> Markdown version of [/jobs/ext/1282205-firewall-engineer](https://www.wearedevelopers.com/jobs/ext/1282205-firewall-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Firewall Engineer - **Company:** RMantra Solutions Inc. - **Location:** Alexandria, VA, United States - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Amazon Web Services, Cyber Security, Networking Hardware, Internet Protocol Security (IP SEC), Virtual Private Networks (VPN), Network Routers, Load Balancing, Firewalls (Computer Science), Palo Alto Networks, Cisco - **Published:** July 15, 2026 - **Apply:** https://www.clearancejobs.com/jobs/9030902/firewall-engineer ## About the Role Certificate 8570 IAT Level II Baseline Certification (e.g. CCNA Security, CySA+, GICSP, GSEC, Security+ CE, CND, SSCP), * Bachelor's degree and 8+ years of directly relevant experience. Add'l experience may be considered in lieu of degree. * 5+ years of hands-on Cisco / Palo Alto Firewall experience in both engineering and Operations and maintenance roles. * Strong knowledge of Palo Alto concepts and best practices: + Panorama Installation + Panorama HA Config + Panorama Template and Template Stacks + Panorama Policy creation and push to group of Firewalls and Verify Push + Palo Alto Route configuration + Palo Alto IPSec Site to Site VPN Config and Troubleshooting + Palo Alto VM in AWS + Palo Alto IPS Configuration + Palo Alto Virtual Router / Systems + Palo Alto Firewall HA * Experience working in a high op-temp, Top Secret environment. * * * 8570 IAT Level II Baseline Certification (e.g. CCNA Security, CySA+, GICSP, GSEC, Security+ CE, CND, SSCP) Preferred Qualifications * Prior experience with DISA and DISA's support to mission partners ## Description * Identify and remediate misconfigurations, conflicting rules, security gaps, firewall and load balancer security issues, optimize rule-sets, and enhance the overall security posture and performance of Firewalls and Load Balancers * Provide Tier 3 support to members of the operations network administrations. * Maintain all HW and SW components at vendor supported levels. * Support mission-critical Continuity of Operations (COOP). * Conduct a minimum of two (2) assessment of firewall each month on CESO and customer devices and generate assessment reports and provide recommendations for improvements. * Support the creation of network device performance and traffic utilization monthly reports. * Develop and/or participate in After Action Reports (AARs) * Provide expert advice and direction regarding the management and operation of all Palo Alto devices in the DISA CESO enterprise architecture. * Interact with the customer point of contact to set objectives/goals based on Palo Alto Networks technologies and available technology roadmap for architecture and design discussions. * Evaluate current technologies and processes associated with DISA CESO to identify gaps. * Provide requirements and strategies for future cybersecurity operations. * Active participant in meetings with DISA CESO and mission partner working groups. * Adhere to applicable DOD STIGs, DISA applicable orders, and JSIG policy, guidelines, and regulations. ## Related Videos - [How Cisco embraced a DevOps culture within its network engineering team](https://www.wearedevelopers.com/videos/99-how-cisco-embraced-a-devops-culture-within-its-network-engineering-team) - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [gRPC Load Balancing Deep Dive](https://www.wearedevelopers.com/videos/1576-grpc-load-balancing-deep-dive) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [Your Infrastructure Is Not a Playground: AI Agents for Infra Done Right](https://www.wearedevelopers.com/videos/2084-your-infrastructure-is-not-a-playground-ai-agents-for-infra-done-right) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) ## Related Articles - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Why Attend a Developer Event in 2026?](https://www.wearedevelopers.com/magazine/688-why-attend-a-developer-event-in-2026) - [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks)