firewall engineer

Systems Limited

<div>
 <p>
  <strong>
   Job Title:
  </strong>
  Firewall Network Engineer (L3) &ndash; Fortinet, Palo Alto &amp; Multi-Vendor Security
 </p>
 <p>
 </p>
 <p>
  The Firewall Network Engineer (L3) provides advanced network security support, designing, implementing, and managing multi-vendor firewall and security solutions (Fortinet, Palo Alto, Check Point, Cisco, and Radware) to ensure system availability, integrity, and confidentiality.
 </p>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Key Responsibilities
  </strong>
 </p>
 <ul>
  <li>
   Deliver L3 escalation support for complex security incidents and connectivity issues across FortiGate, Palo Alto, and Check Point firewalls.
  </li>
  <li>
   Troubleshoot security policies, NAT, routing, and session handling using CLI and packet capture tools.
  </li>
  <li>
   Resolve advanced IPsec (IKEv1/IKEv2) and SSL VPN issues, including negotiation failures and routing conflicts.
  </li>
  <li>
   Investigate traffic drops, Application-ID issues, and enforcement failures of IPS, AV, and URL filtering profiles.
  </li>
  <li>
   Manage and troubleshoot DDoS protection mechanisms using Radware solutions.
  </li>
  <li>
   Maintain and troubleshoot HA configurations (Active/Passive, clustering) and failover issues across firewall platforms.
  </li>
  <li>
   Review and validate firewall rule changes, security profiles, and NAT policies before production deployment.
  </li>
  <li>
   Utilize firewall policy management and compliance tools such as AlgoSec and Tufin.
  </li>
  <li>
   Monitor and respond to alerts from Cisco IPS and other threat detection systems.
  </li>
  <li>
   Implement and manage file integrity monitoring using Tripwire (FIM).
  </li>
  <li>
   Lead incident resolution during P1/P2 outages and coordinate with SOC, network, and application teams.
  </li>
  <li>
   Support firewall upgrades, migrations, and performance optimization efforts.
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Required Skills and Experience
  </strong>
 </p>
 <ul>
  <li>
   Proficiency with FortiGate, Palo Alto, and Check Point firewall platforms.
  </li>
  <li>
   Experience with Radware DDoS protection solutions.
  </li>
  <li>
   Strong hands-on experience with Cisco technologies (routing &amp; switching, Cisco IPS).
  </li>
  <li>
   Familiarity with firewall assurance and automation tools such as AlgoSec and Tufin.
  </li>
  <li>
   Knowledge of File Integrity Monitoring (FIM) tools like Tripwire.
  </li>
  <li>
   Strong knowledge of TCP/IP, OSPF/BGP routing, VLANs, and network segmentation.
  </li>
  <li>
   Expertise in NAT, VPN technologies, and firewall rule lifecycle management.
  </li>
  <li>
   Experience with high-availability firewall configurations and failover mechanisms.
  </li>
  <li>
   Strong analytical and problem-solving skills in incident management.
  </li>
  <li>
   Excellent communication and collaboration skills for cross-team coordination.
  </li>
  <li>
   Bachelor&rsquo;s degree in Computer Science, Information Technology, or related field.
  </li>
  <li>
   Preferred certifications: NSE, PCNSE, CCNP Security, Check Point (CCSA/CCSE), or equivalent.
  </li>
 </ul>
</div>


