Senior Cybersecurity Firewall Engineer - Hybrid

The job profile for this position is Infrastructure Engineering Senior Advisor, which is a Band 4 Senior Contributor Career Track Role.

Excited to grow your career?

We value our talented employees, and whenever possible strive to help one of our associates grow professionally before recruiting new talent to our open positions. If you think the open position you see is right for you, we encourage you to apply!

Our people make all the difference in our success.

Role Summary/Key Objectives

We are seeking a Senior Cybersecurity Firewall Engineer to join our Information Security team. The team protects the confidentiality, integrity, and availability of data and systems in core systems and platforms. As a Senior Firewall Engineer, your daily responsibilities revolve around the design, implementation, and management of the network security infrastructure perimeter. Working in tandem with a team of cybersecurity engineers, you will spearhead efforts to prevent and remediate cybersecurity incidents through continuous optimization of infrasfructure, policies and rules.

As a senior technical member of the team, you'll play a crucial role in fostering cross-functional partnerships, particularly with the IT department and product groups. You will provide robust support and implement stringent security measures across global platforms, ensuring that solutions remain fortified against evolving cyber threats while seamlessly integrating with the company’s objectives.

The work includes:

• Plan, engineer, and implement next generation Firewall (NGFW) infrastructure solutions at the enterprise level.

• Perform migration changes from Checkpoint and Cisco ASA, to Palo Alto Firewalls.

• Diagnose and resolve application issues post firewall implementation.

• Analyze firewall requirements for application migrations to new infrastructure.

• Manage changes through ServiceNow ITSM and other applications.

• Manage firewall implementations through AlgoSec (FireFlow, Appviz &  ObjectFlow), and Panorama applications.

• Remove/optimize old firewall policy configurations no longer required for optimization.

• Participate in trouble-shooting application issues that may involve firewalls and other perimeter security infrastructure.

• Exercise good judgment, a sense of urgency, and maintain a commitment to high standards of ethics, regulatory compliance, customer service, and business integrity.

Requirements:

• Demonstrated deep technical experience with Palo Alto firewalls.
• Demonstrated experience utilizing Palo Alto Expedition and other tools for policy migration.
• Experience placing firewall security infrastructure and enforcing policy in new (previously unsecured) network environments.
• Experience with AlgoSec and Panorama Firewall Management applications.
• Experience with scripting utilizing Python and/or Ansible a plus
• Experience with cloud DDOS technologies such as Akamai/Prolexic
• Experience with large scale global/enterprise projects.
• Knowledge of security protocols and implementations within ICS/IOT environments.
• Experience in the use of multiple network tools, such as, SyslogNG, SevOne, Spectrum, Splunk, tcpdump and Qradar, for network troubleshooting and monitoring.
• Well versed in crisis management and root cause analysis techniques.
• Experience working in a team-oriented, collaborative environment.
• Proven analytical and problem-solving abilities.
• Strong interpersonal, written, and oral communication skills.
• Able to conduct research into networking issues and products as required.
• Ability to prioritize and execute tasks in a high-pressure environment and make sound decisions in emergency situations.
• Ability to present ideas in a user-friendly manner to non-technical individuals.
• Highly self-motivated and directed.
• Keen attention to detail.
• Strong customer service orientation.
• In-depth knowledge of complex LAN/WAN communications, including routing, switching, and network security.

If you will be working at home occasionally or permanently, the internet connection must be obtained through a cable broadband or fiber optic internet service provider with speeds of at least 10Mbps download/5Mbps upload.

Qualified applicants will be considered without regard to race, color, age, disability, sex, childbirth (including pregnancy) or related medical conditions including but not limited to lactation, sexual orientation, gender identity or expression, veteran or military status, religion, national origin, ancestry, marital or familial status, genetic information, status with regard to public assistance, citizenship status or any other characteristic protected by applicable equal employment opportunity laws.

Please note that you must meet our posting guidelines to be eligible for consideration.  Policy can be reviewed at this link.

Qualified applicants with criminal histories will be considered for employment in a manner consistent with all federal, state and local ordinances.