Firewall Engineer

This job has now expired please search on the home page to find live IT Jobs.

The Firewall Engineer is responsible for the configuration, monitoring, management and troubleshooting of firewalls. Will act as liaison with local region network engineering and technical support groups to assist in the reviewing, design and deployment of new services, review existing services and migration of services/systems.

Day to day duties will be done by monitoring the Remedy ticket queue and then complying with proper policies and procedures to allow the business to operate and communicate in a secure solution. All the work must be done following proper Security policies and payment industry standards as well as the promotion of security best practices.

Responsibilities

- Function as an internal consulting resource on network security issues specifically firewall technologies

- Standard change control and troubleshooting issues

- Performs recurring maintenance activities such as device upgrades and patches with primary focus firewalls and on perimeter devices

- Governing certification, adherence and compliance to all security requirements and keeping up-to-date with the latest security issues

- Sponsorship and execution of technology & security advancements

- Ensuring production systems are secure, up to date and vulnerabilities managed

- In-depth operational and technical knowledge of cybersecurity concepts including, but not limited to (SIEM) tools

- Some travel may be necessary

- Working closely with the Security team on various projects in the Global IT Security department

- Escalates security issues

- Configuration, monitoring, management and troubleshooting of firewalls

- Firewall technologies; Next Generation Firewall (NGFW), Unified Threat Management (UTM): Cisco ASA, Fortinet and Juniper SRX

- Utilises change management, request, and ticketing systems, documents status updates and problem resolutions

- Familiar implementing firewall security policies

- Experience creating policies in and managing Cisco Identity Services Engine (ISE)

- IPS/IDS technologies; Signature and pattern-based intrusion detection and prevention systems: Sourcefire and Fortinet

- VPN Technologies; IPSEC client & L2L tunnel, SSL client and clientless connectivity

- Maintains documentation related to work area and routinely updates architecture diagrams using Visio

Requirements

- Hands on experience in computer routing and networking, especially with firewall technologies

- Hands on experience with multi-context firewall implementation (Cisco, Fortigate and Juniper)

- Must have networking TCP/IP routing protocol experience

- Experience analysing and troubleshooting Access Control Lists (ACLs) and VPN tunnels on firewalls

- Experience with firewalls, remote access VPN implementation, troubleshooting and problem resolution is desired

- Experience with Cisco ACS, ISE

- Appropriate Bachelors level qualification or 5+ years of experience in relevant positions

- Security and networking certifications such as Cisco, Fortigate and/or Juniper