Type of Requisition:
Regular
Clearance Level Must Currently Possess:
Secret
Clearance Level Must Be Able to Obtain:
Secret
Public Trust/Other Required:
None
Job Family:
Technical Solutions
Job Qualifications:
Skills:
IT Roadmap, Network Security Engineering, Zero Trust Architecture Certifications:
None Experience:
10 + years of related experience US Citizenship Required:
Yes
Job Description:
Overview:
The NGG program is seeking a Principal‑level Palo Alto Networks Subject Matter Expert to lead the design, deployment, and optimization of advanced network security architectures. This role provides senior‑level technical leadership across firewall engineering, network segmentation, threat prevention, and Zero Trust integration. The ideal candidate has deep, hands‑on expertise with Palo Alto Networks platforms and can drive enterprise‑scale solutions from strategy through implementation.
Key Responsibilities:
Lead architecture, engineering, and configuration of Palo Alto firewalls across NGG environments
Own the design and deployment of security policies, NAT, app‑ID, user‑ID, and threat profiles
Architect and optimize Panorama for centralized management, multi‑tenant configurations, and scale
Implement Zero Trust segmentation aligned with NGG security requirements
Support migration from legacy security stacks to Palo Alto platforms
Develop high‑quality design artifacts: HLDs, LLDs, diagrams, runbooks, implementation plans
Conduct advanced troubleshooting, packet analysis, and platform tuning
Advise program leadership on best practices, risks, and roadmap recommendations
Collaborate with cross-functional engineering teams (network, cloud, cyber, operations)
Provide mentorship to junior engineers and serve as authoritative technical decision maker
Required Qualifications:
BA/BS or equivalent, 10+ years of experience
10+ years in network security engineering with 5+ years hands‑on Palo Alto Networks experience
Deep expertise in: Panorama, virtual and hardware firewalls, GlobalProtect, Threat Prevention, URL Filtering, WildFire
Proven experience architecting large‑scale, mission‑critical firewall infrastructures
Strong understanding of routing, VLANs, IPSec VPN, BGP/OSPF, and network segmentation
Experience with Zero Trust frameworks and micro‑segmentation strategies
Ability to create detailed engineering documentation and lead complex deployments
Strong communication skills with ability to brief leadership and stakeholders
Secret Security Clearance
Preferred Qualifications:
Candidate has hands‑on experience with Palo Alto WildFire, including deployment, configuration, policy integration, and operational troubleshooting in enterprise environments.
PCNSE or higher (PCSNE, PSE certifications)
Experience with automation frameworks (Terraform, Ansible, PanOS APIs)
Background supporting federal or regulated environments
Experience integrating Palo Alto with SIEM, SOAR, and identity platforms
Deliverables:
Architecture designs, implementation plans, and technical documentation
Configured firewalls, Panorama templates, and policy baselines
Migration plans and cutover support
Ongoing engineering support, optimization, and troubleshooting
GDIT Is Your Place
Full-flex work week (where eligible and approved).
401(k) with company match.
Comprehensive health and wellness packages.
Professional growth opportunities, internal mobility, paid education, and certifications.
Paid vacation and holidays.
#GDITPriority
The likely salary range for this position is $153,000 - $207,000. This is not, however, a guarantee of compensation or salary. Rather, salary will be set based on experience, geographic location and possibly contractual requirements and could fall outside of this range.
Scheduled Weekly Hours:
40
Travel Required:
25-50%
T elecommuting Options:
Remote
Work Location:
Any Location / Remote
Additional Work Locations:
Total Rewards at GDIT:
Our benefits package for all US-based employees includes a variety of medical plan options, some with…