Palo Alto SME

SITEC Consulting, LLC.; Springfield (VA); On-site; USD 150,000 - 210,000; Full time

Job summary

SITEC Consulting, LLC. is seeking a Palo Alto Subject Matter Expert to lead security architecture for a large hybrid enterprise. You will manage Palo Alto platforms across on-prem and cloud, with a focus on PAN-OS, Panorama, and Prisma ecosystems.

The role requires active TS/SCI clearance, PCNSE, and DoD 8140/8570 IAT II, with 7+ years of NGFW experience and a track record of modernization and incident response.

Qualifications

• Active TS/SCI clearance with the ability to obtain and maintain a government polygraph.
• At least seven years of hands-on Palo Alto NGFW experience in large enterprise environments.
• Active PCNSE certification.
• Current DoD 8140/8570 IAT Level II certification.
• Ability to obtain CSSP Infrastructure Support certification within 120 days.
• Experience with legacy Palo Alto hardware, PAN-OS, Panorama, Prisma Access, Prisma SD-WAN, and VM-Series firewalls.
• Advanced knowledge of BGP, OSPF, IPSec VPNs, NAT, and hybrid cloud networking.
• Bachelor's degree in a related field or equivalent additional experience.

Responsibilities

• Design, test, and implement secure network architectures using Palo Alto technologies.
• Administer and troubleshoot physical and virtual next-generation firewalls.
• Lead hardware refreshes, PAN-OS upgrades, and legacy platform modernization.
• Manage policies, templates, and device groups through Panorama.
• Configure App-ID, User-ID, Content-ID, SSL Decryption, WildFire, and related security services.
• Maintain standards, procedures, configuration controls, and technical documentation.
• Investigate security incidents and recommend corrective actions.
• Mentor junior engineers and serve as an escalation point.

Skills

Palo Alto NGFW

Network architecture

VPN/IPSec

Policy management

Mentoring

Education

Bachelor's degree or equivalent experience

Tools

Panorama

PAN-OS

Prisma Access

Prisma SD-WAN

VM-Series

App-ID

Job description

Palo Alto Subject Matter Expert

Clearance: Active TS/SCI

Travel: Up to 15%

Serve as the technical authority for Palo Alto security platforms across a large hybrid enterprise. You will lead architecture, administration, modernization, and complex troubleshooting across legacy hardware, next-generation firewalls, cloud security, and centralized policy management.

What You Will Do

• Design, test, and implement secure network architectures using Palo Alto technologies.
• Administer and troubleshoot physical and virtual next-generation firewalls.
• Lead hardware refreshes, PAN-OS upgrades, and legacy platform modernization.
• Manage policies, templates, and device groups through Panorama.
• Configure App-ID, User-ID, Content-ID, SSL Decryption, WildFire, and related security services.
• Maintain standards, procedures, configuration controls, and technical documentation.
• Investigate security incidents and recommend corrective actions.
• Mentor junior engineers and serve as an escalation point.

What You Bring

• Active TS/SCI clearance with the ability to obtain and maintain a government polygraph.
• At least seven years of hands-on Palo Alto NGFW experience in large enterprise environments.
• Active PCNSE certification.
• Current DoD 8140/8570 IAT Level II certification.
• Ability to obtain CSSP Infrastructure Support certification within 120 days.
• Experience with legacy Palo Alto hardware, PAN-OS, Panorama, Prisma Access, Prisma SD-WAN, and VM-Series firewalls.
• Advanced knowledge of BGP, OSPF, IPSec VPNs, NAT, and hybrid cloud networking.
• Bachelor's degree in a related field or equivalent additional experience.

Preferred Qualifications

• PCNSC, PCSAE, or another advanced Palo Alto certification.
• Python, Ansible, Terraform, or API-based automation experience.
• Cortex XDR, Cortex XSOAR, or Expedition experience.
• Zero Trust architecture and experience with F5, Juniper, or Cisco security technologies.