Firewall Engineer, Lead

The Opportunity:

A well-designed network is critical to move data and enable the U.S. government to achieve their mission, but how can an organization make sure their network will fit their current and evolving needs? Crafting the right network with the right equipment and software requires a combination of technical skill and careful planning. That's why we need you, a Firewall Engineer who knows how to craft the exact network DoD needs.

As a network engineer on our team, you'll advise for the DoD as they work on a reliable network to support DoD critical missions. You'll lead a team assisting clients with learning the strategic goals and operational needs that shape the network requirements. You'll then lead the planning of acquisition, installation, configuration, and maintenance of the network and security components. From resolving interoperability issues across platforms, to supporting the acquisition of hardware, you'll put your hardware and software talents to good use. This is your chance to support your team with growing their knowledge base within depth network security expertise while broadening the scope of your network engineering work. Join us as we help protect DoD critical missions.

Join us. The world can't wait.

You Have:

• 8+ years of experience with Palo Alto Networks PAN-OS, including NGFW, Panorama, and Prisma Access or SASE

• Experience translating complex firewall and network security topics into clear written and verbal updates for non-technical stakeholders and leadership, including producing status reports, roadmaps, and risk summaries

• Experience leading firewall incident response, including coordinating across teams, driving resolution, and conducting post-incident reviews with clear remediation plans

• Experience mentoring engineers, conducting technical reviews, and raising the skill level of the team through documentation, knowledge sharing, and hands-on guidance

• Experience establishing and enforcing firewall standards, policy review processes, and change management practices across an organization

• Knowledge of AWS networking and security, including VPC architecture, Transit Gateway, VM-Series or Cloud NGFW deployments, and AWS security constructs, and designing and reviewing multi-account network topologies

• Ability to manage a team's work queue, coordinate across concurrent projects, track deliverables, and surface blockers early, including owning sprint planning or lightweight project tracking for a technical team

• Ability to obtain and maintain a Public Trust or Suitability/Fitness determination based on client requirements

• HS diploma or GED

Nice If You Have:

• Experience with lightweight PM tools such as Jira, ServiceNow, or Confluence to manage roadmaps, track work, and communicate status

• Experience working directly with Palo Alto Networks TAC, account teams, or professional services to escalate issues and align on roadmaps

• Experience contributing to or driving a Zero Trust or SASE transformation at an organizational level

• Knowledge of Terraform or Ansible for firewall and AWS networking automation

• Ability to review and guide IaC work, including even if not the primary author

• PMP, PCNSE, AWS Networking, or Security Specialty Certifications

Vetting:

Applicants selected will be subject to a government investigation and may need to meet eligibility requirements of the U.S. government client.

Compensation

At Booz Allen, we celebrate your contributions, provide you with opportunities and choices, and support your total well-being. Our offerings include health, life, disability, financial, and retirement benefits, as well as paid leave, professional development, tuition assistance, work-life programs, and dependent care. Our recognition awards program acknowledges employees for exceptional performance and superior demonstration of our values. Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible to participate in Booz Allen's benefit programs. Individuals that do not meet the threshold are only eligible for select offerings, not inclusive of health benefits. We encourage you to learn more about our total benefits by visiting the Resource page on our Careers site and reviewing Our Employee Benefits page.

Identity Statement

As part of the application process, you are expected to be on camera during interviews and assessments. We reserve the right to take your picture to verify your identity and prevent fraud.

Work Model
Our people-first culture prioritizes the benefits of flexibility and collaboration, whether that happens in person or remotely.

• If this position is listed as remote or hybrid, you'll periodically work from a Booz Allen or client site facility.
• If this position is listed as onsite, you'll work with colleagues and clients in person, as needed for the specific role.

Commitment to Non-Discrimination

All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, local, or international law.