Secret Cleared Network Security Engineer

We are seeking a Network Security Engineer to manage, secure, and troubleshoot next-generation firewall and network security infrastructure across on-premises and cloud environments. This role will have a strong focus on Palo Alto Networks technologies, Zero Trust, and DoD security requirements in support of large government environments., Configure, deploy, manage, and troubleshoot Palo Alto Next-Generation Firewalls (NGFWs) using Panorama and PAN-OS. Perform network troubleshooting and packet analysis to identify and resolve connectivity, routing, firewall, and security issues. Analyze GlobalProtect logs, firewall traffic logs, and threat logs to troubleshoot VPN and security incidents. Configure and troubleshoot GlobalProtect, IPsec VPNs, site-to-site VPNs, firewall policies, VLANs, and network segmentation. Implement STIGs, IAVM/CTO requirements, threat prevention, and DNS security controls. Support secure connectivity into AWS and Azure environments and validate firewall and port-exception requests. Support log aggregation and security analysis using Splunk, Elastic, or similar platforms. Research, implement, and maintain ZTNA technologies, helping transition traditional VPN and port-based access toward a Zero Trust architecture.

Active Secret Clearance IAT II · 7 years of professional experience in Network/Systems Engineering

· Strong experience managing, configuring, and troubleshooting enterprise firewalls, IPS, and VPN devices in both on-prem and cloud environments

· Deep knowledge of network segmentation, VLANs, and firewall rule implementation

· Experience applying STIGs, IAVMs, and CTO directives with strong documentation skills

· Proficiency with Next Generation Firewalls (NGFW), Palo Alto Panorama centralized management platform and Pan-OS.

· Hands-on experience with log aggregation and analysis using Splunk, Elastic. Global Protect Log Analysis

· Knowledge of cloud networking and secure connectivity methods for AWS and Azure

· Experience with Zero Trust Network Access (ZTNA) architecture and migration from traditional access models