Cyber Security Engineer - Firewall

Punch Cyber Corp; Reston (VA); On-site; USD 110,000 - 170,000; Full time

Job summary

PUNCH Cyber Analytics Group (PUNCH) in the United States seeks a seasoned security professional to support a large federal agency. You will configure Fortinet FortiGate devices, manage policies, VPNs, and centralized Fortinet tools, while aligning with NIST 800-53 controls and security best practices for Fortigate products.

The role requires strong networking, scripting, and troubleshooting skills, with a willingness to work after hours and obtain the required public trust clearance from the

Qualifications

• 7 years of experience with a bachelor’s degree or 9 years of total experience.
• Proficient in network, routing, and switching.
• Proficient in network scripting.
• Proficient with OSI Models Layers 1-7 and network troubleshooting.
• Ability to work in both an individual and team environment.
• Flexibility to support after hours maintenance activities.
• Must be able to obtain a Position of Public Trust from Dept. of Interior.

Responsibilities

• Apply configurations on perimeter routers, firewalls, and security controls IAW NIST 800-53.
• Provide recommendations regarding DOIs perimeter UTM devices IAW NIST 800-53 and industry best practices for Fortigate products.
• Configure, deploy, and maintain FortiGate firewalls.
• Create and manage firewall policies, NAT, VIPs, and security rules.
• Configure IPsec and SSL VPNs for remote and site-to-site connectivity.
• Manage FortiManager for centralized firewall administration.
• Monitor security events and logs using FortiAnalyzer.
• Implement network segmentation using VLANs and security zones.
• Troubleshoot firewall, routing, VPN, and connectivity issues.
• Develop and maintain firewall/network security documentation.
• Create security reports and dashboards for management or compliance requirements.
• Configure authentication integrations such as RADIUS, LDAP, Active Directory, and MFA.
• Perform network troubleshooting using packet captures, routing tables, logs, and FortiGate diagnostic commands.
• Participate in security architecture and network design projects.
• Test firewall policies and security controls after configuration changes.
• Automate repetitive security/network tasks using Python, APIs, or FortiManager automation.

Skills

Networking

Routing & switching

Scripting

OSI model

Troubleshooting

Teamwork

After-hours support

Education

Bachelor's degree

Tools

FortiGate

FortiManager

FortiAnalyzer

RADIUS

LDAP

Active Directory

Job description

About Us:

PUNCH Cyber Analytics Group (PUNCH) is a Virginia-based, small business founded in 2012 operating as a cohesive team that incorporates the sum of our group’s diverse skills, talents, and resources toward our collective passion: advancing data analytics to impact cyber operations. PUNCH is a two-time Inc. Magazine ‘Best Workplaces’ awardee offering unique benefits and personal touches to provide a positive work-life experience for our team. PUNCH brings unique qualifications, resources, and past-performance that make us suitable to address the goals of our diverse customer-base. Further, we have past and current experience supporting cyber operations and cyber ML-based research, with well over 100 years of collective experience from our collaborative, multi-disciplinary team.

Responsibilities

The selected candidate will support a large Federal agency. Candidates must be located in the United States.

• Apply configurations on perimeter routers, firewalls, and security controls IAW NIST 800-53
• Provide recommendations regarding DOIs perimeter UTM devices IAW NIST 800-53 and industry best practices for Fortigate products

• Configure, deploy, and maintain FortiGate firewalls.
• Create and manage firewall policies, NAT, VIPs, and security rules.
• Configure IPsec and SSL VPNs for remote and site-to-site connectivity.
• Manage FortiManager for centralized firewall administration.
• Monitor security events and logs using FortiAnalyzer.
• Implement network segmentation using VLANs and security zones.
• Troubleshoot firewall, routing, VPN, and connectivity issues.
• Perform firewall rule reviews and remove obsolete or overly permissive rules.
• Develop and maintain firewall/network security documentation.
• Create security reports and dashboards for management or compliance requirements.
• Configure authentication integrations such as RADIUS, LDAP, Active Directory, and MFA.
• Perform network troubleshooting using packet captures, routing tables, logs, and FortiGate diagnostic commands.
• Participate in security architecture and network design projects.
• Test firewall policies and security controls after configuration changes.
• Automate repetitive security/network tasks using Python, APIs, or FortiManager automation.

Minimum Qualifications:

To be considered for this position, you must minimally meet the knowledge, skills, and abilities listed below:

• 7 years of experience with a bachelor’s degree or 9 years of total experience
• Proficient in network, routing, and switching.
• Proficient in network scripting
• Proficient with OSI Models Layers 1-7 and network troubleshooting.
• Ability to work in both an individual and team environment
• Flexibility to support after hours maintenance activities
• Must be able to obtain a Position of Public Trust from Dept. of Interior

Preferred Qualifications:

Candidates with these desired skills will be given preferential consideration:

• Fortinet NSE 4 Certified and/or Fortinet Certified Professional (FCP)
• Next Generation Firewall Experience, preferably Fortinet.
• Experience support Incident Response (IR) Teams