Sr. Firewall Engineer, Checkpoint & Palo Alto Focus, Progression

We need to output HTML fragment with sections: About the role? Actually we need to use

for headings: About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. Only include sections if posting has real specific content. We need to parse the posting. Title: Sr. Firewall Engineer, Checkpoint & Palo Alto Focus, Progression Company: Tampa Electric Company Location: Bearss Operations Center State and City: Florida - LUTZ Shift: 8 Hr. X 5 Days TITLE: Network & Security Systems Analyst Lead, Progression PERFORMANCE COACH: Mgr. Network Engineering & Cyber Security Operations COMPANY: Tampa Electric DEPARTMENT: High Performance Computing & BP Support FOCUS Areas Strong hands on Palo Alto experience in production Previous Checkpoint experience a plus Proven experience designing and supporting VPN solutions Experience in high availability or large scale enterprise environments Note that this position can be hired at any level within the job family of progression based on Education and years of experience but is ideally targeting to hire at the Lead level (3rd level in the JD). POSITION CONCEPT ... (long description). Then NETWORK & SYSTEMS SECURITY ANALYST LEAD In addition to the duties & responsibilities of the Analyst Sr, has increased responsibilities in consulting on small project design and plans. May serve as a project lead, cross-train peers, and mentor Analysts. Works under general direction. Additional Duties And Responsibilities ... RELATIONSHIPS ... Qualifications ... Knowledge/Skills/Abilities (ksa) ... TECO offers a competitive Benefits package!! Competitive Salary *401k Savings plan w/ company matching * Pension plan * Paid time off* Paid Holiday time * Medical, Prescription Drug, & Dental Coverage *Tuition Assistance Program * Employee Assistance Program * Wellness Programs * On-site Fitness Centers * Bonus Plan and more! We need to extract sections: - About the role: maybe a summary paragraph. Could use the POSITION CONCEPT paragraph as about the role. - Responsibilities: The duties described: planning/designing, implementing, supporting network, server, storage infrastructure; ensuring security controls; assessing assets; maintaining regulations; design, planning, operation, maintenance, support of TECO and NMGC network infrastructure; partnering with telecom; NERC CIP and disaster recovery; VoIP, SIP, DHCP, DNS, TCP/IP routing, OSPF, BGP, binary math, NAT, PAT, IPsec, SSL VPN, GRE tunneling, route redistribution, traffic shaping, port-level filtering, SD-WAN, MPLS; installation, configuration, maintenance of WAN/LAN connectivity; design, installation, configuration, maintenance of DNP over IP and serial SCADA communications; configuration and maintenance of Smart GRID communication hardware switches and routers. Also Additional Duties: monitors, troubleshoots, diagnoses, remedies server, network, DDoS protection, NetScaler load balancers, security controls; installs and configures server and network related hardware/software meeting security standards; design and planning required for small projects; project leadership, consulting, cross-train peers. We can combine responsibilities. - Requirements: maybe the qualifications: Education, Licenses/Certifications, Experience. - Qualifications: maybe same as Requirements? The spec says we can have both Requirements and Qualifications sections. But we need to avoid duplication. Could put Education, Licenses/Certifications, Experience under Qualifications. Or Requirements could be experience and certifications. Let's decide: Use Qualifications for education, certifications, experience. Use Requirements for maybe "Minimum eight (8) years of related hands-on experience..." but that's also experience. Might be redundant. Better to have one section: Qualifications (includes education, certifications, experience). And maybe Skills for Knowledge/Skills/Abilities. - Skills: The Knowledge/Skills/Abilities (ksa) list. - Benefits: The benefits list. - Pay: Not explicitly given; only "Competitive Salary" mentioned but no number. The rule: never create Pay/Schedule/Benefits sections unless posting actually states them. It says "Competitive Salary" but no specific figure. Is that enough? It says "Competitive Salary" as a phrase; but we should not create Pay section unless posting actually states them (specific). The phrase "Competitive Salary" is vague; but it's still stating that there is a competitive salary. The rule: "never create Pay/Schedule/Benefits sections unless the posting actually states them." It does state "Competitive Salary". However also says "Prefer a few substantive sections over many thin ones." Might still include Pay with that phrase? But they said "never emit a heading followed by filler/placeholder text (e.g. 'commensurate with experience', 'not specified', 'N/A', 'varies', 'TBD')". "Competitive Salary" is not exactly filler but still vague. Might be considered placeholder? I'd lean to not include Pay section because it's not a specific amount. Similarly Schedule: they gave Shift: 8 Hr. X 5 Days. That's a schedule. So we can include Schedule section with that info. - Benefits: they list many benefits; we can include Benefits section. Thus sections: About the role (POSITION CONCEPT), Responsibilities (duties), Qualifications (education, certifications, experience), Skills (KSAs), Benefits, Schedule. We must not repeat job title as heading. Use

