> Markdown version of [/jobs/ext/3029525-engineer-ii-network-firewall](https://www.wearedevelopers.com/jobs/ext/3029525-engineer-ii-network-firewall). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Engineer II, Network Firewall - **Company:** American Bureau of Shipping - **Location:** Houston, TX, United States - **Experience:** Expert - **Salary:** $94,800.0 - $120,000.0 - **Contract:** Permanent contract - **Skills:** Microsoft Azure, Cloud Computing, Cyber Security, Deep Packet Inspection, Disaster Recovery, Internetworking, Subnetting, Virtual Private Networks (VPN), Network Security, Pcap, Network Architecture, Network Monitoring, Routing, Performance Tuning, Ansible, Traffic Analysis, Virtual Local Area Networks, Wide Area Networks, Computer Networking Systems, Load Balancing, HybridCloud, Firewalls (Computer Science), Information Technology, CIS Benchmarks, Firewall Services Module, Terraform - **Published:** September 22, 2026 - **Apply:** https://www.jofdav.com/jobs/59820697-engineer-ii-network-firewall ## About the Role * Typically requires a college degree or recognized equivalent, preferably in Computer Science or related field, from an accredited university or comparable on-the-job experience. Technical certifications are a plus. * Minimum five or more (5+) years' experience in network security as it pertains to a global company with a hybrid cloud environment including 5 years of experience designing and implementing Palo Alto Network firewalls, Cloud firewalls in Microsoft Azure (and Microsoft Azure Government). Knowledge, Skills and Abilities * 5+ Years experience in network security as it pertains to a global company with a hybrid cloud environment. * In depth knowledge of configuring and troubleshooting Palo Alto firewalls in HA mode and hands on experience handling high priority issues. * Strong prioritization skills and able to handle multiple tasks effectively. Self-starter with the ability to work independently. * Active problem solver, working across multiple IT and business teams for solutions. * Articulate appropriately both in written and oral form, and collaborate with multiple teams regarding security and privacy obligations and duties. * Sound knowledge of AAA technology, firewall management tools, i.e. Panorama. * A10 (load balancer) and Cisco networking experience a plus. * Familiarity with digital vaccines, deep packet inspection (pcap), traffic analysis, anomaly detection, and other security analysis to troubleshoot, confirm and resolve issues. * Experience with Azure FW, WAFs and App GWs is a plus. * Familiarity with NIST 800-171 or NIST 800-53 controls, CIS Benchmarks or DISA STIG (Secure Technical Implementation Guidelines) for network devices including firewalls. * Understanding of firewall policies, rules, and configuration best practices, industry standard blacklist protocols and firewall best practices in alignment with cybersecurity, legal and regulatory requirements. * Strong understanding of IP Subnetting, routing protocols, VLAN termination on firewalls and the ability to design, configure, test and troubleshoot in such an environment. * Exposure to automation tools such as Ansible and Terraform is a plus. ## Description The Network Firewall Engineer provides modern engineering approaches for safeguarding IT infrastructure. This role is responsible for developing and deploying protective measures based on IT security policies and operational standards, on-prem and in the cloud. The Network Firewall Engineer will work closely with IT team members (operations and security) to evaluate, design, implement, and document WAN, VPN, internetworking solutions in alignment with business needs. What You Will Do: * Conducting advanced security event detection and threat analysis for complex events. * Manage firewall and network security systems by establishing and enforcing approved rules and policies. * Analyze network security requirements and implement perimeter security changes. * Utilizing industry best practices for security, disaster recovery, business continuity, and change control, the engineer will design, configure, manage and troubleshoot a variety of network firewall technologies. * Serve as a subject matter expert in coordinating and troubleshooting with customers, other infrastructure support activities and business units. * Develop network documentation of security infrastructure. * Monitor network performance and implement performance tuning as necessary. * Monitor, manage and troubleshoot Palo Alto Global Protect VPN configuration. * Plan and coordinate upgrades, patches and new corporate technologies. * Maintain an inventory of hardware. * Perform system audits and complete necessary due diligence in preparation for new technologies. * Work with established configuration and change management policies to ensure awareness, approval, and ultimate success of changes made to the network infrastructure. * Provide troubleshooting and end user support when necessary. ## Related Videos - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [Creating a routing app with Google Maps API from scratch](https://www.wearedevelopers.com/videos/831-creating-a-routing-app-with-google-maps-api-from-scratch) - [Dev & Test in the Cloud? Deploy your cloud environments with Ansible & Terraform](https://www.wearedevelopers.com/videos/1607-dev-test-in-the-cloud-deploy-your-cloud-environments-with-ansible-terraform) - [Embracing the Hybrid Cloud: Unlocking Success with Ansible](https://www.wearedevelopers.com/videos/932-embracing-the-hybrid-cloud-unlocking-success-with-ansible) - [Azure-Well Architected Framework - designing mission critical workloads in practice](https://www.wearedevelopers.com/videos/1529-azure-well-architected-framework-designing-mission-critical-workloads-in-practice) - [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see) ## Related Articles - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again)