Job Requirements
San Diego, CA
Secret Polygraph not specified
Senior Level Career (10+ yrs experience)
$130,000 - $160,000
Job Description
TECHEAD is celebrating over thirty-five years of incredible heritage, talent, and accomplishments! To learn more about TECHEAD, visit us at TECHEAD.com or on Glassdoor.
This role focuses on end-to-end engineering, maintenance, and policy enforcement utilizing Next-Generation Firewalls (NGFW)—primarily Palo Alto Networks platforms managed via Panorama. Operating in a high-security defense environment, the position requires deep technical expertise in IPsec VPNs, packet analysis, network segmentation, and zero trust security models to safeguard critical networks while ensuring full compliance with DoD security mandates.
Responsibilities
• Manage, deploy, configure, and troubleshoot enterprise Next-Generation Firewalls (Palo Alto NGFW, PAN-OS), Intrusion Prevention Systems (IPS), and IPsec VPN tunnels across on-premises and hybrid-cloud environments.
• Administer enterprise firewall configurations, policy updates, and system upgrades utilizing the Palo Alto Networks Panorama centralized management platform.
• Conduct deep packet inspection and network troubleshooting.
• Perform detailed log analysis across firewall traffic, threat intelligence logs, and GlobalProtect logs using SIEM tools such as Splunk and Elastic.
• Design and maintain robust network segmentation, VLAN architectures, and fine-grained firewall access control rules; support Zero Trust Network Access (ZTNA) initiatives and migrations.
• Implement and enforce DISA STIGs, IAVMs, and CTO directives; maintain rigorous technical documentation and verification artifacts for all boundary systems.
• Establish, monitor, and optimize secure connectivity pathways and perimeter controls within AWS and Microsoft Azure cloud environments.
Must Have Qualifications
• Bachelor’s degree in an Engineering discipline, or equivalent professional hands-on experience.
• 7+ years of professional systems/network security engineering experience.
• Active Secret security clearance.
• Active DoD IAT Level II certification required on day one (e.g., CompTIA Security+ CE)
• Deep hands-on proficiency in Palo Alto Firewalls, PAN-OS, Panorama, Global Protect, IPsec VPNs, and advanced packet-level troubleshooting.
• Practical experience with log aggregation, threat hunting, and log analysis utilizing Splunk, Elastic, or equivalent SIEM platforms.
TECHEAD's mission is to make our associates successful by placing them in the right environment so they can grow and prosper. How we treat and respond to our clients and employees is a reflection of who we are and makes us stand out from the rest. Keeping our business focused on building and maintaining relationships with our employees and clients is the key to our success. We won't strive for anything less.
TECHEAD provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, gender, sexual orientation, gender identity or expression, national origin, age, disability, genetic information, marital status, amnesty, or status as a covered veteran in accordance with applicable federal, state and local laws governing non-discrimination in employment in every location in which the company has facilities. This policy applies to all terms and conditions of employment, including, but not limited to, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation, and training.
For more information on TECHEAD please visit www.techead.com.
No second parties will be accepted.
This role focuses on end-to-end engineering, maintenance, and policy enforcement utilizing Next-Generation Firewalls (NGFW)—primarily Palo Alto Networks platforms managed via Panorama. Operating in a high-security defense environment, the position requires deep technical expertise in IPsec VPNs, packet analysis, network segmentation, and zero trust security models to safeguard critical networks while ensuring full compliance with DoD security mandates.
Responsibilities
• Manage, deploy, configure, and troubleshoot enterprise Next-Generation Firewalls (Palo Alto NGFW, PAN-OS), Intrusion Prevention Systems (IPS), and IPsec VPN tunnels across on-premises and hybrid-cloud environments.
• Administer enterprise firewall configurations, policy updates, and system upgrades utilizing the Palo Alto Networks Panorama centralized management platform.
• Conduct deep packet inspection and network troubleshooting.
• Perform detailed log analysis across firewall traffic, threat intelligence logs, and GlobalProtect logs using SIEM tools such as Splunk and Elastic.
• Design and maintain robust network segmentation, VLAN architectures, and fine-grained firewall access control rules; support Zero Trust Network Access (ZTNA) initiatives and migrations.
• Implement and enforce DISA STIGs, IAVMs, and CTO directives; maintain rigorous technical documentation and verification artifacts for all boundary systems.
• Establish, monitor, and optimize secure connectivity pathways and perimeter controls within AWS and Microsoft Azure cloud environments.
Must Have Qualifications
• Bachelor’s degree in an Engineering discipline, or equivalent professional hands-on experience.
• 7+ years of professional systems/network security engineering experience.
• Active Secret security clearance.
• Active DoD IAT Level II certification required on day one (e.g., CompTIA Security+ CE)
• Deep hands-on proficiency in Palo Alto Firewalls, PAN-OS, Panorama, Global Protect, IPsec VPNs, and advanced packet-level troubleshooting.
• Practical experience with log aggregation, threat hunting, and log analysis utilizing Splunk, Elastic, or equivalent SIEM platforms.
TECHEAD's mission is to make our associates successful by placing them in the right environment so they can grow and prosper. How we treat and respond to our clients and employees is a reflection of who we are and makes us stand out from the rest. Keeping our business focused on building and maintaining relationships with our employees and clients is the key to our success. We won't strive for anything less.
TECHEAD provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, gender, sexual orientation, gender identity or expression, national origin, age, disability, genetic information, marital status, amnesty, or status as a covered veteran in accordance with applicable federal, state and local laws governing non-discrimination in employment in every location in which the company has facilities. This policy applies to all terms and conditions of employment, including, but not limited to, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation, and training.
For more information on TECHEAD please visit www.techead.com.
No second parties will be accepted.
group id: 10202776