Firewall Network Security Engineer

Intel is seeking a Firewall Network Security Engineer to support the design, architecture, and build of secure classified network products for USG operations.

• Support senior engineers with architecture and development of network and network security products for secured enclaves
  , including product testing, validation, and selection
• Assist with design and long-term roadmap planning for new and future scalability in secured enclaves
• Contribute to system security requirements
  , including authorization boundary, security domains, and data classification
• Design security interfaces
  , security interconnections
  , and trust relationships between system components and external systems
• Implement system security designs using COTS
  , GOTS
  , and open-source hardware and software
• Oversee hardening and configuration of systems and components in accordance with Federal, DoD, and IC guidance
• Coordinate security assessments to identify security control failures and recommend corrective actions

• Ability to obtain an active US Government Security Clearance
• Bachelor’s degree and 3+ years of information technology experience
• 3+ years deploying and configuring Fortinet Forti Gate firewalls (FortiOS, VDOMs, High Availability) (preferred)
• 3+ years building and deploying Forti Manager and Forti Analyzer in cloud or on premises (preferred)
• 3+ years experience with routing (BGP/OSPF),
  NAT
  , and network segmentation including IP subnetting
• 3+ years designing and managing firewall policies
  , IPS/IDS
  , and threat controls
• Must be a U.S. citizen due to citizenship-based legal restrictions supporting United States government customers

• Fortinet Forti Gate, FortiOS, VDOMs, High Availability
• Forti Manager, Forti Analyzer
• BGP, OSPF, NAT
• IPS/IDS
• Ansible, Python, APIs
• SIEM, NAC (ISE), SNMP, Enterprise Network Management Systems
• VPN implementation (IPSec, SSL)
• AD/MFA
• Unix, SD Elements, Splunk
• Sniffer, Wireshark, Microsoft Network Monitor
• COTS, GOTS

• Active US Government Top Secret (TS) Security Clearance with the skill to obtain and maintain SCI access
• Experience with DoD security implementation (for example, STIG) and security tools for managing the environment
• Experience building and managing network infrastructure using automation tools (Ansible, Python, APIs)
• Integration experience with SIEM
  , NAC (ISE), and enterprise network/security tools
• Understanding of NIST/STIG and compliance-driven environments (preferred)
• Ability to develop and maintain operational processes and documentation for ongoing support
• Experience supporting security operations such as monitoring, analysis, incident response, and vulnerability management
• Experience with network analysis tools such as SD Elements, Splunk, Sniffer, Wireshark, or Microsoft Network Monitor
• Certifications in cybersecurity including CCSP or CISSP
• Experience scripting in the UNIX environment
• Experience using Ansible for configuration management or security compliance automation
• Experience with operational monitoring using SNMP or other Enterprise Network Management Systems
• Familiarity with VPN implementation (IPSec, SSL) with identity integration (AD/MFA)
• Experience troubleshooting using CLI, packet capture, and log analysis

• Competitive pay
• Stock bonuses
• Health, retirement, and vacation benefits
• Annual Salary Range (US jobs): $ - $ USD

• Job type: Experienced Hire
• Shift: Shift 1 (United States of America)
• Primary location: US, California, Santa Clara
• Work model: On-site presence (subject to change)

Note: Position of Trust: N/A