Palo Alto Firewall Engineer
Springfield, VA
Experience: 0
Category: Information Technology
Contractor Work Model: Onsite
Brand: System One
Compensation Range: 80.00 Per Hour
Job ID: 379042
Date Posted: 08/25/2026
Shortcut: http://jobs.systemone.com/u7rAI2
Job Title: Palo Alto Firewall Engineer
Location: Springfield, VA
Type: Contract To Hire
Compensation: $80/hr. W2 Benefits available
Conversion Salary: $150,000 annually plus benefits
Work Model: Onsite
Security Clearance: Active TS/SCI clearance and the ability to successfully pass and maintain a U.S. Government polygraph
Responsibilities
- Lead the design, requirements analysis, testing, integration, and implementation of secure network architectures centered on the Palo Alto Networks ecosystem.
- Serve as the lead technical authority for administering, configuring, and troubleshooting Palo Alto Networks Next-Generation Firewalls (NGFWs) across a hybrid enterprise environment.
- Engineer and implement solutions for customer Change Requests (CRQs); assess impacts on enterprise transport and security activities and provide technically sound recommendations.
- Serve as the technical representative for assigned projects and coordinate issues with the appropriate owners, organizations, contract leadership, and customer leadership.
- Manage the full lifecycle of Palo Alto hardware and software, including complex hardware refreshes, PAN-OS upgrades, legacy-platform sustainment, physical troubleshooting, and line-card replacements.
- Develop, oversee, and maintain configuration-management processes, network architecture diagrams, technical documentation, integration and test plans, and Standard Operating Procedures (SOPs) for Palo Alto security platforms.
- Use Panorama for centralized policy management, including templates, device groups, inheritance, and consistent configuration across a diverse fleet of physical and virtual firewalls.
- Configure and maintain advanced security capabilities and profiles, including App-ID, User-ID, Content-ID, SSL Decryption, WildFire, NAT, IPSec VPNs, and threat prevention.
- Oversee security-incident reporting, documentation, investigation, and corrective-action development.
- Act as a liaison to contract/customer management and the government Designated Approving Authority (DAA) regarding network-security status, policies, procedures, and risks.
- Evaluate and report on new and emerging network-security and communications technologies to improve network capacity, performance, reliability, standardization, and security.
- Provide mentorship and technical oversight to junior engineers and serve as an escalation point for complex troubleshooting.
- Follow all customer network-security processes and procedures, maintain compliance with Government and QA standards, and ensure service-performance indicators are met or exceeded.
Requirements
- Security Clearance: Active TS/SCI clearance and the ability to successfully pass and maintain a U.S. Government polygraph.
- A minimum of 7+ years of hands-on experience administering, configuring, and troubleshooting Palo Alto Networks NGFWs in large-scale enterprise/global environments.
- Active Palo Alto Networks Certified Network Security Engineer (PCNSE) certification.
- DoD 8140.01 and DoD 8570.01-M IAT Level II compliance (for example, Security+ CE).
- Ability to obtain and maintain a CSSP Infrastructure Support certification within 120 days of the start date.
- Deep practical knowledge of legacy Gen 2/Gen 3 Palo Alto hardware, including PA-3000 and PA-5000 series platforms, legacy CLI, hardware troubleshooting, and line-card replacements.
- Experience deploying and managing modern PAN-OS architectures, including Prisma Access (SASE), Prisma SD-WAN, and VM-Series virtual firewalls in cloud environments such as AWS, Azure, GCP, or private-cloud.
- Proven expertise with Panorama for centralized policy management, template/device-group inheritance, and configuration deployment across a hybrid firewall fleet.
- Advanced understanding of BGP, OSPF, IPSec VPNs, NAT, TLS/SSL, mutual TLS (mTLS), HTTP, SAML, OAuth, OCSP revocation, DoD PKI, Kerberos, LDAP, and Active Directory.
- Experience with F5 technologies, including APM, AFM, and SSL Orchestrator (SSLO), and troubleshooting TLS/SSL handshake/connection issues.
- Strong network design, engineering, implementation, and troubleshooting skills, including ROM equipment lists and cost estimates.
- Knowledge of DISA and Intelligence Community security standards and requirements.
- Excellent interpersonal skills and technical judgment with the ability to work independently and support weekend/evening work if needed.
- Bachelor’s degree in IT, Cybersecurity, Computer Science, or a related field, with additional relevant experience considered in lieu of a degree.
