MLL Firewall Engineer – Contract
Location: Raritan, NJ Area | Remote
Schedule: Monday–Friday, 8:00 AM–5:00 PM EST | 40 hours/week
Contract: Contract position
Additional Support: Occasional evening/weekend support for scheduled firewall lockdown activities, with advance notice
Position Overview
Systech is seeking an experienced MLL Firewall Engineer to support global firewall segmentation, application-specific rule development, traffic analysis, and firewall lockdown initiatives.
The ideal candidate will have strong hands-on expertise with Cisco Firepower Threat Defense (FTD), Cisco ASA, and Firewall Management Center (FMC), along with solid networking fundamentals and the ability to independently analyze application traffic and develop secure, least-privilege firewall rules.
Required Qualifications
- 8+ years of professional Firewall/Network Security experience, with strong hands-on Cisco firewall expertise.
- Expert-level experience with Cisco FTD, ASA, and FMC.
- Strong knowledge of TCP/IP, subnetting, routing, switching, and firewall technologies.
- Proven experience analyzing traffic flows and developing rules based on source, destination, ports, and protocols.
- Experience with network segmentation, firewall lockdowns, and security standards/frameworks such as ISA-95, NIST, or NIS2.
- Strong experience managing firewall objects, object groups, URLs, ports, and naming standards.
- Experience creating accurate Firewall Rule Templates (FRTs) using Microsoft Excel.
- Hands-on experience with Jira for documentation, task tracking, and status reporting.
- Strong Microsoft Excel, Office 365, Teams, and SharePoint skills.
- Excellent troubleshooting, analytical, documentation, and communication skills.
- Ability to take full ownership, work independently, proactively identify issues, and require minimal day-to-day guidance.
- Strong team player who collaborates effectively with global technical, security, application, and business teams.
- Ability to meet aggressive implementation timelines, including approximately 7-day SLA requirements for firewall lockdown activities.
Preferred Qualifications
- U.S. graduates preferred, with 10+ years of professional experience working in the U.S.
- Experience with Zscaler, Elisity, or Azure Data Explorer (ADX).
- Experience in GxP-regulated, pharmaceutical, manufacturing, laboratory, or distribution environments.
- Knowledge of manufacturing/industrial technologies such as MES, Camstar, Rockwell, Opcenter, PAS-X, OSI PI, PIMS, Kepware, and PLC-controlled devices.
- Experience translating complex application communication flows into appropriate firewall rules.
- Relevant certifications such as CCNA, CCNP, CISSP, SSCP, or ISSAP.
What We Value
We are looking for a qualified, experienced professional—not layers of management or intermediaries. The successful candidate will demonstrate:
- Excellent verbal and written communication
- Strong ownership and accountability
- Independent decision-making and execution
- Proactive, solution-oriented thinking
- Strong attention to detail
- Ability to stay one step ahead and anticipate issues
- Collaborative team-player mindset
- Professionalism and reliability
Systech follows a direct, no-layers approach and will present only qualified candidates who closely match the technical and professional requirements of the role.