Senior Firewall Engineer

Itr Co. Ltd - Oak Ridge, TN

Full-time - Mid Level

Oak Ridge, TN

Food Services and Drinking Places

About the position

The Senior Firewall Engineer is responsible for the design, configuration, and troubleshooting of network systems, ensuring secure operations and compliance with cybersecurity standards. This role involves managing network performance, conducting research for infrastructure improvements, and providing technical support and documentation to various management levels. The engineer will also be tasked with maintaining system integrity and implementing process engineering for enhanced service offerings.

Responsibilities

• Network design, configuration, and troubleshooting.
• Ensure daily secure operations of network enclaves.
• Coordinate, notify, escalate, and document to resolve events/issues.
• Provide outage reports to management.
• Assist with additional tasks as assigned by management.
• Maintain systems per cybersecurity common control requirements.
• Create and maintain infrastructure documentation.
• Implement process engineering for technologies to create service offerings.
• Conduct research and cost-benefit analysis on proposed hardware and software.
• Manage capacity and performance of WAN/LAN network platforms.
• Proactively monitor and analyze system performance data.
• Diagnose and resolve complex configuration issues in a multi-vendor environment.
• Adhere to a customer service-focused culture.

Requirements

• Bachelor's Degree in Engineering, Computer Science, or a related field.
• Minimum of 5 years relevant experience or equivalent combination of education and experience.
• Knowledge of network and configuration management.
• Working knowledge of Cisco IOS, Arista, JUNOS, routers, multilayer switches, and layer 2 & 3 switch configuration.
• Palo Alto Firewall experience is required.
• Cisco and Juniper firewall experience is highly desired.
• Knowledge of Cisco, Arista, and Juniper Routers/Switches including Catalyst, Nexus, MX, EX, SRX.
• Experience with vulnerability scanning.
• Good oral communication and technical writing skills.
• Strong problem-solving skills and ability to visualize problems.
• Ability to handle changing work priorities and multitask effectively.
• Ability to work with or without supervision.
• Working knowledge of routing protocols (OSPF, BGP).
• Ability to obtain and maintain a Department of Energy clearance.

Nice-to-haves

• Knowledge of Python, REST-API, Shell Scripting, and other scripting languages.
• Familiarity with JSON and YAML data structures.
• Experience with FIREMON, Algosec, or other firewall management tools.
• Network Security knowledge, including familiarity with Zero Trust.
• Client VPN technologies experience, such as Cisco AnyConnect, Global Protect.
• Implementation and Design of IPSEC VPN.
• Design, implement, and operate a multi-datacenter network.
• Familiarity with IPv6 implementations.
• Proficiency in Microsoft Visio.