Firewall Engineer

Overview

Actio Net is seeking an experienced Firewall Engineer responsible for securing, modernizing, and expanding complex enterprise network environments. This role serves as the primary authority for firewall engineering and network security while supporting new initiatives, infrastructure upgrades, and operational reliability across diverse network architectures. The position combines hands-on firewall operations, advanced network troubleshooting, virtualization, and documentation to ensure secure, scalable, and resilient connectivity for current and future business needs.

• Serve as the lead engineer for enterprise firewall platforms including Forcepoint, Cisco FTD, Cisco ASA, and VMware NSX-T, ensuring secure and reliable traffic flow across multiple network zones.
• Review, validate, and implement Firewall Change Requests (FWCRs) for rule creation, modification, and deletion while maintaining accurate change records, configuration baselines, and audit documentation.
• Audit firewall rules, logs, and configurations to identify security gaps, policy drift, anomalous traffic, or performance issues, and escalate incidents to security leadership as required.
• Troubleshoot complex network connectivity and security issues using packet analysis and traffic inspection techniques to determine root cause and corrective action.
• Maintain firewall backups, log retention, and recovery procedures in alignment with organizational security and compliance requirements.
• Support security-driven projects and initiatives by designing firewall policies and architectures that align with evolving business and risk management needs.
• Plan and support new initiatives while expanding and modernizing existing network infrastructure in a secure and scalable manner.
• Analyze diverse network environments to identify opportunities for performance optimization, modernization, and security enhancement.
• Provide technical solutions for traffic congestion, infrastructure upgrades, latency issues, and routine network troubleshooting.
• Deploy, operate, maintain, and troubleshoot physical and virtual network infrastructure including routers, switches, and network monitoring platforms.
• Integrate multiple network transport technologies to support reliable wide-area and site-to-site connectivity, including terrestrial, wireless, and alternative transport methods.
• Develop clear technical documentation, network diagrams, configuration guides, and operational procedures to support network and firewall environments.
• Document solutions, architectural designs, and innovative workarounds for both existing deployments and future initiatives.
• Install hardware and software as required, perform system backups, and continuously monitor network and system performance to ensure availability and stability.
• Deploy, configure, maintain, update, and troubleshoot virtual network infrastructure environments and administrator workstations.
• Administer and support network services including directory services, DNS, email systems, and related infrastructure components.
• Design, deploy, and maintain wired and wireless networks to support both fixed-site and mobile operational requirements.

• Advanced network training with at least four years of hands-on network engineering experience.
• Demonstrated expertise in TCP/IP analysis and packet-level troubleshooting using packet analyzers.
• Experience with system administration on Microsoft Windows and/or Linux platforms.
• Experience with VMware virtualization technologies.

• Advanced packet analysis certification or equivalent experience.
• Cisco professional- or design-level networking certification, Cisco Certified Network Associate (CCNA).
• VMware associate or specialty certification.
• Certification in a network operating system such as Windows Server or Linux.
• Solar Winds Server and Application Monitor experience or certification.
• Experience with scripting or automation using Power Shell, Linux shell, or similar languages.
• Experience with complex wide-area network architectures and alternative transport technologies.
• Experience with network instrumentation, data collection, and performance analysis.
• E…