Next-Generation Firewall Engineer (Palo Alto Networks)

Job Description
ECS is seeking a Next Generation Firewall Engineer to work in a hybrid capacity; at home and onsite at our Fort Meade, MD. customer site.

ECS is a leading Cyber Security company that provides innovative solutions to our clients. We are seeking an experienced Next-Generation Firewall (NGFW) Administrator with a strong background in Palo Alto Networks to join our team. As a key member of our security team, you will be responsible for designing, implementing, and maintaining a robust NGFW infrastructure to protect our clients from cyber threats. The ideal candidate will have hands-on experience with Palo Alto Networks firewalls, including configuration, troubleshooting, and optimization.

Key Responsibilities:

• Design and implementation of NGFW infrastructure:
  • Design and implement NGFW policies, rules, and configurations to ensure network security and compliance
  • Collaborate with cross-functional teams to identify and address security gaps.
• Palo Alto Networks firewall administration:
  • Manage and configure Palo Alto Networks firewalls, including PAN-OS, Panamera and other related tools.
  • Troubleshoot and resolve firewall-related issues, including performance optimization and security incidents.
• Compliance and regulatory requirements:
  • Ensure compliance with relevant security regulations, standards, and best practices.
  • Conduct regular security audits and risk assessments to identify areas for improvement.
• Documentation and knowledge sharing:
  • Maintain accurate and up-to-date documentation of NGFW configurations and security policies.
  • Share knowledge and best practices with team members to promote a culture of security awareness and excellence.
• Collaboration and communication:
  • Collaborate with cross-functional teams, including network engineering, security, and operations.
  • Communicate effectively with stakeholders to ensure alignment and understanding of security policies and procedures.

Required Skills

• 2+ years of experience in a technical environment.
• Bachelor's degree in Computer Science or a related field.
• Security+ or equivalent DoD 8570 baseline certification.
• Must have an existing and active DOD Secret security clearance and be TS/SCI eligible.
• In-depth knowledge of Palo Alto Networks firewalls, including PAN-OS and related tools.
• Strong understanding of network security concepts, including firewall configuration, traffic analysis, and security incident response.
• Familiarity with security regulations, standards, and best practices, including NIST and DoD RMF.
• Excellent communication, collaboration, and problem-solving skills.
• Experience with network management tools, including network monitoring and logging.

Desired Skills

• DOD Top Secret/SCI clearance preferred.
• Advanced certifications: Palo Alto Networks Certified Network Security Engineer (PCNSE) or equivalent.
• SIEM and visualization tools experience: Experience with Splunk, Kafka, Prometheus, Grafana or Elastic preferred.
• Scripting and automation: Experience with scripting languages, such as Python or PowerShell, and automation tools, such as Ansible.