Security Firewall Administrator

KonnectIT•Chicago, IL

5d•$130,000 - $150,000•Onsite

About The Position

The Security Firewall Administrator will be responsible for configuring, administering, maintaining, and troubleshooting enterprise network security platforms, including Palo Alto, Fortinet, Cisco, and related systems. This role involves managing firewall policies, ACLs, NAT/PAT, segmentation, logging, VPN connectivity, routing, switching, and LAN security controls. The administrator will troubleshoot network and firewall issues, support routing protocols, and manage TCP/IP, subnetting, and various network services. Additionally, the position requires supporting incident response, outage troubleshooting, and maintaining documentation in ServiceNow. The role also involves developing implementation plans, coordinating with various teams, and contributing to operational procedures.

Requirements

5+ years of enterprise network engineering, firewall administration, or network security operations experience.
Strong hands-on experience administering and troubleshooting enterprise firewall and network environments.
Palo Alto PCCET certification or equivalent experience.
Fortinet NSE 1–3 or higher, or equivalent experience.
Strong understanding of firewall rules, ACLs, NAT/PAT, network segmentation, logging, and security policy enforcement.
Hands-on knowledge of TCP/IP, IP subnetting, routing, switching, VLANs, trunking, spanning tree, and enterprise network architecture.
Experience configuring and troubleshooting OSPF, BGP, static routing, and related network protocols.
Experience with IPsec VPN technologies.
Strong incident-management, troubleshooting, escalation, and change-control discipline.
Experience using ServiceNow or a similar enterprise ticketing and change-management platform.
Strong Microsoft Visio or network diagramming skills.
Excellent customer service, written communication, verbal communication, documentation, and problem-solving skills.
Ability to work effectively across client, vendor, technical, and management teams.
Ability to work onsite at Chicago O’Hare and Chicago Midway airports as the standard work arrangement.
Must be able to pass a TSA background check.
Valid Driver’s License or State ID required.
Ability to support incident response, maintenance windows, and other operational requirements as needed.

Nice To Haves

Cisco CCNA or CCNP.
Additional Palo Alto, Fortinet, Cisco, or network security certifications.
Experience with Panorama, FortiManager, Cisco DNA Center, Cisco Prime, Cisco ISE, SolarWinds, or similar enterprise management platforms.
Experience with Infoblox and DNS architecture.
College degree in information technology, cybersecurity, networking, computer science, or a related field.
Experience supporting highly regulated, mission-critical, or airport technology environments.

Responsibilities

Configure, administer, maintain, and troubleshoot Palo Alto, Fortinet, Cisco, and related enterprise network security platforms.
Manage firewall policies, ACLs, NAT/PAT, segmentation, logging, VPN connectivity, routing, switching, and LAN security controls.
Troubleshoot enterprise network and firewall issues using ICMP, DNS, packet analysis, logs, command-line tools, and monitoring platforms.
Configure and support routing protocols including OSPF, BGP, static routing, and related enterprise network services.
Configure and troubleshoot TCP/IP, IP subnetting, spanning-tree protocols, VLANs, trunking, tunneling, vPCs, switch stacks, and VSS.
Support IPsec VPN configuration, troubleshooting, and connectivity.
Perform IOS upgrades, password recovery, and related network maintenance activities.
Support Infoblox and DNS architecture where applicable.
Monitor network security environments using tools such as Panorama, FortiManager, Cisco DNA Center, Cisco Prime, Cisco ISE, SolarWinds, or similar platforms.
Support incident response, outage troubleshooting, service restoration, and escalation activities.
Maintain accurate incident, service request, and change-management documentation in ServiceNow.
Develop implementation plans, test plans, contingency plans, backout plans, firewall change documentation, network diagrams, and operational procedures.
Coordinate work with project managers, technical leads, vendors, client stakeholders, and internal infrastructure teams.
Contribute to consistent change-management, documentation, security, and operational procedures.
Perform other network and security-related activities as assigned.