Palo Alto Firewall Engineer
Springfield, VA
Experience: 0
Category: Information Technology
Contractor Work Model: Onsite
Brand: System One
Compensation Range: 80.00 Per Hour
Job ID: 379042
Date Posted: 08/25/2026
Shortcut: http://jobs.systemone.com/5u7p0b
Job Title: Palo Alto Firewall Engineer
Location: Springfield, VA
Type: Contract To Hire
Compensation: $80/hr. W2 Benefits available
Conversion Salary: $150,000 annually plus benefits
Work Model: Onsite
Security Clearance: Active TS/SCI clearance and the ability to successfully pass and maintain a U.S. Government polygraph
Responsibilities
- Lead the design, requirements analysis, testing, integration, and implementation of secure network architectures centered on the Palo Alto Networks ecosystem.
- Serve as the lead technical authority for administering, configuring, and troubleshooting Palo Alto Networks Next-Generation Firewalls (NGFWs) across a hybrid enterprise environment.
- Engineer and implement solutions for customer Change Requests (CRQs); assess impacts on enterprise transport and security activities and provide technically sound recommendations.
- Serve as the technical representative for assigned projects and coordinate issues with the appropriate owners, organizations, contract leadership, and customer leadership.
- Manage the full lifecycle of Palo Alto hardware and software, including complex hardware refreshes, PAN-OS upgrades, legacy-platform sustainment, physical troubleshooting, and line-card replacements.
- Develop, oversee, and maintain configuration-management processes, network architecture diagrams, technical documentation, integration and test plans, and Standard Operating Procedures (SOPs) for Palo Alto security platforms.
- Use Panorama for centralized policy management, including templates, device groups, inheritance, and consistent configuration across a diverse fleet of physical and virtual firewalls.
- Configure and maintain advanced security capabilities and profiles, including App-ID, User-ID, Content-ID, SSL Decryption, WildFire, NAT, IPSec VPNs, and threat prevention.
- Oversee security-incident reporting, documentation, investigation, and corrective-action development.
- Act as a liaison to contract/customer management and the government Designated Approving Authority (DAA) regarding network-security status, policies, procedures, and risks.
- Evaluate and report on new and emerging network-security and communications technologies to improve network capacity, performance, reliability, standardization, and security.
- Provide mentorship and technical oversight to junior engineers and serve as an escalation point for complex troubleshooting.
- Follow all customer network-security processes and procedures, maintain compliance with Government and QA standards, and ensure service-performance indicators are met or exceeded.
Requirements
- Security Clearance: Active TS/SCI clearance and the ability to successfully pass and maintain a U.S. Government polygraph.
- A minimum of 7+ years of hands-on experience administering, configuring, and troubleshooting Palo Alto Networks NGFWs in large-scale enterprise/global environments.
- Active Palo Alto Networks Certified Network Security Engineer (PCNSE) certification.
- DoD 8140.01 and DoD 8570.01-M IAT Level II compliance (for example, Security+ CE).
- Ability to obtain and maintain a CSSP Infrastructure Support certification within 120 days of the start date.
- Deep practical knowledge of legacy Gen 2/Gen 3 Palo Alto hardware, including PA-3000 and PA-5000 series platforms, legacy CLI, hardware troubleshooting, and line-card replacements.
- Experience deploying and managing modern PAN-OS architectures, including Prisma Access (SASE), Prisma SD-WAN, and VM-Series virtual firewalls in cloud environments such as AWS, Azure, GCP, or private-cloud.
- Proven expertise with Panorama for centralized policy management, template/device-group inheritance, and configuration deployment across a hybrid firewall fleet.
- Advanced understanding of BGP, OSPF, IPSec VPNs, NAT, TLS/SSL, mutual TLS (mTLS), HTTP, SAML, OAuth, OCSP revocation, DoD PKI, Kerberos, LDAP, and Active Directory.
- Experience with F5 technologies, including APM, AFM, and SSL Orchestrator (SSLO), and troubleshooting TLS/SSL handshake/connection issues.
- Strong network design, engineering, implementation, and troubleshooting skills, including ROM equipment lists and cost estimates.
- Knowledge of DISA and Intelligence Community security standards and requirements.
- Excellent interpersonal skills and technical judgment with the ability to work independently and support weekend/evening work if needed.
