The Role
Engineers and sustains enterprise Palo Alto and Cisco firewalls and load balancers in a mission-critical DoD environment. Responsibilities include Tier 3 troubleshooting, firewall assessments, rule-set optimization, vulnerability remediation, high-availability configuration, performance reporting, technical architecture guidance, and compliance with DoD STIGs and cybersecurity policies. The role supports classified systems, COOP requirements, operational events, customer collaboration, and future cybersecurity strategy.
Summary Generated by Built In
Overview
We are seeking an experienced Firewall Engineer to support mission-critical network security operations within a high-tempo Department of Defense environment. This role focuses on the engineering, administration, assessment, optimization, and sustainment of enterprise firewall and load-balancing technologies supporting DISA CESO and mission partners.
The ideal candidate will bring extensive hands-on experience with Palo Alto and Cisco firewall technologies, including Panorama, high availability, IPSec VPNs, routing, IPS, virtual systems, AWS-based Palo Alto deployments, firewall assessments, rule-set optimization, and Tier 3 operational support.
Key Responsibilities
- Identify and remediate firewall and load balancer misconfigurations, conflicting rules, security gaps, performance issues, and other vulnerabilities while optimizing enterprise rule sets.
- Provide Tier 3 engineering and troubleshooting support to network operations and administration teams.
- Maintain firewall hardware and software components at vendor-supported versions and lifecycle levels.
- Support mission-critical Continuity of Operations (COOP) requirements and cybersecurity operations.
- Conduct at least two firewall assessments per month across CESO and customer devices; develop assessment reports and recommendations for security and performance improvements.
- Support development of monthly network-device performance, utilization, and traffic reports.
- Develop and participate in After Action Reports (AARs) following operational events, incidents, or exercises.
- Provide expert technical guidance regarding the administration, architecture, configuration, and operation of Palo Alto devices across the DISA CESO enterprise.
- Collaborate with customer stakeholders to establish objectives, technical roadmaps, architecture strategies, and design recommendations based on Palo Alto Networks technologies.
- Evaluate current DISA CESO technologies and operational processes to identify capability gaps and recommend future cybersecurity requirements and strategies.
- Participate in DISA CESO and mission-partner technical meetings, engineering discussions, and working groups.
- Ensure firewall configurations and operational practices comply with applicable DoD STIGs, DISA orders, JSIG policies, cybersecurity guidelines, and regulatory requirements.
Requirements
Required Qualifications
- Bachelor’s degree with 8+ years of directly relevant experience; additional relevant experience may be considered in lieu of a degree.
- Minimum 5+ years of hands-on Cisco and Palo Alto firewall experience supporting both engineering and operations/maintenance environments.
- Strong hands-on experience with Palo Alto technologies and best practices, including Panorama installation/administration, HA configuration, Templates and Template Stacks, policy creation and deployment, routing, IPSec site-to-site VPNs, AWS Palo Alto VMs, IPS configuration, Virtual Routers/Systems, and Firewall High Availability.
- Experience supporting highly operational, mission-critical environments involving classified systems.
- Active DoD Top Secret security clearance with eligibility to obtain and maintain TS/SCI.
- Willingness and ability to obtain and maintain a CI Polygraph.
- Current DoD 8570 IAT Level II Baseline Certification, such as Security+ CE, CySA+, CCNA Security, GICSP, GSEC, CND, SSCP, or equivalent.
- Strong troubleshooting, technical documentation, communication, and customer-facing skills.
Preferred Qualifications
- Prior experience supporting DISA and DISA mission partners, with familiarity in DISA CESO enterprise architecture, cybersecurity operations, and engineering processes.
Benefits
Core Benefits:
- Paid Time Off PTO):TEN (10) Paid days off & FIVE (5) Floating days off.
- Holidays: 11 Paid Holidays. Flex time can be utilized instead of holiday time usage.
- Payroll: Paid Bi-Monthly.
- 401(k): Partnered with the SECOND LARGEST Retirement plan provider in the U.S. Guaranteed 3% match. Eligibility – 21 years of age or older, after 3 months of employment
- Individual or company-wide performance and recognition awards (Quarterly)
Health Benefits:
- UNITED HEALTHCARE PPO, extensive national coverage.
- INCLUDES: Medical/Dental/Vision/HSA.
- Eligible on the first of the month, immediately after the start date.
- Submit the enrollment form within 30 days of your start date otherwise, you will have to wait until October for the new year enrollment.
Quality of Life Benefits:
- Training & Career Development Reimbursement of Tuition and training needed to support career development.
- $150 monthly reimbursement contribution paid monthly towards parking expenses.
- Receipts must be submitted by the close of business on the 25th of each month.
- Reimbursements will be paid on the first payroll AFTER reimbursements are submitted each month.
Special Benefits:
- Performance bonus – Project-based
- Yearly bonus – Company based
Skills Required
- Bachelor's degree with at least 8 years of directly relevant experience, or equivalent additional relevant experience in lieu of a degree
- At least 5 years of hands-on Cisco and Palo Alto firewall experience in engineering and operations/maintenance environments
- Hands-on experience with Palo Alto Panorama installation and administration, HA configuration, Templates and Template Stacks, policy deployment, routing, IPSec site-to-site VPNs, AWS Palo Alto VMs, IPS, Virtual Routers, and Virtual Systems
- Experience supporting highly operational, mission-critical environments involving classified systems
- Active DoD Top Secret security clearance with eligibility to obtain and maintain TS/SCI
- Willingness and ability to obtain and maintain a CI Polygraph
- Current DoD 8570 IAT Level II Baseline Certification, such as Security+ CE, CySA+, CCNA Security, GICSP, GSEC, CND, SSCP, or equivalent
- Strong troubleshooting, technical documentation, communication, and customer-facing skills
- Prior experience supporting DISA and DISA mission partners, including familiarity with DISA CESO architecture, cybersecurity operations, and engineering processes
Am I A Good Fit?
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.
Success! Refresh the page to see how your skills align with this role.
The Company
What We Do
Novul Solutions is a veteran- and minority-owned IT services and consulting firm based in Arlington, Virginia, founded in 2020. It provides focused recruiting and staffing for RMF and cleared cybersecurity roles, RMF/NIST and CCRI compliance consulting, and Software Development as a Service, building secure, scalable, AI-powered applications for startups, enterprises, government agencies, federal contractors, and clients in cybersecurity, finance, logistics, and healthcare.
