Firewall Network Security Engineer

Intel Corporation•Santa Clara, CA

2d•$105,300 - $175,210•Onsite

About The Position

Intel's Information Security organization supports the IT information security and compliance requirements for Intel federal projects delivering products or services to the U.S. Government. The Firewall Network Security Engineer will assist senior engineers in designing, architecting, and building secure classified network products to support U.S. Government operations. The role involves helping architect and plan secure enclave network and security products, contributing to system security requirements and security interfaces, implementing security designs with commercial, government, and open-source technologies, hardening and configuring systems according to federal and defense guidance, and coordinating security assessments. The position requires U.S. citizenship and the ability to obtain an active U.S. Government security clearance. It is onsite in Santa Clara, California, and may require business travel as needed.

Requirements

U.S. citizenship is required due to citizenship-based legal restrictions.
Ability to obtain an active U.S. Government Security Clearance.
Bachelor's degree and at least 3 years of information technology experience.
At least 3 years of experience with routing (BGP/OSPF), NAT, network segmentation, and IP address subnetting.
At least 3 years of experience designing and managing firewall policies, IPS/IDS, and threat controls.

Nice To Haves

At least 3 years of experience deploying and configuring Fortinet FortiGate firewalls, including FortiOS, VDOMs, and High Availability.
At least 3 years of experience building and deploying FortiManager and FortiAnalyzer in cloud or on-premises environments.
Active U.S. Government Top Secret (TS) Security Clearance and ability to obtain and maintain SCI access.
Experience with DoD security implementation, such as STIG, and security tools for managing the environment.
Experience building and managing network infrastructure using automation tools such as Ansible, Python, and APIs.
Experience integrating with SIEM, NAC (ISE), and enterprise network and security tools.
Understanding of NIST, STIG, or compliance-driven environments.
Experience developing and maintaining operational processes and documentation for ongoing support.
Ability to support security operations, including monitoring, analysis, incident response, and vulnerability management.
Experience with network analysis software such as SD Elements, Splunk, Sniffer, Wireshark, or Microsoft Network Monitor.
Cybersecurity certifications such as Certified Cloud Security Professional (CCSP) or Certified Information Systems Security Professional (CISSP).
Experience scripting in a UNIX environment.
Experience using Ansible for configuration management, system administration of users or devices, or security compliance automation.
Experience with operational monitoring using SNMP or other enterprise network management systems.
Familiarity with VPN implementation (IPSec, SSL) and identity integration (AD/MFA).
Experience troubleshooting with command-line tools, packet capture, and log analysis.

Responsibilities

Assist with architecting network and network security products in secured enclaves, including product testing, validation, and selection.
Assist with design and long-term roadmap planning for new capabilities and future scalability in secure enclaves.
Support the definition of system security requirements, including authorization boundaries, security domains, and data classification.
Assist with designing security interfaces, security interconnections, and trust relationships between system components and external systems.
Implement system security designs using commercial-off-the-shelf (COTS), government-off-the-shelf (GOTS), and open-source hardware and software.
Oversee hardening and configuration of systems and system components in accordance with Federal, Department of Defense, and Intelligence Community guidance.
Coordinate security assessments to identify security control failures and recommend corrective actions.