Desired Qualifications
- Active Palo Alto Networks Certified Network Security Consultant (PCNSC) or Prisma Certified SASE Professional (PCSAE).
- F5 Networks Certified Technology Specialist (CTS).
- Cisco CCNP, CCVP, CCNA, CCDP, or equivalent.
- ITIL v3 Foundations and/or ISC2 CISSP Certification.
- Proficiency in Python and automation tools such as Ansible, Terraform, or Palo Alto XML/REST APIs.
- Hands-on experience with Cortex XDR or Cortex XSOAR.
- Experience with Palo Alto Networks Expedition for migration and rule consolidation.
- Knowledge of Zero Trust Network Access (ZTNA) architectures and additional security platforms (e.g., Juniper SRX, Cisco FTD/ASA).
- Master’s degree in related fields is a plus.
System One, and its subsidiaries including Joulé and Mountain Ltd., are leaders in delivering outsourced services and workforce solutions across North America. We help clients get work done more efficiently and economically, without compromising quality. System One not only serves as a valued partner for our clients, but we offer eligible employees health and welfare benefits coverage options including medical, dental, vision, spending accounts, life insurance, voluntary plans, as well as participation in a 401(k) plan.
System One is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, age, national origin, disability, family care or medical leave status, genetic information, veteran status, marital status, or any other characteristic protected by applicable federal, state, or local law.
#M-MM1
#LI-MM1
Ref: #855-IT Baltimore
-
Senior F5 Network Engineer
Knoxville, Tennessee
Job Title - Senior F5 Network Engineer Locations: Lafayette, LA | Knoxville, TN | Birmingham, AL | Columbia, SC Work Arrangement: Hybrid Employment Type: Full time Experience Required: 5+ years Position Overview We are seeking a Senior F5 Network Engin...
Date Posted: 08/28/2026 Recommended
-
Senior F5 Network Engineer
Columbia, South Carolina
Job Title - Senior F5 Network Engineer Locations: Lafayette, LA | Knoxville, TN | Birmingham, AL | Columbia, SC Work Arrangement: Hybrid Employment Type: Full time Experience Required: 5+ years Position Overview We are seeking a Senior F5 Network Engin...
Date Posted: 08/28/2026 Recommended
-
Senior F5 Network Engineer
Birmingham, Alabama
Job Title - Senior F5 Network Engineer Locations: Lafayette, LA | Knoxville, TN | Birmingham, AL | Columbia, SC Work Arrangement: Hybrid Employment Type: Full time Experience Required: 5+ years Position Overview We are seeking a Senior F5 Network Engin...
Date Posted: 08/28/2026 Recommended
-
Senior F5 Network Engineer
Lafayette, Louisiana
Job Title: Senior F5 Network Engineer Duration: Full-Time Hire / Permanent Role Location: Lafayette, LA or Knoxville, TN or Columbia,SC or Birmingham, AL Work Mode: Hybrid - 3days onsite – 2 days remote Responsibilities Serve as a senior F5 BIG IP subj...
Date Posted: 10/22/2026 Recommended
-
UAM Everfox Tool Engineer - Senior Level
Lorton, Virginia
Job Title: UAM Everfox Tool Engineer - Senior Level Location: Lorton, VA Type: Contract Compensation: $96-100/hr W2 Work Model: On-Site Security Clearance: Active Top Secret government clearance; ability to obtain DHS EOD SCI Responsibilities Support t...
Date Posted: 11/05/2026 Recommended
-
UAM Everfox Tool Engineer - Mid-level
Lorton, Virginia
Job Title: UAM Everfox Tool Engineer - Mid-level Location: Lorton, VA Type: Contract Compensation: $70-77/hr W2 Work Model: On-Site Hours: 5 days a week onsite in Lorton VA Security Clearance: Active Top Secret government clearance; ability to obtain D...
Date Posted: 11/04/2026 Recommended
-
Network Engineer I
Columbia, MD
Network Engineer I Hybrid – 3 days a week on-site, Columbia, MD 6-month contract (potential for hire) Hourly Rate: $53/hr. W2. Benefits available Conversion Salary: $100,000 annually, plus benefits Background Check Required Position Description: The Ne...
Date Posted: 08/25/2026 Recommended
-
Network Engineer III – SATCOM Engineer
Bluemont, VA
Network Engineer III – SATCOM Engineer Contract-to-Hire Bluemont, VA (20135)- On-Site Supporting an Intelligence Community customer Clearance: Active TS SCI CI Poly Hourly Rate: $80/hr. Benefits Available Annual Salary: $150,000 range, plus benefits Ab...
