Senior Firewall Administrator

BAE Systems
Falls Church, VA, United States
1 day ago
Apply on www.techcareers.com
Prepare application

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Experience level
Expert
Experience required
3 years minimum
Compensation
$118,095.0 - $200,762.0
Working hours
Regular working hours

Tech stack

Access Control List Cisco PIX Cyber Security Computer Networks Linux Domain Name System (DNS) Human-Computer Interaction Systems Analysis Subnetting Network Security Network Troubleshooting Log Analysis
+16 more
Microsoft Visio Network Configuration and Change Management Routing Network Protocols Open Shortest Path First (OSPF) Software Requirements Analysis Software Systems TCP/IP Virtual Local Area Networks Scripting Firewalls (Computer Science) Juniper Palo Alto Networks Transport Protocols Firewall Services Module Cisco

Job description

BAE’s Cyber Security Engineering Team is searching for a Senior Security Engineer to assist in managing the Palo Alto firewall suite within our security team. Responsible for providing appropriate security development and support of tools and its services to enable the GSOC to utilize the state-of-the-art security tools and methods. Linux and Windows administration. Must have strong Palo Alto and Web Filt Admin experience.

If you join us, you will perform many of the following duties:

Administer Palo Alto firewalls using Panorama including but not limited to, object and rule creation, evaluation of firewall logs, network troubleshooting, and firewall configuration. A deep understanding of firewall deployment best practice such as, rule order and placement, port versus application based rules and when to deploy them, and rule or log analysis to improve firewall policy performance.

Administer Web filter policies including but not limited to, adding/modifying white lists, setting up and evaluating connection traces, configuration and evaluation of rule traces, and other activities required for day-to-day support and incident troubleshooting.

Provide security application support, including the development of automated scripts and protocols for seamless application-server interaction.

Develop documentation as required (such as installation and Visio network and cabling diagrams, configuration guides, user tutorials, user and system requirements specification documentation, use cases, traceability matrices).

Research, prototype and implement new security related technology solutions.

Provide back up support to other engineers with enterprise tools. This may involve learning new tools and/or software solutions while working closely with other team members.

Working hand-in-hand with our 24/7 GSOC to support their needs.

Responding to and successfully triaging user requests via the phone, email or the incident management system.

Analyzing network traffic patterns, security requirements, future growth requirements, feasibility for virtualization, resource requirements, risk mitigation, functional analysis, interface systems analysis, technical assessments, technology benchmarking, enterprise architecture analysis, and requirement analysis.

Requirements

Must possess: flexibility, strong work ethic, the ability to work with others, troubleshooting skills and a solid technical Information/network security foundation.

This is a hands-on technical position which requires the ability to apply existing knowledge and theoretical concepts to real-world situations and a reasonable user interface.

Required Education, Experience, & Skills

  • Bachelor’s Degree in a relevant field and 3 years of work experience, or equivalent experience
  • Strong understanding of networking protocols, including DNS, TCP/IP, and other common transport protocols
  • Solid grasp of networking and security principles
  • Experience implementing firewall technologies from vendors such as Palo Alto, Cisco ASA, Check Point, or Juniper SRX
  • Firewall policy development, implementation, and management experience
  • Firewall configuration and deployment experience, including:Network configuration (e.g., VLANs, subnets)Routing configuration (e.g., static routes, OSPF)Rule configuration (e.g., access control lists, security policies)

Preferred Education, Experience, & Skills

Industry-recognized certifications, such as Security , Network , Palo Alto Networks, or CISCO

Benefits & conditions

Full-Time Salary Range: $118095 - $200762

Please note: This range is based on our market pay structures. However, individual salaries are determined by a variety of factors including, but not limited to: business considerations, local market conditions, and internal equity, as well as candidate qualifications, such as skills, education, and experience.

Employee Benefits: At BAE Systems, we support our employees in all aspects of their life, including their health and financial well-being. Regular employees scheduled to work 20 hours per week are offered: health, dental, and vision insurance; health savings accounts; a 401(k) savings plan; disability coverage; and life and accident insurance. We also have an employee assistance program, a legal plan, and other perks including discounts on things like home, auto, and pet insurance. Our leave programs include paid time off, paid holidays, as well as other types of leave, including paid parental, military, bereavement, and any applicable federal and state sick leave. Employees may participate in the company recognition program to receive monetary or non-monetary recognition awards. Other incentives may be available based on position level and/or job specifics.

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on www.techcareers.com
Prepare application

Good distractions

Talks and stories from around this role — technically off-topic, practically not.

4:01 min

Finding personal fulfillment in the cybersecurity industry

LIVE

5:02 min

Mapping distributed compute paradigms to modern vehicles

Joachim Werner · LIVE

52 sec

Running persistent Linux environments directly on Windows

Ben Breard Ben Breard · World Congress 2025

1:29 min

Expanding practical knowledge with community sandboxes and resources

Stuart Clark · LIVE

3:50 min

Queues in TCP stacks and continuous network connections

Clemens Vasters Clemens Vasters · World Congress 2022

3:55 min

Demonstrating .NET installation on Debian and Azure Linux

Silvano Coriani Silvano Coriani · Europe 2026 Virtual

Videos

See all

Related articles

See all