Network Security and Firewall Engineer

Job Description

Pay Range: 520

Hourly Rate: $43.55 - $66.59

FLSA Status:
Exempt

The normal starting pay for this position is the minimum of the pay range listed above. A higher rate of pay may be considered, dependent on the qualifications and experience of the selected applicant and/or the City's step placement policy.

This position is located in the Technology Infrastructure Division in the Information Technology Department within the City of Oklahoma City and is under the direction of the Information Technology Business Systems Manager. This position is responsible for managing and maintaining the City of Oklahoma City firewall infrastructure to protect the network from external threats, ensuring network security, and implementing security policies and best practices.

A Network and Firewall Engineer is also responsible for designing, implementing, configuring, and maintaining the firewall infrastructure to ensure the security and integrity of the network. This role is essential for safeguarding sensitive data, preventing unauthorized access, and mitigating security threats.

Configures, installs, and maintains firewall hardware and software solutions, including next-generation firewalls (NGFW), to protect the organization's network.

Develops, implements, and enforces firewall security policies, rules, and access controls to safeguard sensitive data and ensure compliance with industry regulations.

Monitors network traffic for suspicious activities, security breaches, and vulnerabilities using intrusion detection and prevention systems (IDPS).

Responds to security incidents and breaches promptly, investigates root causes, and implements corrective actions to prevent future occurrences.

Analyzes firewall logs and generates reports to identify security threats, trends, and potential vulnerabilities.

Manages user access and permissions by configuring VPNs, ACLs, and other access control mechanisms.

Ensures firewall hardware and software are up to date by applying patches, firmware updates, and security patches.

Implements network segmentation to isolate critical assets and limits lateral movement in the event of a breach.

Monitors and optimizes firewall performance to ensure it does not adversely affect network speed or latency.

Maintains accurate documentation of firewall configurations, policies, and network diagrams for reference and audit purposes.

Collaborates with other IT teams, such as network engineers, system administrators, and security analysts, to ensure a cohesive and secure network environment.

Provides training and guidance to employees and IT staff on firewall security best practices and security awareness.

Honorably discharged veterans of the United States Active Duty Armed Forces, National Guard, and Reserve Forces who are not currently employed full-time by the City of Oklahoma City and who meet the qualifications for the position shall be given preference. To receive preference, veterans must submit verification of honorable discharge from the United States military service (Department of Defense Form DD214 or NGB Form 22) prior to the closing date of the vacancy announcement.

Bachelor's degree in computer science, Information Technology, or a related field.

Three (3) years firewall administration and five (5) years Information Technology experience.

Possession of valid industry certifications, such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), or Certified Firewall Administrator (CFA).

Knowledge and experience in firewall administration, network security, and intrusion detection/prevention systems.

Knowledge of Firewalls (e.g., Cisco ASA, Palo Alto, Juniper, Fortinet), Intrusion Detection and Prevention Systems (IDPS), VPN technologies, Network monitoring and logging tools, Security Information and Event Management (SIEM) systems, Access Control Lists (ACLs) and Network segmentation techniques.

Knowledge of network protocols, routing, and switching.

Skill in analysis and problem-solving to identify and respond to security threats.

Skill in verbal and written communications.

Ability to work in a fast-paced, dynamic environment and adapt to changing security threats.

Primarily indoors in a climate-controlled environment.

Occasional local travel or out-of-town travel.

Occasionally required to work hours beyond the normal scheduled workday. (e.g., when responding to unplanned outages, performing scheduled maintenance activities, or to meet project deadlines)

Near vision enough to read a video display terminal and draft communications such as written or machine generated documents, reports, etc.

Hearing and speech enough to communicate verbally.

Manual and finger dexterity enough to operate equipment such as computer keyboards, etc.

Pay Method:
City employees are required to receive pay electronically, either via direct deposit or pay card.

Former Employees:
If this position is open to external applicants and you are a former employee, you must be eligible for…