Next-Generation Firewall Engineer (Palo Alto Networks)

Job Description
ECS is seeking a Next Generation Firewall Engineer to work in a hybrid capacity; at home and onsite at our Fort Meade, MD. customer site.

ECS is a leading Cyber Security company that provides innovative solutions to our clients. We are seeking an experienced Next-Generation Firewall (NGFW) Administrator with a strong background in Palo Alto Networks to join our team. As a key member of our security team, you will be responsible for designing, implementing, and maintaining a robust NGFW infrastructure to protect our clients from cyber threats. The ideal candidate will have hands-on experience with Palo Alto Networks firewalls, including configuration, troubleshooting, and optimization.

Key Responsibilities:

• Design and implementation of NGFW infrastructure:
  • Design and implement NGFW policies, rules, and configurations to ensure network security and compliance
  • Collaborate with cross-functional teams to identify and address security gaps.
• Palo Alto Networks firewall administration:
  • Manage and configure Palo Alto Networks firewalls, including PAN-OS, Panamera and other related tools.
  • Troubleshoot and resolve firewall-related issues, including performance optimization and security incidents.
• Compliance and regulatory requirements:
  • Ensure compliance with relevant security regulations, standards, and best practices.
  • Conduct regular security audits and risk assessments to identify areas for improvement.
• Documentation and knowledge sharing:
  • Maintain accurate and up-to-date documentation of NGFW configurations and security policies.
  • Share knowledge and best practices with team members to promote a culture of security awareness and excellence.
• Collaboration and communication:
  • Collaborate with cross-functional teams, including network engineering, security, and operations.
  • Communicate effectively with stakeholders to ensure alignment and understanding of security policies and procedures.

Required Skills

• 2+ years of experience in a technical environment.
• Bachelor's degree in Computer Science or a related field.
• Security+ or equivalent DoD 8570 baseline certification.
• Must have an existing and active DOD Secret security clearance and be TS/SCI eligible.
• In-depth knowledge of Palo Alto Networks firewalls, including PAN-OS and related tools.
• Strong understanding of network security concepts, including firewall configuration, traffic analysis, and security incident response.
• Familiarity with security regulations, standards, and best practices, including NIST and DoD RMF.
• Excellent communication, collaboration, and problem-solving skills.
• Experience with network management tools, including network monitoring and logging.

Desired Skills

• DOD Top Secret/SCI clearance preferred.
• Advanced certifications: Palo Alto Networks Certified Network Security Engineer (PCNSE) or equivalent.
• SIEM and visualization tools experience: Experience with Splunk, Kafka, Prometheus, Grafana or Elastic preferred.
• Scripting and automation: Experience with scripting languages, such as Python or PowerShell, and automation tools, such as Ansible.

#ECS1

ECS is an equal opportunity employer and does not discriminate or allow discrimination on the basis any characteristic protected by law. All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, or local jurisdiction law.

ECS is a leading mid-sized provider of technology services to the United States Federal Government. We are focused on people, values and purpose. Every day, our 3300+ employees focus on providing their technical talent to support the Federal Agencies and Departments of the US Government to serve, protect and defend the American People.