Firewall Engineer

• Identify and remediate misconfigurations, conflicting rules, security gaps, firewall and load balancer security issues, optimize rule-sets, and enhance the overall security posture and performance of Firewalls and Load Balancers
• Provide Tier 3 support to members of the operations network administrations.
• Maintain all HW and SW components at vendor supported levels.
• Support mission-critical Continuity of Operations (COOP).
• Conduct a minimum of two (2) assessment of firewall each month on CESO and customer devices and generate assessment reports and provide recommendations for improvements.
• Support the creation of network device performance and traffic utilization monthly reports.
• Develop and/or participate in After Action Reports (AARs)
• Provide expert advice and direction regarding the management and operation of all Palo Alto devices in the DISA CESO enterprise architecture.
• Interact with the customer point of contact to set objectives/goals based on Palo Alto Networks technologies and available technology roadmap for architecture and design discussions.
• Evaluate current technologies and processes associated with DISA CESO to identify gaps.
• Provide requirements and strategies for future cybersecurity operations.
• Active participant in meetings with DISA CESO and mission partner working groups.
• Adhere to applicable DOD STIGs, DISA applicable orders, and JSIG policy, guidelines, and regulations.

Certificate

8570 IAT Level II Baseline Certification (e.g. CCNA Security, CySA+, GICSP, GSEC, Security+ CE, CND, SSCP), * Bachelor's degree and 8+ years of directly relevant experience. Add'l experience may be considered in lieu of degree.

• 5+ years of hands-on Cisco / Palo Alto Firewall experience in both engineering and Operations and maintenance roles.
• Strong knowledge of Palo Alto concepts and best practices:

• Panorama Installation
• Panorama HA Config
• Panorama Template and Template Stacks
• Panorama Policy creation and push to group of Firewalls and Verify Push
• Palo Alto Route configuration
• Palo Alto IPSec Site to Site VPN Config and Troubleshooting
• Palo Alto VM in AWS
• Palo Alto IPS Configuration
• Palo Alto Virtual Router / Systems
• Palo Alto Firewall HA

• Experience working in a high op-temp, Top Secret environment.

• 8570 IAT Level II Baseline Certification (e.g. CCNA Security, CySA+, GICSP, GSEC, Security+ CE, CND, SSCP)

Preferred Qualifications

• Prior experience with DISA and DISA's support to mission partners