Firewall Admin​/Engineer; Cybersecurity Technical Staff

What You Will Do

This position will be filled at either the Cybersecurity Technical Staff 1 or 2 level, depending on the skills of the selected candidate. Additional job responsibilities (outlined below) will be assigned if the candidate is hired at the higher level.

As a key member of the Edge Security Team in the Infrastructure Service Division - Network Services Group (ISD-NS), you'll administer and maintain our core and perimeter firewalls while monitoring complex, mission-critical networks. You'll tackle some of the most challenging and rewarding work in the field, supporting the day-to-day operations of our team including firewalls, DNS, load balancers, remote access solutions, underlying network services, and cross-domain solutions across both unclassified and classified environments.

If you're passionate about technology and security and want to make a real impact, we want to hear from you.

As a Cybersecurity Technical Staff 1 you will do the following:

• Respond to firewall requests
• Respond to service incidents / outages
• Implement Firewall policies
• Monitor firewall logs and alerts for security events and anomalies
• Perform basic troubleshooting of firewall connectivity issues
• Document firewall rule changes and maintain accurate configuration records
• Review and validate firewall rule requests for completeness and accuracy
• Support firewall performance monitoring and capacity planning activities
• Collaborate with cross-functional teams to resolve network security issues
• Maintain knowledge of current firewall technologies and security best practices
• Generate routine reports on firewall usage, traffic patterns, and rule utilization

In addition to what was outlined at the lower level, at this level:

• OS upgrades
• Device configurations and standards
• Lead complex firewall implementation projects and migrations
• Perform advanced troubleshooting and root cause analysis for critical incidents
• Design and optimize firewall rulesets for performance and security
• Develop and maintain firewall configuration standards and best practices documentation
• Conduct security assessments and audits of firewall policies

• Hands-on experience with enterprise firewall technologies (e.g., Juniper, Palo Alto, Cisco ASA)
• Working knowledge of network protocols (TCP/IP, DNS, DHCP, VPN, routing protocols)
• Basic understanding of cybersecurity principles and defense-in-depth concepts
• Experience with network monitoring and troubleshooting tools
• Demonstrated analytical and problem-solving abilities with strong written and verbal communication skills
• Ability to work independently and as part of a team

• Advanced experience in firewall administration and network security inlcuding leading firewall implementations, infrastructure upgrades, and related projects.
• Proficiency with multiple enterprise platforms and technologies such as, Loadbalancers, VPNS, & DNS
• Strong understanding of compliance frameworks (NIST, DISA STIGs, FISMA, etc.)
• Demonstrated ability to perform complex root cause analysis and develop remediation strategies
• Experience with change management processes and presenting technical recommendations to leadership
• Knowledge of security architecture concepts like zero-trust and integration with related technologies (IDS/IPS, SIEM, proxies)
• Ability to work with minimal supervision and make critical decisions during high-pressure situations

Position requires a Bachelor's Degree in Computer Science, Information Systems or related field from an accredited institution and 2 years related experience; or, an equivalent combination of education and experience directly related to the occupation.

Position requires a Bachelor's Degree and 5 years related experience; or, an equivalent combination of education and experience directly related to the occupation. At this level, vendor and/or professional certifications are desirable and post graduate course work may be expected.

• Proven experience with…