Secret Cleared Network Security Engineer

Job Description

We are seeking a Network Security Engineer to manage, secure, and troubleshoot next-generation firewall and network security infrastructure across on-premises and cloud environments. This role will have a strong focus on Palo Alto Networks technologies, Zero Trust, and DoD security requirements in support of large government environments.

Key Responsibilities:

Configure, deploy, manage, and troubleshoot Palo Alto Next-Generation Firewalls (NGFWs) using Panorama and PAN-OS. Perform network troubleshooting and packet analysis to identify and resolve connectivity, routing, firewall, and security issues. Analyze GlobalProtect logs, firewall traffic logs, and threat logs to troubleshoot VPN and security incidents. Configure and troubleshoot GlobalProtect, IPsec VPNs, site-to-site VPNs, firewall policies, VLANs, and network segmentation. Implement STIGs, IAVM/CTO requirements, threat prevention, and DNS security controls. Support secure connectivity into AWS and Azure environments and validate firewall and port-exception requests. Support log aggregation and security analysis using Splunk, Elastic, or similar platforms. Research, implement, and maintain ZTNA technologies, helping transition traditional VPN and port-based access toward a Zero Trust architecture.

Skills and Requirements

Active Secret Clearance IAT II

• 7 years of professional experience in Network/Systems Engineering

• Strong experience managing, configuring, and troubleshooting enterprise firewalls, IPS, and VPN devices in both on-prem and cloud environments

• Deep knowledge of network segmentation, VLANs, and firewall rule implementation

• Experience applying STIGs, IAVMs, and CTO directives with strong documentation skills

• Proficiency with Next Generation Firewalls (NGFW), Palo Alto Panorama centralized management platform and Pan-OS.

• Hands-on experience with log aggregation and analysis using Splunk, Elastic. Global Protect Log Analysis

• Knowledge of cloud networking and secure connectivity methods for AWS and Azure

• Experience with Zero Trust Network Access (ZTNA) architecture and migration from traditional access models

We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal employment opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment without regard to race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or the recruiting process, please send a request to [email protected].