Firewall Operations Engineer

SkyePoint Decisions; Springfield (VA); Hybrid; USD 90,000 - 140,000; Full time

Benefits offered by this job

Certification incentive program

PTO

Floating federal holidays

Health insurance options

401k matched

Job summary

SkyePoint Decisions is seeking a Network Engineer to support a Department of State (DOS) customer. You will help manage perimeter security devices, including firewalls and proxies, across DoS networks and cloud environments.

This role is hybrid with ~3 days onsite and is eligible for work at Beltsville, MD or Springfield, VA. The position requires experience with Palo Alto and related security platforms, plus strong TCP/IP networking, and the ability to obtain Top Secret clearance.

Qualifications

• Bachelor's degree or 5+ years of experience in IT
• In-depth experience with Palo Alto Firewalls and Panorama to troubleshoot and configure firewall infrastructure.
• 3–5 years of IT customer support experience (Tier I/II).
• Experience with monitoring and configuring Firewall/DMZ infrastructure including various firewalls and proxy devices.
• CLI experience preferred.

Responsibilities

• Provides Tier 2 support in monitoring, management, and troubleshooting of perimeter devices including firewalls, proxies, and mail security appliances.
• Monitor Service Now for Firewall Operations incidents and requests.
• Implement firewall rules and policies; troubleshoot Palo Alto, Cloud Palo Alto, FortiGate, ESA, A10, proxies, and URL filtering; analyze network captures.
• Escalate issues to Tier 3 and monitor lifecycle.
• Perform routine maintenance on devices under the Firewall Operations Team.
• Record and report on firewall operations, utilization, and maintenance.
• Collaborate to implement and repair network changes related to perimeter security devices.
• Support CIRT by implementing block requests for IPs, websites, and emails.

Skills

Palo Alto Firewalls

Panorama monitoring

Network troubleshooting

TCP/IP networking

Firewall/DMZ infrastructure

CLI

NeuralStar monitoring

Firewall configuration

Education

Bachelor's degree / equivalent experience

Tools

Palo Alto Firewall

FortiGate

Azure Firewall

Cisco Email Security Appliances (ESA)

A10 Load Balancer

Proxy devices

Panorama

Job description

8101 Odell Rd, Laurel, MD; Springfield, VA

SkyePoint Decisions is a leading Cybersecurity Architecture and Engineering, Critical Infrastructure and Operations, and Applications Development and Maintenance IT service provider headquartered in Dulles, Virginia with operations across the U.S. We provide innovative enterprise-wide solutions as well as targeted services addressing the complex challenges faced by our federal government clients. Our focus is on enabling our clients to deliver their mission most efficiently and effectively – anytime, anywhere, securely. We combine technical expertise, mission awareness, and an empowered workforce to produce meaningful results.

SkyePoint Decisions is seeking a Network Engineer to support a Department of State (DOS) customer. This position primarily supports operations and maintenance of foreign post network integrations with the DoS Core and other network integrations comprising a large and complex network infrastructure and cloud environments, with engineering and design responsibilities as warranted.

This role offers a hybrid schedule (~3 days onsite) at the discretion of the customer. The role can be located in Beltsville, MD or Springfield, VA.

Shift is Tuesday - Saturday 3:00PM -11:30PM subject to mission priorities. During the ~6-8-week training period, it will be 5 days on-site Mon-Fri (7:00am-3:30pm). Responsibilities:

• Provides Tier 2 support in the monitoring, management, and troubleshooting of perimeter devices to include firewalls, proxies, and mail transport agents.
• Monitor Service Now application for Firewall Operations (FWOPS) incident and service requests.
• Implements firewall rules and policies, perform troubleshooting of firewalls (Palo Alto, Cloud Palo Alto, and FortiGate), CISCO Email Security Appliance (ESA), A10 (load balancer), Proxy platforms, URL filtering across platforms, and analyzing network traffic captures.
• Escalates issues as required to Tier 3 staff and monitors issues throughout a problem’s life cycle.
• Performs recurring maintenance activities such as device reboots and software upgrades on all devices underneath the Firewall Operations Team.
• Records and reports on firewall operations, utilization, and maintenance.
• Collaborate across Bureaus and Agencies to implement and repair network changes as they relate to perimeter security devices.
• Support Diplomatic Security Computer Incident Response Team (CIRT) by implementing block requests for IP’s, Websites, and Email addresses.
• Monitor and perform health checks on multiple perimeter security devices.
• Draft, coordinate and publish outage notifications as required.
• Update shift logs and provide reports to leadership as needed.
• Maintain standard operating procedures (SOP), work instructions, and other working documents.
• Attend calls requiring a FWOPS team to attend, to include troubleshooting calls.

