Firewall Engineer

Job Description:

DXC Technology (NYSE: DXC) helps global companies run their mission critical systems and operations while modernizing IT, optimizing data architectures, and ensuring security and scalability across public, private and hybrid clouds. With decades of driving innovation, the world’s largest companies trust DXC to deploy our enterprise technology stack to deliver new levels of performance, competitiveness and customer experiences. Learn more about the DXC story and our focus on people, customers and operational execution at www.dxc.technology.

Job Summary/Scope:

Performs Level 4 Firewall Engineering and works with LAN and WAN teams to support project efforts and make recommendations for changes and new deployments in the environment. Will need to collaborate with vendors to properly communicate client needs from a technical standpoint so Vendors can make recommendations for solutions if required. Will support Network Operations by providing change information to be submitted to the operations team for implementation. Will need to support those changes at times, depending on the complication of the change at hand and be available if Operations has problems with the implementations. The incumbent assists in the implementation of the corporation’s network architecture including Checkpoint, Cisco, Arista and Hewlett Packard Firewalls. VPN solutions are also supported and will need to understand how to support. Security events and audits could also occur and may need to work with L3 Operations to troubleshoot and understand next steps. Is expected to assist in the identification of hardware and software technical problems and malfunctions related to Security devices and related servers. Individual will assist in the areas of throughput analysis, problem solving, and infrastructure planning. Leads and provides expertise in providing a stable performance environment for enterprise applications. Leads in various IT projects intended to continually improve/upgrade the data and telecommunications infrastructure. Performs design and implementation of large data communications or telecommunications networks. Participates in short- and long-term planning to meet communications requirements. Is an expert of the design and implementation of Firewall and Security technology. Individual assists in the preparation of tradeoff studies and evaluations for vendor equipment.

Responsibilities:

• Provide Firewall Engineering Support for Project needs and L4 Operations Support.
• Works with client to understand short term and long-term needs and ensure they put those needs in as projects (NetSRM’s).
• Lead and participate in projects for the client with regional team members.
• Performs some design effort for needed projects.
• Creates needed FRCR’s and Change Records, implementation plans for operations to follow for Implementation.
• Supports change implementation as needed.
• Updates documentation and shares those updates with the operations team.
• Makes recommendations for infrastructure improvements, while still conforming to the DXC standards.
• Makes recommendations for any needed updates to the DXC standards.
• Be proactive to anticipate issues or situations which could impact the client.
• Works with vendors to understand new solutions and how/if we can deploy in our current infrastructure.
• Provide any needed overview/training to Network Operations Team.
• Make recommendations for any process improvements that would assist in the efficiency of Network Operations.
• Works with other experienced firewall engineers in support of the account for a common goal.

Major Deliverables:

• Project support of client needs.
• Field project needs submitted by the client.
• Review what client is asking for and make any subtle recommendations if what’s being requested needs some adjustments.
• Produce any Bill of Material (BOM) needs if project requires hardware and software purchasing.
• Design solutions that meeting client needs and still conform to DXC standards.
• Provide realistic due dates of deliverables needed to complete every aspect of projects.
• Perform effective communication to the client, account and operations teams.
• Perform updates in documentation for any changes in the environment and ensure operations team is aware.
• Manage patches, hotfixes, OS upgrades and HW upgrades as the infrastructure matures.
• Assist operations team on any changes that require your expertise.
• Assist operations team when they require L4 support to resolve a problem or issue in the environment.
• Assist with maintaining accurate and up to date hardware and software inventory.
• Ensures a stable performance environment for the enterprise applications.

Job Skills Required:

• Advanced experience with enterprise and data center security policy design and deployment using Checkpoint and HA (high availability active/standby) environments, Cisco ASA firewalls and Cisco ASA appliances.
• Proficient Engineering support of Checkpoint firewalls, some knowledge of Maestro would be a plus. Knowledge of Cisco ASA is a plus.
• Working knowledge of recent versions of Checkpoint software.
• Working knowledge of networking tools and the ability to configure tools to support Firewalls and Security devices.
• Working knowledge of network technology, operating systems, and applications.
• Strong communication and collaboration skills are a necessity.
• Documentation skills using MS Office (Word, Excel, Visio and Project).

Candidates must have a strong foundation in technical skills. These include proficiency in network security, specifically with Checkpoint and Cisco ASA. Knowledge of Azure, troubleshooting, and configuring routers and switches is also essential. Familiarity with Linux and TCP/IP protocols is a must, as is experience with security policies and encryption. Strong analytical, troubleshooting, and customer service skills required. Candidates should be well versed in one or more of the following: IP, OSPF, RIPV2, IP Multicast, DSL, HSRP, ISDN, AAA, Frame Relay, PPP, ATM, SONET, T3/T1, E1/E3, Gigabit/Fast Ethernet, Spanning Tree, VLANs, VOIP, 802.3, 802.3ae, 802.3ag, 802.11, 802.3ad, VRRP, 802.1Q, 802.1P, DiffServ, and diagnostic tools, e.g., sniffers.

• 5 to 7 years hands on experience with multiple vendor L2/L3 switching equipment.
• 5 to 7 years hands on experience with CheckPoint, Cisco ASA, Cisco Firepower.
• 5 to 7 years’ experience with a large TCP/IP network.

Business Skills/Knowledge:

• Must exhibit strong communication, interpersonal, problem solving, and project management skills.
• Teamwork
• Strong customer focus with above average ability to answer questions and solve problems.
• Positive attitude and ability to adapt in a rapidly changing environment.
• Ability to work without close supervision.
• Professionalism
• Resourcefulness
• Dedication
• Accountability

Certifications:

• Cisco Certified Network Professional (CCNP) Security Certification.
• CheckPoint Certified Security Administrator.
• Any other Cisco or Network Certifications are a plus.

DXC is an equal opportunity employer. We welcome the many dimensions of diversity. Accommodation of special needs for qualified candidates may be considered within the framework of the DXC Accommodation Policy.

In addition, DXC Technology is committed to working with and providing reasonable accommodation to qualified individuals with physical and mental disabilities. If you need assistance in filling out the employment application or require a reasonable accommodation while seeking employment, please e-mail AODA Canada Requests.

Note: This option is reserved for applicants needing a reasonable accommodation related to a disability.

Recruitment fraud is a scheme in which fictitious job opportunities are offered to job seekers typically through online services, such as false websites, or through unsolicited emails claiming to be from the company. These emails may request recipients to provide personal information or to make payments as part of their illegitimate recruiting process. DXC does not make offers of employment via social media networks and DXC never asks for any money or payments from applicants at any point in the recruitment process, nor ask a job seeker to purchase IT or other equipment on our behalf. More information on employment scams is available here.