Firewall Engineer

Firewall Engineer Jobs

3 jobs found

Today

Senior Information Security Engineer - Security Firewall Policy

Williams-Sonoma, Inc. Rocklin, CA

Rocklin, CA

Today

$100k - $130k/yr Full time Senior Cyber Security Engineer Firewall Engineer

Apply Now

Job Description

Drive secure network segmentation and firewall compliance as a hands-on technical lead for the Firewall Policy team.

Responsibilities

Coordinate day-to-day technical execution for the Firewall Policy team, including guidance, mentoring, and escalation support (no formal people-management responsibilities).
Own firewall policy project intake: assess requirements and dependencies, prioritize the backlog, coordinate delivery, and communicate progress to stakeholders.
Lead review and approval coordination, implementation planning, validation, and lifecycle management for Palo Alto Networks firewall rules and related access requests.
Improve firewall governance through policy optimization, rule recertification, and cleanup of unused or overly permissive access.
Partner with Network Engineering and application owners to define application flows, troubleshoot connectivity, and implement least-privilege access.
Deliver firewall policy work that supports network segmentation, PCI compliance, and secure separation of critical environments.
Coordinate production change activity, including risk reviews, maintenance windows, rollback plans, and incident-related firewall requests.
Create repeatable processes, documentation, and automation to enhance policy review, request handling, and audit readiness.
Collaborate with Security Architecture, Infrastructure, IAM, and project teams to align firewall policies with enterprise security standards.
Provide technical knowledge transfer and support the development of team capabilities.

Requirements

5+ years of experience in network security, firewall engineering, or related information security roles.
Hands-on expertise with Palo Alto Networks firewall policies, rule lifecycle management, and troubleshooting.
Strong knowledge of TCP/IP, routing, DNS, NAT, segmentation, and enterprise application connectivity.
Experience coordinating technical workstreams, project intake, and cross-functional change initiatives.
Ability to lead technical decisions, resolve competing priorities, and communicate clearly with technical and business partners.
PCI-related network segmentation and evidence collection experience preferred.
Automation experience for firewall policy workflows using APIs, Python, PowerShell, or similar tools preferred.
Exposure to policy governance platforms, configuration analysis, and AI-assisted operational workflows preferred.
Onsite requirement: located in Rocklin, CA; onsite Monday through Thursday.

Technologies

Palo Alto Networks
TCP/IP
DNS
NAT
Python
PowerShell
APIs

About the Team

Enterprise Cyber Security organization responsible for protecting WSI systems, applications, and information assets.
Firewall Policy team governs enterprise firewall access and network segmentation, partnering with Security Engineering, Network Infrastructure, application owners, and business teams to enable secure connectivity.

Benefits

Generous discount on all WSI brands
401(k) plan and other investment opportunities
Paid vacations, holidays, and time off to volunteer
Health benefits, dental and vision insurance, including same-sex domestic partner benefits
Tax-free commuter benefits
Wellness program supporting physical, financial, and emotional health

Continued Learning

In-person and online learning opportunities through WSI University
Cross-brand and cross-function career opportunities
Resources for self-development
Advisor (Mentor) program
Career development workshops, learning programs, and speaker series

Compensation: USD 100,000 - 130,000 per year.

View full job page →

2d ago

Network Security Engineer

Datasage Technologies Cincinnati, OH

Cincinnati, OH

2d ago

$50+/hr Full time Cybersecurity Tools Firewall Engineer Firewall Security

Apply Now

Job Description

Datasage Technologies is hiring a Network Security Engineer for hybrid work in Cincinnati, OH, supporting firewall and network security services.

Responsibilities

Implement, troubleshoot, and administer Palo Alto firewall deployments, including threat prevention modules
Manage Panorama administration and support for firewall policy and environment oversight
Implement, troubleshoot, and administer Checkpoint firewalls and IPS/threat prevention components
Support Checkpoint MDS using R80/R81 and maintain related security services
Work with Checkpoint VSX solutions for segmentation and service virtualization
Implement, troubleshoot, and administer Cisco ASA/Firepower firewall environments
Support Cisco ASA Multi-Context firewall operations
Administer Cisco Defense Orchestrator (CDO) for orchestration and management tasks

Requirements

Hands-on experience with Cisco ASA/Firepower, Checkpoint R80/R81, and Palo Alto
Experience with Cisco Defense Orchestrator (CDO), Checkpoint MDS/MLM, and Panorama
Experience with Zscaler Proxy (Proxy Server in the cloud)
Strong knowledge of IPSEC and SSL VPN
Good understanding of DNS and DHCP services
Good understanding of routing concepts
Experience with static routing and protocols such as OSPF and BGP; VRF experience is an added advantage
Any experience with Juniper Netscreen and Fortinet FortiGate firewalls

Pay

$50.00 per hour
40.0 hours/week

Work Location

Hybrid remote in Cincinnati, OH 45999

View full job page →

5d ago

Network Security Engineer, Lead

AMERICAN SYSTEMS Dallas, TX

Dallas, TX

5d ago

$155k - $180k/yr Full time Firewall Engineer Firewall Security Information Security

Apply Now

Job Description

AMERICAN SYSTEMS is seeking a Lead Network Security Engineer to support a critical national security mission in a highly classified environment. This role combines hands-on enterprise network security with technical leadership across network, firewall, and access control capabilities, including Cisco security tooling.

