Firewall Network Security Engineer

Intel is hiring a Firewall Network Security Engineer in Santa Clara, CA to help design, build, and assess secure classified network products for USG operations.

• On-site work model (subject to change)
• Shift: Shift 1 (United States of America)
• Job type: Experienced Hire
• Salary range: USD 105,300 - 175,210 per year

Responsibilities

• Assist senior engineers with network and network security product architecture in secured enclaves, including product testing, validation, and selection
• Support design and long-term roadmap planning to improve new and future scalability in secure enclaves
• Assist in defining system security requirements including authorization boundary, security domains, and classification of data
• Assist with design of security interfaces, interconnections, and trust relationships between system components and external systems
• Implement system security designs using COTS, GOTS, and open-source hardware and software
• Oversee hardening and configuration of systems and components in alignment with Federal, DoD, and Intelligence Community guidance
• Coordinate security assessments to identify security control failures and recommend corrective actions

Requirements

• Ability to obtain an active US Government Security Clearance
• Bachelor’s degree and 3+ years of information technology experience
• 3+ years deploying and configuring Fortinet FortiGate (FortiOS, VDOMs, High Availability) (preferred)
• 3+ years building and deploying FortiManager and FortiAnalyzer in cloud or on premises (preferred)
• 3+ years with routing (BGP/OSPF), NAT, and network segmentation including IP address subnetting
• 3+ years designing and managing firewall policies, IPS/IDS, and threat controls
• Verification of U.S. citizenship due to citizenship-based legal restrictions; supports U.S. government customers with citizenship-based restrictions

Technologies

• Fortinet FortiGate, FortiOS, VDOMs, High Availability
• FortiManager, FortiAnalyzer
• BGP, OSPF, NAT
• IPS/IDS
• Ansible, Python, APIs
• SIEM, NAC (ISE)
• SNMP, Enterprise Network Management Systems
• VPN implementation (IPSec, SSL)
• AD/MFA
• Unix, SD Elements, Splunk
• Sniffer, Wireshark, Microsoft Network Monitor
• COTS, GOTS

Benefits

• Competitive pay
• Stock bonuses
• Health, retirement, and vacation benefits
• Annual salary range for roles performed in the US: $105,300.00 - $175,210.00 USD

Preferred Qualifications

• Active US Government Top Secret (TS) Security Clearance with the skill to obtain and maintain SCI access
• Experience with DoD security implementation (for example, STIG) and security tools for managing the environment
• Experience building and managing network infrastructure using automation tools (Ansible, Python, APIs)
• Integration experience with SIEM, NAC (ISE), and enterprise network/security tools
• Understanding of NIST/STIG/compliance-driven environments (preferred)
• Ability to develop and maintain operational processes and documentation for ongoing support
• Ability to support security operations including monitoring, analysis, incident response, and vulnerability management
• Experience with network analysis tools such as SD Elements, Splunk, Sniffer, Wireshark, or Microsoft Network Monitor
• Cybersecurity certifications including CCSP or CISSP
• Experience with scripting in the UNIX environment
• Experience using Ansible for configuration management and/or security compliance automation
• Experience with operational monitoring using SNMP or other Enterprise Network Management Systems
• Familiarity with VPN implementation (IPSec, SSL) with identity integration (AD/MFA)
• Troubleshooting skills using CLI, packet capture, and log analysis

• Primary location: US, California, Santa Clara