Job Description / Justification:

The client has been tasked with recruiting a Specialist 3, Firewall Specialist. Who will be required to assist with the design and deployment of firewall security solutions deployed in large, complex networked environments. The candidate must be highly specialized to provide guidance at various stages of planning and implementing secure design, processes, and resilient solutions. This resource will have significant interaction with client Infrastructure Management leadership, its engineering and architecture teams, operations team, and datacenter teams.

Assignment Number and Title:

7-858-0492A - Firewall Specialist SP3

Labor Category

Specialist 3

Work Location:

Select one and provide required details:

On Site

Work Location:

X

Hybrid: Work location & Remote (X days in office/X days remote) For the first few months, the user will

need to be on site Monday- Friday.

Remote: Monday- Friday; 9-5

Scheduled Work Hours:

Normal business hours Monday-Friday 35 hours/week (not including mandatory unpaid meal break after 6 hours of work).

Projected Assignment Start Date:

08/05/2024

Projected Assignment End Date:

08/03/2025

Total Estimated Assignment Hours:

1820 Hours (1 Year)

Maximum Hourly Rate:

DOE

Note:

Normal Business Hours, Monday through Friday (not including a mandatory unpaid meal break after 6 hours of work), 35 work hours per week. If the consultant works more than 35 hours per week, the consultant must request overtime in the Agency's timekeeping system and the project manager must approve those hours worked above the weekly maximum.

TASKS

1. Participate in design meetings and reviews from a security and network perspective on assigned priority projects.

2. Propose networking security architecture to meet the business requirements and while adhering to client s best practices guidelines.

3. Collaborate with Client's Architect teams for developing operable solutions for Citywide requirements.

4. Complete all requirements for installing new network or firewall devices.

5. Follow Client process for new devices provisioning of integrated systems.

6. Configure ports, configure firewalls, and apply the base templates configurations, integrate the appliances into production network.

7. Develop and validate base configurations for the new firewall.

8. Follow Client s established procedures to successfully replace firewalls and firewall rules.

MANDATORY SKILLS/EXPERIENCE Note: Candidates who do not have the mandatory skills will not be considered.

1. Minimum 12 years of experience in the field of networking, network security and firewalls

2. Must have hands-on experience with Palo Alto

3. Deep understanding and experience of DNS, NTP, BGP and other critical infrastructure protocols.

4. Must understand BGP, MPLS, OSPF, IS-IS routing protocols in a large environment.

5. Deep understanding on routing, load balancing and networking infrastructure.

DESIRABLE SKILLS/EXPERIENCE:

1. Hands on experience in Cisco and Palo Alto firewall technology

2. Additional experience in the field of load balancing.

3. Good project management skills

4. Ability to simultaneously work on multiple projects