> Markdown version of [/jobs/ext/1631167-firewall-engineer](https://www.wearedevelopers.com/jobs/ext/1631167-firewall-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Firewall Engineer - **Company:** Tetrad Digital Integrity LLC - **Location:** Arlington, VA, United States - **Experience:** Expert - **Salary:** $115,000.0 - $125,000.0 - **Contract:** Permanent contract - **Skills:** Amazon Web Services, Cyber Security, Information Systems, Continuous Integration, Networking Hardware, Internet Protocol Security (IP SEC), Virtual Private Networks (VPN), Web Application Security, Network Routers, Load Balancing, Firewalls (Computer Science), Palo Alto Networks, Devsecops, Cisco - **Published:** July 31, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=724ca3b9ea09f5e2 ## About the Role * Bachelor's degree and 8+ years of directly relevant experience. Additionall experience may be considered in lieu of degree. * 5+ years of hands-on Cisco / Palo Alto Firewall experience in both engineering and Operations and maintenance roles. * Strong knowledge of Palo Alto concepts and best practices: + Panorama Installation, HA Config, Template and Template Stacks + Panorama Policy creation and push to group of Firewalls and Verify Push + Palo Alto Route configuration, IPSec Site to Site VPN Config and Troubleshooting + Palo Alto VM in AWS, IPS Configuration, Virtual Router / Systems and Firewall HA * Experience working in a high op-temp, Top Secret environment. * 8570 IAT Level II Baseline Certification (e.g. CCNA Security, CySA+, GICSP, GSEC, Security+ CE, CND, SSCP) ## Description With the CESO program, the Defense Information System Agency (DISA) is looking to transform the existing Secure Web Services (SWS) environment, used to provide secure information sharing to the community, into a more mature service offering to meet the DoD and IC community. The goal will be to manage the commercial cloud migration and fully automate the continuous development & continuous integration environment, fourth estate consolidation, professionalize services - ITIL/DevSecOps based processes, improve the customer experience 1st call resolution, and achieve development of a service catalog for Defense Working Capital Fund (DWCF) Model., * Identify and remediate misconfigurations, conflicting rules, security gaps, firewall and load balancer security issues, optimize rule-sets, and enhance the overall security posture and performance of Firewalls and Load Balancers * Provide Tier 3 support to members of the operations network administrations. * Maintain all HW and SW components at vendor supported levels. * Support mission-critical Continuity of Operations (COOP). * Conduct a minimum of two (2) assessment of firewall each month on CESO and customer devices and generate assessment reports and provide recommendations for improvements. * Support the creation of network device performance and traffic utilization monthly reports. * Develop and/or participate in After Action Reports (AARs) * Provide expert advice and direction regarding the management and operation of all Palo Alto devices in the DISA CESO enterprise architecture. * Interact with the customer point of contact to set objectives/goals based on Palo Alto Networks technologies and available technology roadmap for architecture and design discussions. * Evaluate current technologies and processes associated with DISA CESO to identify gaps. * Provide requirements and strategies for future cybersecurity operations. * Active participant in meetings with DISA CESO and mission partner working groups. * Adhere to applicable DOD STIGs, DISA applicable orders, and JSIG policy, guidelines, and regulations. ## Related Videos - [How Cisco embraced a DevOps culture within its network engineering team](https://www.wearedevelopers.com/videos/99-how-cisco-embraced-a-devops-culture-within-its-network-engineering-team) - [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see) - [DevSecOps: Injecting Security into Mobile CI/CD Pipelines](https://www.wearedevelopers.com/videos/273-devsecops-injecting-security-into-mobile-ci-cd-pipelines) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) ## Related Articles - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology) - [Dev Digest 129 - Now that's what I call private data!](https://www.wearedevelopers.com/magazine/468-dev-digest-129-now-that-s-what-i-call-private-data)