Senior Firewall Engineer | Palo Alto & Cloud (TS/SCI)

Tetrad-Digital-Integrity-LL; Arlington (VA); On-site; USD 115,000 - 125,000; Full time

Job summary

Tetrad Digital Integrity (TDI) is seeking a Firewall Engineer to support the CESO GSM-O II contract, requiring hands-on Cisco and Palo Alto firewall expertise in virtualized and cloud environments, on-site in Arlington, VA, with TS/SCI clearance.

You will identify misconfigurations, optimize firewall rule sets, provide Tier 3 support, maintain hardware/software, and help develop secure architectures using Palo Alto devices within DISA CESO.

Qualifications

• Bachelor's degree and 8+ years of directly relevant experience.
• 5+ years of hands-on Cisco / Palo Alto Firewall experience in both engineering and Operations roles.
• Strong knowledge of Palo Alto concepts and best practices: Panorama, HA, Templates, Push, VPN, VM in AWS, IPS, Router.

Responsibilities

• Identify and remediate misconfigurations, conflicting rules, security gaps and optimize firewall and load balancer security.
• Provide Tier 3 support to operations network administrations.
• Maintain HW and SW components at vendor-supported levels.
• Support mission-critical Continuity of Operations (COOP).
• Conduct at least two firewall assessments monthly and generate reports with recommendations.
• Develop network device performance and traffic utilization reports.
• Provide guidance on Palo Alto devices within DISA CESO enterprise architecture.
• Engage with DISA CESO and partners to align objectives and roadmaps.
• Adhere to DOD STIGs, DISA orders, JSIG policies and regulations.

Skills

Firewall engineering

Network security

Palo Alto

Cisco

Cloud environments

DevSecOps

Education

Bachelor's degree

Tools

Palo Alto

Cisco

Job description

Tetrad Digital Integrity (TDI) is seeking a Firewall Engineer to support the CESO GSM-O II contract, requiring hands-on Cisco and Palo Alto firewall expertise in virtualized and cloud environments, on-site in Arlington, VA, with TS/SCI clearance.

You will identify misconfigurations, optimize firewall rule sets, provide Tier 3 support, maintain hardware/software, and help develop secure architectures using Palo Alto devices within DISA CESO.