# Senior Cybersecurity Engineer

**Company**: GDIT
**Location**: Rockville, MD
**Work arrangement**: remote
**Experience**: senior
**Job type**: full-time
**Salary**: $164,382 - $178,250
**Category**: Security
**Industry**: Technology

**Apply**: https://gdit.wd5.myworkdayjobs.com/en-US/External_Career_Site/job/USA-MD-Rockville/Cybersecurity-Sr-Engineer_RQ230845-1?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/jobs/job_a300d274-3f2

## Description

GDIT is seeking an experienced Senior Cybersecurity Engineer to design, implement, operate, and continuously improve security infrastructure across on-premises data centers and cloud environments supporting business and critical scientific workloads.

The ideal candidate is a hands-on engineer with strong expertise in cybersecurity, Palo Alto Networks firewalls, hybrid-cloud security architecture, and security automation. This role operates across both architecture and implementation - from defining security patterns and policies for configuring infrastructure, troubleshooting complex issues, and automating security operations.

**Responsibilities:**

- Network Security: Design, deploy, manage, and optimize Palo Alto Networks next-generation firewalls, including security policies, NAT, routing, VPN, application controls, threat prevention, and URL filtering.

- Design secure connectivity, segmentation, and security boundaries between cloud and on-premises environments.

- Manage firewall high availability, upgrades, lifecycle, capacity, and policy optimization.

- Security Architecture & Automation: Modernize environment to leverage Infrastructure as Code using technologies such as Terraform and/or ansible.

- Support security controls and evidence mapping aligned with frameworks such as NIST 800-53/800-171, FedRAMP, and FISMA.

- Evaluate existing security architectures and identify improvements in security, resiliency, scalability, performance, and operational efficiency.

- Develop secure, resilient architecture spanning cloud and on-premises infrastructure using defense-in-depth and Zero Trust principles.

- Operations & Incident Response: Troubleshoot complex network, firewall, cloud and application-connectivity issues.

- Support security incidents, production outages, and root-cause analysis.

- Develop monitoring, logging, alerting, dashboards, runbooks, and engineering standards.

- Perform performance tuning, capacity planning, and security infrastructure lifecycle management.

- Participate in on-call or escalation support as required.

**Qualifications:**

- Required: Bachelor's degree and 5+ years of hands-on cybersecurity engineering experience (or, 8+ years of experience in cloud security engineering in lieu of degree).

- Demonstrated experience designing, deploying, managing, and troubleshooting Palo Alto Networks Firewalls and hybrid network security architectures.

- Experience with Palo Alto Panorama, Prisma Cloud, and/or related Palo Alto technologies.

- Experience securing hybrid on-premises/AWS environments.

- Experience with Terraform, Ansible, Python, Bash, APIs, or other infrastructure/security automation technologies.

- Strong understanding of networking and security fundamentals, including TCP/IP, DNS, HTTP/HTTPS, network segmentation, VPNs, TLS/PKI, encryption, IAM, Zero Trust, and threat detection/prevention.

- Experience troubleshooting complex security and network issues.

- Must be able to obtain and maintain a Public Trust.

**Benefits:**

- Medical plan options, some with Health Savings Accounts.

- Dental plan options.

- Vision plan.

- 401(k) plan with company match.

- Paid time off plans, including vacation, sick and personal time, holidays, paid parental, military, bereavement and jury duty leave.

- Short and long-term disability benefits.

- Life, accidental death and dismemberment, personal accident, critical illness and business travel and accident insurance.

## Skills

### Required
- Firewalls
- Network Security
- Security Architecture Design
- Security Automation
- Security Technologies
- Palo Alto Networks
- Terraform
- Ansible
- Python
- Bash
- APIs

### Nice to have
- AWS security capabilities
- LLMs
- AI agents
- generative AI tools
- NIST
- FISMA
- FedRAMP
- Palo Alto Networks certifications

---

Source: [Apply at gdit.wd5.myworkdayjobs.com](https://gdit.wd5.myworkdayjobs.com/en-US/External_Career_Site/job/USA-MD-Rockville/Cybersecurity-Sr-Engineer_RQ230845-1?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)