Engineer II - Firewall

Frontier Airlines•Denver, CO

29d

About The Position

The Firewall Engineer II is an experienced, competent, and hands-on firewall engineer who serves as a Subject Matter Expert (SME) within the Frontier Firewall Engineering team. The Firewall Engineer II will be responsible for the availability, reliability, and administration of Frontier's firewall environments including, but not limited to installation, configuration, hardening, and 24-hour monitoring and support (participate in Firewall On-Call) for incident management. Firewall On-Call duties may require interfacing with other groups to assure highly available IT services. Responsibilities may extend to connection interfaces supporting IT systems, System Operations Center (SOC), telecommunications, and all other entities dependent upon firewall environments for connectivity.

Requirements

Associate's or Bachelor's degree (Computer Science, Computer Engineering, or Computer Information Security preferred) OR minimum of seven (7) years of demonstrable professional experience and continuing education
Current technical certification(s) such as CISSP, CCSA, CCSE, CCSM, SANS, CCNA Security, CCNP Security, Cisco ASA or Firewall Specialist, OR 1-3 years of Checkpoint or Cisco NGFW administration
Check Point installation, configuration, and administration
TCP/IP routing and switching protocols such as BGP, OSPF, QOS, VRRP, and VLANS
Network Address Translation (NAT)
Firewall policy analysis, review, and hardening
Network management tools such as SolarWinds (including NetFlow Analyzer), Nessus, Wireshark, Nmap, PAM, MFA, and Kiwi
Firewall scripting
Networking media such as CAT5, CAT6, SMF, MMF, and Small Form-factor Pluggable (SFP)
Strong analytical, troubleshooting, communication, and interpersonal skills
Ability to multi-task in a fast-paced technical environment

Nice To Haves

Cisco NGFW installation, configuration, and administration preferred
Cloud security installation and maintenance in Azure or AWS including related firewall services preferred
Check Point Maestro Hyperscale Network Security preferred
Versa, Fortinet, or HPE/Aruba SD-WAN technology preferred
SIEM technologies such as Splunk, QRadar, McAFee, or Azure Sentinel preferred
Installation and maintenance of InfoSec controls including experience in applying InfoSec framework methodologies such as NIST, Cloud (CSA), wired and wireless security preferred
Design, development, and maintenance of network drawings using Microsoft Visio

Responsibilities

Administration of Checkpoint and Cisco NGFWs including deep packet inspection technologies
Configure and maintain firewall routing and switching protocols within the firewall environments such as BGP, OSPF, VRRP, VLANs, and QOS
Configure and maintain SD-WAN firewall technology that supports Frontier's extended networks via MPLS, Broadband, and Cellular
Architectural assistance in design, configuration, implementation, and support of Frontier's core and extended (station & BPO) firewall environments
Monitor, respond, troubleshoot, and respond to incidents related to connectivity loss within Frontier's firewall environments
Communicate to the Major Incident Management (MIM) team and executive-level staff on firewall issues and required corrective action to support time-sensitive decisions
Ability to determine Mean Time to Resolution (MTR), possible short-term fixes, prioritize services for critical needs of the network, and implement corrective actions in the event of a "firewall incident"
Architectural assistance in analysis, design, and administration of Frontier's InfoSec posture to defend against InfoSec deficiencies and potential breaches
Recommend process improvements to ensure hardened firewall environments
Provide regular status updates to leadership and the Project Management Organization (PMO) on existing projects and support activities
Support various firewall projects while collaborating with other IT and business departments to determine requirements and meet project milestones
Provide Level-3 escalation support for the maintenance and troubleshooting of the WAN and LAN firewall connections
Develop and implement scripts for automated change deployment
Implement and maintain firewall engineering policies and procedures to ensure network availability and compliance with InfoSec standards including, but not limited to Sarbanes Oxley (SOX) and Payment Card Industry (PCI)
Create and maintain detailed firewall documentation including related updates to SolarWinds
Ensure currency and enforcement of all InfoSec policies as they relate to Frontier's enterprise network
Work within the Change Management (CM) process for production firewall changes
Utilization of network monitoring tools and syslog files to verify healthy operations and identify potential network/firewall problems

Benefits

Flight benefits for you and your family to fly on Frontier Airlines.
Buddy passes for your friends so they can experience what makes us so great.
Discounts throughout the travel industry on hotels, car rentals, cruises and vacation packages.
Discounts on cell phone plans, movie tickets, restaurants, luggage and over 2,000 other vendors.
Enjoy a 'Dress for your Day' business casual environment.
Flexible work schedules that support work/life balance.
Total Rewards program including a competitive base salary, short term incentives, long-term incentives, paid holidays, 401(k) plan, vacation/sick time and medical/dental/vision insurance that begins the 1st of the month following your hire date.
We play our part to make a difference. The HOPE League, Frontier Airlines' non-profit organization, is dedicated to providing employees financial assistance during catastrophic hardship.

Stand Out From the Crowd

Upload your resume and get instant feedback on how well it matches this job.

Upload and Match Resume