Based in Dallas, TX with onsite support, you will design, implement, administer, and troubleshoot enterprise network and firewall/security controls, while helping drive secure, resilient outcomes for mission operations.

What you will do

Provide secure network engineering, administration, and operational support in a highly classified environment.
Design, implement, configure, and maintain enterprise network infrastructure including routers and switches, firewalls, VLANs, ACLs, VPNs, network segmentation, and high-availability architectures.
Administer, monitor, and troubleshoot enterprise firewall environments.
Configure and manage firewall policies, access rules, NAT, VPNs, security zones, logging, and monitoring.
Support and troubleshoot Cisco Firepower and Firepower Management Center (FMC) capabilities (Cisco Firepower experience preferred).
Troubleshoot complex Layer 2 and Layer 3 networking, routing, switching, firewall, connectivity, and access control issues.
Support AAA and network access control requirements, including authentication, authorization, and accounting.
Configure and troubleshoot 802.1X, VPN, and network access control solutions.
Support Cisco ISE environments, including authentication, authorization, policy enforcement, and network access control (Cisco ISE experience preferred).
Support RMF, STIG, secure configuration, vulnerability remediation, and compliance activities.
Develop and maintain network diagrams, implementation plans, SOPs, configuration documentation, and technical reports.
Partner with cybersecurity, systems administration, and mission teams to deliver secure and resilient network solutions.
Support incident response, outage resolution, root cause analysis, change implementation, and network remediation efforts.
Monitor network performance and recommend improvements to strengthen security, availability, reliability, and performance.
Deliver technical leadership and guidance to network engineering and operations personnel.

Required qualifications

U.S. citizenship required.
Active TS/SCI clearance with SAP eligibility required.
Bachelor’s degree in a related technical field, or additional relevant experience in lieu of a degree.
Eight (8) or more years of experience in network engineering, network operations, or network security.
Experience working in enterprise, defense, intelligence, federal government, or highly regulated environments.
Strong hands-on experience with enterprise networking, including routing and switching; Layer 2 and Layer 3 troubleshooting; VLANs and subnetting; ACLs; network addressing and design; VPN technologies; network segmentation; resilient network architectures.
Hands-on experience administering and troubleshooting enterprise firewalls.
Experience with one or more firewall platforms, with Cisco Firepower and FMC preferred (Palo Alto Networks, Fortinet, Check Point, or other commercial or government enterprise firewall platforms also acceptable).
Experience supporting firewall policy administration, rule management, NAT, VPNs, security zones, logging, monitoring, and troubleshooting.
Experience supporting AAA, 802.1X, RMF, STIG, secure configuration, and network access control requirements.
Cisco ISE experience preferred, particularly with authentication, authorization, accounting, policy enforcement, and network access control.
Active DoD 8140/8570 IAT II certification, such as Security+ CE, CySA+, SSCP, or equivalent.
Experience troubleshooting Cisco routers, switches, firewalls, and enterprise network infrastructure.
Ability to work independently, lead technical efforts, and resolve complex network and security issues.
Strong written and verbal communication skills.

Technologies you will work with

Cisco Firepower, Firepower Management Center (FMC)
Palo Alto Networks, Fortinet, Check Point
Cisco ISE, 802.1X
NAT, VPN technologies
AAA (authentication, authorization, accounting)
RMF, STIG
Cisco routers, Cisco switches
Security+ CE, CySA+, SSCP

Compensation and benefits

Salary range: USD 155,000 - 180,000 per year. Actual compensation will be determined based on several factors permitted by law.

Healthcare benefits
Paid leave
Retirement plans
Insurance programs
Education and training assistance

Experience we value (not required)

Experience supporting highly compartmented or special-access classified environments (helpful but not required).
Cisco certifications, including CCNA, CCNP Enterprise, CCNP Security, or CCIE (helpful but not required).
Experience with Palo Alto, Fortinet, Check Point, or other enterprise firewall technologies (helpful but not required).
Experience with Cisco ISE, NAC, 802.1X, or related access control platforms (helpful but not required).
Experience supporting network modernization, infrastructure upgrades, technology refresh, or network migration efforts (helpful but not required).
Experience with incident response, change management, outage resolution, and root cause analysis in classified environments (helpful but not required).
Familiarity with VMware or other virtualized environments (helpful but not required).
Experience developing technical documentation, network diagrams, implementation plans, and SOPs (helpful but not required).

EEO: EEO Race/Sex/Disability Status/Veteran Status.

View full job page →

Firewall Engineer Jobs

Senior Information Security Engineer - Security Firewall Policy

Network Security Engineer

Network Security Engineer, Lead

Get Firewall Engineer Jobs alerts