Network Engineer IV​/Firewall Engineer

Position: Network Engineer IV / Firewall Engineer
Description The IT Network Engineer IV Firewall Engineer is an expert-level technical resource responsible for designing, implementing, maintaining, and supporting enterprise network and network security infrastructure. The role has a primary focus on next-generation firewall engineering, including Palo Alto Networks and Fortinet platforms, while maintaining the broader networking expertise needed to support secure, reliable connectivity across local and wide area networks.

The engineer works closely with Network Engineering, Information Security, infrastructure teams, end users, and technology vendors to protect organizational resources, resolve complex issues, and deliver network projects.

Key Responsibilities Design, implement, maintain, and continuously improve enterprise firewall and network security architectures, with an emphasis on Palo Alto Networks and Fortinet technologies. Develop, review, implement, and maintain firewall policies, security rules, network objects, NAT, VPN configurations, and related controls in accordance with approved security standards and business requirements. Analyze network traffic, firewall logs, alerts, and system behavior to identify security risks, troubleshoot connectivity issues, and support the investigation and response to security incidents.

Plan and execute firewall upgrades, configuration changes, platform maintenance, migrations, and lifecycle activities while minimizing operational risk and service disruption. Provide advanced troubleshooting and problem resolution for complex network and security issues involving firewalls, routing, switching, wireless, VPN, and LAN/WAN connectivity. Participate in the planning, design, implementation, testing, and documentation of network architecture and infrastructure solutions. Support network infrastructure that may include routers, switches, wireless systems, firewalls, optical transport, and related hardware and software.

Evaluate emerging network and security technologies, conduct technical research, and provide recommendations regarding solutions, standards, and equipment purchases. Collaborate with Information Security, Network Engineering, infrastructure teams, application owners, end users, and vendors to resolve issues and deliver secure, reliable services. Participate in security incident response, root-cause analysis, remediation planning, and the development of corrective actions. Maintain accurate technical documentation, including network and firewall designs, configurations, standards, operational procedures, and change records.

Contribute to project planning and execution, including technical coordination, implementation planning, testing, communication, and post-implementation validation. Respond to and resolve service requests and incidents in accordance with established support processes and service expectations. Provide technical guidance and knowledge sharing to team members and support the development of consistent engineering practices. Participate in the Network Team on-call program and provide after-hours support as required.

Adhere to Hackensack Meridian Health organizational competencies, policies, and standards of behavior.

Required Education, Knowledge, Skills, and Abilities Bachelors degree in an IT-related discipline, equivalent certification, or a combination of education and relevant professional experience. Ten or more years of experience in an IT-related discipline, with substantial experience supporting enterprise network infrastructure. Hackensack Meridian Health | IT Network Engineer IV Firewall Engineer Demonstrated hands-on experience designing, implementing, administering, and troubleshooting next-generation firewalls, particularly Palo Alto Networks and Fortinet platforms.

Strong understanding of firewall policy design and administration, including security rules, NAT, VPNs, traffic analysis, logging, and security best practices. Comprehensive working knowledge of TCP/IP networking, routing, switching, wireless, VPN, and LAN/WAN technologies. Ability to troubleshoot complex, multi-layer network and security issues using a structured, analytical approach. Working knowledge of optical transport systems, including DWDM and ROADM technologies. Experience planning and coordinating the installation, configuration, maintenance, and troubleshooting of network hardware, systems, software, and related infrastructure.

Understanding of network security principles, access controls, threat mitigation,…