> Markdown version of [/jobs/ext/1835643-senior-firewall-engineer-palo-alto-sme](https://www.wearedevelopers.com/jobs/ext/1835643-senior-firewall-engineer-palo-alto-sme). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Senior Firewall Engineer (Palo Alto SME) - **Company:** Maximus, Inc. - **Location:** Arlington, VA, United States - **Experience:** Expert - **Salary:** $116,500.0 - $165,000.0 - **Contract:** Permanent contract - **Skills:** Active Directory, Unix, Cyber Security, Information Systems, Linux, Domain Name System (DNS), Network Security, Windows Servers, Windows PowerShell, Virtualization Technology, Scripting, Load Balancing, Computer Network Operations, Firewalls (Computer Science), Infrastructure Automation Frameworks, Information Technology - **Published:** July 15, 2026 - **Apply:** https://www.clearancejobs.com/jobs/9032114/senior-firewall-engineer-palo-alto-sme ## About the Role Active Top Secret clearance with SCI eligibility. - DoD 8570 IAT Level II certification (e.g., Security+ or equivalent). - Strong experience administering enterprise Windows Server environments. - Deep knowledge of Windows services (Active Directory, DNS, Group Policy, etc.). - Demonstrated ability to troubleshoot and resolve complex infrastructure issues. - Strong written and verbal communication skills. Preferred Skills & Qualifications: - Bachelor's degree in Computer Science, Information Systems, or related field (or equivalent experience). - 8+ years of relevant IT systems administration experience (or Master's with 6-10 years). - Proven experience supporting DoD or federal environments. - Experience working in classified environments with strict security requirements. - Experience serving as a technical SME in enterprise-scale Windows environments. - Working knowledge of Linux/Unix systems administration. [careers.leidos.com] - Familiarity with DISA STIGs, RMF, and other federal cybersecurity frameworks. - Experience with system automation, scripting (PowerShell), and configuration management tools. - Strong leadership and mentoring capabilities. - Ability to operate in fast-paced, mission-driven environments with minimal supervision. - Experience supporting hybrid or multi-OS enterprise environments. #techjobs #clearance #veteranspage ## Description Maximus is seeking a highly skilled Firewall Engineer to support the DISA Compartmented Enterprise Services Office (CESO) program. This role is responsible for designing, implementing, and sustaining firewall and network security solutions within a high-security, mission-critical environment supporting DoD and Intelligence Community customers., The ideal candidate will be a seasoned professional with extensive experience in firewall engineering, network security operations, and cloud/virtualized environments. The Firewall Engineer will play a key role in improving the security posture, performance, and reliability of enterprise firewall and load balancer systems while supporting modernization initiatives across the CESO platform., Identify and remediate firewall misconfigurations, conflicting rules, and security gaps to improve overall security posture and performance. - Provide Tier 3 support to network operations teams for firewall and load balancer-related issues. - Maintain hardware and software components at vendor-supported levels to ensure operational integrity. - Support mission-critical Continuity of Operations (COOP) requirements. - Conduct regular firewall assessments on enterprise and customer devices and develop reports with recommended improvements. - Develop and support performance and traffic utilization reports for network devices. - Contribute to After Action Reports (AARs) and operational documentation. - Provide subject matter expertise for Palo Alto firewall technologies within the enterprise architecture. - Collaborate with customer stakeholders to define objectives, roadmap strategies, and architecture improvements. - Evaluate current technologies and processes to identify gaps and recommend future cybersecurity strategies. - Participate in technical meetings and mission partner working groups supporting enterprise operations. - Ensure compliance with DoD STIGs, DISA policies, and JSIG security requirements. ## Related Videos - [WeAreDevelopers LIVE - Node and Package Security](https://www.wearedevelopers.com/videos/2138-wearedevelopers-live-node-and-package-security) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [JavaScript? No. Java Scripts! - Scripting with Java](https://www.wearedevelopers.com/videos/2094-javascript-no-java-scripts-scripting-with-java) - [Docker network without Docker](https://www.wearedevelopers.com/videos/1418-docker-network-without-docker) - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [The Time Paradox: Building Timezone-Safe Python/Django Applications](https://www.wearedevelopers.com/videos/1915-the-time-paradox-building-timezone-safe-python-django-applications) ## Related Articles - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated) - [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs)