> Markdown version of [/jobs/ext/2536119-palo-alto-firewall-engineer-sme-pcnse](https://www.wearedevelopers.com/jobs/ext/2536119-palo-alto-firewall-engineer-sme-pcnse). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Palo Alto Firewall Engineer / SME (PCNSE)

- **Company:** RISA, INC.
- **Location:** Springfield, VA, United States
- **Experience:** Expert
- **Salary:** $117,000.0 - $128,000.0
- **Contract:** Permanent contract
- **Skills:** Microsoft Access, Access Network, Amazon Web Services, Microsoft Azure, Border Gateway Protocol, Configuration Management, Cyber Security, Information Systems, Internet Protocol Security (IP SEC), Virtual Private Networks (VPN), Network Security, Open Shortest Path First (OSPF), Ansible, Software Engineering, Wide Area Networks, Extensible Markup Language (XML), Transport Layer Security, Firewalls (Computer Science), Juniper, Cortex XSOAR Platform, BIG-IP Advanced Firewall Manager (AFM), Terraform, Cisco
- **Published:** August 30, 2026
- **Apply:** https://www.careerjet.com/jobad/us0fd04232d484a71c1f8cb18ad715a19c

## About the Role

High School diploma/GED plus 10, 7+ years hands-on administering, configuring, and troubleshooting Palo Alto NGFWs in large-scale enterprise or global environments.Active PCNSE certification.DoD 8140.01 and 8570.01-M IAT Level II (e.g. Security+ CE), and CSSP Infrastructure Support within 120 days of start.Deep practical knowledge of legacy Gen 2/Gen 3 hardware - PA-3000 and PA-5000 series, legacy CLI, physical troubleshooting, line-card replacement.Prisma Access (SASE), Prisma SD-WAN, and VM-Series in AWS, Azure, or GCP.Panorama template and device-group inheritance across a hybrid fleet.Advanced BGP, OSPF, IPSec VPN, and NAT.Nice to HavePCNSC or Prisma Certified SASE Professional (PCSAE).Python, plus firewall automation with Ansible, Terraform, or the Palo Alto XML/REST APIs.Cortex XDR or XSOAR; Expedition for legacy rule migration to App-ID policy.Zero Trust Network Access architecture; F5 (APM, AFM), Juniper SRX, or Cisco FTD/ASA.About RISARolston Information Systems

## Description

implementation of secure network architectures on the Palo Alto stack.Manage the full hardware and software lifecycle, including complex refreshes and PAN-OS upgrades on legacy platforms.Run Panorama for centralized policy management across a fleet of physical and virtual firewalls.Configure master-level security profiles - App-ID, User-ID, Content-ID, SSL Decryption, and WildFire.Own configuration management processes and SOPs for all Palo Alto platforms.Mentor junior engineers and act as the escalation point for complex troubleshooting.Liaise with contract, customer, and government DAA on network security status, policies, and procedures.What You'll BringU.S. citizenship and an active TS/SCI.Ability to successfully obtain and maintain a U.S. Government polygraph.Education and experience, per the contract labor category criteria, Bachelor's degree in a field applicable to the position plus 6 years of relevant experience. Equivalents accepted - Master's plus 4, Associate's plus 8, or


## Related Videos

- [How Cisco embraced a DevOps culture within its network engineering team](https://www.wearedevelopers.com/videos/99-how-cisco-embraced-a-devops-culture-within-its-network-engineering-team)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Dev & Test in the Cloud? Deploy your cloud environments with Ansible & Terraform](https://www.wearedevelopers.com/videos/1607-dev-test-in-the-cloud-deploy-your-cloud-environments-with-ansible-terraform)
- [Your Infrastructure Is Not a Playground: AI Agents for Infra Done Right](https://www.wearedevelopers.com/videos/2084-your-infrastructure-is-not-a-playground-ai-agents-for-infra-done-right)
- [Embracing the Hybrid Cloud: Unlocking Success with Ansible](https://www.wearedevelopers.com/videos/932-embracing-the-hybrid-cloud-unlocking-success-with-ansible)
- [Computer Vision from the Edge to the Cloud done easy](https://www.wearedevelopers.com/videos/263-computer-vision-from-the-edge-to-the-cloud-done-easy)

## Related Articles

- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers)
- [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Everything a Developer Needs to Know About MCP with Neo4j](https://www.wearedevelopers.com/magazine/604-everything-a-developer-needs-to-know-about-mcp-with-neo4j)
- [Dev Digest 120 - Apple and peers](https://www.wearedevelopers.com/magazine/455-dev-digest-120-apple-and-peers)