Network Security Engineer (Palo Alto)

Location: McLean, Virginia, United States; hybrid workplace. U.S. citizenship is required.

Salary: $130,000–$155,000 annually.

Company

hirify.global delivers AI, cloud, cybersecurity, and modernization solutions for federal agencies and health and humanitarian missions.

What you will do

• Own the corporate WAN, LAN, wireless, routing, switching, VPN, and network lifecycle management.
• Administer Palo Alto NGFW, Palo Alto VM-Series, and FortiGate VM firewall platforms across on-premises, AWS Commercial, and Azure Government environments.
• Monitor network performance and reliability, resolve escalated Tier 2+ issues, and maintain configuration backups and recovery processes.
• Implement network security controls, vulnerability remediation, IDS/IPS, antivirus, and secure access solutions.
• Support CMMC Level 2 and SOC 2 audit readiness, including SSP network controls, firewall evidence, ISSO support, and change management records.
• Manage GCP organization governance and cloud networking, including IAM, organization policies, Cloud NCC, HA-VPN with BGP over IKEv2, Cloud Router, and Cloud NAT.

Requirements

• Bachelor’s degree in Computer Science, Information Technology, or a related field, or equivalent experience.
• At least 5 years of hands-on experience in network engineering, IT administration, or a related technical role.
• Strong knowledge of Windows operating systems and enterprise networking fundamentals.
• Hands-on enterprise firewall administration experience, including Palo Alto NGFW and Cisco or equivalent routing and switching.
• Proficiency with firewalls, IDS/IPS, VPNs, antivirus, configuration management, monitoring, and documentation tools.
• At least 5 years of experience maintaining firewall rule baselines, network diagrams, SSP contributions, and other network security documentation.

Nice to have

• Palo Alto PCNSE, FortiGate NSE 4+, CCNA, CCNP, Security+, GCP Professional Cloud Network Engineer, or equivalent certifications.
• Experience with Microsoft 365, Azure Government, GCC High, AWS Commercial, and GCP environments.
• ISSO or ISSO support experience and familiarity with SSP documentation, NIST 800-171, CMMC, or FedRAMP.
• Experience with PRTG, NetBox, Ansible, Workload Identity Federation, OIDC, Python, or Bash.

Culture & Benefits

• Health, dental, and vision care plans.
• 401(k), IRA, life insurance, and disability coverage.
• Paid vacation, sick leave, public holidays, and family leave.
• Training and development opportunities.
• Wellness resources.