Date Posted: 09/22/2026 Recommended
-
Space Force - Systems Network Engineer
Scottsdale, Arizona
Job Title: Space Force - Systems Network Engineer Location: Scottsdale, AZ Type: Contract Compensation: $70-80 Work Model: Hybrid Security Clearance: Department of Defense Secret security clearance is preferred at time of hire. Candidates must be able ...
Date Posted: 10/30/2026 Recommended
-
DNS SME / Sr. Network Engineer
Fort Meade, Maryland
Job Title: Senior Network Engineer / DNS SME Location: Mainly REMOTE (some onsite required for classified and high-side activities – but you can report to multiple locations) Employment Type: Contract-to-Hire Clearance: Must be eligible to obtain the r...
Date Posted: 10/26/2026 Recommended
-
Cyber Incident Response Specialist (Top Secret)
Bedford, Massachusetts
Cyber Incident Response Specialist Hanscom AFB, MA Top Secret Clearance required We are seeking a Cyber Incident Response Specialist to investigate and respond to cybersecurity incidents. This hands-on role will work with security and IT teams to conta...
Date Posted: 11/05/2026 Recommended
-
Sr. Network Engineer
Lorton, Virginia
Job Title: Sr. Network Engineer Location: Lorton, VA (onsite) Type: Contract To Hire Compensation: $110.00 per hour Security Clearance: TS/SCI Responsibilities Support, sustain, design and evolve the network enterprise of the Insider Threat Program (IT...
Date Posted: 10/22/2026 Recommended
-
Network Engineer
Salt Lake City, Utah
Job Title: Network Engineer Location: Salt Lake City UT Type: Contract to Hire Work Model: Onsite – onsite Hours: 40.0 Security Clearance: Not specified Responsibilities • Design, implement, and maintain scalable, secure, resilient, and highly availabl...
Date Posted: 08/26/2026 Recommended
-
L3 Network Support Engineer
Annapolis, MD
Job Title: Network & Systems Administrator Location: Annapolis, MD Work Model: On-Site Hours: 40.0 Job Summary: Based in Maryland, you will be a key member of a 24/7/365 operations team responsible for supporting highly available, mission-critical comm...
Date Posted: 08/13/2026 Recommended
-
Network Data Comm Analyst
Stennis Space Center, Mississippi
Job Title: Network Data Comm Analyst Location: Stennis Space Center, Mississippi Type: 1 + year Contract Work Model: Onsite Security Clearance: Top Secret (Must be able to obtain SCI) Our client has continuing requirement for Homeland Enterprise Inform...
Date Posted: 11/05/2026 Recommended
-
Senior ServiceNow Developers (on-site)
Belleville, Illinois
Job Title: Senior ServiceNow Developers Location: Fort Meade, MD, Ogden, UT, or Scott AFB, IL Type: Contract Compensation: $65/hr. W2 Work Model: Onsite – onsite Security Clearance: Active Secret Clearance or higher (or eligible for Secret clearance) O...
Date Posted: 10/07/2026 Recommended
-
Senior ServiceNow Developers (on-site)
Fort Meade, Maryland
Job Title: Senior ServiceNow Developers Location: Fort Meade, MD, Ogden, UT, or Scott AFB, IL Type: Contract Compensation: $65/hr. W2 Work Model: Onsite – onsite Security Clearance: Active Secret Clearance or higher (or eligible for Secret clearance) O...
Date Posted: 10/07/2026 Recommended
-
Senior ServiceNow Developers (on-site)
Ogden , Utah
Job Title: Senior ServiceNow Developers Location: Fort Meade, MD, Ogden, UT, or Scott AFB, IL Type: Contract Compensation: $65/hr. W2 Work Model: Onsite – onsite Security Clearance: Active Secret Clearance or higher (or eligible for Secret clearance) O...
Date Posted: 10/07/2026 Recommended
-
Senior PingDirectory Engineer
Lafayette, Louisiana
Job Title: Senior PingDirectory Engineer Locations: Lafayette, LA | Knoxville, TN | Birmingham, AL | Columbia, SC Type: Direct Hire Work Model: Onsite – onsite Hours: 40.0 Security Clearance: (not specified) Overview Leave placeholder text here for rec...
Date Posted: 09/23/2026 Recommended
-
Senior Cloud Security Specialist (AWS)
Washington, DC
Senior Cloud Security Specialist Washington, DC – 100% Onsite Per Federal contract U.S. citizenship is required Must be able to obtain Public Trust clearance W2 or C2C Application Deadline: Sept 15th We are seeking a Senior Cloud Security Specialist to...
