> Markdown version of [/jobs/ext/4721647-security-engineer-and-firewall-sme](https://www.wearedevelopers.com/jobs/ext/4721647-security-engineer-and-firewall-sme). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Security Engineer and Firewall SME

- **Company:** Booz Allen Hamilton Inc.
- **Location:** Washington, DC, United States
- **Experience:** Expert
- **Salary:** $77,600 - $176,000
- **Contract:** Permanent contract
- **Skills:** Microsoft Access, Application Programming Interfaces (APIs), Amazon Web Services, ARM Architecture, Microsoft Azure, Border Gateway Protocol, Cloud Computing, System Configuration, Internet Protocol Security (IP SEC), Intrusion Detection and Prevention, Network Security, Open Shortest Path First (OSPF), Remote Access Technology, Ansible, Zero Trust Network Access, Security Information and Event Management, Wide Area Networks, Extensible Markup Language (XML), Google Cloud, Firewalls (Computer Science), Amazon Virtual Private Cloud (VPC), Cloudformation, Terraform, Splunk, SSL VPN
- **Published:** November 14, 2026
- **Apply:** https://www.dice.com/job-detail/a9112b47-e07a-4ec6-bf11-7c650fc217f9

## About the Role

* 6+ years of experience configuring, managing, and troubleshooting NGFW deployments, including Security Policies, App-ID, User-ID, Threat Prevention, or URL Filtering
 * Experience deploying and operating Prisma Access or SASE solutions, including SD-WAN integration, remote access such as GlobalProtect, and cloud-delivered security services
 * Experience managing multi-device environments through Panorama, including device groups, templates, and policy push workflows
 * Knowledge of VPC architecture, Transit Gateway, AWS Network Firewall, Security Groups, NACLs, and deploying Palo Alto VM-Series or Cloud NGFW in AWS
 * Knowledge of BGP, OSPF, static routing, NAT, and IPsec or SSL VPN as they apply to firewall design
 * Ability to own firewall incidents end-to-end, including participating in on-call rotations, triaging network security events, and driving issues to resolution under pressure
 * Ability to diagnose connectivity and policy issues using packet captures, traffic logs, and CLI tooling across both physical and cloud-based firewalls
 * Ability to mentor junior and mid-level engineers and take ownership of smaller scoped projects and workstreams
 * Ability to obtain and maintain a Public Trust or Suitability/Fitness determination based on client requirements
 * HS diploma or GED

Nice If You Have:

 * Experience deploying firewall configs or AWS networking resources via Terraform, Ansible, or CloudFormation
 * Experience designing or operating a ZTNA model, including using Prisma Access
 * Experience integrating security policy changes into a pipeline such as PAN-OS XML API, Terraform provider, or Expedition tooling
 * Experience with Azure or Google Cloud Platform networking in addition to AWS
 * Experience with SIEM or monitoring, including forwarding PAN logs to Splunk or Cortex XSIAM and building alerting around firewall events
 * PCNSE, AWS Networking Specialty, or Security Specialty Certification

## Description

As a security engineer on our team, you'll advise the client as they work on a reliable network to support client critical missions. You'll work with a team assisting clients with learning the strategic goals and operational needs that shape the network requirements. You'll then assist with the planning of acquisition, installation, configuration, and maintenance of the network and security components. From resolving interoperability issues across platforms to supporting the acquisition of hardware, you'll put your hardware and software talents to good use. This is your chance to support your team with growing their knowledge base with in-depth network security expertise while broadening the scope of your network engineering work. Join us as we help protect client critical missions.