Lead Information Security Engineer

We need to output HTML fragment with sections: About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. Only include sections that have real specific content. We must not repeat job title as heading. Must not include Job ID etc. Must remove boilerplate. Must preserve all substantive info. We need to parse the posting. Key content: - Intro paragraph: "We are seeking a Lead Firewall Automation and Certification Engineer to join our FirewallDEV team within the Application Hosting - Secure Network Services organization. This role is ideal for a technical leader passionate about network security and automation, with deep expertise in Next-Generation Firewall platforms. You will play a pivotal role in designing, automating, and maintaining secure network infrastructure across our data centers, enabling secure connectivity to business partners, the public Internet, and cloud providers. This position is central to our transformation efforts-driving automation, improving transparency, and enhancing operational efficiency." That's about the role. - "In This Role, You Will" list of duties: bullet points. Let's extract bullet points: - Conduct rigorous testing and certification of next-generation firewalls (NGFWs) to validate performance, security efficacy, compliance with industry standards Labs), and interoperability across diverse network environments. (Note: there is a typo: "Labs)" maybe "ICSA Labs, NSS Labs". We'll keep as given. - Design and implement scalable, secure NGFW architectures across enterprise environments. - Lead cross-functional teams in planning and delivering firewall-related projects using Agile methodologies. - Develop automation solutions for firewall provisioning, policy management, and operational tasks using Python, Ansible, and other tools. - Perform complex firewall certifications, upgrade testing, and developing templated configurations. - Ensure compliance with security and regulatory requirements in all firewall implementations. - Analyze performance trends and recommend improvements to firewall operations and automation. - Collaborate with network and cyber partner teams to educate and collaborate for success. - Mentor junior engineers and contribute to technical design documentation. That's responsibilities. - Required Qualifications: list: - 5+ years of Information Security Engineering experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education - 3+ years of hands-on experience with NGFW platforms - 3+ years of automation experience - 3+ years' experience with firewall policy design, NAT, VPNs, threat prevention features, and templated installations - 3+ plus years' experience with Python, Ansible, REST APIs, and automation frameworks - Desired Qualifications: list (some repeated from responsibilities but we can treat as desired). It includes: - Conduct rigorous testing and certification of next-generation firewalls (NGFWs) to validate performance, security efficacy, compliance with industry standards (e.g., ICSA Labs, NSS Labs), and interoperability across diverse network environments. - Strong Networking Knowledge - Proficiency in TCP/IP, routing, switching, VPNs, and network protocols (e.g., HTTP, DNS, SSL/TLS). - Experience with Testing Methodologies-Familiarity with performance, functional, interoperability, and security testing frameworks - Certifications Relevant certifications such as: CISSP, CEH, GSEC, Vendor-specific certs (e.g., Palo Alto Networks PCNSE, Fortinet NSE, Cisco CCNP Security) - Knowledge of Industry Standards with Hands-on Experience with Test Tools Proficiency in tools like Ixia, Wireshark, Nmap, and vulnerability scanners. - Familiarity with automation tools such as Ansible Tower, Terraform, OCP, and Git. - Experience with Agile methodology and CI/CD pipelines (Jenkins, GitLab). - Knowledge of network security best practices and compliance frameworks. - Experience in large enterprise environments with complex firewall deployments. - Excellent verbal, written, and interpersonal communication skills. - Documentation and Reporting Skills-Ability to produce clear, detailed test plans, procedures, and certification reports - Job Expectations: This role is not eligible or visa sponsorship - Pay Range Reflected is the base pay range offered for this position. Pay may vary depending on factors including but not limited to demonstrated examples of prior performance, skills, experience, or work location. Employees may also be eligible for incentive opportunities. $119,000.00 - $187,000.00 - Benefits: list of benefits. - Posting End Date: 23 Sep 2026 (maybe minor metadata, can be folded into short p or dropped). We can include as a short p maybe but not as heading. - Other boilerplate: Equal Opportunity etc to be removed. We need sections: About the role (intro paragraph). Responsibilities (the bullet list). Requirements (maybe required qualifications). Qualifications (maybe desired qualifications). Skills (maybe combine some skill-specific items). Benefits (list). Pay (salary range). Schedule (not present, so omit). Also maybe Job Expectations about visa sponsorship could be included in About the role or a note; but we can include as a short p under About the role or maybe under Requirements? The instruction: "Do NOT put Job ID / requisition numbers as headings — fold minor metadata into a short

or drop it." Visa sponsorship note is not minor metadata? It's a job expectation. Could be included in About the role or a separate section like "Job Expectations" but we only have predefined headings; we could put it under About the role as a paragraph. We must not create Pay/Schedule/Benefits sections unless posting actually states them. Benefits are stated, Pay is stated. Schedule not stated, so omit. We must not emit a heading followed by filler/placeholder text. So ensure each heading has substantive content. We need to output only HTML fragment, no html/body tags, no markdown fences. Thus produce something like:

About the role

We are seeking a Lead Firewall Automation and Certification Engineer to join our FirewallDEV team within the Application Hosting - Secure Network Services organization. This role is ideal for a technical leader passionate about network security and automation, with deep expertise in Next-Generation Firewall platforms. You will play a pivotal role in designing, automating, and maintaining secure network infrastructure across our data centers, enabling secure connectivity to business partners, the public Internet, and cloud providers. This position is central to our transformation efforts-driving automation, improving transparency, and enhancing operational efficiency. This role is not eligible for visa sponsorship.