Date Posted: 08/24/2026 Recommended
-
Process Control Network and Windows System Administrator
New Orleans, Pennsylvania
Job Title: Process Control Network and Windows System Administrator Location: New Orleans, Louisiana Type: Permanent Full Time Hours: 40.0 Security Clearance: Must be able to pass Helicopter Underwater Escape Training (HUET) certification and obtain a ...
Date Posted: 08/26/2026 Recommended
-
Site Administrator
Oklahoma City, Oklahoma
Job Title: Site Administrator Location: Oklahoma City, Oklahoma Type: Direct Hire Compensation: $65000 - $80000 annually Contractor Work Model: Onsite Hours: Mon-Fri, 8:00 am - 5:00 pm, some evening and weekends required System One has partnered with a...
Date Posted: 11/05/2026 Recommended
-
Information Systems Security Engineer (ISSE)
Hanscom AFB,, MA
Job Title: Information Systems Security Engineer (ISSE) Location: Hanscom AFB, MA Type: Contract To Hire Compensation: $180,000.00 - $195,000.00 Work Model: Onsite – onsite Hours: 40 hrs a week. Security Clearance: Must have active Top Secret clearance...
Date Posted: 09/23/2026 Recommended
-
Network Engineer – Enterprise Network Modernization
Salt Lake City, Utah
Job Title: Network Engineer – Enterprise Network Modernization Location: Salt Lake City, Utah Type: Contract To Hire Work Model: Onsite Cisco Meraki experience is must Responsibilities Design, implement, and maintain scalable, secure, resilient, and hi...
Date Posted: 11/04/2026 Recommended
-
Senior Software Engineer
Huntsville, AL
Senior Software Engineer (Onsite) — Huntsville, AL Type: Contract-to-hire Work schedule: 40 hours/week Security clearance: Active Secret clearance or ability to obtain Pay rate: $117-125/HR Overview We’re hiring a Senior Software Engineer to lead and b...
Date Posted: 09/29/2026 Recommended
-
Network Engineer V (IPv6 SME)
Alexandria, VA
Job Title: Network Engineer V (IPv6 SME) Location: Alexandria, VA Type: Contract Compensation: $72-78/hr W-2 Work Model: Onsite Hours: Part-time - 20 hours per week. Security Clearance: US Citizen - Must be able to obtain a Public Trust Clearance Respo...
Date Posted: 10/26/2026 Recommended
-
Deskside Support Technician (Tier II))
Washington, DC
Job Title: Deskside Support Technician (Tier II)) Location: Washington, DC Type: Contract to Hire Compensation: $42/HR Work Model: Onsite Hours: Washington, DC (On-site 5 days a week) Security Clearance: Active Secret clearance Position summary We’re s...
Date Posted: 11/05/2026 Recommended
-
Senior Network Engineer (CCIE, Secret Clearance required)
Washington, District Of Columbia
Senior Network Engineer (CCIE) Washington DC - onsite Secret Clearance is required to start The Senior Network Engineer (CCIE) leads hands-on assessment, troubleshooting, remediation, and validation of enterprise network services supporting video and o...
Date Posted: 11/05/2026 Recommended
-
Sr Network Engineer
Washington, DC
Job Title: Sr Network Engineer Location: Washington, DC Type: Contract / Onsite Compensation range: $100/hr (B2B) / up to $160,000/annual (W2) Responsibilities • Provide senior-level network engineering support, including advanced data and VoIP design,...
Date Posted: 09/28/2026 Recommended
-
Full Stack C/C++ Developer - Aerospace & Defense Systems
Huntsville, AL
Job Title: Full Stack C/C++ Developer – Aerospace & Defense Systems Location: Huntsville, AL (Onsite) Type: Contract-to-Hire Pay (W2): $77-82/HR Clearance: Active Secret clearance (or ability to obtain) Overview Join a team building and supporting miss...
Date Posted: 09/29/2026 Recommended
⚠️ Protecting Job Seekers from Identity Scams
At System One, your privacy and security are important to us. As job-related scams continue to target job seekers, we want to help you recognize and avoid common recruitment fraud. Identity theft scams often involve individuals, also known as "scammers," posing as recruiters or employers to obtain sensitive personal information, such as Social Security numbers, bank account details, or copies of driver’s licenses, with the goal of stealing identities, accessing financial accounts, or creating fraudulent accounts in a victim’s name.