Enter a job title or keyword
Sr Network Security Engineer
Job Location:
Job Location:
Reston, VA - USA
Yearly Salary:
USD 190000 - 220000
Yearly Salary:
Posted:
29 September 2026 (20 hours ago)
Posted:
Application Deadline:
27 December 2026
Application Deadline:
Vacancies:
1 Vacancy
Vacancies:
Job Summary
Sr Network Security Engineer
On-Site Reston VA
Our client a mission-focused defense program is adding a capable firewall engineer to an on-site team based in Reston this seat youll stand up and run a sophisticated firewall estate PA-1400 PA-3400 and PA-5500 PQC-capable hardware administered through a Panorama M-700 carrying 1000 device licenses alongside VM Series instances powered by VM Flex Credits. Working shoulder to shoulder with the networking and security groups youll migrate tune and sustain a next-generation firewall footprint supporting a mission-critical DoD environment. If deep hands-on Palo Alto Networks expertise and enterprise-scale security are where you do your best work wed like to hear from you.
About the Opportunity
Youll own the deployment and ongoing care of a demanding multi-appliance firewall environment inside a classified defense setting migrating off legacy platforms optimizing policy and keeping a next-generation footprint healthy and audit-ready.
Day-to-Day Scope
On-Site Reston VA
Our client a mission-focused defense program is adding a capable firewall engineer to an on-site team based in Reston this seat youll stand up and run a sophisticated firewall estate PA-1400 PA-3400 and PA-5500 PQC-capable hardware administered through a Panorama M-700 carrying 1000 device licenses alongside VM Series instances powered by VM Flex Credits. Working shoulder to shoulder with the networking and security groups youll migrate tune and sustain a next-generation firewall footprint supporting a mission-critical DoD environment. If deep hands-on Palo Alto Networks expertise and enterprise-scale security are where you do your best work wed like to hear from you.
About the Opportunity
Youll own the deployment and ongoing care of a demanding multi-appliance firewall environment inside a classified defense setting migrating off legacy platforms optimizing policy and keeping a next-generation footprint healthy and audit-ready.
Day-to-Day Scope
- Stand up tune and sustain the security operating stack within a demanding defense setting
- Lead the transition of firewall rulesets and objects off legacy platforms and onto current-generation appliances
- Roll out and administer the PA-3400 PA-5500 PA-1400 and PA-7000 hardware lines through a centralized Panorama M-700 console
- Oversee virtualized firewall instances built on VM Series drawing against VM Flex Credits for capacity
- Build staging environments confirm migration integrity and schedule the move into production
- Advise on software version upgrades and help drive the creation of fresh threat and application signatures
- Open and push support tickets through the vendors TAC channel toward resolution
- Map each stakeholders infrastructure needs and forward-looking security plans then match solutions accordingly
- Keep clear lines of communication open with clients account teams engineering and fellow support staff
- Partner with the networking and security groups to build trust among the units affected by planned changes
- Occasional travel possible subject to site needs
- Roughly seven to nine years spanning networking and security technologies
- At least five years across routing and switching fundamentals plus BGP VXLAN and SD-WAN
- Three-plus years directing security initiatives inside sizable intricate infrastructures
- Deep practical command of the vendors product family covering the VM Series alongside the PA-3400 Series PA-5500 Series and PA-7000 Series
- Advanced familiarity operating Panorama together with log collectors
- Working command of GlobalProtect and NGFW
- Hands-on depth setting up tuning and running enterprise-grade firewall hardware
- Seasoned across LAN WAN and broader internetworking disciplines
- Firm grasp of application-layer behavior and internet protocols
- Polished writing and speaking skills at ease briefing both technical colleagues and senior leadership
- Capacity to juggle concurrent workstreams while staying composed under deadline pressure
- Undergraduate degree in MIS Computer Science Business or a comparable blend of schooling and field experience
- Prior work on classified networks with exposure to defense security frameworks
- Track record standing up sizable firewall migrations across government or enterprise programs
- Direct time on PQC-capable units such as the PA-1400 and PA-5500
- Full-time fully on-site presence is mandatory
- Candidates must live within commuting range of Reston VA or be open to relocating
- An active TS-SCI with CI Polygraph must already be in place at the time of application
- Security is the baseline credential; SecurityX or CASP is accepted in its place
- CNSE certification nice to have
- CISSP CCNA or JNCIE-SEC are viewed favorably as additional credentials
- Sharp written and spoken communication paired with a careful eye for detail
- Comfortable operating both independently and as part of a team on mission-driven work
- Availability to travel when the assignment calls for it
Required Experience:
Senior IC
About Company
While other digital experience platforms slow you down, we set you free. We take the stress out of managing and delivering personalized content.