Network Security Engineer

BRMi

<div>Overview:
<div>
BRMi is seeking a Zero Trust Security Engineer to support a large financial services client in<b> Pensacola FL in a hybrid work environment.</b></div><div></div><div><br>
The Zero Trust Security Engineer is responsible for driving the implementation of Zero Trust security rules, including formal requests to firewall teams, ongoing coordination, validation of changes, and post implementation verification.<br>
This role is execution focused and serves as the single point of accountability for ensuring Zero Trust rules are implemented correctly, completely, and auditable across firewall and security platforms.</div><div></div><div><b><br>
Open to hybrid in Pensacola FL and Vienna VA (Pensacola preferred)</b></div><div></div><div><br>
Benefits:<br>
<ul><li>Comprehensive Medical, Dental, and Vision Insurance</li><li>Employer-Paid Life Insurance</li><li>Employer-Paid Short-Term and Long-Term Disability Insurance</li><li>401(k)</li><li>Paid Time Off (PTO) that includes Vacation Leave, Sick Leave, and 11 Paid Holidays</li><li>Educational Assistance</li></ul></div><div></div><div><br>
Salary: $100K-110K</div><div></div><div><br>
Click here to learn about BRMi's culture.</div><div></div><div><br>
Click here to see BRMi&rsquo;s Glassdoor reviews</div>
Responsibilities:
<div>
Rule Implementation &amp; Coordination<br>
<ul><li>Translate Zero Trust analysis outputs into formal firewall and security rule requests.</li><li>Submit detailed implementation requests to firewall teams, including:</li></ul>
o Source identities (users, groups, roles)<br>
o Destination applications, addresses, and services<br>
o Required ports, protocols, and application IDs<br>
<ul><li>Ensure requests meet firewall team standards and contain all required technical details.</li></ul>
Cross Team Execution<br>
<ul><li>Act as the primary liaison between Zero Trust, IAM, firewall engineering, and application teams.</li><li>Track firewall requests from submission through completion.</li><li>Resolve implementation questions, clarifications, or discrepancies with firewall engineers.</li></ul>
Validation &amp; Verification<br>
<ul><li>Validate that implemented firewall rules exactly match approved Zero Trust requirements.</li><li>Perform post implementation testing to confirm:</li></ul>
o Authorized access works as expected<br>
o Unauthorized access is blocked<br>
<ul><li>Identify and remediate misconfigurations, partial implementations, or policy drift.</li></ul>
Audit &amp; Lifecycle Management<br>
<ul><li>Ensure all implemented rules are properly tagged, documented, and traceable to application and Zero Trust requirements.</li><li>Maintain implementation records for audit, compliance, and reporting.</li><li>Support ongoing refinement of Zero Trust rules as application access requirements evolve.</li></ul></div>
Qualifications:
<ul><li><b> Hands on experience working with enterprise firewalls (Palo Alto preferred).</b></li><li>Strong understanding of user-based and application aware firewall policies.</li><li>Experience submitting and managing firewall rule requests in enterprise environments.</li><li>Ability to validate security rule implementations and troubleshoot access issues.</li><li>Strong coordination and communication skills across technical teams.</li></ul>
________________________________________<br>
Preferred Qualifications<br>
<ul><li>Experience implementing Zero Trust Network Access (ZTNA) solutions.</li><li>Familiarity with IAM, Entra ID groups, AD groups, and RBAC models.</li><li>Experience integrating firewall rules with application onboarding frameworks.</li><li>Knowledge of audit, compliance, and security reporting requirements.</li></ul>
________________________________________<br>
Success Looks Like<br>
<ul><li>Firewall rules are requested properly and implemented right the first time.</li><li>Clean handoffs with minimal back and forth.</li><li>Verified, auditable Zero Trust enforcement across applications.</li></ul><div></div><div><b><br>
** BRMi will not sponsor applicants for work visas for this position.**</b></div><div><b>
**This is a W2 opportunity only**</b></div><div></div><div><b><br>
EOE/Minorities/Females/Vet/Disabled</b></div><div>
We are an equal opportunity employer that values diversity and commitment at all levels. All individuals, regardless of personal characteristics, are encouraged to apply. Employment policies and decisions on employment and promotion are based on merit, qualifications, performance, and business needs. The decisions and criteria governing the employment relationship with all employees are made in a nondiscriminatory manner, without regard to race, religion, color, national origin, sex, age, marital status, physical or mental disability, medical condition, veteran status, or any other factor determined to be unlawful by federal, state, or local statutes.</div></div>

