Palo Alto Network Security Engineer

Sedulous Consulting Services LLC is seeking a Mid-Level Palo Alto Network Security Engineer to support network and cybersecurity engineering work in a Department of Defense (DoD) environment. This onsite role in Fort Belvoir, VA (MDVA) includes hands-on responsibility for mission-critical and classified networks, working with a team of network, cybersecurity, and systems engineering personnel to keep secure operations running.

What you’ll do

Provide daily engineering support for Palo Alto Networks security technologies across a classified DoD setting. You will handle configuration, administration, maintenance, and troubleshooting to ensure firewall services stay reliable and secure.

• Configure, administer, maintain, and troubleshoot Palo Alto Networks Next-Generation Firewalls (NGFWs)
• Configure and maintain PAN-OS
• Develop, implement, and maintain security and NAT policies
• Configure and support App-ID and User-ID
• Configure, maintain, and troubleshoot GlobalProtect and VPN/IPsec connectivity
• Configure and support High Availability (HA)
• Configure and troubleshoot routing, zones, and interfaces
• Implement and maintain Threat Prevention capabilities
• Monitor and analyze firewall logging and security events
• Manage firewall environments using Panorama and/or Strata Cloud Manager
• Perform firewall upgrades, maintenance, and troubleshooting
• Support secure network operations within classified and DoD environments
• Coordinate with network, cybersecurity, and systems engineering personnel to resolve technical issues

Required experience and credentials

• 3–5+ years of network and/or security engineering experience
• 2+ years of hands-on Palo Alto NGFW/PAN-OS experience
• Active Palo Alto Networks Certified Next-Generation Firewall Engineer certification or active legacy PCNSE certification
• Demonstrated hands-on experience with: PAN-OS
• Demonstrated hands-on experience with: Security/NAT policies
• Demonstrated hands-on experience with: App-ID and User-ID
• Demonstrated hands-on experience with: GlobalProtect
• Demonstrated hands-on experience with: VPN/IPsec
• Demonstrated hands-on experience with: High Availability (HA)
• Demonstrated hands-on experience with: Routing, zones/interfaces
• Demonstrated hands-on experience with: Threat Prevention and logging
• Demonstrated hands-on experience with: Panorama and/or Strata Cloud Manager
• Demonstrated hands-on experience with: firewall upgrades and troubleshooting
• Active TS/SCI Security Clearance

Bonus skills (preferred)

• Palo Alto Networks Network Security Analyst certification
• CCNP Security or CCNP Enterprise
• CISSP (for more senior candidates)
• Experience with DoD STIGs
• Experience with ACAS/Nessus
• Experience supporting Risk Management Framework (RMF) requirements
• Experience with DISA infrastructure
• Experience supporting classified networks

Compensation and benefits

Salary: USD 90,000 - 160,000 per year. Employment type: Full-Time.

• 401K
• Life/Health/ Dental/Disability Insurance
• Flexible Paid Leave
• Tuition Reimbursement

Logistics

• Location: Fort Belvoir, VA (onsite)
• Travel requirements: Up to 25%

Work environment and physical requirements

• Primarily sedentary work requiring the ability to perform tasks involving reaching, lifting, finger dexterity, grasping, repetitive motions, standing, talking, hearing, and visual acuity
• Ability to lift up to 20 pounds occasionally
• Must be able to read, write, and communicate effectively in English
• Requires dependability, accuracy, strong judgment, and ability to apply oral and written instructions
• Must be able to make decisions that significantly impact the immediate work unit

EOE statement: Sedulous Consulting Services is an EEO/AA/Disability/Veterans Employer.