TIC 3.0 Developer

Role Overview

The TIC 3.0 Developer will architect, implement, and maintain secure, compliant network environments in AWS using Trusted Internet Connections (TIC) 3.0 principles. The role is hands-on and may function independently as the primary Network Architect/Engineer for federal client requirements.

Responsibilities

• Architect and manage complex AWS network environments to meet TIC 3.0 and federal security standards.
• Deploy and manage Palo Alto VM-Series firewalls on AWS, including:
  • GlobalProtect
  • Panorama
  • Security policy orchestration
• Use Infrastructure as Code (IaC) to deploy networking components:
  • Terraform or CloudFormation
  • Ensure environments are repeatable, documented, and auditable
• Configure, troubleshoot, and maintain hybrid connectivity:
  • AWS Direct Connect
  • Site-to-Site VPNs
  • SD-WAN integrations
• Design and implement Transit Gateway architecture and VPC Peering across multi-account AWS environments.
• Apply Zero Trust and TIC 3 requirements across AWS and Palo Alto ecosystems.
• Lead discovery, documentation, design, and execution of network security solutions with minimal supervision.
• Collaborate with stakeholders to deliver secure, compliant network designs for mission-critical applications.

Requirements

• 5+ years architecting and managing complex AWS network environments.
• 3+ years deploying and managing Palo Alto VM-Series firewalls in AWS, including GlobalProtect and Panorama.
• 2+ years using Terraform or CloudFormation for IaC deployments of major networking components.
• Experience with Hybrid Connectivity/WAN, including configuring and troubleshooting Direct Connect, Site-to-Site VPNs, and SD-WAN integrations.
• Knowledge of Transit Gateway and VPC Peering in multi-account AWS.
• Knowledge of implementing Zero Trust and TIC 3 principles in AWS/Palo Alto environments.
• Ability to operate as a sole Network Architect/Engineer with minimal supervision.
• Must be able to obtain/maintain a Public Trust or Suitability/Fitness determination.
• HS diploma or GED.

Nice to Have

• AWS Certified Advanced Networking – Specialty.
• Palo Alto Networks Certified Network Security Engineer (PCNSE).