Systems Administrator - Firewalls

Zachary Piper Solutions is currently seeking a Systems Administrator - Firewalls to support the a US NAVY IT Services Contract based in San Diego, CA . This position is a full-time role that will be 100% onsite . This role is critical in supporting and securing enterprise network infrastructure, cloud connectivity, and Zero Trust initiatives across mission-focused environments. As an Systems Administrator - Firewalls you will play a pivotal role in firewall management, network security architecture, cloud networking, systems engineering, and Zero Trust modernization efforts.

Key Responsibilities:

• Manage, configure, deploy, and audit perimeter security devices, including firewalls, intrusion prevention systems (IPS), and VPN solutions across on-premises and cloud environments.
• Recommend and implement network security performance improvements and architecture enhancements.
• Design and maintain network segmentation strategies utilizing VLANs, site firewalls, and security policies.
• Apply and maintain compliance with STIGs, IAVMs, CTO directives, and other DoD cybersecurity requirements.
• Configure and support Next Generation Firewall (NGFW) technologies, including Palo Alto Panorama and Pan-OS.
• Coordinate with NIWC Pacific teams to ensure proper device configurations and adherence to security standards.
• Support log aggregation, monitoring, and analysis using Splunk, Elastic, and related security platforms.
• Troubleshoot VPN client connectivity issues and validate firewall port exception requests.
• Implement and support secure connectivity solutions for AWS and Azure cloud environments.
• Research, evaluate, and deploy Zero Trust Network Access (ZTNA) technologies.
• Lead migration efforts from traditional network access methodologies to Zero Trust architectures.
• Maintain comprehensive technical documentation, diagrams, and configuration baselines.
• Collaborate with cross-functional engineering teams to ensure secure and resilient network operations.

Requirements:

• Bachelor's degree in Engineering, Information Technology, Computer Science, or a related technical discipline, or equivalent professional experience.
• 7+ years of professional systems engineering/administration experience.
• IAT Level II Certification (security+ or equivalent)
• Active Secret Clearance.
• Strong experience managing, configuring, and troubleshooting enterprise firewalls, IPS, and VPN technologies.
• Deep understanding of network segmentation, VLAN implementation, and firewall policy management.
• Experience implementing and documenting STIGs, IAVMs, and CTO requirements.
• Hands-on experience with Palo Alto NGFWs, Palo Alto Panorama, and Pan-OS.
• Experience utilizing Splunk, Elastic, or similar log aggregation and monitoring platforms.
• Familiarity with GlobalProtect log analysis and VPN troubleshooting.
• Strong understanding of AWS and Azure networking and secure connectivity methodologies.
• Experience implementing or supporting Zero Trust Network Access (ZTNA) initiatives.
• Excellent troubleshooting, communication, and documentation skills.

Compensation:

Salary Range: $130,000 - $140,000+ depending on experience

Full Benefits Include:

• Medical, Dental, and Vision Insurance
• 401(k)
• Paid Time Off (PTO)
• Sick Leave (where required by law)

This job opens for applications on 11/5/2026. Applications for this job will be accepted for at least 30 days from the posting date.

#LI-CB1

#LI-ONSITE

Keywords: Systems Engineer, Network Engineer, Palo Alto, Panorama, Pan-OS, NGFW, Firewall Administration, IPS, VPN, GlobalProtect, Splunk, Elastic, Zero Trust, ZTNA, AWS, Azure, Cloud Networking, Network Segmentation, VLAN, STIG, IAVM, CTO, Information Assurance, Cybersecurity, Enterprise Networking, Security Architecture, Network Security, Infrastructure Engineering, Cloud Security, Perimeter Security, Systems Integration, DoD, NIWC Pacific, Technical Documentation, Security Compliance, Log Analysis, Hybrid Infrastructure, Secure Connectivity, Mission Critical Systems, systems administrator, security+