Firewall Network Security Engineer

Cybersecurity Jobs; Santa Clara (CA); On-site; USD 105,000 - 175,000; Full time

Benefits offered by this job

Competitive pay

Stock bonuses

Health, retirement, and vacation

Job summary

Intel is seeking a Firewall Network Security Engineer to support the design, architecture, and build of secure classified network products for USG operations.

Responsibilities include architecture and development of network security products for secured enclaves, designing long-term roadmaps for scalability, and defining system security requirements and trust relationships between components and external systems.

Qualifications

• Bachelor’s degree and 3+ years IT experience.
• 3+ years deploying Fortinet FortiGate (FortiOS, VDOMs, HA).
• 3+ years FortiManager and FortiAnalyzer in cloud or on-prem.
• 3+ years routing (BGP/OSPF), NAT, and network segmentation.
• 3+ years designing firewall policies, IPS/IDS, threat controls.
• U.S. citizen with ability to obtain active US Government clearance.

Responsibilities

• Support architecture and development of network security products for secured enclaves.
• Assist with design and long-term roadmap for scalability in secured enclaves.
• Contribute to system security requirements and data classification.
• Design security interfaces and trust relationships between components and external systems.
• Implement designs using COTS, GOTS, and open-source hardware/software.
• Oversee hardening and configuration per Federal, DoD, and IC guidance.
• Coordinate security assessments and recommend corrective actions.

Skills

Firewall security

Routing (BGP/OSPF)

Network segmentation

Firewalls (Fortinet FortiGate)

FortiManager

FortiAnalyzer

Ansible

Python

SIEM

VPN (IPSec, SSL)

Education

Bachelor’s degree

3+ years IT experience

Tools

Fortinet FortiGate

FortiOS

VDOMs

High Availability

FortiManager

FortiAnalyzer

Ansible

Python

Splunk

Sniffer / Wireshark

AD/MFA

SNMP

Job description

Intel is seeking a Firewall Network Security Engineer to support the design, architecture, and build of secure classified network products for USG operations.

Responsibilities

• Support senior engineers with architecture and development of network and network security products for secured enclaves, including product testing, validation, and selection
• Assist with design and long-term roadmap planning for new and future scalability in secured enclaves
• Contribute to system security requirements, including authorization boundary, security domains, and data classification
• Design security interfaces, security interconnections, and trust relationships between system components and external systems
• Implement system security designs using COTS, GOTS, and open-source hardware and software
• Oversee hardening and configuration of systems and components in accordance with Federal, DoD, and IC guidance
• Coordinate security assessments to identify security control failures and recommend corrective actions

Requirements

• Ability to obtain an active US Government Security Clearance
• Bachelor’s degree and 3+ years of information technology experience
• 3+ years deploying and configuring Fortinet FortiGate firewalls (FortiOS, VDOMs, High Availability) (preferred)
• 3+ years building and deploying FortiManager and FortiAnalyzer in cloud or on premises (preferred)
• 3+ years experience with routing (BGP/OSPF), NAT, and network segmentation including IP subnetting
• 3+ years designing and managing firewall policies, IPS/IDS, and threat controls
• Must be a U.S. citizen due to citizenship-based legal restrictions supporting United States government customers

Technologies

• Fortinet FortiGate, FortiOS, VDOMs, High Availability
• FortiManager, FortiAnalyzer
• BGP, OSPF, NAT
• IPS/IDS
• Ansible, Python, APIs
• SIEM, NAC (ISE), SNMP, Enterprise Network Management Systems
• VPN implementation (IPSec, SSL)
• AD/MFA
• Unix, SD Elements, Splunk
• Sniffer, Wireshark, Microsoft Network Monitor
• COTS, GOTS

Preferred Qualifications

• Active US Government Top Secret (TS) Security Clearance with the skill to obtain and maintain SCI access
• Experience with DoD security implementation (for example, STIG) and security tools for managing the environment
• Experience building and managing network infrastructure using automation tools (Ansible, Python, APIs)
• Integration experience with SIEM, NAC (ISE), and enterprise network/security tools
• Understanding of NIST/STIG and compliance-driven environments (preferred)
• Ability to develop and maintain operational processes and documentation for ongoing support
• Experience supporting security operations such as monitoring, analysis, incident response, and vulnerability management
• Experience with network analysis tools such as SD Elements, Splunk, Sniffer, Wireshark, or Microsoft Network Monitor
• Certifications in cybersecurity including CCSP or CISSP
• Experience scripting in the UNIX environment
• Experience using Ansible for configuration management or security compliance automation
• Experience with operational monitoring using SNMP or other Enterprise Network Management Systems
• Familiarity with VPN implementation (IPSec, SSL) with identity integration (AD/MFA)
• Experience troubleshooting using CLI, packet capture, and log analysis

Compensation & Benefits

• Competitive pay
• Stock bonuses
• Health, retirement, and vacation benefits
• Annual Salary Range (US jobs): $105,300.00 - $175,210.00 USD

Job Details

• Job type: Experienced Hire
• Shift: Shift 1 (United States of America)
• Primary location: US, California, Santa Clara
• Work model: On-site presence (subject to change)

Note: Position of Trust: N/A