Senior Palo Alto Firewall Engineer (PCNSE) – TS/SCI

RISA; Springfield (VA); In loco; USD 117.000 - 128.000; Tempo pieno

Vantaggi offerti da questo lavoro

Medical, dental, and vision insurance

401(k) and Roth

Paid Time Off

11 paid Federal Holidays

Descrizione del lavoro

RISA is seeking a Palo Alto Firewall Engineer SME (PCNSE) to act as the focal point for Palo Alto tasks across the Network Security Services team for an Intelligence Community customer. The role covers PA-3000 and PA-5000 hardware, Prisma Access, VM-Series, and Cortex engineering work.

You will lead design, testing, and deployment of secure network architectures, manage hardware/software lifecycles, and mentor junior engineers. Active TS/SCI and polygraph eligibility required.

Competenze

• Bachelor's degree in a field applicable to the position plus 6 years of relevant experience; equivalents accepted (Master's +4, Associate's +8, or HS diploma +10).
• Active TS/SCI clearance with ability to obtain/maintain polygraph.
• 7+ years hands-on administering, configuring, and troubleshooting Palo Alto NGFWs in large-scale environments.
• Active PCNSE certification.
• DoD 8140.01 and 8570.01-M IAT Level II (Security+ CE) within 120 days of start.
• Deep knowledge of PA-3000/PA-5000 hardware, legacy CLI, and hardware troubleshooting.
• Experience with Prisma Access, VM-Series in AWS/Azure/GCP, and Cortex/XDR.

Mansioni

• Serve as the lead technical authority for administering, configuring, and troubleshooting Palo Alto NGFWs across a hybrid enterprise.
• Lead design, analysis, testing, and implementation of secure network architectures on the Palo Alto stack.
• Manage hardware and software lifecycle, including complex refreshes and PAN-OS upgrades on legacy platforms.
• Run Panorama for centralized policy management across a fleet of firewalls (physical and virtual).
• Configure master-level security profiles - App-ID, User-ID, Content-ID, SSL Decryption, and WildFire.
• Own configuration management processes and SOPs for all Palo Alto platforms.
• Mentor junior engineers and act as escalation point for complex troubleshooting.
• Liaise with contract, customer, and government DAA on network security status, policies, and procedures.

Conoscenze

PCNSE

Palo Alto NGFW

Panorama

VM-Series

BGP

OSPF

IPSec VPN

NAT

Cloud platforms

Formazione

Bachelor's degree in field

Master's degree (optional)

Strumenti

Panorama

VM-Series

AWS

Azure

GCP

Descrizione del lavoro

RISA is seeking a Palo Alto Firewall Engineer SME (PCNSE) to act as the focal point for Palo Alto tasks across the Network Security Services team for an Intelligence Community customer. The role covers PA-3000 and PA-5000 hardware, Prisma Access, VM-Series, and Cortex engineering work.

You will lead design, testing, and deployment of secure network architectures, manage hardware/software lifecycles, and mentor junior engineers. Active TS/SCI and polygraph eligibility required.