Firewall Network Security Engineer

About the role

The Intel Information Security organization is seeking a Network Security Engineer to assist with architecting and designing secure classified network products to support USG operations.

Responsibilities

• Aid in architecting network and network security products in secured enclaves, including product testing, validation, and selection.
• Support the definition of system security requirements, including authorization boundary, security domains, classification of data, etc.
• Assist with designing and managing security interfaces, security interconnections, and trust relationships between system components and external systems.
• Implement system security designs using COTS, GOTS, and open-source hardware and software.
• Oversee the hardening and configuration of systems and system components in accordance with various Federal, DoD, and IC guidance.
• Coordinate security assessments to identify security control failures and recommend corrective actions.

Requirements

• Ability to obtain an active US Government Top Secret (TS) Security Clearance with the skill to obtain and maintain SCI access.
• Bachelor's degree with 3+ years of information technology experience.
• 3+ years of experience: Deploying, configuring Fortinet FortiGate firewalls (FortiOS, VDOMs, High Availability); Building and deploying FortiManager and FortiAnalyzer; Routing (BGP/OSPF), NAT, and network segmentation; IP address subnetting; Designing and managing firewall policies, IPS/IDS, and threat controls.

Qualifications

• Active US Government Top Secret (TS) Security Clearance with the skill to obtain and maintain SCI access.
• Experience with DoD security implementation (e.g. STIG) and security tools for managing the environment.
• Experience with building and managing network infrastructure using automation tools (Ansible, Python, APIs).
• Understanding of NIST/STIG/compliance-driven environments.
• Experience with network analysis software such as SD Elements, Splunk, Sniffer, Wireshark, or Microsoft Network Monitor.
• Certifications in cybersecurity to include Certified Cloud Security Professional (CCSP) or Certified Information Systems Security Professional (CISSP).
• Experience with scripting in the UNIX environment.
• Experience utilizing Ansible as a configuration management tool, for system administration of users or devices, or as a security compliance automation tool.
• Experience with operational monitoring with SNMP or other Enterprise Network Management Systems.
• Experience with troubleshooting tools from CLI, packet capture, and log analysis.
• Familiarity with VPN implementation (IPSec, SSL) with identity integration (AD/MFA).

Benefits

Intel offers a comprehensive benefits package including competitive pay, stock bonuses, and benefit programs such as health, retirement, and vacation. Annual salary range for this role is $105,300.00 - 175,210.00 USD. Position of Trust: N/A. Business Group: IT. Shift: Shift 1 (United States of America). Location: US, Arizona, Phoenix. Additional Locations: Business Group IT. Position Type: Experienced Hire. Time Type: Full-time. Work Model: On-site presence. Recruitment Fees: Not applicable. EEO Statement: Intel is committed to Equal Employment Opportunity (EEO) and will not discriminate against any employee or applicant for employment because of race, color, sex, age, national origin, religion, sexual orientation, gender identity, status as a protected veteran, or status as a qualified individual with a disability, or any other protected category under federal, state, or local laws. RBA Compliance: Intel is committed to Responsible Business Alliance (RBA) compliance and ethical hiring practices. We do not charge any fees during our hiring process. Candidates should never be required to pay recruitment fees, medical examination fees, or any other charges as a condition of employment. If you are asked to pay any fees during our hiring process, please report this immediately to your recruiter.