> Markdown version of [/jobs/ext/3849622-intermediate-firewall-engineer](https://www.wearedevelopers.com/jobs/ext/3849622-intermediate-firewall-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Intermediate Firewall Engineer - **Company:** Chenega MIOS - **Location:** Vienna, VA, United States - **Experience:** Experienced - **Salary:** $119,700.0 - **Contract:** Permanent contract - **Skills:** Application Performance Management, JIRA, Audit Trail, Border Gateway Protocol, Complex Networks, CompTIA Security+, Cyber Security, Network Topologies, Internet Protocol Security (IP SEC), Virtual Private Networks (VPN), Network Security, Open Shortest Path First (OSPF), Performance Tuning, Redmine, Remote Access Technology, SAP (Applications), Service Pack, Security Information and Event Management, Systems Integration, Tcpdump, Wireshark, Virtual Local Area Networks, Dynamic Routing, Transport Layer Security, Firewalls (Computer Science), Information Technology, Palo Alto Networks, Cortex XSOAR Platform, Firewall Services Module, Splunk, Servicenow, Vulnerability Analysis - **Published:** October 21, 2026 - **Apply:** https://www.dice.com/job-detail/0052b474-0231-48f5-a5e0-5b5dd217e266 ## About the Role * Bachelors degree in Cybersecurity, Information Technology, Computer Science, or a related field with 4+ years of hands-on network security/firewall engineering experience; OR * High school diploma or GED equivalent with 8+ years of demonstrable operational experience in lieu of a degree. * Must meet DoD 8140 / 8570.01-M IAT Level II baseline certification requirements (e.g., CompTIA Security+ CE, CCNA Security, CySA+). * Vendor technical certification: Palo Alto Networks Certified Network Security Administrator (PCNSA) required; Palo Alto Networks Certified Network Security Engineer (PCNSE) preferred. * Active Secret security clearance with eligibility to obtain TS/SCI/SAP Knowledge, Skills and Abilities: * Strong operational knowledge of Palo Alto Networks NGFW administration, Panorama centralized management, and PAN-OS feature sets (App-ID, Content-ID, User-ID). * Proven experience building, troubleshooting, and tuning Site-to-Site IPsec VPN tunnels, Global Protect remote access gateways, and dynamic NAT/PAT policies. * Solid working knowledge of dynamic routing protocols (BGP, OSPF), static routing, sub-netting, and Layer 2/3 switching fabrics. * Practical understanding of DoD RMF, DISA STIG validation, and boundary protection compliance checklists. * Experience integrating firewall telemetry and syslog forwarding with SIEM/SOAR platforms (Splunk, Cribl, XSOAR) and network visibility fabrics (IXIA Packet Brokers). * Strong analytical and packet-level troubleshooting skills utilizing tools such as Wireshark, TCPdump, and Panorama traffic/threat inspection logs. * Familiarity with IT Service Management (ITSM) workflows, strict configuration change management boards (CCB), and tracking platforms (Jira, ServiceNow, Redmine). ## Description Are you ready to enhance your skills and build your career in a rapidly evolving business climate? Are you looking for a career where professional development is embedded in your employers core culture? If so, Chenega Military, Intelligence & Operations Support (MIOS) could be the place for you! Join our team of professionals who support large-scale government operations by leveraging cutting-edge technology and take your career to the next level! SecuriGence deliver essential technology services to our customer in support of their missions to sustain the national security and economic interest of our nation. SecuriGence is seeking a talented Intermediate Firewall Engineer to help contribute to our success. The talented Intermediate Firewall Engineer will be responsible for the core engineering, day-to-day administration, and operational maintenance of enterprise boundary defense platforms and network security appliances. The Intermediate Firewall Engineer serves as the Tier 2/3 escalation and implementation lead, translating architectural designs into active, secure firewall configurations across on-premises and classified mission enclaves (DMSS, Secret/SAP, TS/SCI/SAP). Key responsibilities include managing Palo Alto Networks firewalls via Panorama, troubleshooting Site-to-Site IPsec VPN tunnels, administering dynamic routing protocols (BGP/OSPF), coordinating scheduled PAN-OS software updates, and enforcing continuous compliance with DISA STIGs and DoD change-management standards. This role bridges strategic engineering initiatives with routine operational support, providing escalation resolution for junior staff and operational support to the Senior Firewall Engineer. Come help us solve problems with Innovation through Intelligence. Responsibilities * Administer, configure, and maintain Palo Alto Networks Next-Generation Firewalls (NGFW) via enterprise Panorama and direct management interfaces in strict alignment with change control protocols. * Provision and deploy security policies, App-ID rules, TLS/SSL decryption policies, dynamic NAT/PAT schemes, and standardized security objects across multi-tenant environments. * Serve as the Tier 2/3 operational escalation point, investigating and resolving complex network connectivity failures, IPsec VPN tunnel drops, routing anomalies, and application performance bottlenecks. * Implement dynamic routing protocols (BGP, OSPF), VLAN segmentation, and perimeter access controls to maintain resilient edge connectivity and segmentation across mission partner enclaves. * Lead remote site management for performers and external stakeholders across classified networks, including establishing, monitoring, and maintaining IPsec tunnels, VPN gateways, and operational telemetry. * Plan, coordinate, and execute scheduled PAN-OS maintenance updates, dynamic threat content releases, antivirus definitions, and security patches under the direction of senior engineering leads. * Maintain rigorous Authority to Operate (ATO) and security posture baselines by executing DISA STIG checklists, remediating vulnerability scan findings, and updating PO&AM documentation. * Provide incident isolation support to the Security Operations Center (SOC), validating security telemetry log-forwarding pipelines and isolating traffic anomalies during cyber events. * Maintain comprehensive technical configuration records, network topology diagrams, change audit logs, and operational standard operating procedures (SOPs) within ticketing and project systems (e.g., Redmine, Jira). * Provide operational mentorship and technical guidance to Junior Firewall Engineers, reviewing routine change requests and assisting in complex troubleshooting workflows. * Other duties as assigned.