Security / Firewall Analyst

RESPONSIBILITIES:
Kforce has a client that is seeking a Security/Firewall Analyst in New York, NY.

Summary:
The Security/Firewall Analyst is responsible for managing, maintaining, and enhancing firewall and network security infrastructure. This role works closely with user teams, the Infosec department, and the Security Device Management team to ensure secure, compliant, and reliable network operations. In this role, you will provide technical expertise, participate in design and migration initiatives, and support incident response and audit activities related to firewalls and network security.

Key Responsibilities:
* Monitor proprietary ticketing system and the ticketing Portal for incoming firewall requests and tasks
* Obtain necessary approvals from the Infosec team for all firewall-related requests
* Develop detailed configuration plans for firewall rules and changes and submit them to the Security Device Management team for implementation and verification
* Coordinate and lead meetings with the Security Device Management team regarding firewall changes, issues, or project requirements
* Manage firewalls and Panorama systems, including licensing, upgrades, migrations, policy cleanup, vulnerability remediation, and hardening
* Troubleshoot firewall-related issues or incidents as escalated
* Assist with diagnosing potential security threats or vulnerabilities impacting the environment
* Participate in or complete Incident Reports (IR) and Reports of Findings (RFO) for issues involving firewalls
* Attend and contribute to design meetings, providing technical guidance on firewall considerations
* Participate in application and server migration meetings, including datacenter moves and cloud transitions
* Provide input and guidance for new functionality or feature enhancements (e.g., VPNs, User-ID, URL categories, routing, POCs)
* Attend CAB meetings
* Attend leadership meetings as required

REQUIREMENTS:
* Expertise with Palo Alto Firewalls (PCNSE Certification required)
* Experience with Cisco ASA and Cisco Firepower (FPR)
* Strong understanding of firewall technologies and security best practices
* Solid networking knowledge (CCNP or equivalent), including BGP
* Knowledge of DNS and strong troubleshooting skills

Nice-to-Have Skills:
* Experience with cloud platforms such as AWS, OCI, or Google Cloud Platform
* Knowledge of Blue Coat / Symantec Proxy solutions

The pay range is the lowest to highest compensation we reasonably in good faith believe we would pay at posting for this role. We may ultimately pay more or less than this range. Employee pay is based on factors like relevant education, qualifications, certifications, experience, skills, seniority, location, performance, union contract and business needs. This range may be modified in the future.

We offer comprehensive benefits including medical/dental/vision insurance, HSA, FSA, 401(k), and life, disability & ADD insurance to eligible employees. Salaried personnel receive paid time off. Hourly employees are not eligible for paid time off unless required by law. Hourly employees on a Service Contract Act project are eligible for paid sick leave.

Note: Pay is not considered compensation until it is earned, vested and determinable. The amount and availability of any compensation remains in Kforce's sole discretion unless and until paid and may be modified in its discretion consistent with the law.

This job is not eligible for bonuses, incentives or commissions.

Kforce is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, gender identity, national origin, age, protected veteran status, or disability status.

By clicking ?Apply Today? you agree to receive calls, AI-generated calls, text messages or emails from Kforce and its affiliates, and service providers. Note that if you choose to communicate with Kforce via text messaging the frequency may vary, and message and data rates may apply. Carriers are not liable for delayed or undelivered messages. You will always have the right to cease communicating via text by using key words such as STOP.