ANP Network Security Engineer; Palo Alto/Zscaler - U.S. Citizenship
Listed on 2026-01-17
-
IT/Tech
Cybersecurity
Position Description
CGI Federal is seeking an ANP Network Security Engineer with hands‑on experience in Palo Alto Networks and/or Zscaler technologies to strengthen our cybersecurity posture across cloud and on‑premise environments. In this role, you will design, implement, and manage secure network architectures, leveraging next‑generation firewalls, secure web gateways, and zero‑trust solutions. You will work in a dynamic, fast‑paced environment supporting federal cybersecurity initiatives for civilian agencies, following Scaled Agile (SAFe) principles and utilizing advanced monitoring and security tools such as Wireshark, Nessus, Qualys, Corelight, and Extra Hop.
This position is located in our Fairfax, VA office; however, a hybrid working model is acceptable. You will be required to be in our Fairfax, VA office a minimum of two days per week.
Your future duties and responsibilities- Configure and manage Palo Alto Networks firewalls and/or Zscaler Internet Access/Private Access platforms for secure connectivity and traffic inspection.
- Develop and enforce network security policies aligned with Zero Trust principles.
- Monitor and analyze network traffic using advanced tools (Wireshark, Corelight, Extra Hop) to detect and respond to threats.
- Collaborate with IT and cloud teams to integrate security controls into AWS/Azure environments.
- Lead network‑focused incident response activities, including investigation, containment, eradication, and recovery.
- Deploy and manage network security tools such as IDS/IPS and network sensors.
- Conduct regular security audits and ensure compliance with NIST, FedRAMP, and other federal cybersecurity standards.
- Maintain detailed documentation of security policies, configurations, and incidents; prepare reports for management.
- Stay current with emerging security technologies and trends to continuously improve the organization’s security posture.
- Due to the nature of the contract requirements, US citizenship and successful passing of CGI background check is required prior to beginning work. In addition, candidates must have the ability to obtain and maintain a DHS EOD/Public Trust clearance.
- Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or related field (or equivalent experience).
- 5+ years of experience in network security engineering.
- Hands‑on experience with Palo Alto Networks firewalls and/or Zscaler Internet Access/Private Access.
- Strong knowledge of VPNs, SSL inspection, secure remote access, and traffic segmentation.
- Proficiency in network configuration, performance tuning, and troubleshooting.
- Familiarity with NIST cybersecurity framework FedRAMP compliance, and Zero Trust architecture.
- Experience with IDS/IPS, network sensors, and traffic analysis tools.
CGI is required by law in some jurisdictions to include a reasonable estimate of the compensation range for this role. The determination of this range includes various factors not limited to skill set, level, experience, relevant training, and licensure and certifications. To support the ability to reward for merit‑based performance, CGI typically does not hire individuals at or near the top of the range for their role.
Compensation decisions are dependent on the facts and circumstances of each case. A reasonable estimate of the current range for this role in the U.S. is $99,200.00 - $.
- Cyber
- Nessus
- Network Security
- Wireshark
- Competitive compensation
- Comprehensive insurance options
- Matching contributions through the 401(k) plan and the share purchase plan
- Paid time off for vacation, holidays and sick time
- Paid parental leave
- Learning opportunities and tuition assistance
- Wellness and well‑being programs
Together, as owners, let’s turn meaningful insights into action.
Life at CGI is rooted in ownership, teamwork, respect and belonging. Here, you’ll reach your full potential because…
You are invited to be an owner from day 1 as we work together to bring our Dream to life. That’s why we call ourselves CGI Partners rather…
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).