Senior Palo Alto Firewall SME – TS/SCI, On-Site

RISA; Springfield (VA); On-site; USD 117,000 - 128,000; Full time

Benefits offered by this job

Medical, dental, and vision insurance

401(k) and Roth IRA

Paid time off

Job summary

RISA is seeking a Palo Alto Firewall Engineer to serve as the SME for NGFW tasks on a hybrid network security team in Springfield, VA. You will own configurations, upgrades, and secure architectures across PA-3000/5000, Prisma, and Cortex integrations.

The role requires 7+ years of hands-on NGFW experience, PCNSE, and active TS/SCI with the ability to obtain a polygraph. On-site work and local travel are expected.

Qualifications

• Bachelor's degree and 6+ years relevant experience or equivalents.
• DoD 8140/8570 IAT II (Security+ CE) required within 120 days.

Responsibilities

• Serve as lead technical authority for Palo Alto NGFWs.
• Design, test, and implement secure network architectures on the Palo Alto stack.
• Manage hardware/software lifecycle, upgrades and PAN-OS upgrades.
• Run Panorama for centralized policy management across a fleet of firewalls.
• Configure master-level security profiles: App-ID, User-ID, Content-ID, SSL Decryption, WildFire.
• Own configuration management processes and SOPs for all Palo Alto platforms.
• Mentor junior engineers and escalate complex issues.
• Liaise with contract, customer, and government DAA on security status.

Skills

Palo Alto NGFWs

PCNSE certification

DoD 8140/8570 IAT II+

Panorama

BGP/OSPF/IPSec

Mentoring

Education

Bachelor's degree + 6 years

Master's +4

Associate's +8

High School +10

Tools

Panorama

VM-Series

Prisma Access

Terraform/Ansible

XML/REST APIs

Job description

RISA is seeking a Palo Alto Firewall Engineer to serve as the SME for NGFW tasks on a hybrid network security team in Springfield, VA. You will own configurations, upgrades, and secure architectures across PA-3000/5000, Prisma, and Cortex integrations.

The role requires 7+ years of hands-on NGFW experience, PCNSE, and active TS/SCI with the ability to obtain a polygraph. On-site work and local travel are expected.