Firewall Engineer

Job Description: The Factory, Labs, Network, and Edge Compute team is seeking an experienced firewall engineer to lead and deliver on firewall segmentation and lockdown initiatives. The team member will analyze firewall traffic and create application-specific firewall rules to ensure our cybersecurity risk is minimized. The team member will work on a global team and support Johnson and Johnson Technology Services, delivering value to our Innovative Medicine and MedTech businesses. Team members will be cross-trained and may help with different capabilities centers as assigned by program coordinators.

• Expert in Cisco firewalls, specifically NextGen Firepower threat defense (FTD) and ASA
• Must be able to navigate a teams SharePoint
• Must be able to schedule a meeting with busy calendars
• Absolutely must have a basic knowledge of excel to filter and find patterns of traffic that have been extracted from firewall
• Must know how to use basic Excel formatting for firewall rule template (FRT) creation, to create clear and concise templates for implementation team
• Knowledge around Azure Data Explorer (ADX) (Nice to have)
• Problem solving is a must
• Researching
• Brainstorming
• Analysis of situations/ traffic / applications that are seen on the firewall
• Firewall syslogs are sent here and may need to be reviewed by executing queries
• Expert in remote collaboration
• Must be able to work autonomously and then communicate with me effectively, raise impediments and blockers when needed, and setup meetings with me if required
• Ability to follow data flows and or provide input for data flow in regard to firewall rules
• Strong critical thinking skills
• Must know Firewall Management Center (FMC)
• Knowledge around Zscaler and Elisity tools
• Network Segmentation understanding following ISA-95 frameworks, NIST, NIS2
• Bonus points if they have any certifications such as a CISSP, SSCP, ISSAP, really any cert from Interagency Security Committee (ISC) or certs from Cisco such as CCNP or CCNA.
• Networking experience required
• TCP/IP Networking exposure
• General experience/exposure to subnetting, switching, routing, and firewall knowledge
• Very good attention to detail, especially around rule creation, changes, and traffic analysis on the firewall
• Object group naming on the firewall. Must follow naming standards, be clear in what is requested
• Following principle of least trust
• Preferred experience in working with GxP environments, following change management and documentation
• Experiencing working and or supporting a manufacturing or distribution environment.
• Knowledge of manufacturing applications such as Manufacturing exection systems (MES) such as Camstar, Rockwell systems, OpCenter, Pas-x, historians (OSI PI, PIMS, Kepware), and other PLC controlled devices. Understanding those application communication flows and tying that to a firewall rule (source/destination/port).
• Jira experience required to document work and work out of the tool for all updates.
• Expert at Office 365 for remote collaboration

This role offers the chance to work on complex projects involving cloud computing (AWS/Azure), virtualization (VMware), open-source operating systems (Linux distributions like Debian or CentOS), all within a collaborative environment committed to excellence in IT security management.

Working schedule: Standard M-F 8- 5 PM / 40 hours a week… Occasionally needs to work a weekend/evening depending on firewall lockdown schedule (will have notice ahead of time), we are global team