Senior Firewall Operations Engineer — Hybrid

SkyePoint Decisions, Inc.; Vansville (MD); Hybrid; USD 90,000 - 130,000; Full time

Benefits offered by this job

Certification incentive program

PTO

Floating federal holiday options

Insurance options including HMO and HD

401k matched

Job summary

SkyePoint Decisions is seeking a Network Engineer to support a Department of State's foreign post network integrations, including firewall, proxy, and cloud environments. The role offers a hybrid schedule (~3 days onsite) at the discretion of the customer and can be located in Beltsville, MD or Springfield, VA.

The engineer will provide Tier 2 firewall operations, monitor incidents in ServiceNow, implement firewall rules, and update SOPs while collaborating across bureaus to secure network

Qualifications

• Bachelor’s degree with 5+ years of experience (or Master’s with 3+ years).
• Deep experience with Palo Alto Firewalls and Panorama.
• 3–5 years IT customer support (Tier I/II).
• Experience configuring Firewall/DMZ infrastructure (Palo Alto, Palo Alto cloud, FortiGate, Azure Firewall, ESA, A10, proxies).
• CLI experience preferred.
• Familiar with NeuralStar and TCP/IP networking.
• U.S. citizenship required; interim Secret clearance with TS eligibility.

Responsibilities

• Provide Tier 2 support for perimeter devices (firewalls, proxies, ESA, load balancers).
• Monitor Service Now FWOPS incidents and requests.
• Implement firewall rules and troubleshoot devices (Palo Alto, FortiGate, Azure Firewall, ESA, A10).
• Escalate to Tier 3 and track issue lifecycle.
• Perform maintenance such as reboots and software upgrades.
• Update architecture diagrams using Visio.
• Draft outage notifications and reports.
• Maintain SOPs and work instructions.
• Attend FWOPS calls for troubleshooting.

Skills

Palo Alto Firewall

Panorama monitoring

Firewall configuration

DMZ infrastructure

Network monitoring

NeuralStar

CLI experience

TCP/IP networking

U.S. citizenship

Security clearance eligibility

Education

Bachelor's degree

Master's degree

Tools

Palo Alto

FortiGate

Azure Firewall

Cisco ESA

A10 Load Balancer

Proxy platforms

Job description

SkyePoint Decisions is seeking a Network Engineer to support a Department of State's foreign post network integrations, including firewall, proxy, and cloud environments. The role offers a hybrid schedule (~3 days onsite) at the discretion of the customer and can be located in Beltsville, MD or Springfield, VA.

The engineer will provide Tier 2 firewall operations, monitor incidents in ServiceNow, implement firewall rules, and update SOPs while collaborating across bureaus to secure network