Principal Palo Alto Networks SME

Overview:
The NGG program is seeking a Principal‑level Palo Alto Networks Subject Matter Expert to lead the design, deployment, and optimization of advanced network security architectures. This role provides senior‑level technical leadership across firewall engineering, network segmentation, threat prevention, and Zero Trust integration. The ideal candidate has deep, hands‑on expertise with Palo Alto Networks platforms and can drive enterprise‑scale solutions from strategy through implementation.

Key Responsibilities:

• Lead architecture, engineering, and configuration of Palo Alto firewalls across NGG environments
• Own the design and deployment of security policies, NAT, app‑ID, user‑ID, and threat profiles
• Architect and optimize Panorama for centralized management, multi‑tenant configurations, and scale
• Implement Zero Trust segmentation aligned with NGG security requirements
• Support migration from legacy security stacks to Palo Alto platforms
• Develop high‑quality design artifacts: HLDs, LLDs, diagrams, runbooks, implementation plans
• Conduct advanced troubleshooting, packet analysis, and platform tuning
• Advise program leadership on best practices, risks, and roadmap recommendations
• Collaborate with cross-functional engineering teams (network, cloud, cyber, operations)
• Provide mentorship to junior engineers and serve as authoritative technical decision maker

Required Qualifications:

• BA/BS or equivalent, 10+ years of experience
• 10+ years in network security engineering with 5+ years hands‑on Palo Alto Networks experience
• Deep expertise in: Panorama, virtual and hardware firewalls, GlobalProtect, Threat Prevention, URL Filtering, WildFire
• Proven experience architecting large‑scale, mission‑critical firewall infrastructures
• Strong understanding of routing, VLANs, IPSec VPN, BGP/OSPF, and network segmentation
• Experience with Zero Trust frameworks and micro‑segmentation strategies
• Ability to create detailed engineering documentation and lead complex deployments
• Strong communication skills with ability to brief leadership and stakeholders
• Secret Security Clearance

Preferred Qualifications:

• Candidate has hands‑on experience with Palo Alto WildFire, including deployment, configuration, policy integration, and operational troubleshooting in enterprise environments.
• PCNSE or higher (PCSNE, PSE certifications)
• Experience with automation frameworks (Terraform, Ansible, PanOS APIs)
• Background supporting federal or regulated environments
• Experience integrating Palo Alto with SIEM, SOAR, and identity platforms

Deliverables:

• Architecture designs, implementation plans, and technical documentation
• Configured firewalls, Panorama templates, and policy baselines
• Migration plans and cutover support
• Ongoing engineering support, optimization, and troubleshooting

GDIT Is Your Place

• Full-flex work week (where eligible and approved).
• 401(k) with company match.
• Comprehensive health and wellness packages.
• Professional growth opportunities, internal mobility, paid education, and certifications.
• Paid vacation and holidays.

#GDITPriority