Firewall Network Security Engineer

Intel•Santa Clara, CA

23h•Onsite

About The Position

Intel’s Information Security organization supports the security and compliance requirements of Intel federal projects that deliver products and services to the U.S. Government. The Firewall Network Security Engineer will assist senior engineers in designing, architecting, and building secure classified network products to support U.S. Government operations. The role contributes to Intel’s secure solution suite and works with security requirements for regulated environments. The position involves helping architect and plan network and network-security products for secure enclaves, implementing security designs with commercial, government, and open-source technologies, and supporting secure system configuration and assessment. The role is onsite in Santa Clara, California, and requires U.S. citizenship because it supports U.S. Government customers. The successful candidate must be able to obtain an active U.S. Government security clearance.

Requirements

U.S. citizenship is required due to citizenship-based legal restrictions supporting U.S. Government customers.
Ability to obtain an active U.S. Government Security Clearance.
Bachelor’s degree and at least 3 years of information technology experience.
At least 3 years of experience deploying and configuring Fortinet FortiGate firewalls, including FortiOS, VDOMs, and High Availability.
At least 3 years of experience building and deploying FortiManager and FortiAnalyzer in cloud or on-premises environments.
At least 3 years of experience with routing (BGP/OSPF), NAT, network segmentation, and IP address subnetting.
At least 3 years of experience designing and managing firewall policies, IPS/IDS, and threat controls.

Nice To Haves

Active U.S. Government Top Secret (TS) Security Clearance and the ability to obtain and maintain SCI access.
Experience with DoD security implementation, such as STIG, and tools for managing the environment.
Experience building and managing network infrastructure using automation tools such as Ansible, Python, and APIs.
Experience integrating with SIEM, NAC (ISE), and enterprise network or security tools.
Understanding of NIST, STIG, or compliance-driven environments.
Experience developing and maintaining operational processes and documentation for ongoing support.
Ability to support security operations, including monitoring, analysis, incident response, and vulnerability management.
Experience with network-analysis software such as SD Elements, Splunk, Sniffer, Wireshark, or Microsoft Network Monitor.
Cybersecurity certifications such as Certified Cloud Security Professional (CCSP) or Certified Information Systems Security Professional (CISSP).
Experience scripting in a UNIX environment.
Experience using Ansible for configuration management, system administration of users or devices, or security-compliance automation.
Experience with operational monitoring using SNMP or other Enterprise Network Management Systems.
Familiarity with VPN implementation (IPSec, SSL) and identity integration (AD/MFA).
Experience troubleshooting using command-line tools, packet capture, and log analysis.
Willingness to travel for business as needed.

Responsibilities

Assist with architecting network and network-security products in secured enclaves, including product testing, validation, and selection.
Assist with design and long-term roadmap planning for new capabilities and future scalability in secure enclaves.
Support definition of system security requirements, including authorization boundaries, security domains, and data classification.
Assist in designing security interfaces, security interconnections, and trust relationships between system components and external systems.
Implement system-security designs using commercial-off-the-shelf (COTS), government-off-the-shelf (GOTS), and open-source hardware and software.
Oversee hardening and configuration of systems and system components in accordance with Federal, Department of Defense, and Intelligence Community guidance.
Coordinate security assessments to identify security-control failures and recommend corrective actions.