Engineer II, Network Firewall

The Network Firewall Engineer provides modern engineering approaches for safeguarding IT infrastructure. This role is responsible for developing and deploying protective measures based on IT security policies and operational standards on-prem and in the cloud. The Network Firewall Engineer will work closely with IT team members (operations and security) to evaluate design implement and document WAN VPN internetworking solutions in alignment with business needs.

What You Will Do:

• Conducting advanced security event detection and threat analysis for complex events.
• Manage firewall and network security systems by establishing and enforcing approved rules and policies.
• Analyze network security requirements and implement perimeter security changes.
• Utilizing industry best practices for security disaster recovery business continuity and change control the engineer will design configure manage and troubleshoot a variety of network firewall technologies.
• Serve as a subject matter expert in coordinating and troubleshooting with customers other infrastructure support activities and business units.
• Develop network documentation of security infrastructure.
• Monitor network performance and implement performance tuning as necessary.
• Monitor manage and troubleshoot Palo Alto Global Protect VPN configuration.
• Plan and coordinate upgrades patches and new corporate technologies.
• Maintain an inventory of hardware.
• Perform system audits and complete necessary due diligence in preparation for new technologies.
• Work with established configuration and change management policies to ensure awareness approval and ultimate success of changes made to the network infrastructure.
• Provide troubleshooting and end user support when necessary.

What You Will Need:

Education and Experience

• Typically requires a college degree or recognized equivalent preferably in Computer Science or related field from an accredited university or comparable on-the-job experience. Technical certifications are a plus.
• Minimum five or more (5) years experience in network security as it pertains to a global company with a hybrid cloud environment including 5 years of experience designing and implementing Palo Alto Network firewalls Cloud firewalls in Microsoft Azure (and Microsoft Azure Government).

Knowledge Skills and Abilities

• 5 Years experience in network security as it pertains to a global company with a hybrid cloud environment.
• In depth knowledge of configuring and troubleshooting Palo Alto firewalls in HA mode and hands on experience handling high priority issues.
• Strong prioritization skills and able to handle multiple tasks effectively. Self-starter with the ability to work independently.
• Active problem solver working across multiple IT and business teams for solutions.
• Articulate appropriately both in written and oral form and collaborate with multiple teams regarding security and privacy obligations and duties.
• Sound knowledge of AAA technology firewall management tools i.e. Panorama.
• A10 (load balancer) and Cisco networking experience a plus.
• Familiarity with digital vaccines deep packet inspection (pcap) traffic analysis anomaly detection and other security analysis to troubleshoot confirm and resolve issues.
• Experience with Azure FW WAFs and App GWs is a plus.
• Familiarity with NIST 800-171 or NIST 800-53 controls CIS Benchmarks or DISA STIG (Secure Technical Implementation Guidelines) for network devices including firewalls.
• Understanding of firewall policies rules and configuration best practices industry standard blacklist protocols and firewall best practices in alignment with cybersecurity legal and regulatory requirements.
• Strong understanding of IP Subnetting routing protocols VLAN termination on firewalls and the ability to design configure test and troubleshoot in such an environment.
• Exposure to automation tools such as Ansible and Terraform is a plus.

Reporting Relationships:

Reports directly to IMS Management as appropriate.