Cyber Security Engineer - Firewall

PUNCH Cyber Analytics Group

3d•Remote

About The Position

PUNCH Cyber Analytics Group (PUNCH) is a Virginia-based, small business founded in 2012 operating as a cohesive team that incorporates the sum of our group’s diverse skills, talents, and resources toward our collective passion: advancing data analytics to impact cyber operations. PUNCH is a two-time Inc. Magazine ‘Best Workplaces’ awardee offering unique benefits and personal touches to provide a positive work-life experience for our team. PUNCH brings unique qualifications, resources, and past-performance that make us suitable to address the goals of our diverse customer-base. Further, we have past and current experience supporting cyber operations and cyber ML-based research, with well over 100 years of collective experience from our collaborative, multi-disciplinary team. The selected candidate will support a large Federal agency. Candidates must be located in the United States.

Requirements

7 years of experience with a bachelor’s degree or 9 years of total experience
Proficient in network, routing, and switching.
Proficient in network scripting
Proficient with OSI Models Layers 1-7 and network troubleshooting.
Ability to work in both an individual and team environment
Flexibility to support after hours maintenance activities
Must be able to obtain a Position of Public Trust from Dept. of Interior

Nice To Haves

Fortinet NSE 4 Certified and/or Fortinet Certified Professional (FCP)
Next Generation Firewall Experience, preferably Fortinet.
Experience support Incident Response (IR) Teams

Responsibilities

Apply configurations on perimeter routers, firewalls, and security controls IAW NIST 800-53
Provide recommendations regarding DOIs perimeter UTM devices IAW NIST 800-53 and industry best practices for Fortigate products
Configure, deploy, and maintain FortiGate firewalls.
Create and manage firewall policies, NAT, VIPs, and security rules.
Configure IPsec and SSL VPNs for remote and site-to-site connectivity.
Manage FortiManager for centralized firewall administration.
Monitor security events and logs using FortiAnalyzer.
Implement network segmentation using VLANs and security zones.
Troubleshoot firewall, routing, VPN, and connectivity issues.
Perform firewall rule reviews and remove obsolete or overly permissive rules.
Develop and maintain firewall/network security documentation.
Create security reports and dashboards for management or compliance requirements.
Configure authentication integrations such as RADIUS, LDAP, Active Directory, and MFA.
Perform network troubleshooting using packet captures, routing tables, logs, and FortiGate diagnostic commands.
Participate in security architecture and network design projects.
Test firewall policies and security controls after configuration changes.
Automate repetitive security/network tasks using Python, APIs, or FortiManager automation.