Senior Firewall Engineer

Celestica International LP • Richardson, TX

2d

About The Position

We are looking for a Senior Firewall Engineer to join our Security Architecture team. You will be responsible for the day-to-day engineering, deployment, and optimization of our global firewall infrastructure. This role requires a "deep-diver" who can manage complex rule migrations, troubleshoot intricate VPN issues, and ensure our security posture is maintained through rigorous patch management and configuration auditing.Performs tasks such as, but not limited to, the following:

Deployment & Integration: Lead the installation and configuration of physical and virtual firewalls (NGFW) in data centers and cloud VPCs.
Complex Rule Management: Process high-complexity firewall change requests, ensuring that all changes are documented and follow the change management process.
VPN Administration: Manage and troubleshoot Site-to-Site (IPsec) and Client-to-Site (GlobalProtect/AnyConnect) VPN tunnels.
Operational Excellence: Perform regular firmware upgrades, vulnerability patching, and hardware refreshes across the global estate.
Deep-Dive Troubleshooting: Use packet captures and flow analysis (Wireshark, tcpdump) to resolve connectivity issues that junior staff cannot solve.
Security Automation: Develop scripts (Python/Ansible) to automate repetitive tasks like health checks or mass object creation.
Mentorship: Act as a technical mentor for Junior/Mid-level SOC and Network Engineers.

Requirements

• Firewall Mastery, Advanced administration of Checkpoint Firewalls
• Protocols: Deep knowledge of TCP/IP, NAT/PAT, BGP, OSPF, and SSL/TLS Inspection.
• Analysis Tools: Expert at using Wireshark, Splunk, and firewall auditing tools like Tufin.
• Cloud Platforms: Experience managing security groups and virtual appliances in AWS or Azure.
• Identity/Auth: Integrating firewalls with Active Directory, LDAP, and MFA (SAML/Okta).
• Excellent written and verbal communication skills, interpersonal and collaborative skills, and the ability to communicate security and risk-related concepts to technical and nontechnical audiences.
• Strong presentation skills for communicating architectural designs to executive leadership.
• Organized and able to meet deadlines.
• 7+ years of dedicated experience in Network Security Engineering.
• Education: Bachelor’s degree in IT, Networking, or a related field (equivalent experience accepted).

Nice To Haves

• Certifications: Checkpoint: CCSE (highly preferred)
• General: CompTIA Security+ or Cisco CCNP Security.

Responsibilities

• Lead the installation and configuration of physical and virtual firewalls (NGFW) in data centers and cloud VPCs.
• Process high-complexity firewall change requests, ensuring that all changes are documented and follow the change management process.
• Manage and troubleshoot Site-to-Site (IPsec) and Client-to-Site (GlobalProtect/AnyConnect) VPN tunnels.
• Perform regular firmware upgrades, vulnerability patching, and hardware refreshes across the global estate.
• Use packet captures and flow analysis (Wireshark, tcpdump) to resolve connectivity issues that junior staff cannot solve.
• Develop scripts (Python/Ansible) to automate repetitive tasks like health checks or mass object creation.
• Act as a technical mentor for Junior/Mid-level SOC and Network Engineers.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Number of Employees: 5,001-10,000 employees