Required Qualifications:

• Bachelors and five (5) years or more experience; Masters and three (3) years or more experience; may accept additional experience in lieu of degree.
• In Depth experience using Palo Alto Firewalls and Panorama monitoring tools to troubleshoot and configure a Firewall infrastructure. Strong understanding of networking, proxy, and packet filtering technologies.
• Minimum 3-5 years of IT Customer Support experience (Tier I and/or Tier II).
• First-hand experience with supporting the monitoring and configuration of Firewall/DMZ infrastructure including Network and Application Firewall Packet Filtering technologies (Palo Alto, Palo Alto virtual FW (cloud), FortiGate, Azure Firewall, Cloudflare, Cisco Email Security Appliances (ESA), A10 (Load Balancer), and proxy devices.
• CLI experience preferred.
• Experienced in utilizing network monitoring tools such as NeuralStar.
• Experienced with TCP/IP network implementation and troubleshooting.
• Must be a U.S. citizen.
• Active interim Secret clearance with the ability to obtain a Top Secret clearance.

Compensation:

Salary Range: TBD

The SkyePoint Decisions salary range for this position is a general guideline only. It represents an estimated range for this position and is just one piece of our total compensation package.

Salary at SkyePoint is determined by various factors, including but not limited to location, work schedule, the candidate’s combination of education, knowledge, skills, competencies, and experience, as well as contract-specific affordability, market data and business considerations.

In addition to a competitive salary, SkyePoint offers benefits including a certification incentive program, PTO, floating federal holiday options, several insurance options including HMO and High Deductible plans with Health Savings Accounts [HSAs], Flex Spending Accounts [FSAs], Full Dental Plans, Vision, ST/LT Disability, Life Insurance, and 401k matched.

What We Can Offer You:

• At SkyePoint, we go B.I.G. (beginning in GRATITUDE) by recognizing all we have and giving back to our employees, families, and communities. It instills a positive mindset that permeates all we do. By beginning in gratitude, SkyePoint can continue to spread living in gratitude each day.
• Great Benefits: Several insurance options including HMO and High Deductible plans with Health Savings Accounts [HSAs], Flex Spending Accounts [FSAs], Full Dental Plans, ST/LT Disability, Life Insurance, floating federal holiday options, and 401k matched
• Certificate Incentive Program: To promote professional development, we recognize and reward employees who obtain new certifications aligned with business needs.

SkyePoint Decisions is an established ISO 9001:2015 and ISO/IEC 27001:2013 certified small business and appraised at CMMI Level 3 for Services and Development. We possess a common vision of excellence and foster a collaborative team culture built upon individual performance and accountability. We invest in our people and systems to create value for our clients. It is the SkyePoint Way. We are grateful for the opportunity to work with exceptional people and give back to the communities we serve. Our employees value the flexibility at SkyePoint that allows them to balance quality work and their personal lives.

SkyePoint Decisions is a participating E-Verify Employer.

U.S. Citizenship is required for most positions.

Equal Opportunity Employer/Veterans/Disabled.

Voluntary Self-Identification

For government reporting purposes, we ask candidates to respond to the below self-identification survey.Completion of the form is entirely voluntary. Whatever your decision, it will not be considered in the hiringprocess or thereafter. Any information that you do provide will be recorded and maintained in aconfidential file.

As set forth in SkyePoint Decisions’s Equal Employment Opportunity policy,we do not discriminate on the basis of any protected group status under any applicable law.

If you believe you belong to any of the categories of protected veterans listed below, please indicate by making the appropriate selection.As a government contractor subject to the Vietnam Era Veterans Readjustment Assistance Act (VEVRAA), we request this information in order to measurethe effectiveness of the outreach and positive recruitment efforts we undertake pursuant to VEVRAA. Classification of protected categoriesis as follows:

A "disabled veteran" is one of the following: a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or a person who was discharged or released from active duty because of a service-connected disability.

A "recently separated veteran" means any veteran during the three-year period beginning on the date of such veteran's discharge or release from active duty in the U.S. military, ground, naval, or air service.

An "active duty wartime or campaign badge veteran" means a veteran who served on active duty in the U.S. military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense.

An "Armed forces service medal veteran" means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985.