Firewall Network Engineer

CONCEPT SOLUTIONS LLC•Atlanta, GA

8h•Hybrid

About The Position

Concept Solutions is seeking a Network Engineer specializing in Firewall Support to join our Infrastructure Support Team supporting the Federal Aviation Administration (FAA) Infrastructure & Operations (I&O) Program. This position is part of the Networks Group and plays a critical role in protecting and securing the FAA's enterprise network infrastructure that supports thousands of users and mission-critical aviation systems across the National Airspace System (NAS). The Firewall Network Engineer will support day-to-day operations, cybersecurity initiatives, and infrastructure projects focused on maintaining a secure, resilient, and compliant network environment.

Requirements

Bachelor's degree in Information Technology or a related field and 8 years of IT experience, or 12 years of relevant IT experience in lieu of a degree.
Experience managing firewall environments supporting large-scale organizations with 35,000+ users.
Hands-on experience with Check Point, Fortinet, and Zscaler technologies, including monitoring, administration, and troubleshooting.
Experience preventing, detecting, and remediating cybersecurity incidents and events.
Experience developing incident response procedures and participating in security assessments.
Experience tracking, managing, and resolving incidents through a ticket management system.
Strong written, verbal, and interpersonal communication skills.
Self-motivated with the ability to take ownership of projects and work independently.

Nice To Haves

Experience supporting large enterprise environments with more than 35,000 users.
Experience working collaboratively with technical teams, stakeholders, and government customers.
Experience supporting both remote and onsite operations.
Experience using enterprise service management platforms; ServiceNow experience is a plus.

Responsibilities

Manage multiple Check Point Firewall clusters supporting the FAA Internet Access Point (IAP).
Manage and support the Zscaler Zero Trust platform, including Internet Access (ZIA), Private Access (ZPA), and Digital Experience (ZDX).
Implement and manage advanced security capabilities including Intrusion Prevention System (IPS), Anti-Virus, Anti-Bot, Data Loss Prevention (DLP), SSL Interception, and Identity Awareness.
Monitor, prevent, identify, investigate, and remediate cybersecurity events and threats.
Participate in annual security assessments, remediation efforts, and compliance activities, including POAM tracking and Trusted Internet Connection (TIC) compliance requirements.
Support annual Cybersecurity Test Facility exercises, including the development and enhancement of incident response procedures.
Manage traffic and audit logs for enterprise security systems and maintain historical data supporting Security Information and Event Management (SIEM) applications.
Collaborate with network, security, and operations teams to ensure the availability, integrity, and security of enterprise network services.