Cloud Integrated Infrastructure Engineer

About the Team

Deloitte's Government & Public Services (GPS) practice is designed for impact, serving federal, state, and local government clients as well as public higher education institutions. Our Hybrid Cloud Infrastructure offering provides specialized engineering capabilities to design, implement, manage, and operate hybrid cloud environments, modernize networks, and incubate new infrastructure and device services to help clients stay ahead with the latest technology advances.

Responsibilities

• Support the integration of facility-related control systems into the Control Systems Platform Enclave version 3 (CSPEv3) environment to enable secure connectivity and continuous monitoring.
• Design, deploy, and configure infrastructure and security technologies required to integrate designated control systems into the CSPEv3 network architecture.
• Configure and manage Palo Alto Next-Generation Firewalls, including physical and virtual firewalls and Panorama, to support secure network operations.
• Support the design, deployment, and configuration of Assured Compliance Assessment Solution (ACAS) and Endpoint Security Solution (ESS) capabilities.
• Administer and secure Windows Server environments, client devices, and Active Directory infrastructure in alignment with operational and cybersecurity requirements.
• Perform asset hardening, implement Security Technical Implementation Guidelines (STIGs), and execute firmware updates, patches, and software upgrades across the environment.

Skills

• Ability to work independently and collaborate as part of a team.
• Effective written and verbal communication skills.
• Meticulous attention to detail and quality of work product.
• Ability to build and sustain professional relationships.
• Ability to lead projects or workstreams.
• Ability to manage and prioritize multiple tasks in a fast-paced and dynamic environment.
• Strong interpersonal skills and professional demeanor.
• Ability to meet deadlines.
• Ability to provide clear guidance to others.

Qualifications

• Bachelor's degree or equivalent experience.
• 5+ years of experience in Security Engineering.
• 5+ years of experience in configuring and managing Palo Alto Next-Generation Firewalls (physical and virtual) and Panorama.
• Must be legally authorized to work in the United States without the need for employer sponsorship, now or at any time in the future.
• Active Secret security clearance required.
• Ability to travel 20%, on average, based on the work you do and the clients and industries/sectors you serve.

Preferred Qualifications

• ACAS Certification.
• ESS Certification.
• Certified Information Systems Security Professional (CISSP).
• Palo Alto Networks Certified Network Security Engineer (PCNSE) or equivalent certification.

Pay

A reasonable estimate of the current compensation range for this role in Virginia is $102,800 to $171,300. You may also be eligible to participate in a discretionary annual incentive program, subject to the rules governing the program, whereby an award, if any, depends on various factors, including individual and organizational performance.