> Markdown version of [/jobs/ext/1465984-firewall-engineer](https://www.wearedevelopers.com/jobs/ext/1465984-firewall-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Firewall Engineer - **Company:** Novul Solutions - **Location:** Alexandria, VA, United States - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Amazon Web Services, Cyber Security, Computer Networks, Networking Hardware, Internet Protocol Security (IP SEC), Virtual Private Networks (VPN), Network Security, Routing, Network Administration, Network Routers, Load Balancing, Computer Network Operations, Firewalls (Computer Science), Cisco Firewalls, Performance Monitor, 3-tier Architectures, Cisco - **Published:** July 28, 2026 - **Apply:** https://www.dice.com/job-detail/a8760aaa-b5e9-47f5-9634-7e21ec67da87 ## About the Role * Bachelor's degree and 8+ years of directly relevant experience; additional experience may be considered in lieu of degree. * 5+ years of hands-on Cisco and Palo Alto firewall experience in engineering and operations/maintenance roles. * Experience supporting high operational tempo, Top Secret DoD environments. * Ability to obtain and maintain TS/SCI eligibility. * Willingness to take and maintain a CI Polygraph. * Active DoD 8570 IAT Level II Baseline Certification, such as Security+ CE, CySA+, CCNA Security, GSEC, CND, SSCP, or equivalent. * Strong Palo Alto experience, including Panorama installation, HA configuration, templates/template stacks, policy creation and push verification, route configuration, IPSec site-to-site VPN troubleshooting, Palo Alto VM in AWS, IPS configuration, virtual routers/systems, and firewall HA. * Experience with Cisco firewall operations, troubleshooting, rule-set analysis, optimization, and remediation. * Experience conducting firewall security assessments, reporting, load balancer security issue identification, and remediation. * Experience supporting network traffic utilization/performance reporting and compliance with DoD STIGs, DISA requirements, and JSIG policies. Preferred Qualifications * Prior experience supporting DISA, DISA CESO, or DISA mission partners in classified enterprise cybersecurity environments. * Experience providing senior-level technical recommendations for firewall architecture, security posture improvements, and future-state cybersecurity operations. ## Description We are seeking an experienced Firewall Engineer to support mission-critical network security operations within a high-tempo DoD environment. This role focuses on firewall engineering, Palo Alto administration, load balancer security, rule-set optimization, configuration assessments, incident support, and enterprise cybersecurity improvements. The ideal candidate will bring strong hands-on experience with Cisco and Palo Alto firewall technologies, including Panorama, HA configurations, IPSec VPNs, firewall routing, AWS Palo Alto VM deployments, IPS configuration, and firewall performance/security assessments., * Identify and remediate firewall/load balancer misconfigurations, conflicting rules, security gaps, and performance issues. * Optimize firewall rule-sets to improve enterprise firewall and load balancer security posture and performance. * Provide Tier 3 technical support to network operations and network administration teams. * Maintain hardware and software components at vendor-supported levels. * Support mission-critical Continuity of Operations initiatives. * Conduct at least two monthly firewall assessments across CESO and customer devices, including reports and improvement recommendations. * Support monthly network device performance and traffic utilization reporting. * Develop and/or contribute to After Action Reports. * Provide expert guidance on Palo Alto management, operations, architecture, optimization, technology roadmaps, and design discussions within the DISA CESO environment. * Evaluate DISA CESO technologies and processes, provide future cybersecurity operations recommendations, participate in DISA CESO/mission partner working groups, and ensure compliance with DoD STIGs, DISA orders, JSIG policies, and applicable regulations. ## Related Videos - [How Cisco embraced a DevOps culture within its network engineering team](https://www.wearedevelopers.com/videos/99-how-cisco-embraced-a-devops-culture-within-its-network-engineering-team) - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [Creating a routing app with Google Maps API from scratch](https://www.wearedevelopers.com/videos/831-creating-a-routing-app-with-google-maps-api-from-scratch) - [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see) - [A Technical Introduction to Bitcoin's 2nd Layer- The Lightning Network](https://www.wearedevelopers.com/videos/15-a-technical-introduction-to-bitcoin-s-2nd-layer-the-lightning-network) ## Related Articles - [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)