Senior Network Firewall Engineer Illumio and Zscaler; Remote

Job Role:

Senior Firewall Engineer with Illumio and Zscaler

Location:

Bloomington, IL

Bachelors Degree with 2–5 years in role or more than 5–8 years in role

We are looking for an Intermediate Firewall Engineer to design and implement secure rulesets, optimize policies, troubleshoot complex sessions, and support upgrades/migrations across multivendor environments. The candidate will ensure resilient perimeter defenses, compliant change practices, and high‑quality documentation.

• Design and maintain security policies across zones with least privilege principles
• Optimize rule bases—object reuse, application‑based rules, cleanup of shadowed/unused rules
• Implement and troubleshoot NAT, VPN, IPSec, SSL, and identity‑based policies (UserID)
• Configure and tune IPS/IDS, URL filtering, and threat prevention profiles
• Operate HA pairs; perform upgrades, patches, and fail‑over testing
• Lead packet captures, session analysis, and performance troubleshooting
• Implement SSL decryption policies with appropriate privacy and compliance controls
• Prepare and execute change plans; conduct pre/post validation and rollback as needed
• Integrate firewall logs with SIEM; create use cases and actionables
• Document standards, as‑built configs, and runbooks; drive policy lifecycle governance

• Hands‑on with Palo Alto PAN‑OS or Fortinet Forti
  
  OS CLI and GUI proficiency
• Strong knowledge of routing, NAT, VPN, and application awareness
• Experience with HA design, upgrades, and migrations
• Threat prevention profile tuning and log analysis
• Packet capture and advanced troubleshooting techniques
• Understanding of network segmentation and microsegmentation strategies
• Knowledge of change control and compliance (PCI DSS, ISO 27001)

• Exposure to other platforms:
  Cisco ASA, Firepower, Check Point
• Experience with cloud firewalls:
  Azure Firewall
• Basic automation using APIs and Ansible for policy tasks
• Integration with SOAR for enrichment or response
• Familiarity with proxy/CASB interactions and egress controls

• Strong communication and stakeholder coordination
• Analytical approach to problem solving
• Documentation excellence and process ownership
• Ability to lead small projects and change windows
• Mentoring of junior engineers

• Comprehensive Medical Plan covering Medical, Dental, Vision
• Short‑Term and Long‑Term Disability Coverage
• 401(k) Plan with Company match
• Life Insurance
• Vacation Time, Sick Leave, Paid Holidays
• Paid Paternity and Maternity Leave

The range displayed on each job posting reflects the minimum and maximum salary target for the position across all US locations. Within the range, individual pay is determined by work location and job level and additional factors including job‑related skills, experience, and relevant education or training. Depending on the position offered, other forms of compensation may be provided as part of overall compensation, such as an annual performance‑based bonus, sales incentive pay, and other forms of bonus or variable compensation.

The compensation and benefits information provided herein is accurate as of the date of this posting.

LTIMindtree is an equal opportunity employer that is committed to diversity in the workplace. Our employment decisions are made without regard to race, color, creed, religion, sex (including pregnancy, childbirth or related medical conditions), gender identity or expression, national origin, ancestry, age, family‑care status, veteran status, marital status, civil union status, domestic partnership status, military service, handicap or disability or history of handicap or disability, genetic information, atypical hereditary cellular or blood trait, union affiliation, affectional or sexual orientation or preference, or any other characteristic protected by applicable federal, state, or local law, except where such considerations are bona fide occupational qualifications permitted by law.