Security Tool Engineer – Palo Alto

Electrosoft Services, LLC is an award-winning company that provides comprehensive technology-based solutions and services to federal customers. While cybersecurity is our specialty, we also focus on ICAM, Zero Trust, digital engineering and transformation, and enterprise AI and intelligent automation. We always seek to delight our customers, so we retain highly qualified employees and offer them meaningful work, growth opportunities, and work-life balance. What sets us apart from all other contractors is the sense of teamwork our employees feel – and the knowledge that outstanding effort is recognized and rewarded. The camaraderie we share emanates from Lunch & Learn sessions where we explore new ideas together, fun group activities ranging from escape rooms to miniature golf, and much, much more. If we’ve described you and your dream workplace, please apply and share in the many benefits and opportunities we offer.

Security Tool Engineer – Palo Alto

Position Overview
We are seeking an experienced Security Tool Engineer – Palo Alto to support the administration, engineering, troubleshooting, automation, and security of enterprise network and infrastructure platforms. The ideal candidate will have strong hands-on experience with Palo Alto Networks firewalls, Windows and RHEL/Linux infrastructure, enterprise networking, virtualization, backup/disaster recovery, scripting, and security hardening.

Responsibilities

- Plan, implement, administer, maintain, and troubleshoot enterprise infrastructure across Microsoft Windows Server, RHEL/Linux, virtualization, and network environments.

- Administer and troubleshoot Palo Alto Networks next-generation firewalls, including security policies, NAT, application controls, security profiles, interfaces, zones, virtual routers, VPNs, logging, and traffic monitoring.

- Review and troubleshoot blocked or denied traffic, connectivity, routing, application access, VPN, and firewall policy issues using logs, monitoring tools, packet captures, and other diagnostic tools.

- Support Palo Alto firewall upgrades, configuration changes, software/content updates, backups, maintenance, and change-management activities.

- Support firewall access requests and configuration changes following established security, least-privilege, and change-management practices.

- Collaborate with Network, Cybersecurity, Systems, Cloud, Application, and Service Desk teams to resolve complex infrastructure, firewall, and security issues.

- Troubleshoot LAN/WAN, TCP/IP, routing, DNS, DHCP, VPN, and application communication issues.

- Develop and maintain automation using Python, PowerShell, PowerCLI, BASH/Shell, Perl, JavaScript, and related technologies to support administration, configuration management, monitoring, reporting, patching, and troubleshooting.

- Perform command-line administration, Operations & Maintenance (O&M), configuration, and troubleshooting activities.

- Manage and troubleshoot enterprise backup and disaster recovery solutions, including Commvault Metallic, across physical, virtualized, and hybrid cloud environments.

- Monitor backup operations, investigate failures, perform recovery activities, and validate backup integrity and recoverability.

- Administer and support operating system updates, security patches, software deployments, and infrastructure upgrades while maintaining system availability, security, and compliance.

- Support security hardening, vulnerability remediation, configuration management, and compliance activities across Windows, Linux, virtualization, network, and security infrastructure.

- Maintain detailed documentation for system designs, configurations, firewall policies, network/security rules, procedures, troubleshooting activities, and configuration baselines.

- Analyze technical and implementation requirements, modify existing systems as needed, and develop technical specifications based on customer and operational requirements.

- Provide technical leadership and mentoring to junior team members.

- Participate in a 24/7/365 on-call rotation.

Basic Qualifications

- Bachelor's degree or higher in Computer Science, Computer Information Systems, Information Security, Information Technology, or a related field, or equivalent combination of education and experience.

- Approximately 8+ years of IT infrastructure, Information Security, or related experience.

- Current vendor or industry certification such as Palo Alto Networks, Microsoft Windows Server Hybrid Administrator, RHCE, VMware VCP-DCV, or equivalent/higher-level certification.

- Strong hands-on experience with Palo Alto Networks firewall administration and support.

- Strong knowledge of Windows and RHEL/Linux administration, Active Directory, Group Policy, DNS, DHCP, TCP/IP, IPv4/IPv6, PKI/Certificate Services, Ansible, server clustering, virtualization, and enterprise networking.

- Experience with firewall policy administration, NAT, VPNs, application controls, security profiles, network segmentation, logging, monitoring, and troubleshooting.

- Experience with backup and disaster recovery, preferably including Commvault or similar enterprise platforms.

- Strong scripting and automation skills using Python, PowerShell, PowerCLI, BASH/Shell, Perl, JavaScript, or similar technologies.

- Knowledge of security hardening and compliance standards, including CIS Controls, NIST SP 800-53 Rev. 5, and DISA STIGs.

- Ability to analyze complex infrastructure problems, identify root causes, develop solutions, and implement changes while minimizing operational impact.

- Strong problem-solving, communication, documentation, and collaboration skills.

- Ability to work independently and across cross-functional technical teams.

- U.S. Citizenship required. Security clearance: N/A.

- Ability to participate in a 24/7/365 on-call rotation.

Pay Range $130,000 — $150,000 USD
#### Electrosoft is an Equal Opportunity Employer/Veterans/Disabled