Engineer II, Network Firewall

American Bureau of Shipping•Spring, TX

7d•Hybrid

About The Position

The Network Firewall Engineer provides modern engineering approaches for safeguarding IT infrastructure. This role is responsible for developing and deploying protective measures based on IT security policies and operational standards, on-prem and in the cloud. The Network Firewall Engineer will work closely with IT team members (operations and security) to evaluate, design, implement, and document WAN, VPN, internetworking solutions in alignment with business needs.

Requirements

Typically requires a college degree or recognized equivalent, preferably in Computer Science or related field, from an accredited university or comparable on-the-job experience.
Minimum five or more (5+) years' experience in network security as it pertains to a global company with a hybrid cloud environment including 5 years of experience designing and implementing Palo Alto Network firewalls, Cloud firewalls in Microsoft Azure (and Microsoft Azure Government).
5+ Years experience in network security as it pertains to a global company with a hybrid cloud environment.
In depth knowledge of configuring and troubleshooting Palo Alto firewalls in HA mode and hands on experience handling high priority issues.
Strong prioritization skills and able to handle multiple tasks effectively.
Self-starter with the ability to work independently.
Active problem solver, working across multiple IT and business teams for solutions.
Articulate appropriately both in written and oral form, and collaborate with multiple teams regarding security and privacy obligations and duties.
Sound knowledge of AAA technology, firewall management tools, i.e. Panorama.
Familiarity with digital vaccines, deep packet inspection (pcap), traffic analysis, anomaly detection, and other security analysis to troubleshoot, confirm and resolve issues.
Familiarity with NIST 800-171 or NIST 800-53 controls, CIS Benchmarks or DISA STIG (Secure Technical Implementation Guidelines) for network devices including firewalls.
Understanding of firewall policies, rules, and configuration best practices, industry standard blacklist protocols and firewall best practices in alignment with cybersecurity, legal and regulatory requirements.
Strong understanding of IP Subnetting, routing protocols, VLAN termination on firewalls and the ability to design, configure, test and troubleshoot in such an environment.

Nice To Haves

Technical certifications are a plus.
A10 (load balancer) and Cisco networking experience a plus.
Experience with Azure FW, WAFs and App GWs is a plus.
Exposure to automation tools such as Ansible and Terraform is a plus.

Responsibilities

Conducting advanced security event detection and threat analysis for complex events.
Manage firewall and network security systems by establishing and enforcing approved rules and policies.
Analyze network security requirements and implement perimeter security changes.
Utilizing industry best practices for security, disaster recovery, business continuity, and change control, the engineer will design, configure, manage and troubleshoot a variety of network firewall technologies.
Serve as a subject matter expert in coordinating and troubleshooting with customers, other infrastructure support activities and business units.
Develop network documentation of security infrastructure.
Monitor network performance and implement performance tuning as necessary.
Monitor, manage and troubleshoot Palo Alto Global Protect VPN configuration.
Plan and coordinate upgrades, patches and new corporate technologies.
Maintain an inventory of hardware.
Perform system audits and complete necessary due diligence in preparation for new technologies.
Work with established configuration and change management policies to ensure awareness, approval, and ultimate success of changes made to the network infrastructure.
Provide troubleshooting and end user support when necessary.