be able to read, write, and communicate effectively in English. Work requires dependability, accuracy, strong judgment, and the ability to apply oral and written instructions. Must be able to make decisions that significantly impact the immediate work unit.

Company EEO Statement:

Sedulous Consulting Services is an EEO/AA/Disability/Veterans Employer. All qualified applicants receive consideration for employment without regard to race, color, religion, gender, national origin, age, sexual orientation, gender identity, protected veteran status, status as a qualified individual with a disability, or any other category protected by law. Sedulous hires and promotes individuals solely on the basis of their qualifications for the job.