- Bachelor’s degree in IT, Cybersecurity, Computer Science, or a related field, with additional relevant experience considered in lieu of a degree.
Desired Qualifications
- Active Palo Alto Networks Certified Network Security Consultant (PCNSC) or Prisma Certified SASE Professional (PCSAE).
- F5 Networks Certified Technology Specialist (CTS).
- Cisco CCNP, CCVP, CCNA, CCDP, or equivalent.
- ITIL v3 Foundations and/or ISC2 CISSP Certification.
- Proficiency in Python and automation tools such as Ansible, Terraform, or Palo Alto XML/REST APIs.
- Hands-on experience with Cortex XDR or Cortex XSOAR.
- Experience with Palo Alto Networks Expedition for migration and rule consolidation.
- Knowledge of Zero Trust Network Access (ZTNA) architectures and additional security platforms (e.g., Juniper SRX, Cisco FTD/ASA).
- Master’s degree in related fields is a plus.
System One, and its subsidiaries including Joulé and Mountain Ltd., are leaders in delivering outsourced services and workforce solutions across North America. We help clients get work done more efficiently and economically, without compromising quality. System One not only serves as a valued partner for our clients, but we offer eligible employees health and welfare benefits coverage options including medical, dental, vision, spending accounts, life insurance, voluntary plans, as well as participation in a 401(k) plan.
System One is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, age, national origin, disability, family care or medical leave status, genetic information, veteran status, marital status, or any other characteristic protected by applicable federal, state, or local law.
#M-MM1
#LI-MM1
Ref: #855-IT Baltimore
-
Cloud Network Engineer
Greenbelt, Maryland
Job Title: Cloud Network Engineer Location: REMOTE Clearance: Must be eligible to obtain a US Public Trust Contact: Crystal.dinnocenti@systemone.com System One is seeking to hire a Cloud Network Engineer to support a major, large-scale, multi-cloud ent...
Date Posted: 07/07/2026 Recommended
-
Network Engineer
Washington DC , District Of Columbia
Job Title: Network Engineer Location: Washington, D.C. Type: Contract Model: Hybrid – Onsite and Remote Security Clearance: Active - DOD Responsibilities: Implement DISA Secure Cloud Computing Architecture (SCCA) reference design experience Apply AWS n...
Date Posted: 08/10/2026 Recommended
-
Senior Network Engineer w/CCNP- Top Secret Clearance
Washington, DC
Senior Network Engineer- CCNP Active Top Secret/ SCI Clearance Required Per Federal Contract U.S. Citizenship Required Direct Permanent Hire Only 100% Onsite in Washington DC Position Overview We are seeking a Senior Network Engineer to support a high-...
Date Posted: 08/17/2026 Recommended
-
Prisma Access Engineer
Pittsburgh, PA
Job Title: Prisma Access Engineer Location: Remote Type: Contract Responsibilities: Lead and support Prisma Access deployments and configurations Ensure secure connectivity for remote users and branch locations Troubleshoot and optimize cloud-delivered...
Date Posted: 06/19/2026 Recommended
-
Prisma SD WAN Engineer
Pittsburgh, PA
Job Title: Prisma SD WAN Engineer Location: Remote Type: Contract Responsibilities Serve as the subject matter expert for Prisma SD-WAN (ION / CloudGenix) Support and enhance one of the largest SD-WAN deployments in a multi-tenant environment Drive con...
Date Posted: 06/19/2026 Recommended
-
Network Engineer I
Columbia, MD
Network Engineer I Hybrid – 3 days a week on-site, Columbia, MD 6-month contract (potential for hire) Hourly Rate: $53/hr. W2. Benefits available Conversion Salary: $100,000 annually, plus benefits Background Check Required Position Description: The Ne...
Date Posted: 08/25/2026 Recommended
-
Network Engineer - Palo Alto NGFW SME (Migration & Infrastructure)
Princeton, New Jersey
Job Title: Network Engineer - Palo Alto NGFW SME (Migration & Infrastructure) Location: Princeton, NJ Type: Contract -Hybrid(onsite and remote) Responsibilities Lead the migration to PA-7500 chassis (HA clustering) managed via Panorama (M-700). Perform...
