Senior Network Firewall Engineer

Ortman Consulting LLC; Springfield (VA); On-site; USD 120,000 - 140,000; Full time

Job summary

A consulting firm is seeking a Senior Network Firewall Engineer to lead the development and implementation of enterprise security strategies. This position requires over 15 years of network security support, with active certifications in Palo Alto Network Security and CCNP. The role involves creating security policies, managing firewall configurations, and conducting regular audits. Ideal candidates should have extensive experience in supporting large-scale network operations, particularly in federal environments.

Qualifications

• 15 years experience in network security support for large-scale systems.
• Palo Alto Certified Network Security Engineer (PCNSE) – Active.
• CCNP certification – Active.

Responsibilities

• Lead development and implementation of enterprise security stack.
• Create and maintain network security policies.
• Perform regular firewall audits and risk assessments.

Skills

Network security support

Palo Alto Network Security

CCNP certification

Firewall audits

Risk assessments

Job description

The Senior Network Firewall Engineer leads development, implementation, and integration of DHS’s enterprise security stack, ensuring firewall, VPN, and access control configurations effectively protect the network. The role includes creating and maintaining network security policies, managing ACLs, NAT rules, and firewall rule sets, and staying informed on the latest threat vectors and defensive measures. The engineer performs regular firewall audits, risk assessments, test and evaluation services, and architecture validation, while maintaining documentation and ensuring seamless integration between security components and other IT systems supporting DHS missions.

Requirements

Minimum Qualifications:

15 years experience providing network security support on programs related to network systems and infrastructure with over 5,500 field sites, 2 or more datacenters/colocation facilities, and 250,000+ users.

Palo Alto Certified Network Security Engineer (PCNSE) – Active

CCNP – Active

Preferred Qualifications:

15+ years supporting DHS Wide Area Network

10+ years supporting DHS System ATO and C&A activities

Experience supporting network modernization projects