Tufin Engineer

We are seeking a Tufin Engineer to improve firewall policy visibility, governance, and automation across complex environments. This hands-on role focuses on optimizing Tufin Secure Track and Secure Change, strengthening policy hygiene, and helping teams adopt reliable workflows.

• Assess and optimize Tufin Secure Track and Secure Change configuration, health, and policy visibility.
• Onboard firewalls and security devices, troubleshoot policy ingestion, and validate topology and rule visibility.
• Analyze unused, redundant, shadowed, and overly permissive rules and guide policy cleanup.
• Design and validate Secure Change workflows for access requests, policy changes, risk reviews, and rule lifecycle management.
• Configure policy governance, compliance reporting, and operational dashboards.
• Document recommended practices and train engineering and operations teams on Tufin administration.

• Hands-on experience administering and optimizing Tufin Secure Track and Secure Change.
• Experience onboarding security devices into Tufin and troubleshooting firewall policy collection.
• Strong understanding of firewall policy analysis, rule lifecycle management, and security governance.
• Experience configuring policy change workflows, automation, and reporting in Tufin.
• Ability to document technical recommendations and train operational teams.

System One, and its subsidiaries including Mountain Ltd., are leaders in delivering outsourced services and workforce solutions across North America. We help clients get work done more efficiently and economically, without compromising quality. System One not only serves as a valued partner for our clients, but we offer eligible employees health and welfare benefits coverage options including medical, dental, vision, spending accounts, life insurance, voluntary plans, as well as participation in a 401(k) plan.

System One is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, age, national origin, disability, family care or medical leave status, genetic information, veteran status, marital status, or any other characteristic protected by applicable federal, state, or local law.

: #404-IT Pittsburgh