Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 3 days ago

Intermediate Firewall Engineer

Chenega Corporation395 open roles

Where
Oakton, Virginia, United States
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowIntermediate Firewall EngineerChenega Corporation · Oakton, Virginia, United States

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Chenega Corporation's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

11.9% of postings close within 7 days. Measured by our own scanner across the market. Chenega Corporation postings stay open a median of 1 days.

Share of postings closed within
  1. 2.1%1 day
  2. 4.4%3 days
  3. 11.9%7 days
  4. 18.6%14 days
  5. 35.6%30 days
  6. 45.1%60 days
This job: posted 3 days ago

Chenega Corporation median: 1 days open

The posting

Summary

Intermediate Firewall Engineer

Oakton, VA

Are you ready to enhance your skills and build your career in a rapidly evolving business climate? Are you looking for a career where professional development is embedded in your employer’s core culture? If so, Chenega Military, Intelligence & Operations Support (MIOS) could be the place for you! Join our team of professionals who support large-scale government operations by leveraging cutting-edge technology and take your career to the next level!

SecuriGence deliver essential technology services to our customer in support of their missions to sustain the national security and economic interest of our nation. SecuriGence is seeking a talented Intermediate Firewall Engineer to help contribute to our success. The talented Intermediate Firewall Engineer will be responsible for the core engineering, day-to-day administration, and operational maintenance of enterprise boundary defense platforms and network security appliances. The Intermediate Firewall Engineer serves as the Tier 2/3 escalation and implementation lead, translating architectural designs into active, secure firewall configurations across on-premises and classified mission enclaves (DMSS, Secret/SAP, TS/SCI/SAP). Key responsibilities include managing Palo Alto Networks firewalls via Panorama, troubleshooting Site-to-Site IPsec VPN tunnels, administering dynamic routing protocols (BGP/OSPF), coordinating scheduled PAN-OS software updates, and enforcing continuous compliance with DISA STIGs and DoD change-management standards. This role bridges strategic engineering initiatives with routine operational support, providing escalation resolution for junior staff and operational support to the Senior Firewall Engineer. Come help us solve problems with Innovation through Intelligence.

Responsibilities

  • Administer, configure, and maintain Palo Alto Networks Next-Generation Firewalls (NGFW) via enterprise Panorama and direct management interfaces in strict alignment with change control protocols.
  • Provision and deploy security policies, App-ID rules, TLS/SSL decryption policies, dynamic NAT/PAT schemes, and standardized security objects across multi-tenant environments.
  • Serve as the Tier 2/3 operational escalation point, investigating and resolving complex network connectivity failures, IPsec VPN tunnel drops, routing anomalies, and application performance bottlenecks.
  • Implement dynamic routing protocols (BGP, OSPF), VLAN segmentation, and perimeter access controls to maintain resilient edge connectivity and segmentation across mission partner enclaves.
  • Lead remote site management for performers and external stakeholders across classified networks, including establishing, monitoring, and maintaining IPsec tunnels, VPN gateways, and operational telemetry.
  • Plan, coordinate, and execute scheduled PAN-OS maintenance updates, dynamic threat content releases, antivirus definitions, and security patches under the direction of senior engineering leads.
  • Maintain rigorous Authority to Operate (ATO) and security posture baselines by executing DISA STIG checklists, remediating vulnerability scan findings, and updating PO&AM documentation.
  • Provide incident isolation support to the Security Operations Center (SOC), validating security telemetry log-forwarding pipelines and isolating traffic anomalies during cyber events.
  • Maintain comprehensive technical configuration records, network topology diagrams, change audit logs, and operational standard operating procedures (SOPs) within ticketing and project systems (e.g., Redmine, Jira).
  • Provide operational mentorship and technical guidance to Junior Firewall Engineers, reviewing routine change requests and assisting in complex troubleshooting workflows.
  • Other duties as assigned.

Qualifications

  • Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field with 4+ years of hands-on network security/firewall engineering experience; OR
  • High school diploma or GED equivalent with 8+ years of demonstrable operational experience in lieu of a degree.
  • Must meet DoD 8140 / 8570.01-M IAT Level II baseline certification requirements (e.g., CompTIA Security+ CE, CCNA Security, CySA+).Vendor technical certification: Palo Alto Networks Certified Network Security Administrator (PCNSA) required; Palo Alto Networks Certified Network Security Engineer (PCNSE) preferred.
  • Active Secret security clearance with eligibility to obtain TS/SCI/SAP

Knowledge, Skills and Abilities:

  • Strong operational knowledge of Palo Alto Networks NGFW administration, Panorama centralized management, and PAN-OS feature sets (App-ID, Content-ID, User-ID).
  • Proven experience building, troubleshooting, and tuning Site-to-Site IPsec VPN tunnels, Global Protect remote access gateways, and dynamic NAT/PAT policies.
  • Solid working knowledge of dynamic routing protocols (BGP, OSPF), static routing, sub-netting, and Layer 2/3 switching fabrics.
  • Practical understanding of DoD RMF, DISA STIG validation, and boundary protection compliance checklists.
  • Experience integrating firewall telemetry and syslog forwarding with SIEM/SOAR platforms (Splunk, Cribl, XSOAR) and network visibility fabrics (IXIA Packet Brokers).
  • Strong analytical and packet-level troubleshooting skills utilizing tools such as Wireshark, TCPdump, and Panorama traffic/threat inspection logs.
  • Familiarity with IT Service Management (ITSM) workflows, strict configuration change management boards (CCB), and tracking platforms (Jira, ServiceNow, Redmine).

How you’ll grow

At Chenega MIOS, our professional development plan focuses on helping our team members at every level of their careers to identify and use their strengths to do their best work every day. From entry-level employees to senior leaders, we believe there’s always room to learn.

We offer opportunities to help sharpen skills in addition to hands-on experience in the global, fast-changing business world. From on-the-job learning experiences to formal development programs, our professionals have a variety of opportunities to continue to grow throughout their careers.

Benefits

At Chenega MIOS, we know that great people make a great organization. We value our team members and offer them a broad range of benefits.

Learn more about what working at Chenega MIOS can mean for you.

Chenega MIOS’s culture

Our positive and supportive culture encourages our team members to do their best work every day. We celebrate individuals by recognizing their uniqueness and offering them the flexibility to make daily choices that can help them be healthy, centered, confident, and aware. We offer well-being programs and continuously look for new ways to maintain a culture where we excel and lead healthy, happy lives.

Corporate citizenship

Chenega MIOS is led by a purpose to make an impact that matters. This purpose defines who we are and extends to relationships with our clients, our team members, and our communities. We believe that business has the power to inspire and transform. We focus on education, giving, skill-based volunteerism, and leadership to help drive positive social impact in our communities.

Learn more about Chenega’s impact on the world.

Chenega MIOS News- https://chenegamios.com/news/

Tips from your Talent Acquisition Team

We want job seekers exploring opportunities at Chenega MIOS to feel prepared and confident. To help you with your research, we suggest you review the following links:

Chenega MIOS web site - www.chenegamios.com

Glassdoor - https://www.glassdoor.com/Overview/Working-at-Chenega-MIOS-EI_IE369514.11,23.htm

LinkedIn - https://www.linkedin.com/company/1472684/

Facebook - https://www.facebook.com/chenegamios/

Estimated Salary/Wage

USD $119,700.00/Yr. Up to USD $140,000.00/Yr.

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Chenega Corporation's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on Chenega Corporation's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    Chenega Corporation's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.