Network Security Engineer

Zachary Piper Solutions is seeking a Network Security Engineer – Palo Alto Migration to support the modernization of perimeter and data center security infrastructure across two federal campuses. This role will lead the migration from Cisco Firepower to Palo Alto PA‑5430 Next‑Generation Firewalls, managed via Panorama M‑700 or Panorama VM. The engineer will be responsible for planning, implementation, testing, and knowledge transfer. This position will be onsite 5 days per week, with 6 months in Norfolk, VA followed by 6 months in Washington, DC!

Responsibilities of the Network Security Engineer include:

• Lead and execute complex firewall migrations from Cisco Firepower to Palo Alto PA‑5430

• Configure Panorama (device groups, templates), set up High Availability (HA), and establish application-aware security policies (App-ID, Policy Optimizer, NAT, User-ID, File Blocking, Threat Prevention, URL Filtering)

• Integrate firewalls with enterprise systems such as Active Directory/Entra ID and Cisco ISE for identity and access control

• Perform post-implementation tuning, optimize threat prevention profiles, eliminate unused objects, consolidate overlapping policies, and conduct monthly performance/security checks

• Document all phases of the migration and provide knowledge transfer to NDU staff

• Collaborate with stakeholders across Fort McNair and JFSC campuses to ensure operational resiliency and security

Required Qualifications for the Network Security Engineer:

• Secret Clearance Required

• Minimum of 5 years’ experience with network/security solutions and technologies (BGP, SD-WAN, VXLAN, routing/switching)

• Minimum of 3 years’ experience leading security solutions in large environments

• Detailed technical experience with installation, configuration, and operation of high-end firewall appliances

• Hands-on experience with LAN/WAN technologies and Palo Alto Networks hardware (PA‑5430) and management platforms (Panorama M‑700 or VM)

• Strong documentation and project execution skills

• U.S. Citizenship required

• Bachelor’s degree in Computer Science, MIS, Business, or equivalent education/training/experience

Compensation for the Network Security Engineer includes:

• Salary Range: $130,000 - $190,000 depending on experience

• Full Benefits: Medical, Dental, Vision, 401k, Paid Time Off, and Federal Holidays

This job opens for applications on 11/1/2025. Applications will be accepted for at least 30 days from the posting date.

Keywords:

#LI-MM1 #LI-ONSITE

Network Security Engineer, Palo Alto PA‑5430, Panorama M‑700, Firewall Migration, Cisco Firepower, App-ID, Threat Prevention, SD-WAN, VXLAN, Active Directory, Cisco ISE, LAN/WAN, Fort McNair, JFSC, Norfolk VA, Washington DC