Sr Network Security Engineer

Sr Network Security Engineer
On-Site | Reston, VA
Our client, a mission-focused defense program, is adding a capable firewall engineer to an on-site team based in Reston, VA. In this seat you'll stand up and run a sophisticated firewall estate PA-1400, PA-3400, and PA-5500 PQC-capable hardware administered through a Panorama M-700 carrying 1,000 device licenses, alongside VM Series instances powered by VM Flex Credits. Working shoulder to shoulder with the networking and security groups, you'll migrate, tune, and sustain a next-generation firewall footprint supporting a mission-critical DoD environment. If deep hands-on Palo Alto Networks expertise and enterprise-scale security are where you do your best work, we'd like to hear from you.
About the Opportunity
You'll own the deployment and ongoing care of a demanding, multi-appliance firewall environment inside a classified defense setting migrating off legacy platforms, optimizing policy, and keeping a next-generation footprint healthy and audit-ready.
Day-to-Day Scope

• Stand up, tune, and sustain the security operating stack within a demanding defense setting
• Lead the transition of firewall rulesets and objects off legacy platforms and onto current-generation appliances
• Roll out and administer the PA-3400, PA-5500, PA-1400, and PA-7000 hardware lines through a centralized Panorama M-700 console
• Oversee virtualized firewall instances built on VM Series, drawing against VM Flex Credits for capacity
• Build staging environments, confirm migration integrity, and schedule the move into production
• Advise on software version upgrades and help drive the creation of fresh threat and application signatures
• Open and push support tickets through the vendor's TAC channel toward resolution
• Map each stakeholder's infrastructure, needs, and forward-looking security plans, then match solutions accordingly
• Keep clear lines of communication open with clients, account teams, engineering, and fellow support staff
• Partner with the networking and security groups to build trust among the units affected by planned changes
• Occasional travel possible, subject to site needs

Experience We're Looking For

• Roughly seven to nine years spanning networking and security technologies
• At least five years across routing and switching fundamentals plus BGP, VXLAN, and SD-WAN
• Three-plus years directing security initiatives inside sizable, intricate infrastructures
• Deep practical command of the vendor's product family, covering the VM Series alongside the PA-3400 Series, PA-5500 Series, and PA-7000 Series
• Advanced familiarity operating Panorama together with log collectors
• Working command of GlobalProtect and NGFW
• Hands-on depth setting up, tuning, and running enterprise-grade firewall hardware
• Seasoned across LAN, WAN, and broader internetworking disciplines
• Firm grasp of application-layer behavior and internet protocols
• Polished writing and speaking skills, at ease briefing both technical colleagues and senior leadership
• Capacity to juggle concurrent workstreams while staying composed under deadline pressure
• Undergraduate degree in MIS, Computer Science, Business, or a comparable blend of schooling and field experience

Nice-to-Haves

• Prior work on classified networks with exposure to defense security frameworks
• Track record standing up sizable firewall migrations across government or enterprise programs
• Direct time on PQC-capable units such as the PA-1400 and PA-5500

Eligibility & Credentials

• Full-time, fully on-site presence is mandatory
• Candidates must live within commuting range of Reston, VA or be open to relocating
• An active TS-SCI with CI Polygraph must already be in place at the time of application
• Security+ is the baseline credential; SecurityX or CASP+ is accepted in its place
• CNSE certification nice to have
• CISSP, CCNA, or JNCIE-SEC are viewed favorably as additional credentials
• Sharp written and spoken communication paired with a careful eye for detail
• Comfortable operating both independently and as part of a team on mission-driven work
• Availability to travel when the assignment calls for it