Firewall Operations Engineer

Responsibilities

• Provides Tier 2 support in the monitoring, management, and troubleshooting of perimeter devices to include firewalls, proxies, and mail transport agents.
• Maintains Service Now application for Firewall Operations (FWOPS) incident and service requests.
• Implements firewall rules and policies, performs troubleshooting of firewalls (Palo Alto, Cloud Palo Alto, and FortiGate), CISCO Email Security Appliance (ESA), A10 (load balancer), Proxy platforms, URL filtering across platforms, and analyzes network traffic captures.
• Escalates issues as required to Tier 3 staff and monitors issues throughout a problem’s life cycle.
• Performs recurring maintenance activities such as device reboots and software upgrades on all devices underneath the Firewall Operations Team.
• Records and reports on firewall operations, utilization, and maintenance.
• Collaborates across Bureaus and Agencies to implement and repair network changes as they relate to perimeter security devices.
• Supports Diplomatic Security Computer Incident Response Team (CIRT) by implementing block requests for IP’s, Websites, and Email addresses.
• Updates architecture diagrams using Visio.
• Maintains health checks on multiple perimeter security devices.
• Drafts, coordinates, and publishes outage notifications as required.
• Maintains shift logs and provides reports to leadership as needed.
• Maintains standard operating procedures (SOP), work instructions, and other working documents.
• Attends calls requiring a FWOPS team to attend, to include troubleshooting calls.

Qualifications

• Required Education & Experience: Bachelor degree with 9 years or more experience; Masters and 7 years or more experience; May accept additional experience in lieu of degree.
• 2-4 years of experience of in-depth experience using Palo Alto Firewalls and Panorama monitoring tools to troubleshoot and configure a Firewall infrastructure.
• Strong understanding of networking, proxy, and packet filtering technologies.
• Minimum 3-5 years of IT Customer Support experience (Tier I and/or Tier II).
• First-hand experience with supporting the monitoring and configuration of Firewall/DMZ infrastructure including Network and Application Firewall Packet Filtering technologies (Palo Alto, Palo Alto virtual FW (cloud), FortiGate, Azure Firewall, Cloudflare, Cisco Email Security Appliances (ESA), A10 (Load Balancer), and proxy devices).
• CLI experience preferred.
• Experienced in utilizing network monitoring tools such as NeuralStar.
• Experienced with TCP/IP network implementation and troubleshooting.

Qualifications

• Required Clearance: US Citizenship. Active interim secret clearance or higher with the ability to obtain a top secret clearance.

Pay

Target salary range $120,001 - $160,000. The estimate displayed represents the typical salary range for this position based on experience and other factors.