Senior Firewall Engineer

Oak Ridge, TN | Senior Firewall Engineer | Full-time

We are actively recruiting a Senior Firewall Engineer for our client in Oak Ridge, TN. This is a contract opportunity that will require some onsite work in Oak Ridge. Primary responsibilities include network design, configuration, and troubleshooting, as well as daily secure operations of the network enclaves. Adherence to a customer service focused culture is a must. Palo Alto firewall experience is required. This person must have the ability to handle constantly changing work priorities, be able to multitask effectively during busy times, and exercise patience and professionalism during stressful situations. All potential candidates must be able to obtain and maintain a Department of Energy clearance.

Due to client request, candidates must be eligible to work in the United States without sponsorship.

Job Responsibilities:

• Providing coordination, notification, escalation and documentation to resolve events/issues, efficiently minimizing customer impact.
• Interfacing with and providing outage reports to various levels of management.
• Assisting with other tasks as needed or as assigned by management.
• Ensure systems are configured and maintained per cyber security common control requirements so that accreditation is retained.
• Create and maintain infrastructure documentation as it relates to infrastructure systems design, configuration, support, and processes.
• Identify, create, communicate, and implement process engineering for technologies to create end-to-end service offerings.
• Conduct research, cost-benefit and return-on-investment analysis on proposed hardware, software and systems to justify recommendations, support purchasing efforts and aid management in making infrastructure design and architecture decisions.
• Manage capacity and performance of the WAN/LAN network platforms, ensuring the integrity of the infrastructure.
• Proactively monitor, test, collect and analyze system performance statistical data to improve quality of the network environment.
• Diagnose and resolve complex configuration and troubleshooting issues within a multi-vendor infrastructure.

Basic Qualifications:

• Bachelor s Degree in Engineering, Computer Science, or a related field with a minimum of 5 years relevant experience is required. An equivalent combination of education and experience will be considered.
• Knowledgeable in the use of network and configuration management. Working knowledge of Cisco IOS, Arista, JUNOS, routers, multilayer switch, and layer 2 & 3 switch configuration and deployments.
• Cisco and Juniper firewall experience highly desired.
• Knowledge of Cisco, Arista and Juniper Routers/Switches including Catalyst, Nexus, MX, EX, SRX.
• Experience with vulnerability scanning.
• Good oral communication and technical writing skills.
• Good problem-solving skills and the ability to visualize a problem or situation and think abstractly to solve it.
• Ability to work responsibly with or without supervision.
• Working knowledge of routing protocols (OSPF, BGP, etc.)

Preferred Qualifications:

• Knowledge of Python, REST-API, Shell Scripting and other scripting languages highly desired.
• Familiarity with JSON and YAML data structures.
• FIREMON, Algosec or other firewall management tools.
• Network Security knowledge, including familiarity with Zero Trust.
• Client VPN technologies, such as Cisco AnyConnect, Global Protect.
• Implementation and Design of IPSEC VPN.
• Design, implement, and operate a multi-datacenter network.
• Familiarity with IPv6 implementations.
• Experience with vulnerability scanning.
• Working knowledge of routing protocols (OSPF, BGP, etc.)
• Must be proficient in Microsoft Visio.

"Equal Opportunity Employer/Veterans/Disabled"