> Markdown version of [/jobs/ext/1647352-firewall-engineer](https://www.wearedevelopers.com/jobs/ext/1647352-firewall-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Firewall Engineer - **Company:** CRI Advantage, Inc. - **Location:** Idaho Falls, ID, United States - **Salary:** $124,800.0 - $145,600.0 - **Contract:** Permanent contract - **Skills:** Application Firewall, IPv4, IPv6, Network Security, Firewalls (Computer Science), Palo Alto Networks, Firewall Services Module - **Published:** July 3, 2026 - **Apply:** https://diversityjobs.com/main/sendform/8/8/28176/1/17480329?backUrl=%2Fcareer%2F17480329%2FFirewall-Engineer-Idaho-Idaho-Falls ## About the Role * Bachelor's degree plus 2 years of relevant experience, or an equivalent combination of education and experience. * Hands-on experience administering Palo Alto Networks firewalls and Panorama centralized management. * Demonstrated experience implementing and supporting IPv4/IPv6 dual-stack networking within an enterprise environment. * Demonstrated experience designing, deploying, validating, and troubleshooting enterprise firewall policies. * U.S. citizenship; ability to complete standard site onboarding and background screening prior to starting. Preferred Qualifications * Palo Alto Networks Certified Network Security Engineer (PCNSE) or comparable certification. * Experience administering Palo Alto Panorama Device Groups and Templates. * Experience planning or executing enterprise firewall migrations. * Experience supporting large, highly available production environments. * Experience with enterprise IPv6 migrations or large dual-stack rollouts. * Prior experience in a government, national laboratory, or other regulated IT environment. Knowledge, Skills & Abilities * In-depth knowledge of Palo Alto Networks firewall administration and Panorama policy management. * Strong understanding of IPv4 and IPv6 addressing, dual-stack networking, and firewall policy design. * Strong analytical, problem-solving, and troubleshooting skills with close attention to detail. * Ability to work independently, manage competing priorities, and follow change-control processes in a production environment. * Effective written and verbal communication and clear technical documentation. Work Environment & Physical Requirements * Work is performed 100% onsite at a secure facility in Idaho Falls, Idaho; remote or hybrid work is not available for this position. * Prolonged periods working at a computer and performing repetitive keyboard/mouse tasks. * Occasional standing, bending, or lifting of equipment (typically up to 25 pounds) may be required. * Must adhere to all site safety, security, and emergency-action procedures. ## Description The Firewall Engineer is responsible for implementing and supporting IPv4/IPv6 dual-stack networking across an enterprise Palo Alto Networks firewall environment. Working primarily in Palo Alto Panorama, you will design, build, deploy, validate, and troubleshoot firewall policies - developing IPv6 rulesets based on the organization's existing IPv4 policy and deploying them to firewalls throughout the environment. This role keeps a mission-critical production network secure and available while modernizing it to support IPv6., The approximate time allocations below reflect the primary focus of the role and may vary with project needs. * Build, deploy, and maintain firewall rules and policies across the enterprise Palo Alto Networks environment (approx. 70% of time). * Develop IPv6 rulesets in Palo Alto Panorama, mirroring current IPv4 policy, and deploy them to firewalls enterprise-wide. * Build and configure IPv6 interfaces on firewall devices to support dual-stack operation (approx. 10% of time). * Validate and troubleshoot firewall traffic to confirm rulesets function as intended and to resolve policy or connectivity issues (approx. 20% of time). * Participate in change planning, implementation, and validation activities to minimize operational risk during firewall deployments. * Document configurations, changes, and troubleshooting steps to support ongoing operations and knowledge transfer. * Comply with all environmental, safety, health, security, and quality requirements, and apply Integrated Safety Management System principles when performing job duties. * Perform other related duties as assigned in support of the network security team. ## Related Videos - [Small, Secure, Interconnected: The next Internet Protocol](https://www.wearedevelopers.com/videos/100062-small-secure-interconnected-the-next-internet-protocol) - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [IP Authentication: A Tale of Performance Pitfalls and Challenges in Prod](https://www.wearedevelopers.com/videos/1413-ip-authentication-a-tale-of-performance-pitfalls-and-challenges-in-prod) - [IoT: The road to sustainability](https://www.wearedevelopers.com/videos/557-iot-the-road-to-sustainability) - [Demystifying application networking in the cloud](https://www.wearedevelopers.com/videos/675-demystifying-application-networking-in-the-cloud) - [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see) ## Related Articles - [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [7 Important Tips That Every Software Developer Should Know](https://www.wearedevelopers.com/magazine/101-7-important-tips-that-every-software-developer-should-know) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated)