Job Description
About the position
Booker DiMaio is seeking a Senior Palo Alto Network Security Engineer to support enterprise firewall operations for the State of Maryland. This role will provide configuration, administration, optimization, and lifecycle management of Palo Alto Networks firewalls within a statewide, mission-critical network environment.
- Responsibilities
- Configure, administer, and maintain Palo Alto Networks firewalls in a large-scale enterprise environment
- Manage and optimize security policies (App-ID, User-ID, NAT, Zone Protection, Threat Prevention profiles)
- Implement firewall rule changes in accordance with change management processes
- Troubleshoot connectivity, routing, and security policy issues
- Manage firewalls using Palo Alto Panorama
- Maintain device groups, templates, and configuration baselines
- Validate policy synchronization across high-availability pairs
- Monitor firewall logs and security events
- Integrate firewall logging with SIEM platforms
- Support audit documentation and compliance reporting
- Perform firmware upgrades (PAN-OS) and vulnerability patching
- Validate high availability (HA) configurations and failover processes
- Support security incident investigations
- Provide root cause analysis for firewall-related outages or threats
- Coordinate with NOC and Security Operations teams
- Participate in change advisory board (CAB) processes
- Develop and maintain firewall documentation
- Conduct impact assessments prior to firewall updates
- Support transition-in activities as required
- Requirements
- Minimum 5ā7 years of enterprise firewall engineering experience
- Minimum 3+ years of hands-on experience with Palo Alto Networks firewalls
- Demonstrated experience managing firewalls in a multi-site or enterprise-scale environment
- Experience with: Panorama centralized managementHigh Availability (Active/Passive configurations)Security policy engineering and rule optimizationNAT and routing integrationThreat Prevention and URL filtering profiles
- Experience performing PAN-OS upgrades and firmware lifecycle management
- Strong understanding of: TCP/IP, BGP, OSPF, VLANs, routing fundamentalsNetwork segmentation and security zoning
- Experience working within structured change management environments
- Strong documentation and communication skills
- Ability to work in a team-based NOC / Network Engineering environment
- Experience supporting enterprise stakeholders and cross-agency coordination
- Ability to operate within structured SLA-driven environments
- US Citizenship or a Green Card is required.
- Candidates must be able to interview in person.
- Nice-to-haves
- PCNSE (Palo Alto Certified Network Security Engineer) ā Strongly Preferred
- PCNSA certification
- Experience supporting public sector or government enterprise networks
- Experience integrating Palo Alto firewalls with SIEM platforms (e.g., Splunk, QRadar)
- Experience in 24x7 NOC/SOC-supported environments
Apply Now
Apply Now