Engineer II, Network Firewall

American Bureau of Shipping (ABS); Houston (TX); On-site; USD 110,000 - 170,000; Full time

Benefits offered by this job

Medical insurance

Dental and vision insurance

Life insurance

Job summary

American Bureau of Shipping (ABS) seeks a network security engineer to detect advanced security events, manage firewall systems, and implement perimeter changes. The role requires designing and troubleshooting Palo Alto firewalls (including HA mode) and Azure cloud security across a hybrid environment.

Applicants should have 5+ years in network security, strong collaboration across IT and business units, and experience with Panorama, Ansible, and Terraform.

Qualifications

• College degree in CS or related field; technical certifications are a plus.
• 5+ years in network security in a global company with hybrid cloud environments.
• Experience designing and implementing Palo Alto firewalls (HA) and Azure-based security.
• Strong collaboration and problem-solving across IT and business teams.

Responsibilities

• Conduct advanced security event detection and threat analysis for complex events.
• Manage firewall and network security systems by enforcing approved rules and policies.
• Analyze network security requirements and implement perimeter security changes.
• Design, configure, manage and troubleshoot Palo Alto firewall technologies in HA and related systems.
• Coordinate upgrades, patches and new technologies with stakeholders and manage documentation.

Skills

Palo Alto Firewall

Azure Cloud

Network Security

Policy Management

Troubleshooting

Education

Bachelor's degree in Computer Science or related field

Tools

Panorama

Ansible

Terraform

Cisco Networking

Job description

What You Will Do:

• Conducting advanced security event detection and threat analysis for complex events.
• Manage firewall and network security systems by establishing and enforcing approved rules and policies.
• Analyze network security requirements and implement perimeter security changes.
• Utilizing industry best practices for security, disaster recovery, business continuity, and change control, the engineer will design, configure, manage and troubleshoot a variety of network firewall technologies.
• Serve as a subject matter expert in coordinating and troubleshooting with customers, other infrastructure support activities and business units.
• Develop network documentation of security infrastructure.
• Monitor network performance and implement performance tuning as necessary.
• Monitor, manage and troubleshoot Palo Alto Global Protect VPN configuration.
• Plan and coordinate upgrades, patches and new corporate technologies.
• Maintain an inventory of hardware.
• Perform system audits and complete necessary due diligence in preparation for new technologies.
• Work with established configuration and change management policies to ensure awareness, approval, and ultimate success of changes made to the network infrastructure.
• Provide troubleshooting and end user support when necessary.

What You Will Need:

Education and Experience Typically requires a college degree or recognized equivalent, preferably in Computer Science or related field, from an accredited university or comparable on-the-job experience. Technical certifications are a plus. Minimum five or more (5+) years' experience in network security as it pertains to a global company with a hybrid cloud environment including 5 years of experience designing and implementing Palo Alto Network firewalls, Cloud firewalls in Microsoft Azure (and Microsoft Azure Government).

Knowledge, Skills and Abilities

• 5+ Years experience in network security as it pertains to a global company with a hybrid cloud environment.
• In depth knowledge of configuring and troubleshooting Palo Alto firewalls in HA mode and hands on experience handling high priority issues.
• Strong prioritization skills and able to handle multiple tasks effectively. Self-starter with the ability to work independently. Active problem solver, working across multiple IT and business teams for solutions.
• Articulate appropriately both in written and oral form, and collaborate with multiple teams regarding security and privacy obligations and duties.
• Sound knowledge of AAA technology, firewall management tools, i.e. Panorama. A10 (load balancer) and Cisco networking experience a plus.
• Familiarity with digital vaccines, deep packet inspection (pcap), traffic analysis, anomaly detection, and other security analysis to troubleshoot, confirm and resolve issues.
• Experience with Azure FW, WAFs and App GWs is a plus. Familiarity with NIST 800-171 or NIST 800-53 controls, CIS Benchmarks or DISA STIG (Secure Technical Implementation Guidelines) for network devices including firewalls.
• Understanding of firewall policies, rules, and configuration best practices, industry standard blacklist protocols and firewall best practices in alignment with cybersecurity, legal and regulatory requirements.
• Strong understanding of IP Subnetting, routing protocols, VLAN termination on firewalls and the ability to design, configure, test and troubleshoot in such an environment.
• Exposure to automation tools such as Ansible and Terraform is a plus.

Reporting Relationships:

Reports directly to IMS Management, as appropriate.

About Us

We set out more than 160 years ago to promote the security of life and property at sea and preserve the natural environment. Today, we remain true to our mission and continue to support organizations facing a rapidly evolving seascape of challenging regulations and new technologies. Through it all, we are anchored by a vision and mission that help our clients find clarity in uncertain times. ABS is a global leader in marine and offshore classification and other innovative safety, quality, and environmental services. We're at the forefront of supporting the global energy transition at sea, the application of remote and autonomous marine systems, cutting-edge technical solutions, and many more exciting advancements. Our commitment to safety, reliability, and efficiency is ever-present, guiding our clients to safer and more efficient operations.

About Our Benefits

• medical insurance (PPO and HD)
• dental and vision insurance
• Health Savings Account (HSA)
• Flexible Savings Account (FSA)
• life insurance
• accidental death and dismemberment insurance
• disability leave programs
• parental leave program
• paid holidays
• paid vacation time

The Company provides an Employee Assistance Plan (EAP) that offers support in personal wellness, including work-life services.

Equal Opportunity

ABS Bureau is committed to the equal employment opportunity of its employees and prohibits discrimination against any employee or qualified applicant based on race, color, creed, religion, national origin, sex, gender identity, age, disability, marital status, sexual orientation, citizenship status or veteran status, or other non-work-related characteristics that may be protected under the law of the Federal Government or specific state employment laws.

Notice

ABS and Affiliated Companies (ABS) will not pay a fee to any third-party agency without a valid ABS Master Service Agreement (MSA) authorized and signed by Human Resources. Any resume, CV, application, or other forms of candidate submission provided to any employee of ABS without a valid MSA on file will be considered property of ABS, and no fee will be paid.

Other

This job description is not intended, and should not be construed, to be an all-inclusive list of responsibilities, skills, efforts or working conditions associated with the job of the incumbent. It is intended to be an accurate reflection of the principal job elements essential for making a fair decision regarding the pay structure of the job.