Responsibilities

• Conduct rigorous testing and certification of next-generation firewalls (NGFWs) to validate performance, security efficacy, compliance with industry standards, and interoperability across diverse network environments.
• Design and implement scalable, secure NGFW architectures across enterprise environments.
• Lead cross-functional teams in planning and delivering firewall-related projects using Agile methodologies.
• Develop automation solutions for firewall provisioning, policy management, and operational tasks using Python, Ansible, and other tools.
• Perform complex firewall certifications, upgrade testing, and developing templated configurations.
• Ensure compliance with security and regulatory requirements in all firewall implementations.
• Analyze performance trends and recommend improvements to firewall operations and automation.
• Collaborate with network and cyber partner teams to educate and collaborate for success.
• Mentor junior engineers and contribute to technical design documentation.

Requirements

• 5+ years of Information Security Engineering experience, or equivalent demonstrated through work experience, training, military experience, or education.
• 3+ years of hands-on experience with NGFW platforms.
• 3+ years of automation experience.
• 3+ years' experience with firewall policy design, NAT, VPNs, threat prevention features, and templated installations.
• 3+ years' experience with Python, Ansible, REST APIs, and automation frameworks.

Qualifications

• Conduct rigorous testing and certification of next-generation firewalls (NGFWs) to validate performance, security efficacy, compliance with industry standards (e.g., ICSA Labs, NSS Labs), and interoperability across diverse network environments.
• Strong networking knowledge – proficiency in TCP/IP, routing, switching, VPNs, and network protocols (e.g., HTTP, DNS, SSL/TLS).
• Experience with testing methodologies – familiarity with performance, functional, interoperability, and security testing frameworks.
• Relevant certifications such as CISSP, CEH, GSEC, and vendor-specific certs (e.g., Palo Alto Networks PCNSE, Fortinet NSE, Cisco CCNP Security).
• Hands‑on experience with test tools like Ixia, Wireshark, Nmap, and vulnerability scanners.
• Familiarity with automation tools such as Ansible Tower, Terraform, OCP, and Git.
• Experience with Agile methodology and CI/CD pipelines (Jenkins, GitLab).
• Knowledge of network security best practices and compliance frameworks.
• Experience in large enterprise environments with complex firewall deployments.
• Excellent verbal, written, and interpersonal communication skills.
• Ability to produce clear, detailed test plans, procedures, and certification reports.

Benefits

• Health benefits
• 401(k) Plan
• Paid time off
• Disability benefits
• Life insurance, critical illness insurance, and accident insurance
• Parental leave
• Critical caregiving leave
• Discounts and savings
• Commuter benefits
• Tuition reimbursement
• Scholarships for dependent children
• Adoption reimbursement

Pay

$119,000.00 - $187,000.00 base pay range (may vary based on performance, skills, experience, or location; incentive opportunities may be available).

We should not include Schedule. Check for any repeated content: The responsibilities bullet includes "Conduct rigorous testing and certification..." which also appears in desired qualifications; but that's okay. We removed boilerplate like Equal Opportunity, Drug and Alcohol Policy, etc. We included visa sponsorship note in About the role. We preserved all substantive info. Check for any missing: The posting also mentioned "Job Expectations: This role is not eligible or visa sponsorship" we captured. Also "Posting End Date: 23 Sep 2026" we could fold into a short p maybe under About the role or as a separate minor metadata p. But instruction: fold minor metadata into a short

or drop it. Could add a small p after About the role:

Posting end date: 23 Sep 2026.

but that's minor metadata. Might be okay. However we already have About the role paragraph; we could append that sentence. But better to keep it as a short p after About the role before Responsibilities? The instruction: "fold minor metadata into a short

or drop it." So we can add a short p after About the role:

Posting end date: 23 Sep 2026.

That is fine. But we must not create a heading for it. Thus final HTML:

About the role

We are seeking a Lead Firewall Automation and Certification Engineer to join our FirewallDEV team within the Application Hosting - Secure Network Services organization. This role is ideal for a technical leader passionate about network security and automation, with deep expertise in Next-Generation Firewall platforms. You will play a pivotal role in designing, automating, and maintaining secure network infrastructure across our data centers, enabling secure connectivity to business