{"id":1505943,"url":"https://alion.io/job/tdisecurity-firewall-engineer-tetrad-digital-integrity-llc","title":"Firewall Engineer - Tetrad Digital Integrity LLC","company":{"id":1968904,"name":"tdisecurity","domain":"tdisecurity.com","url":"https://alion.io/company/tdisecurity","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"JazzHR","truth_index":null},"role":"Industrial Engineering","role_family":"Industrial Engineering","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Arlington, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":115000,"max":125000,"currency":"USD","period":"year","gross":null,"usd_annual":125000},"salary_estimate":null,"experience_years_min":8,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"CI/CD","optional":false},{"name":"ITIL","optional":false},{"name":"VPN","optional":false}],"status":"live","first_seen_at":"2026-09-30T05:43:23Z","employer_posted_date":"2026-09-30","last_verified_at":"2026-10-29T08:39:54Z","board_verified":true,"closed_at":null,"days_open":29,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":29},"description":"Tetrad Digital Integrity (TDI) is a leading-edge cybersecurity firm with a mission to safeguard and protect our customers from increasing threats and vulnerabilities in this digital age.\nTDI is seeking a Firewall Engineer to support the Compartmented Enterprise Services Office (CESO) Task Order for the GIG Service Management - Operations II (GSM-O II) contract. We are looking for a professional with hands-on engineering and testing experience in virtualized and cloud environments. A skilled engineer knowledgeable and experienced in developing and implementing Firewall/Networking Security Solutions.\nWith the CESO program, the Defense Information System Agency (DISA) is looking to transform the existing Secure Web Services (SWS) environment, used to provide secure information sharing to the community, into a more mature service offering to meet the DoD and IC community. The goal will be to manage the commercial cloud migration and fully automate the continuous development & continuous integration environment, fourth estate consolidation, professionalize services - ITIL/DevSecOps based processes, improve the customer experience 1st call resolution, and achieve development of a service catalog for Defense Working Capital Fund (DWCF) Model.\nThis position is onsite 5 days/week in Arlington, VA and requires an active TS/SCI clearance.\nRESPONSIBILITIES:\nIdentify and remediate misconfigurations, conflicting rules, security gaps, firewall and load balancer security issues, optimize rule-sets, and enhance the overall security posture and performance of Firewalls and Load Balancers\nProvide Tier 3 support to members of the operations network administrations.\nMaintain all HW and SW components at vendor supported levels.\nSupport mission-critical Continuity of Operations (COOP).\nConduct a minimum of two (2) assessment of firewall each month on CESO and customer devices and generate assessment reports and provide recommendations for improvements.\nSupport the creation of network device performance and traffic utilization monthly reports.\nDevelop and/or participate in After Action Reports (AARs)\nProvide expert advice and direction regarding the management and operation of all Palo Alto devices in the DISA CESO enterprise architecture.\nInteract with the customer point of contact to set objectives/goals based on Palo Alto Networks technologies and available technology roadmap for architecture and design discussions.\nEvaluate current technologies and processes associated with DISA CESO to identify gaps. \nProvide requirements and strategies for future cybersecurity operations.\nActive participant in meetings with DISA CESO and mission partner working groups.\nAdhere to applicable DOD STIGs, DISA applicable orders, and JSIG policy, guidelines, and regulations.\nQUALIFICATIONS:\nBachelor's degree and 8+ years of directly relevant experience. Additionall experience may be considered in lieu of degree.\n5+ years of hands-on Cisco / Palo Alto Firewall experience in both engineering and Operations and maintenance roles.\nStrong knowledge of Palo Alto concepts and best practices:Panorama Installation, HA Config, Template and Template Stacks\nPanorama Policy creation and push to group of Firewalls and Verify Push\nPalo Alto Route configuration, IPSec Site to Site VPN Config and Troubleshooting\nPalo Alto VM in AWS, IPS Configuration, Virtual Router / Systems and Firewall HA\n\nExperience working in a high op-temp, Top Secret environment.\n8570 IAT Level II Baseline Certification (e.g. CCNA Security, CySA+, GICSP, GSEC, Security+ CE, CND, SSCP)\n PAY RANGE:The anticipated salary range for this position is $115,000 - $125,000. This range is a good-faith estimate and not a guarantee of compensation. Final compensation will be based on factors including experience, education, skills, geographic location, internal equity, market data and applicable contract requirements, and may fall outside the posted range.\nTDI does business with the federal government, which restricts employment to individuals who are either US citizens or lawful permanent residents of the United States.\n“TDI is an Equal Opportunity Employer. Employment decisions are made based on individual qualifications, merit, and business needs. We do not discriminate in employment opportunities or practices based on race, color, religion, sex, or national origin, in accordance with applicable federal laws.”","description_format":"text","description_chars":4399,"description_truncated":false,"requirements":{"experience_years_min":8,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":true,"languages":[]},"benefits":["Equity"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Professional Services","Information Security"],"lifecycle":[{"event":"open","at":"2026-09-30T05:43:23Z"}],"visa":[],"liveness":{"score":41,"band":"fade","label":"Fading","p_open":1,"p_active":0.743,"p_room":0.55,"age_days":29,"expected_fill_days":23,"reasons":["conf:9","velocity","win:tail"],"computed_at":"2026-10-29T05:49:05Z"},"pay":{"stated_usd_annual":125000,"is_top_pay":false},"html_url":"https://alion.io/job/tdisecurity-firewall-engineer-tetrad-digital-integrity-llc","json_url":"https://alion.io/job/tdisecurity-firewall-engineer-tetrad-digital-integrity-llc.json","meta":{"generated_at":"2026-10-29T09:32:58Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":14417,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-30T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1968904},"rest":"https://alion.io/mcp/rest/get_company?id=1968904"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Ftdisecurity-firewall-engineer-tetrad-digital-integrity-llc"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Ftdisecurity-firewall-engineer-tetrad-digital-integrity-llc"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Ftdisecurity-firewall-engineer-tetrad-digital-integrity-llc"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/tdisecurity-firewall-engineer-tetrad-digital-integrity-llc\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Ftdisecurity-firewall-engineer-tetrad-digital-integrity-llc"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":1505943}},{"tool":"search_jobs","arguments":{"company":"tdisecurity.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":1505943},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}