Apply on Employer Site

Virtual Service Operations · 6 hours ago

Firewall Engineer in Washington, D.C. *

Washington, DC

Full-time

Onsite

Senior Level

$160K/yr - $180K/yr

Virtual Service Operations is seeking an experienced Firewall Engineer to support the Next-Generation Firewall Modernization Project. In this role, you will lead the migration from Cisco Firepower to Palo Alto PA-5430 NGFWs, overseeing all phases from planning to implementation and stabilization.

Cloud ManagementConsultingInformation TechnologySoftware

No H1B

Security Clearance Required

U.S. Citizen Only

Responsibilities

Lead migration from Cisco Firepower to Palo Alto PA-5430 devices across two campuses

Perform pre-migration planning: export/mapping of existing Cisco configs, creation of RFCs, network documentation

Oversee implementation: racking/cabling hardware, Panorama setup, HA configuration, security zone design, AD/ISE integration

Support cutover & stabilization: application whitelisting, NAT policy tuning, App-ID rules, troubleshooting, backups

Deliver as-built documentation, rollback plans, and knowledge transfer to staff

Provide daily onsite Tier-3 firewall support during stabilization and optimization

Ensure operational resiliency, performance monitoring, and compliance with DoD security requirements

Qualification

Palo Alto Networks firewallsFirewall migration projectsCisco FirepowerNetwork engineeringTier-3 escalationCommunication skillsProblem-solving skillsTeamwork