Firewall Security Engineer

Job Description:

Our client is seeking a Firewall Security and Network Engineer for a year-long contract remote position working PST hours. This role will lead the network firewall installation, support, operation, monitoring, and migration efforts within the Network Operations Center, managing approximately 23 independent firewall-as-a-service clients.

Job Summary:

• Lead the installation, support, operation, monitoring, and migration of network firewalls.
• Maintain firewall appliances (currently Fortinet) and manage migrations between different firewall vendors.
• Optimize and modify security policies to meet demands and conform to security standards.
• Integrate systems into monitoring systems, ensuring reliable operation and consistent deployment strategy.
• Work on network engineering deployments, troubleshooting, and operation.

Essential Responsibilities:

• Perform policy and configuration conversions between firewall vendor platforms.
• Convert VPN services to the selected SASE VPN-as-a-Service vendor platform.
• Operate existing Fortinet firewall-as-a-service deployments and standalone/edge firewall deployments (Fortinet, Juniper, Cisco).
• Manage existing Ivanti VPN appliance systems.
• Follow change management processes for firewall and VPN upgrades.
• Support the entire NOC environment, including Firewall/VPN/Route/Switch.
• Respond to service requests and operational issues for all environments.
• Ensure all system documentation is accurate and up-to-date.
• Communicate effectively with the team and leadership on project status, obstacles, trends, and problem mitigation.

Qualifications:

• 4+ years of direct administration and primary support activities for modern firewall and VPN platforms.
• 6+ years in a network engineering role, including route/switch duties.
• 8+ years of IT customer service experience, including incident resolution and direct customer communication.
• Experience with medium to large-size deployments and multi-tenancy environments preferred.
• Network engineering and/or network security certifications are desirable, but depth of experience is more important.