Linux and Network (Palo Alto) Engineer with Security Clearance

---

Job description

The Linux/network Engineer will support the full system engineering life-cycle, including requirements analysis, system architecture, design, development, integration, scripting, programming, test, documentation, and implementation following defined best practices and operational workflows. Primary Responsibilities:
o Resolve Linux system errors and crashes, disk space problems and full disk errors.
o Implement and troubleshoot Linux network services such as NFS, NTP, FTP, SSH, DNS, and STIG them using DISA guidelines.
o Create new Linux templates and STIG them using DISA guidelines.
o Provide follow-up reports (technical findings, feedback, resolution steps taken) for Root Cause analysis, engineering technical assessment and process improvement initiatives.
o Complete Automated patching using RHEL Satellite - install, configure, manage patches, and upload update.
o Strong technical, analytical, and interpersonal skills. Self-motivation and ability to work independently. o Hands-on experience with configuration management and change control for Palo Alto firewall solutions.
o Demonstrated experience with networking and switching protocols and infrastructure services, able to troubleshoot and identify DNS, DHCP, WiFi protocols, NTP, routing, switching, and firewall issues affecting connectivity of applications and services.
o Deploy and manage Palo Alto firewalls utilizing Palo Alto Panorama.
o Proactively monitors systems and network traffic for anomalies and provides counter measures and mitigation of findings.
o Researches and develops network security policies, procedures, presentations, and documentation.
o Apply lifecycle, enterprise, engineering, and technical expertise to develop, review, and maintain standard operating procedures (SOPs), deployment/installation documentation (e.g. network diagrams, site surveys), regression testing plans, and production of contract deliverables and drawings. Certifications:
CASP, Security+, GCWN, GISF, GSSP, GICSP, CCNP, CCNP Security, CCIE Security, CEH, ENSA, ECSP, MCSE, VCP, BCAP, VCIX, VCDX, RHCA, RHCE Basic Qualifications:
o Ability to apply security first principles to solve complex technical challenges
o Knowledge and experience installing and supporting Palo Alto Security Appliances and Panorama (minimum five years)
o PCNSE certification is required.
o Networking topologies and Palo Alto Command line
o A high level of Palo Alto expertise in design, configuration, migrations, tuning and
customization of features
o Thorough knowledge of Panorama, WildFire, Global Protect, and other Palo Alto features including and not limited to SSL decryption.
o Linux and Windows OS.
o Experience with configuration and support of client-to-site VPN tunnels
o Hands-on experience with firewall architecture, design, and implementation.
o Hands-on experience with operational and security hardening configuration for firewall solutions.
o Experience Installing, configuring, securing, and troubleshooting CentOS, RHEL, and Linux Administration.
o Extensive automation experience with PowerShell and Shell Scripting for automating Linux installs.
o Network experience and understanding with the following: TCP/IP, NIS, NFS, DNS, DHCP, FTP/TFTP, SSH, SFTP, ARP.
o Strong capabilities to assist with automating manual installation and maintenance/patching tasks and utilization of such tools as provisioning environments with Ansible.
o Perform analysis of security posture by reviewing vulnerability and compliance scans and making recommendations for remediations and managing POAMs.
o Department of Homeland Security CISA employees are required to obtain an Entry on Duty (EOD) clearance to support this program. Preferred Qualifications:
o Knowledge and/or experience with Azure, VMware and/or other virtualization platforms.
o Zscaler experience is a plus o Scripting experience is a plus
o Experience with Zero Trust Architecture is a plus

<!– job description page –>