> Markdown version of [/jobs/ext/3546503-firewall-network-engineer](https://www.wearedevelopers.com/jobs/ext/3546503-firewall-network-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Firewall Network Engineer - **Company:** Job Cloud Inc. - **Location:** United States (Remote available) - **Contract:** Permanent contract - **Skills:** Bash Shell, Cisco PIX, Data Security, Network Address Translation, Internet Protocol Security (IP SEC), Virtual Private Networks (VPN), Python (Programming Language), Network Security, Routing, Network Segmentation, PCI Data Security Standards, TCP/IP, Transmission Control Protocol (TCP), Transport Layer Security, Firewalls (Computer Science), Palo Alto Networks, Fortinet, Firepower, Firewall Services Module - **Published:** September 30, 2026 - **Apply:** https://www.dice.com/job-detail/5272d266-c008-484a-9f1f-c6a7c83efd78 ## About the Role * Strong hands-on experience with Palo Alto Networks firewall technologies, including rule administration and policy analysis. * Deep understanding of network security principles, firewall rule design, and network segmentation. * Experience performing firewall audits, rule cleanup, and optimization initiatives. * Ability to work independently in a high-volume remediation environment. * Strong analytical skills to assess rule risk and impact before change execution., * Firewall Platforms: Palo Alto Networks is required, including hands-on rule administration and policy analysis. Familiarity with Cisco ASA or Firepower, Check Point, or Fortinet is a plus. * Firewall Policy and Change Automation: Tufin experience is highly preferred, including policy orchestration, rule lifecycle management, risk and impact analysis, and automated rule cleanup workflows. Familiarity with AlgoSec or Skybox is a plus. * Network Security Fundamentals: Transmission Control Protocol/Internet Protocol (TCP/IP), routing and switching, Network Address Translation (NAT), virtual private networks (IPSec/SSL), network segmentation, zoning, and demilitarized zone (DMZ) architecture. * Change Management and Documentation: Experience with IT service management (ITSM) and change control platforms, such as BMC Remedy, and network documentation tools. * Scripting and Automation, a plus: Python or Bash for rule analysis, reporting, or bulk remediation tasks. * Compliance and Frameworks: Familiarity with the Payment Card Industry Data Security Standard (PCI DSS), the National Institute of Standards and Technology (NIST) frameworks, or similar audit and compliance frameworks relevant to firewall governance. ## Description The Firewall Network Engineer will be responsible for executing firewall rule remediation and optimization activities across the customer's environment. This role will focus on identifying, analyzing, and correcting overly permissive, outdated, or misconfigured firewall rules to improve the organization's overall security posture, using enterprise firewall platforms and policy-management tooling, including Palo Alto Networks and Tufin, to drive analysis and change execution. Responsibilities: * Review existing firewall rule sets to identify overly permissive, redundant, unused, misconfigured, or undocumented access. * Execute remediation activities, including rule cleanup and removal, rule modification and tightening of access, and consolidation and optimization of rule sets. * Recommend and implement improvements to firewall rule structure and organization. * Participate in potential top-to-bottom rule set redesign where appropriate. * Ensure alignment with security best practices and internal standards. * Implement approved firewall changes in accordance with change control processes. * Validate changes after implementation to confirm that security objectives are achieved without unintended service disruption. * Partner with security, networking, and application owners to understand application requirements and validate rule necessity and impact. * Provide technical input into the prioritization of remediation efforts. * Support development of a remediation backlog, including a firewall rule burn-down list. * Provide updates on rules remediated, the complexity of remaining work, and risks or blockers. * Maintain technical documentation of changes made. ## Related Videos - [WeAreDevelopers LIVE - Back to CODE100](https://www.wearedevelopers.com/videos/1909-wearedevelopers-live-back-to-code100) - [Creating a routing app with Google Maps API from scratch](https://www.wearedevelopers.com/videos/831-creating-a-routing-app-with-google-maps-api-from-scratch) - [An Applied Introduction to eBPF with Go](https://www.wearedevelopers.com/videos/1075-an-applied-introduction-to-ebpf-with-go) - [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see) - [A Technical Introduction to Bitcoin's 2nd Layer- The Lightning Network](https://www.wearedevelopers.com/videos/15-a-technical-introduction-to-bitcoin-s-2nd-layer-the-lightning-network) - [How Cisco embraced a DevOps culture within its network engineering team](https://www.wearedevelopers.com/videos/99-how-cisco-embraced-a-devops-culture-within-its-network-engineering-team) ## Related Articles - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology) - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated)