Sr. Cyber Engineer (Palo Alto)

Clearance Level
Cyber Engineering
Bethesda, Maryland

REQ#: RQ90832

Travel Required: Less than 10%
Public Trust: NACI (T1)
Requisition Type: Regular

We are seeking a Sr. Security Engineer to join our team in supporting a critical mission for public health, working at the National Institute of Health (NIH) in Bethesda, Maryland. You will provide leadership to secure enterprise-wide cyber systems and networks. As part of a 12-person team supporting Network Services within NIH’s Center for Information Technology (CIT), you will be responsible for securing NIH’s 27 Institutes and Centers.


  • Serve as a subject matter expert in supporting Palo Altos and other network defense technologies
  • Provide architectural analysis of cyber security features as it relates to current and future needs
  • Design and develop new systems and application solutions for the enterprise-wide cyber systems and networks.
  • Integrate new architectural features into existing infrastructure and design cyber security architectural artifacts
  • Ensure system security needs are established and maintained for operations development
  • Respond to and accomplish change request actions and document changes, upgrades, patches
  • Provide rapid response to outages and cyber-attacks to include Root Cause Analysis (RCAs).
  • Preserve, protect, recover and reconstitute friendly cyberspace capabilities before, during and after network attacks
  • Perform daily operational tasks submitted by customers through ticket system
  • Provide engineering recommendations and resolve integration and testing issues
  • Troubleshoot network problems, network device configurations and coordinate with various department administrators to facilitate connectivity issue resolution
  • Accomplish network maintenance during identified maintenance windows
  • Participate in project management, planning, implementation and installation to ensure configuration and integration conforms to baseline architecture
  • Monitor network boundaries to provide intrusion detection, identification, and internal/external IT threat analysis
  • Prepare network or infrastructure Visio topology diagrams
  • Write Standard Operating Procedures (SOPs)
  •  Write maintenance plans and provide status reports as required


  • BS or equivalent and 10 years experience or a MS and eight years experience
  • Palo Alto Networks Certified Network Security Engineer 7 (PCNSE7) or must be able to obtain within three months of hire date
  • Minimum of five years directly related experience in firewall administration and/or analysis.
  • Minimum of five years experience with supporting and maintaining Palo Altos to include set-up, maintenance, upgrades and replacement
  • Must be able to obtain a Public Trust


  • Good troubleshooting skills
  • Experience with Cisco network technologies
  • Experience with Cisco ASA VPN, including design, administration and troubleshooting
  • ForeScout administration and management experience
  • NAC experience, including architecture, engineering, and support  
  • Cisco Design and Configuration experience


  • Ability to work independently and manage multiple task assignments
  • Excellent verbal and written communication skills, including good presentation skills
  • Good problem-solving skills
We are GDIT. The people supporting some of the most complex government, defense, and intelligence projects across the country. We deliver. Bringing the expertise needed to understand and advance critical missions. We transform. Shifting the ways clients invest in, integrate, and innovate technology solutions. We ensure today is safe and tomorrow is smarter. We are there. On the ground, beside our clients, in the lab, and everywhere in between. Offering the technology transformations, strategy, and mission services needed to get the job done.

GDIT is an Equal Opportunity/Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or veteran status, or any other protected class.