Senior Firewall Engineer – Palo Alto, TS/SCI Onsite

TDI (Tetrad Digital Integrity); Arlington (VA); On-site; USD 115,000 - 125,000; Full time

Job summary

Tetrad Digital Integrity (TDI) in the United States is seeking a Firewall Engineer to support the GSM-O II contract. The role requires hands-on experience configuring Palo Alto and Cisco firewalls in virtualized and cloud environments, with a TS/SCI clearance and on-site work in Arlington, VA.

Responsibilities include remediating security gaps, maintaining firewall rules, conducting monthly assessments, and delivering AARs and performance reports to DISA CESO.

Qualifications

• Bachelor's degree in a related field.
• 8+ years of directly relevant experience with firewall engineering.
• 5+ years hands-on Cisco and Palo Alto firewall experience in engineering and operations/maintenance.
• Strong Palo Alto knowledge: Panorama installation, HA config, template stacks, policy push, route config, VPN, AWS VM, IPS.
• Experience in a high-security, TS/SCI environment.
• 8570 IAT Level II Baseline Certification (e.g. CCNA Security, CySA+, GICSP, GSEC, Security+ CE, CND, SSCP).

Responsibilities

• Identify and remediate misconfigurations and security gaps in firewalls and load balancers.
• Provide Tier 3 support to the operations network team.
• Maintain hardware and software components at vendor-supported levels.
• Support mission-critical Continuity of Operations (COOP).
• Conduct monthly firewall assessments and produce improvement reports.
• Create network device performance and traffic utilization reports.
• Develop or participate in After Action Reports (AARs).
• Advise on management of Palo Alto devices within the DISA CESO architecture.
• Collaborate with DISA CESO customer on objectives and roadmaps.
• Identify gaps in current technologies and processes.
• Provide requirements and strategies for future cybersecurity operations.
• Participate in DISA CESO and partner working groups.
• Adhere to DOD STIGs, DISA orders, and JSIG guidelines.

Skills

Palo Alto Firewall

Cisco Firewall

Firewall rules

Network security

Education

Bachelor's degree

Tools

Palo Alto Panorama

AWS

Job description

Tetrad Digital Integrity (TDI) in the United States is seeking a Firewall Engineer to support the GSM-O II contract. The role requires hands-on experience configuring Palo Alto and Cisco firewalls in virtualized and cloud environments, with a TS/SCI clearance and on-site work in Arlington, VA.

Responsibilities include remediating security gaps, maintaining firewall rules, conducting monthly assessments, and delivering AARs and performance reports to DISA CESO.