Zero Trust Security Engineer

Openkyber

<div><p>Job Title:- Network Security DevOps Engineer Location:- Spring Texas (On-Site)</p>
<p>Required Experience 5+ years of hands-on experience in network security engineering and/or operations.</p>
<p><b>Strong expertise with enterprise firewall platforms:</b></p>
<ul><li>Fortinet FortiGate (FortiManager and FortiAnalyzer highly preferred)</li>
<li>Cisco ASA / CSM</li>
<li>Cisco FTD / FMC</li>
<li>Juniper SRX (Junos Space)</li>
</ul><p><b>Solid understanding of networking fundamentals:</b> TCP/IP, OSI model, routing/switching, ACLs</p>
<p>Experience with firewalls, VPNs, IDS/IPS, NAT, DNS, and authentication technologies.</p>
<p><b>Preferred Technical Skills</b></p>
<ul><li>Automation and DevOps experience using Ansible, Terraform, Python, GitHub, Jinja2, REST APIs, Jenkins</li>
<li>Cloud security experience in AWS and Azure</li>
<li>Advanced troubleshooting of routing and switching, including VRF and VXLAN</li>
<li>Familiarity with Datadog, Algosec, and similar tools</li>
<li>Experience working in Agile / SAFe environments</li>
</ul><p><b>Certifications (Preferred, Not Required)</b></p>
<ul><li>Fortinet: FCA, FCSS, NSE series</li>
<li>Cisco: CCNA or CCNP Security</li>
<li>Security: CISSP, GIAC</li>
</ul><p><b>For applications and inquiries, contact:</b> hirings@openkyber.com</p></div>

Network Engineer

Tata Consultancy Services (TCS)

<div></div><div><div><div><div><p>Responsibility of / Expectations from the Role</p>
<p>
Firewall Engineering (Fortigate Check Point &amp; Palo Alto)</p>
<ul><li>Implement, and manage NGFW policies, NAT, security profiles, and segmentation</li></ul>
<ul><li>Manage App-ID / User-ID (Palo Alto) and Identity Awareness (Check Point)</li></ul>
<ul><li>Configure Threat Prevention profiles: IPS, Anti-Virus, Anti-Spyware, URL filtering</li></ul>
<ul><li>Plan and execute rulebase audits, clean-ups, and optimization to reduce risk &amp; latency</li></ul>
<ul><li>Perform upgrades, HA/cluster configuration, health checks, and performance tuning</li></ul>
<p>
-</p>
<p>
WAF &amp; Edge Security (Cloudflare)</p>
<ul><li>Configure Cloudflare WAF (Managed Rules, custom rules, bot mitigation, rate limiting)</li></ul>
<ul><li>Manage CDN, DDoS protection, and Zero Trust policies (ZTNA) for applications</li></ul>
<ul><li>Implement API protection, mTLS, and secure token-based access for services</li></ul>
<p>
&middot; Optimize performance &amp; caching while maintaining application security &middot; Monitor attack patterns, false positives, and tune rules based on application behavior</p>
</div></div></div><div><div><div><b>Location</b></div>
<div>Hyderabad</div>
</div><div><div><b>Job Function</b></div>
<div>TECHNOLOGY</div>
</div><div><div><b>Role</b></div>
<div>Network Administrator</div>
</div><div><div><b>Job Id</b></div>
<div>402855</div>
</div><div><div><b>Desired Skills</b></div>
<div>CISCO | Network Security - Blue Coat,Zscalar | Network Security - Palo Alto</div>
</div></div><p>Desired Candidate Profile
</p><div><div><b>Qualifications</b> : BACHELOR OF ENGINEERING</div></div></div><div></div>

