Tasks
The Role
Under the general supervision of the Senior Cyber Security Architect at our client, the Firewall Engineer is to implement, support and maintain all aspects related to Palo Alto, Fortigate and Juniper firewalls at an enterprise level.
The Firewall Engineer must have solid knowledge of security best practices, firewalls, network administration, application/web fundamentals and routing protocols (eg BGP). Strong experience with Palo Alto and Fortigate firewall administration, creating and supporting virtual contexts (VDOM/VSYS). Primary functions will include supporting the design, architecture and build of firewall configurations across various geographic locations.
Will need to work with internal network and security organizations for configuration and installation work. Periodic interaction with service providers to establish VPN tunnels and/or dedicated circuits. Flexibility to work outside normal business hours to support changing windows
Responsibilities
• Primary contact for deployment of Palo Alto and Fortigate firewalls
• Review, configure and deploy firewall changes and new hardware based on requirements
• Analyze existing firewall configuration for improvement, optimization and automation
• Manage and perform upgrades based on lifecycle and application alerts/notifications (eg security bulletins)
• Independently follow procedures to contain, analyze, eradicate, and develop sustainable monitoring, for malicious activity
• Support system architecture or system components required that meet both user needs while maintaining confidentiality, integrity, and availability at all times
• Document and address organization's information security, cybersecurity architecture, and systems security engineering requirements throughout the acquisition lifecycle
• Define and document how the implementation of a new system or new interfaces between systems impacts the security posture of the current environment
• Employ secure configuration management processes
• Ensure that acquired or developed system(s) and architecture(s) are consistent with cybersecurity architecture guidelines
• Demonstrate critical thinking and creative analysis techniques in distilling test results, eliminating false positives and providing actionable recommendations for mitigation.
• Perform other official duties as assigned
Qualifications
Education:
Required:
Bachelor's Degree or a combination of formal education and work experience equivalent to a Bachelor's DegreePreferred
: Bachelor's Degree in Information Security, Technology or Computer ScienceExperience:
- 3+ years of experience: Security Operations, Data Security/Privacy
Skills:
• Excellent verbal, written, and other interpersonal communication skills-ability to convey complex technical concepts effectively to a variety of audiences
• Outstanding team and collaboration skills
• Solid analytical/problem solving skills with ability to identify solutions to unusual and complex problems
• Ability to work independently with minimal supervision
• Conceptual thinking skills
• Influencing and negotiation skills
• Integration - joining people, processes or systems
Required:
• Fluent in English Language
• Knowledge of security systems analysis, testing, and documentation
• Expertise in communication protocols, network operating systems, servers, web, firewall implementation, IPS/IDS systems, and advanced malware detection systems
• Broad understanding of networking and technology with a security focus
• Hands on production level experience with Palo Alto and Fortinet firewalls
• Experience with Internet protocol concepts (eg, TCP/IP, UDP, DNS, SMTP, LDAP, IPSEC)
Preferred:
• One or more certifications in Palo Alto Firewall, Fortinet Firewall, RSA Authentication Manager, Pulse Secure VPN
• Experience with QRadar, Internet Proxy, and PKI authentication protocols
Applicants for employment in the US must have work authorization that does not now or in the future require sponsorship of a visa for employment authorization in the United States and with MHP Americas, Inc. (ie, H1-B visa, F-1 visa (OPT), or any other non-immigrant status).