The Role
Engineer and optimize Cisco and Palo Alto firewalls, Panorama deployments, load balancer security, VPNs, IPS, routing, and high-availability configurations. Identify and remediate security gaps, misconfigurations, rule conflicts, and performance issues; provide Tier 3 support; conduct firewall assessments and reporting; support continuity operations; and ensure compliance with DoD STIGs, DISA requirements, and JSIG policies in classified environments.
Summary Generated by Built In
Overview
We are seeking an experienced Firewall Engineer to support mission-critical network security operations within a high-tempo DoD environment. This role focuses on firewall engineering, Palo Alto administration, load balancer security, rule-set optimization, configuration assessments, incident support, and enterprise cybersecurity improvements.
The ideal candidate will bring strong hands-on experience with Cisco and Palo Alto firewall technologies, including Panorama, HA configurations, IPSec VPNs, firewall routing, AWS Palo Alto VM deployments, IPS configuration, and firewall performance/security assessments.
Key Responsibilities
- Identify and remediate firewall/load balancer misconfigurations, conflicting rules, security gaps, and performance issues.
- Optimize firewall rule-sets to improve enterprise firewall and load balancer security posture and performance.
- Provide Tier 3 technical support to network operations and network administration teams.
- Maintain hardware and software components at vendor-supported levels.
- Support mission-critical Continuity of Operations initiatives.
- Conduct at least two monthly firewall assessments across CESO and customer devices, including reports and improvement recommendations.
- Support monthly network device performance and traffic utilization reporting.
- Develop and/or contribute to After Action Reports.
- Provide expert guidance on Palo Alto management, operations, architecture, optimization, technology roadmaps, and design discussions within the DISA CESO environment.
- Evaluate DISA CESO technologies and processes, provide future cybersecurity operations recommendations, participate in DISA CESO/mission partner working groups, and ensure compliance with DoD STIGs, DISA orders, JSIG policies, and applicable regulations.
Requirements
Basic Qualifications
- Bachelor’s degree and 8+ years of directly relevant experience; additional experience may be considered in lieu of degree.
- 5+ years of hands-on Cisco and Palo Alto firewall experience in engineering and operations/maintenance roles.
- Experience supporting high operational tempo, Top Secret DoD environments.
- Ability to obtain and maintain TS/SCI eligibility.
- Willingness to take and maintain a CI Polygraph.
- Active DoD 8570 IAT Level II Baseline Certification, such as Security+ CE, CySA+, CCNA Security, GSEC, CND, SSCP, or equivalent.
- Strong Palo Alto experience, including Panorama installation, HA configuration, templates/template stacks, policy creation and push verification, route configuration, IPSec site-to-site VPN troubleshooting, Palo Alto VM in AWS, IPS configuration, virtual routers/systems, and firewall HA.
- Experience with Cisco firewall operations, troubleshooting, rule-set analysis, optimization, and remediation.
- Experience conducting firewall security assessments, reporting, load balancer security issue identification, and remediation.
- Experience supporting network traffic utilization/performance reporting and compliance with DoD STIGs, DISA requirements, and JSIG policies.
Preferred Qualifications
- Prior experience supporting DISA, DISA CESO, or DISA mission partners in classified enterprise cybersecurity environments.
- Experience providing senior-level technical recommendations for firewall architecture, security posture improvements, and future-state cybersecurity operations.
Benefits
Core Benefits:
- Paid Time Off PTO):TEN (10) Paid days off & FIVE (5) Floating days off.
- Holidays: 11 Paid Holidays. Flex time can be utilized instead of holiday time usage.
- Payroll: Paid Bi-Monthly.
- 401(k): Partnered with the SECOND LARGEST Retirement plan provider in the U.S. Guaranteed 3% match. Eligibility – 21 years of age or older, after 3 months of employment
- Individual or company-wide performance and recognition awards (Quarterly)
Health Benefits:
- UNITED HEALTHCARE PPO, extensive national coverage.
- INCLUDES: Medical/Dental/Vision/HSA.
- Eligible on the first of the month, immediately after the start date.
- Submit the enrollment form within 30 days of your start date otherwise, you will have to wait until October for the new year enrollment.
Quality of Life Benefits:
- Training & Career Development Reimbursement of Tuition and training needed to support career development.
- $150 monthly reimbursement contribution paid monthly towards parking expenses.
- Receipts must be submitted by the close of business on the 25th of each month.
- Reimbursements will be paid on the first payroll AFTER reimbursements are submitted each month.
Special Benefits:
- Performance bonus – Project-based
- Yearly bonus – Company based
Skills Required
- Bachelor's degree and 8+ years of directly relevant experience, or equivalent additional experience in lieu of degree
- 5+ years of hands-on Cisco and Palo Alto firewall engineering and operations experience
- Experience supporting high-tempo Top Secret DoD environments
- Ability to obtain and maintain TS/SCI eligibility
- Willingness to obtain and maintain a CI polygraph
- Active DoD 8570 IAT Level II baseline certification, such as Security+ CE, CySA+, CCNA Security, GSEC, CND, SSCP, or equivalent
- Palo Alto Panorama installation, HA configuration, templates, policy creation, route configuration, IPSec VPN troubleshooting, AWS Palo Alto VM, IPS configuration, virtual routers, and firewall HA experience
- Cisco firewall operations, troubleshooting, rule-set analysis, optimization, and remediation experience
- Firewall security assessment, reporting, load balancer security issue identification, and remediation experience
- Network traffic utilization and performance reporting experience
- Experience complying with DoD STIGs, DISA requirements, and JSIG policies
- Prior DISA, DISA CESO, or DISA mission partner experience
- Experience providing senior-level firewall architecture and cybersecurity operations recommendations
Am I A Good Fit?
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.
Success! Refresh the page to see how your skills align with this role.
The Company
What We Do
Novul Solutions is a veteran- and minority-owned IT services and consulting firm based in Arlington, Virginia, founded in 2020. It provides focused recruiting and staffing for RMF and cleared cybersecurity roles, RMF/NIST and CCRI compliance consulting, and Software Development as a Service, building secure, scalable, AI-powered applications for startups, enterprises, government agencies, federal contractors, and clients in cybersecurity, finance, logistics, and healthcare.