Date Posted: 05/31/2026 Recommended
-
Network Engineer
Pittsburgh , Pennsylvania
Job Title: Network Engineer Location: Salt Lake City UT Type: Contract to Hire Work Model: Onsite – onsite Hours: 40.0 Security Clearance: Not specified Responsibilities • Design, implement, and maintain scalable, secure, resilient, and highly availabl...
Date Posted: 08/25/2026 Recommended
-
L3 Network Support Engineer
Annapolis, MD
Job Title: Network & Systems Administrator Location: Annapolis, MD Work Model: On-Site Hours: 40.0 Job Summary: Based in Maryland, you will be a key member of a 24/7/365 operations team responsible for supporting highly available, mission-critical comm...
Date Posted: 08/13/2026 Recommended
-
Cloud Security Architect
Princeton , New Jersey
Job Title: Cloud Security Architect Location: Princeton, NJ(Hybrid) Type: Contract Responsibilities: Lead architecture and implementation of Palo Alto Strata Cloud Manager (SCM) Design secure cloud network architectures across AWS/Azure/GCP Define stan...
Date Posted: 06/08/2026 Recommended
-
Process Control Network and Windows System Administrator
New Orleans, Louisiana
Job Title: Process Control Network and Windows System Administrator ) Duration : Contract to Hire Location : New Orleans, Louisiana Work Mode : Hybrid Position Description The Process Control Network/Windows Systems Administrator is a technical expert ...
Date Posted: 08/24/2026 Recommended
-
Cloud Security Architect
New York City , New York
Job Title: Public Cloud Security Architect Location: New York City, NY Type: Contract -Onsite Responsibilities: Lead architecture and implementation of Palo Alto Strata Cloud Manager (SCM) Design secure cloud network architectures across AWS/Azure/GCP ...
Date Posted: 06/08/2026 Recommended
-
ServiceNow Developer
Fort Meade, Maryland
Job Title: ServiceNow Developer Location: Fort Meade, Maryland Type: Contract Contractor Work Model: Onsite – onsite Security Clearance: Must hold an active DoD Secret clearance and obtain Security+ certification within 14 days of hire. Responsibilitie...
Date Posted: 06/09/2026 Recommended
-
Senior Cloud Security Specialist (AWS)
Washington, DC
Senior Cloud Security Specialist Washington, DC – 100% Onsite Per Federal contract U.S. citizenship is required Must be able to obtain Public Trust clearance W2 or C2C Application Deadline: Sept 15th We are seeking a Senior Cloud Security Specialist to...
Date Posted: 08/24/2026 Recommended
-
Enterprise Endpoint Engineer (Intune Experience)
Indianapolis, IN
Job Title: Enterprise Endpoint Engineer (Intune Experience) Location: Indianapolis, IN Type: Contract Compensation: $52.85 - $60.00 Work Model: Onsite Hours: 40.0 Security Clearance: Ability to obtain public trust clearance Overview This is a hands-on ...
Date Posted: 07/30/2026 Recommended
-
Azure Firewall Engineer
Vienna, VA
Job Title: Azure Firewall Engineer Type: Contract Work Model: Remote – offsite Responsibilities Manage Checkpoint and Palo Alto firewalls within an IaaS environment, including configuring and maintaining security policies and NAT rules. Oversee virtual...
Date Posted: 08/14/2026 Recommended
-
IT Technician
WILSON, KS
Mountain, Ltd. has an opening for an IT Technician in the Wilson, KS area! Key Responsibilities and Job Tasks 1. System Administration Perform system monitoring, verifying the integrity and availability of all hardware, server resources, systems, and c...
Date Posted: 06/03/2026 Recommended
-
Network Engineer
Salt Lake City, Utah
Job Title: Network Engineer Duration : Contract to Hire Location : Salt Lake City/Midvale, UT Work Mode : 5 Days Onsite Job Description Network Engineer – Enterprise Network Modernization Systemone is seeking an experienced Network Engineer to help des...
Date Posted: 08/25/2026 Recommended
-
Mid or Senior Level Network Engineer
Lorton, VA
Job Title: Mid or Senior Level Network Engineer Location: Lorton VA Type: Contract To Hire Compensation: $77.75 - $120.00/hr. (Depending on years of experience) Work Model: Hybrid Hours: 40.0 Security Clearance: Active TS with SCI eligibility Overview ...
