Senior Firewall Engineer

ITR

Oak Ridge, TN

Full-Time

Job Description

Senior Firewall Engineer

Job Responsibilities:

The primary responsibility for this position is network design, configuration and troubleshooting
Responsible for the daily secure operations of the network enclaves.
Providing coordination, notification, escalation and documentation to resolve events/issues, efficiently minimizing customer impact.
Interfacing with and providing outage reports to various levels of management.
Assisting with other tasks as needed or as assigned by management.
Ensure systems are configured and maintained per cyber security common control requirements so that accreditation is retained.
Create and maintain infrastructure documentation as it relates to infrastructure systems design, configuration, support, and processes.
Identify, create, communicate, and implement process engineering for technologies to create end-to-end service offerings.
Conduct research, cost-benefit and return-on-investment analysis on proposed hardware, software and systems to justify recommendations, support purchasing efforts and aid management in making infrastructure design and architecture decisions.
Manage capacity and performance of the WAN/LAN network platforms, ensuring the integrity of the infrastructure.
Proactively monitor, test, collect and analyze system performance statistical data to improve quality of the network environment.
Diagnose and resolve complex configuration and troubleshooting issues within a multi-vendor infrastructure.
Adhere to a customer serviced focused culture

Basic Qualifications:Bachelor’s Degree in Engineering, Computer Science, or a related field with a minimum of 5 years relevant experience is required. An equivalent combination of education and experience will be considered.

Knowledgeable in the use of network and configuration management. Working knowledge of Cisco IOS, Arista, JUNOS, routers, multilayer switch, and layer 2 & 3 switch configuration and deployments.
Palo Alto Firewall experience is a must. Cisco and Juniper firewall experience highly desired.
Knowledge of Cisco, Arista and Juniper Routers/Switches including Catalyst, Nexus, MX, EX, SRX.
Experience with vulnerability scanning.
Good oral communication and technical writing skills.
Good problem-solving skills and the ability to visualize a problem or situation and think abstractly to solve it.
Ability to handle constantly changing work priorities, to be able to multitask effectively during busy times, and to exercise patience and professionalism during stressful situations.
Ability to work responsibly with or without supervision.
Working knowledge of routing protocols (OSPF, BGP, etc.)
The ability to obtain and maintain a Department of Energy clearance is required. This requires US Citizenship.

Preferred Qualifications:

Knowledge of Python, REST-API, Shell Scripting and other scripting languages highly desired.
Familiarity with JSON and YAML data structures.
FIREMON, Algosec or other firewall management tools.
Network Security knowledge, including familiarity with Zero Trust.
Client VPN technologies, such as Cisco AnyConnect, Global Protect.
Implementation and Design of IPSEC VPN.
Design, implement, and operate a multi-datacenter network.
Familiarity with IPv6 implementations.
Experience with vulnerability scanning.
Working knowledge of routing protocols (OSPF, BGP, etc.)
Must be proficient in Microsoft Visio.