Network Security

AIQU

<div>
 <p>
  We are hiring for L2 Engineer&ndash; Fortinet SD-WAN to join one of our major clients based out of UAE.
 </p>
 <p>
  <br/>
 </p>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Job Details:
  </strong>
 </p>
 <p>
  <br/>
 </p>
 <p>
  Role- L2 Engineer&ndash; Fortinet SD-WAN
 </p>
 <p>
  Work Location- Dubai, UAE
 </p>
 <p>
  Employment type- Contract- 12 months &amp; extendable
 </p>
 <p>
  <br/>
 </p>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Job Description:
  </strong>
 </p>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Technical Support and Troubleshooting
  </strong>
 </p>
 <ul>
  <li>
   Provide Level 2 (L2) support for Fortinet SD-WAN solutions, including FortiGate firewalls, SD-WAN controllers, and related devices.
  </li>
  <li>
   Troubleshoot escalated issues related to SD-WAN connectivity, routing, application performance, and configuration.
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   SD-WAN Configuration and Management
  </strong>
 </p>
 <ul>
  <li>
   Configure and manage Fortinet SD-WAN policies, including dynamic path selection, traffic shaping, and application-aware routing.
  </li>
  <li>
   Implement and maintain Fortinet security features, such as VPNs, firewalls, and intrusion prevention systems (IPS).
  </li>
  <li>
   Monitor SD-WAN performance using Fortinet tools such as FortiManager and FortiAnalyzer
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Performance Monitoring and Reporting
  </strong>
 </p>
 <ul>
  <li>
   Use Fortinet monitoring tools (e.g., FortiAnalyzer, FortiManager) to track SD-WAN health and performance.
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Experience:
  </strong>
 </p>
 <ul>
  <li>
   5+ years of experience in network SD WAN solutions.
  </li>
  <li>
   Hands-on experience with Fortinet SD-WAN solutions and FortiGate devices.
  </li>
  <li>
   Proven expertise in troubleshooting and resolving SD-WAN-related issues.
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Technical Skills:
  </strong>
 </p>
 <ul>
  <li>
   Strong knowledge of Fortinet SD-WAN solutions, including FortiGate firewalls and FortiManager.
  </li>
  <li>
   Proficiency in network protocols (e.g., TCP/IP, BGP, OSPF, DNS, DHCP, VPNs).
  </li>
  <li>
   Experience with dynamic path selection, link failover, and application-aware routing.
  </li>
  <li>
   Familiarity with Fortinet security features, such as IPS, firewalls, and VPNs.
  </li>
  <li>
   Knowledge of ITSM platforms (e.g., ServiceNow for incident and problem management
  </li>
 </ul>
 <p>
 </p>
</div>


