Firewall Network Engineer

The Firewall Network Engineer supports the FAA Infrastructure & Operations (I&O) Networks Group, protecting and securing the FAA enterprise network that supports thousands of users and mission-critical NAS systems. The role covers day-to-day operations, cybersecurity initiatives, and infrastructure projects., Manage multiple Check Point firewall clusters supporting the FAA Internet Access Point (IAP)

• Manage and support the Zscaler Zero Trust platform (ZIA, ZPA, ZDX)
• Implement and manage IPS, Anti-Virus, Anti-Bot, DLP, SSL Interception, and Identity Awareness
• Monitor, prevent, identify, investigate, and remediate cybersecurity events and threats
• Support annual security assessments, remediation, and compliance activities, including POA&M tracking and TIC compliance
• Support annual Cybersecurity Test Facility exercises, including developing and improving incident response procedures
• Manage traffic and audit logs and maintain historical data supporting SIEM applications
• Work with network, security, and operations teams to keep enterprise network services available, secure, and intact

Check Point subject matter expert: recent, hands-on administration and management of multiple Check Point firewall clusters in a large enterprise environment, able to contribute with minimal training

• Bachelor’s degree in IT or a related field and 8 years of IT experience, or 12 years of relevant IT experience in lieu of a degree
• Experience managing firewall environments for organizations with 35,000+ users
• Experience preventing, detecting, and remediating cybersecurity incidents
• Experience developing incident response procedures and participating in security assessments
• Experience tracking and resolving incidents through a ticketing system
• Strong written, verbal, and interpersonal communication skills; able to work independently and own projects, Hands-on Fortinet experience
• Hands-on Zscaler experience (ZIA, ZPA, ZDX)
• Experience working with government customers and cross-functional technical teams
• ServiceNow or similar enterprise service management experience

40 hours/week, Monday-Friday, core hours 9:00 AM - 3:00 PM local time

• U.S. citizenship required
• FAA Personnel Suitability clearance required (AMS 3.14-2)