for each section heading. We need to output only HTML fragment, no /. Use

• for lists. We need to preserve all substantive information; do not invent or summarize away detail. So we need to include all details from the posting, but we can condense into prose or list items as appropriate, but must not lose detail. However we must not invent. We need to include all specifics: e.g., list of technologies, regulations, etc. We need to be careful not to omit any detail. That's a lot. We'll try to capture all. Let's extract details: From POSITION CONCEPT: - responsible for planning/designing, implementing, and supporting new and existing network, server, storage infrastructure. - ensuring all network security controls (i.e., firewalls, web application firewalls [WAF], proxies, network segmentation, NAC, ACLs, etc.) are implemented and managed per corporate information security standards. - assessing enterprise assets and critical assets for secure configurations and maintaining and enforcing regulations and standards such as NERC Critical Infrastructure Protection (CIP), Sarbanes-Oxley (SOX), and Payment Card Industry (PCI). - responsible for the design, planning, operation, maintenance, and support of the TECO and NMGC network infrastructure. - includes primary accountability for network technologies such as route/switch, on-premise LAN/WAN, IPAM, Wi-Fi, ISP management, site-to-site VPNs, proxies (forward and reverse), perimeter firewall management, DNS, Azure cloud environments, automation, NAC/user access, hyperconverged infrastructure, and overall network security. - Partners with the Telecommunication teams on establishing/upgrading existing circuits/communication links. - Responsible for the NERC Cyber Infrastructure Protection and disaster recovery plans. - Responsible for VoIP, SIP, DHCP, DNS, TCP/IP routing and routing protocols such as OSPF and BGP, binary mathematics, NAT, PAT, IPsec and SSL VPN technologies, GRE tunneling, route redistribution, traffic shaping, port-level filtering, SD-WAN, MPLS and other communications related technologies. - Responsible for the installation, configuration, and maintenance of all WAN and LAN connectivity which includes core and campus switches, routers, firewalls, wireless access points, WAN scalers and load balancer technologies. - Responsible for the design, installation, configuration, and maintenance of DNP over IP and serial SCADA communications between the primary and backup control centers, power plants, solar sites, and substations. - Responsible for the configuration and maintenance of Smart GRID communication hardware switches and routers between the primary and backup control centers. Then NETWORK & SYSTEMS SECURITY ANALYST LEAD: - In addition to the duties & responsibilities of the Analyst Sr, has increased responsibilities in consulting on small project design and plans. - May serve as a project lead, cross-train peers, and mentor Analysts. - Works under general direction. - Additional Duties And Responsibilities: - Monitors, troubleshoots, diagnoses, and remedies server, network, DDoS protection, NetScaler load balancers, and security controls related problems and failures. - Installs and configures server and network related hardware/software which meet the company’s security standards. - Design and planning required for small projects. - Project leadership, consulting, or cross-train peers. RELATIONSHIPS: - Key Internal: Consults with all IT departments as needed. This role requires the ability to provide technical direction to members of project teams. - Key External: Consults with vendor technical specialists and account managers for the various technologies deployed. Qualifications: EDUCATION Required: High School Diploma or GED Preferred: Bachelor’s degree in Computer Science, Engineering, Math, or equivalent IT discipline (MIS). LICENSES/CERTIFICATIONS Required: Has obtained at least three or two, with the condition to obtain a third certification within one year of hire for this position, related network, system, operating system, or information security professional certifications: (e.g., Microsoft Certified Solutions Associate (MCSA), Microsoft Certified Solutions Expert (MCSE), VMware Certified Professional (VCP), Cisco Certified Network Associate (CCNA), Cisco Certified Network Professional (CCNP), Certified Ethical Hacker (CEH), GIAC Network Forensic Analyst (GNFA) or other GIAC Certifications, Certified Information Systems Security Professional (CISSP), Certified SCADA Security Architect (CSSA). Preferred: ITIL v3, CCNP, MCSE, VCP, GNFA, CISSP Experience Required: Minimum eight (8) years of related hands-on experience implementing and maintaining Windows, VMware, firewall support, DDoS protection, proxies, WAFs, NetScaler load balancers, Storage Area Networks, or Cisco Networking. In lieu of some experience listed above, may consider six (6) years of related experience with an Associate’s Degree or four (4) years of related experience with a Bachelor’s Degree in Computer Science, Engineering, Math, or equivalent IT discipline (e.g., MIS). Knowledge/Skills/Abilities (ksa): - Expert knowledge of network, server, and security controls infrastructure regardless of the complexity - Thorough working knowledge for most of the following technologies and operational functions: switching, routing, DNS/DHCP, Windows Active Directory, VMware, Voice over IP, Storage Area Networking, firewall support, DDoS protection, proxy, WAF, NetScaler load balancing, network segmentation, NAC, IDS/IPS, antivirus support, cyber security best practices, and networking/hardware installation and maintenance - Thorough working knowledge with packet analysis and denial of service protection - Strong critical thinking, analytical, problem solving, and risk assessment skills as well as strong listening and communication skills (oral and written) - Ability to present issues and topics of a complex technical nature to non-technical audiences - Excellent interpersonal, mentoring, and organizational skills - Good working knowledge of the processes that ensure compliance with regulatory or industry requirements such as NERC CIP, SOX, and PCI Benefits: - TECO offers a competitive Benefits package!! - Competitive Salary - *401k Savings plan w/ company matching - * Pension plan - * Paid time off* - * Paid Holiday time - * Medical, Prescription Drug, & Dental Coverage - *Tuition Assistance Program - * Employee Assistance Program - * Wellness Programs - * On-site Fitness Centers - * Bonus Plan and more! Schedule: Shift: 8 Hr. X 5 Days We also have location: Bearss Operations Center, Florida - LUT