L2 Engineer – Fortinet SD-WAN

<div><b>Job Title: Network Security (L3)</b><br>
<b>Location:</b> Houston/Dallas, TX
<p>Responsibilities Manage day-to-day Operations according to customer environment Organizational Functions: Develop and implement network security architecture, policies, and procedures to protect against threats. Should be able to provide L3 level support on critical/Outage situation and drive end to end until the resolution. Good understanding of network protocols (HTTP, HTTPS, DNS, TCP/IP). Should have Strong expertise in: Implementing and maintaining Checkpoint firewall and associated software module (VPN, URL Filtering, IPS etc.) infrastructure. Should have good working experience on checkpoint VPN (S2S &amp; Remote access). Deep understanding of Cloudflare content delivery network (CDN) and security solutions, including web application firewalls (WAF), bot management, and DDoS protection. Deep understanding of RADIUS, TACACS+, 802.1X, EAP methods, and networking protocols. Installation and configuration of ClearPass Policy Manager (CPPM), including profiling, onboarding, and guest services. Resolve complex authentication failures, latency issues, and TACACS+ service issues. Proficiency with Zscaler tools (ZIA, ZPA, ZDX), packet capture analysis, and scripting languages (Python, PowerShell) for automation. Design, implement, and tune ZIA/ZPA policies for roaming, branch, and third-party users, utilizing Zscaler's cloud security concepts. Resolve complex L2/L3 issues related to user connectivity, authentication (SAML, SCIM, Azure AD), and access flows. Deep understanding of Zero Trust Network Access (ZTNA), Firewalls, and IPSec/SSL VPNs. Create and maintain comprehensive documentation related to network security infrastructure and procedures following the NIST and CIS standards. Identify the in-efficiencies in the operations and identify potential solutions to improve efficiency. Own and drive improvements in the areas of Operations, technology, Advisory and customer satisfaction. Stay up to date on emerging security threats, technologies, and industry trends. Manage and mentor a team of network security engineers and analysts. One should identify possible automation capabilities, their execution within the network security products and process and deliver across multiple customer environments. Should be cross-skilled across multiple technologies covering products like Firewalls, Web-Proxies, as well as cloud security products (AWS, Azure, Google Cloud Platform etc.) Should prepare weekly and monthly performance reports across multiple customer environments (people, technologies, Process Gaps, Risk, RAG status etc.) Should be able to conduct internal training to address the skill gap as well as motivate the team to do technical certifications.</p>
<b>Core Functions:</b>
<ul><li>Focus on technologies and bring automation capabilities.</li>
<li>Regular reporting on the state of the customer delivery.</li>
<li>Maintain KPIs for the teams and report on Service Improvement Areas to senior management</li>
<li>Identify risks and maintain compliance with submission of client-facing reports.</li>
<li>Focus on industry-based practices and configuration and guide the team to follow the same.</li>
</ul><p>Individual Performance Measurement Criteria Bring quality in service delivery and work on cross killing people to increase productivity. Quality and effectiveness in communications and engagement with stakeholders. Low / Zero Escalation from the customers Driving Innovation to improve Service standards &amp; Quality.</p>
<b>Technical Skills Proficiency Level</b>
<p>Understanding of the different security technologies, Experience in deploying, configuring and troubleshooting of Firewalls (Checkpoint) NAC Aruba Clearpass Web application Firewall Cloudflare Web-Proxy -Zscaler (ZIA/ZPA/ZDX) Email Security Abnormal AI Load balancer F5 BIG-IP Experience in different Information Security Processes. Security Change Management Rule Base Reviews &amp; Optimization Security Incident Management (Standard &amp; Critical) Understanding of different Security Architectures.</p>
<b>Communication and Organizational skills</b>
<p>Good command of the English language, with excellent written and verbal skills. Proactive in communication and appropriate selection of audience according to topic. Highly organized and capable of tracking a variety of tasks to closure. Good time management principles and effective in prioritizing workloads.</p>
<b>Cultural Requirements</b>
<p>Works collaboratively with other teams and builds positive working relationships Able to learn quickly and apply common sense to new situations, but understand when it is appropriate to engage others for advice Open and transparent style and approach when working with others Places a significant level of importance on personal &amp; team development and understanding then improving upon weakness Accepting feedback from managers, peers, and clients regarding work performance Utilizes a goal-oriented approach, which drives self-improvement both personally and professionally and drives the teams. Takes the initiative to work on tasks outside of his or her immediate scope of responsibility and encourages others to do so.</p>
<b>Experience Required</b>
<ul><li>Minimum overall experience of 10-12 years</li>
<li>Minimum of 8 years' experience in Information Security</li>
<li>Minimum of 6 years' experience in running a Security Operations Center for a large organization.</li>
</ul><b>Certifications Required</b>
<p>Industry-recognized certifications such as CCSA/CCSE, CCIE, or equivalent is highly desirable.</p>
<b>Education Qualifications</b>
<p>Preferably Graduate with Science/Eng</p>
<p><b>For applications and inquiries, contact:</b> hirings@openkyber.com</p></div>

