Cyber Security Firewall Admin/Engineer

About

The Cyber Security Firewall Admin/Engineer will provide onsite and remote support to District Enterprise Network Security Devices; focus on Firewall operation and maintenance (Check Point, Cisco ASA and Palo Alto Networks). ONSITE 3 DAYS/WEEK.

This role will include new Firewall roll-out and will be expected that all candidates have the ability and past experience in doing so.

The Cyber Security Firewall Admin/Engineer will provide support services to define security requirements, identify the appropriate configuration for each unique District environment, and perform tasks associated with the day-to-day operations and maintenance on installed Enclave Boundary Defense systems and applications, for District Distribution operation locations.

The ideal candidate will have one or more of the following secondary competencies: Network Access Controls (ForeScout), Proxy Systems (BlueCoat), Intrusion Detection Systems (SourceFire), Web Application Firewalls (Imperva), DDoS protection (Arbor Networks Prevail APS).

Responsibilities

1. Provides high-level architectural expertise to managers and technical staff.
2. Develops architectural products and deliverables for the enterprise and operational business lines.
3. Develops strategy of system and the design infrastructure necessary to support that strategy.
4. Advises on selection of technological purchases with regards to processing, data storage, data access, and applications development.
5. Sets standards for the client/server relational database structure for the organization (Structured Query Language (SQL), Oracle, Sybase).
6. Advises of feasibility of potential future projects to management.
7. Provide Tier-3 support for NOC personnel troubleshooting network issues.
8. Analysis, design, configuration, implementation, documentation and operation of firewalls and other security controls.
9. Manage system deployments, upgrades, ongoing maintenance and operations.
10. Configuration and operation of security device authentication, management & logging platforms
11. Assist in requirement gathering related to implementation of security infrastructure technology solutions across enterprise and service provider networks.
12. Provide advanced technical support on network firewall management projects and related security infrastructure.
13. Provide technical support to agencies and other IT personnel relating to security implementation, standards compliance, vulnerability reduction, and strategic security planning.
14. Identify, troubleshoot, and resolve complex network connectivity issues as well as advise on network security related issues.
15. Provide occasional off-hours support for planned maintenance work and unplanned support issues.
16. May require on-site work at a data center during off-hours from time to time.

Qualifications

• Demonstrated experience with Check Point firewalls, deployment and operation
• Demonstrated experience with Cisco ASA firewalls, deployment and operations
• Demonstrated experience with Palo Alto appliances, deployment and operations
• Network and Application Firewall Packet Filtering technologies
• Virtual Private Networking (VPNs) Technologies
• Expert knowledge in Information Security best practices
• Troubleshooting, Scanning & Analysis tools
• Bachelor of Science in Electrical Engineering, Computer Science, Information Technology, or equivalent data security and networking experience required
• Background check and credit check will be required
• Experience providing enterprise level Firewall operations and maintenance support.
• Prior experience personally rolling out and implementing new firewalls
• Experience with Gigamon Network Visibility solutions
• 16 years of experience in Information technology

Travel Requirements

• No travel anticipated