Date Posted: 08/18/2026 Recommended
-
Senior VMware & Data Center Engineer
alexandria, VA
Job Title: Senior VMware & Data Center Engineer Location: Washington, DC Type: Direct Hire Contractor Work Model: Onsite Hours: 40.0 hours per week Security Clearance: TS/SCI Responsibilities Design and sustain mission-critical data center environments...
Date Posted: 07/21/2026 Recommended
-
Cloud Engineer (onsite)
Washington, DC
Cloud Engineer Washington, DC – 100% Onsite Per Federal contract U.S. Citizenship or Green Card is Required Must be able to pass enhanced background screen (criminal, financial, drug) for Public Trust clearance W-2 or C2C Application Deadline: 8/28/202...
Date Posted: 08/11/2026 Recommended
-
ServiceNow ITAM Consultant (Secret Clearance)
Arlington, Wisconsin
ServiceNow ITAM Consultant 100% Remote Secret Clearance Responsibilities: Our client is seeking a highly skilled and experienced ServiceNow Technical Consultant for HAM, SAM, CMDB, and Discovery, responsible for designing, configuring, and developing S...
Date Posted: 08/11/2026 Recommended
-
Senior Instrument & Controls Technician
Rochester, NY
Job Title: Senior Instrument & Controls Technician Location: Rochester, NY Type: Direct Hire Compensation: Work Model: Onsite – onsite Responsibilities Coordinate work of the I&C team to assure plant needs are met Install, repair, maintain, and calibra...
Date Posted: 08/18/2026 Recommended
-
Cyber Security Engineer III
St. Louis, Missouri
Job Title: Cyber Security Engineer Location: St. Louis, MO Work Model: Onsite Position Type: 6 Month Contract to Hire Clearance Requirement: Active TS/SCI required and ability to obtain poly Job Summary We are seeking a Cyber Security Engineer to suppo...
Date Posted: 06/04/2026 Recommended
-
Software Developer (CNO)
Fort Meade, Maryland
Job Title: Software Developer (CNO) Location: Fort Meade, Maryland Type: Contract To Hire Work Model: Onsite Security Clearance: TS/SCI CI Poly Contact: Crystal.dinnocenti@systemone.com RESPONSIBILITIES Lead the designing, developing, documenting, test...
Date Posted: 07/01/2026 Recommended
-
Automation Lead
Dallas , Texas
Job Title: Automation Lead Location: Dallas, Texas, United States Type: Direct Hire Responsibilities Lead the development and maintenance of automation pipelines for vulnerability management, including OS patching, image updates, SSL/TLS configurations...
Date Posted: 08/12/2026 Recommended
-
Database Management IV
Washington, DC
Job Title: Database Management IV Location: Washington, DC Type: Contract Compensation: $57.52 - $66.00 per hour Work Model: Onsite Hours: 40.0 Security Clearance: Public Trust Responsibilities Install, configure, and maintain enterprise-level PostgreS...
Date Posted: 06/22/2026 Recommended
-
Cybersecurity Engineer ( W2 direct hire, no C2C )
Atlanta, Georgia
*** This is a direct hire role ( W2 salaried, permanent, full-time position ) in our own IT department *** NO C2C candidates, NO 3rd parties, NO visa sponsorship available, NO green card sponsorship available, NO candidates with temporary work authoriz...
Date Posted: 08/19/2026 Recommended
-
Cybersecurity Engineer ( W2 direct hire, no C2C )
Alpharetta, Georgia
*** This is a direct hire role ( W2 salaried, permanent, full-time position ) in our own IT department *** NO C2C candidates, NO 3rd parties, NO visa sponsorship available, NO green card sponsorship available, NO candidates with temporary work authoriz...
Date Posted: 08/19/2026 Recommended
-
Cybersecurity Engineer ( W2 direct hire, no C2C )
Pittsburgh, Pennsylvania
*** This is a direct hire role *** NO C2C candidates, NO 3rd parties For immediate consideration, please connect with me on LinkedIn at https://www.linkedin.com/in/dpotapenko and then email your resume, current location, availability, and compensation ...
Date Posted: 08/18/2026 Recommended