Job Description

Location: Linthicum Heights, MD

Security Clearance: Active TS or higher [Required]

Job Type: Full-Time

Target Salary Range*: $130,000 - $170,000

*This represents the potential salary range for this position depending on education level, years of experience and/or certifications in addition to other position specific requirements which may impact salary

Position Overview

The Cloud Network Automation Engineer provisions, manages, and supports Palo Alto firewalls and Panorama servers across internet-connected and internet-disconnected networks and Cloud Service Providers. The role uses automation to secure, patch, and configure appliances, monitors services, and investigates disruptions.

Key Responsibilities

Firewall Administration and Automation

• Provision, manage, and support Palo Alto firewalls and Panorama servers across several internet-connected and internet-disconnected networks and Cloud Service Providers.
• Develop, use, and maintain Ansible playbooks to secure, patch, and configure Palo Alto appliances.
• Manage and configure connected services, including network adapters, storage, and firewalls.

Monitoring and Incident Resolution

• Deploy, configure, and support monitoring capabilities to detect anomalous conditions or service disruptions.
• Investigate service disruptions, provide root cause analysis reports, and implement measures to prevent recurring issues.

Qualifications

Education and Experience

• Meet one of the following education and experience combinations: [Required]
• Bachelor’s degree with 8+ years of experience.
• Master’s degree with 6+ years of experience.
• PhD with 3+ years of experience.
• In lieu of a degree, an additional 4 years of relevant experience or specialized training may be considered.

Skills

• Expertise with Configuration as Code (CaC) tooling. [Required]
• Expertise managing Palo Alto firewalls in disconnected environments. [Required]
• Expertise with network requirements and configuration in regulated environments. [Required]
• Strong oral and written communication skills. [Required]

Certifications

• Active CompTIA Security+ certification. [Required]
• Attach a copy of the certification to the Beeline submission. [Required]

Clearance

• Active TS clearance/SCI eligible. [Required]

Other Requirements

• Task Order: XT.

Working Conditions

• Location: Linthicum Heights, MD (full-time on-site). [Required]

Preferred Qualifications

Education

• A degree in Information Technology, Cybersecurity, Computer Science, Information Systems, Data Science, or Software Engineering is highly desired.

Skills and Experience

• Ansible as the CaC tooling.
• Experience with network requirements and configuration within Department of War agencies.
• Experience with Infrastructure as Code (IaC) tooling, preferably Terraform.
• Experience managing secure computing environments in accordance with DISA STIGs and NIST 800-53 controls.
• Experience monitoring system uptime and performance using tools such as Splunk, Grafana, and SolarWinds.
• Experience providing detailed technical after-action reports with root cause analysis following outages or security incidents.
• Familiarity with host-level networking, such as instance firewalls.
• Familiarity with source code management tools, such as GitHub or GitLab.