Associate Network Security Engineer

<div><p>Hi, Hope you are doing great! Please find the below Job description Role: Network Security (L3) Location: Houston, TX or Dallas, TX (Onsite) Responsibilities Manage day-to-day Operations according to customer environment Organizational Functions: Develop and implement network security architecture, policies, and procedures to protect against threats. Should be able to provide L3 level support on critical/Outage situation and drive end to end until the resolution. Good understanding of network protocols (HTTP, HTTPS, DNS, TCP/IP). Should have Strong expertise in: Implementing and maintaining Checkpoint firewall and associated software module (VPN, URL Filtering, IPS etc.) infrastructure. Should have good working experience on checkpoint VPN (S2S &amp; Remote access). Deep understanding of Cloudflare content delivery network (CDN) and security solutions, including web application firewalls (WAF ), bot management, and DDoS protection. Deep understanding of RADIUS, TACACS+, 802.1X, EAP methods, and networking protocols. Installation and configuration of ClearPass Policy Manager (CPPM), including profiling, onboarding, and guest services. Resolve complex authentication failures, latency issues, and TACACS+ service issues. Proficiency with Zscaler tools ( ZIA, ZPA, ZDX ), packet capture analysis, and scripting languages (Python, PowerShell) for automation. Design, implement, and tune ZIA/ZPA policies for roaming, branch, and third-party users, utilizing . Resolve complex L2/L3 issues related to user connectivity, authentication (SAML, SCIM, Azure AD), and access flows. Deep understanding of Zero Trust Network Access (ZTNA), Firewalls, and IPSec/SSL VPNs. Create and maintain comprehensive documentation related to network security infrastructure and procedures following the NIST and CIS standards. Identify the in-efficiencies in the operations and identify potential solutions to improve efficiency. Own and drive improvements in the areas of Operations, technology, Advisory and customer satisfaction. Stay up to date on emerging security threats, technologies, and industry trends. Manage and mentor a team of network security engineers and analysts. One should identify possible automation capabilities, their execution within the network security products and process and deliver across multiple customer environments. Should be cross-skilled across multiple technologies covering products like Firewalls, Web-Proxies, as well as cloud security products ( AWS, Azure, Google Cloud Platform etc.) Should prepare weekly and monthly performance reports across multiple customer environments (people, technologies, Process Gaps, Risk, RAG status etc.) Should be able to conduct internal training to address the skill gap as well as motivate the team to do technical certifications. Core Functions: Focus on technologies and bring automation capabilities. Regular reporting on the state of the customer delivery. Maintain KPIs for the teams and report on Service Improvement Areas to senior management Identify risks and maintain compliance with submission of client-facing reports. Focus on industry-based practices and configuration and guide the team to follow the same. Individual Performance Measurement Criteria - Bring quality in service delivery and work on cross killing people to increase productivity. - Quality and effectiveness in communications and engagement with stakeholders. - Low / Zero Escalation from the customers - Driving Innovation to improve Service standards &amp; Quality. Technical Skills Proficiency Level Understanding of the different security technologies, Experience in deploying, configuring and troubleshooting of 1. Firewalls ( Checkpoint ) 2. NAC Aruba Clearpass 3. Web application Firewall Cloudflare 4. Web-Proxy - Zscaler (ZIA/ZPA/ZDX) 5. Email Security Abnormal AI 6. Load balancer F5 BIG-IP Experience in different Information Security Processes. 1. Security Change Management 2. Rule Base Reviews &amp; Optimization 3. Security Incident Management (Standard &amp; Critical) Understanding of different Security Architectures. Communication and Organizational skills Good command of the English language, with excellent written and verbal skills. Proactive in communication and appropriate selection of audience according to topic. Highly organized and capable of tracking a variety of tasks to closure. Good time management principles and effective in prioritizing workloads. Cultural Requirements Works collaboratively with other teams and builds positive working relationships Able to learn quickly and apply common sense to new situations, but understand when it is appropriate to engage others for advice Open and transparent style and approach when working with others Places a significant level of importance on personal &amp; team development and understanding then improving upon weakness Accepting feedback from managers, peers, and clients regarding work performance Utilizes a goal-oriented approach, which drives self-improvement both personally and professionally and drives the teams. Takes the initiative to work on tasks outside of his or her immediate scope of responsibility and encourages others to do so. Experience Required Minimum overall experience of 10-12 years - Minimum of 8 years' experience in Information Security - Minimum of 6 years' experience in running a Security Operations Center for a large organization. Certifications Required Industry-recognized certifications such as CCSA/CCSE, CCIE, or equivalent is highly desirable. Education Qualifications Preferably Graduate with Science/Eng Thanks &amp; Regards, OpenKyber , US IT Recruiter, OpenKyber Inc. 1505 Lyndon B Johnson Fwy #327, Dallas, TX 75234 LinkedIn:
</p><p><b>For applications and inquiries, contact:</b> hirings@openkyber.com</p></div>

Search 4982+ Firewall engineer jobs near you this April. New roles added regularly across leading industries. Apply today.

4982 firewall engineer jobs Near Me

Network Security Engineer

Zero Trust Security Engineer

Network Engineer

Network Security

L2 Engineer – Fortinet SD-WAN

Associate Network Security Engineer

Associate Network Security Engineer