Firewall Engineer IV - HHS STIM - Remote Eligible

Firewall Engineer IV

Responsibilities

• Implement, configure, and manage network security infrastructure such as firewalls, IDS/IPS, and VPNs.
• Setup, configure, and maintain Palo Alto perimeter defense appliances.
• Develop and manage policies, rules, NATs, and security profiles in Panorama.
• Configure, implement, manage, and troubleshoot Palo Alto Prisma and GlobalProtect VPN solutions.
• Monitor, secure, and communicate network vulnerabilities and attack vectors to stakeholders.
• Utilize Gigamon, Palo Alto Firewalls, Cisco Secure Network Analytics, and other security tools as needed.
• Maintain detailed system design, configuration, and service documentation.
• Collaborate with cross-functional teams to support IT infrastructure projects with expert guidance.
• Lead and mentor junior team members in firewall administration best practices.
• Participate in a 24/7/365 on-call rotation to support operational needs.

Qualifications

• 10+ years of IT Firewall Administration experience with proven expertise in Palo Alto Networks technologies.
• Extensive knowledge of firewall configuration, VPN management, and IDS/IPS solutions.
• Hands-on experience with Panorama, Prisma, and GlobalProtect solutions.
• Strong understanding of network vulnerabilities, attack vectors, and mitigation strategies.
• Experience with Gigamon, Cisco Secure Network Analytics, and other industry-standard tools.
• Current Palo Alto certification (PCNSA, PCCSE, or PCNSE preferred).
• Knowledge of security hardening standards such as CIS Controls, NIST SP 800-53 Rev. 5, and DISA STIGs.
• Excellent problem-solving, communication, and documentation skills.
• Ability to work independently or collaboratively in high-pressure environments.