Network Engineer 3

Duration: 12 months (onsite from day one) • Locations: Carson City or Las Vegas, NV • Anticipated start date: 09/21/2026 • Las Vegas address: 4615 W. Sunset Rd, Las Vegas, NV 89188 • Interview type: in person

About the role

NDOT is seeking a Senior Firewall Engineer to provide dedicated management, administration, and engineering support for its hybrid network security environment. This role is responsible for the day-to-day operation and continuous improvement of on-premise Fortinet firewalls and will also support Palo Alto Prisma SASE (cloud-delivered NGFW) as part of the agency's evolving cloud security architecture. The engineer will ensure firewall policies are properly designed, implemented, maintained, and documented to support secure and reliable business operations.

NDOT is currently engaged in a firewall modernization effort in partnership with a vendor, and this role will work closely with vendor engineering resources during implementation. The Senior Firewall Engineer will play a key role in operationalizing, maintaining, and supporting the environment post-implementation, ensuring long-term sustainability, performance, and security of firewall services. This position serves as the primary technical resource for firewall management, addressing a current gap in ownership and operational consistency.

Responsibilities

• Manage the full lifecycle of firewall rules, including intake, review, implementation, validation, and periodic clean-up to reduce risk and eliminate unnecessary or outdated access.
• Monitor firewall performance and security events, support incident response efforts, and ensure timely resolution of network security issues.
• Provide architectural guidance for network security across both on-premise and cloud environments, including designing and maintaining network segmentation.
• Support secure connectivity for applications and users and contribute to the maturation of NDOT's cloud security capabilities, including SASE where applicable.
• Work closely with network, infrastructure, security, and application teams to ensure firewall policies align with business needs while maintaining strong security controls.
• Develop and maintain clear, audit-ready documentation including firewall rules, network diagrams, and standard operating procedures.
• Support compliance efforts by aligning configurations with established security best practices and assisting with audit and risk mitigation activities.

Requirements

• 7+ years of hands-on experience in firewall engineering and network security operations.
• Strong experience managing Fortinet (FortiGate) firewalls in an enterprise environment.
• Experience with Palo Alto technologies is a plus; Prisma SASE or cloud-delivered firewall experience preferred but not required.
• Proven ability to manage firewall rule lifecycles, including design, implementation, and optimization.
• Experience working in hybrid environments (on-premise and cloud).
• Solid understanding of network protocols, segmentation, VPNs, and secure access design.
• Ability to analyze logs, troubleshoot issues, and support incident response activities.
• Experience developing and maintaining technical documentation and operational procedures.
• Strong collaboration skills and ability to work across technical teams and business units.

Certifications are a plus but not required; practical, hands-on experience is prioritized.