Firewall & VPN Security Administrator

Chicago Transit Authority; Chicago (IL); On-site; USD 109,000 - 133,000; Full time

Job summary

The Chicago Transit Authority is seeking a Cyber Security Firewall Administrator to deploy, configure, and manage enterprise firewall and remote access/VPN solutions, ensuring secure, compliant network environments. You will monitor logs, implement rules, and coordinate with IT and security teams to uphold standards and regulatory requirements.

You will also manage VPNs, update firmware, audit configurations, and document changes while supporting IAM integrations and MFA.

Qualifications

• Bachelor's degree in information security/cyber security, information technology, computer science or related field required.
• Cisco Certified Specialist - Security Core, Cisco Certified Network Professional (CCNP) Security, Cisco Certified CyberOps Professional, or similar.
• Three to five years of experience in firewall administration or related position for large enterprises.

Responsibilities

• Firewall Administration: Install, configure, and maintain enterprise firewall systems (e.g., Palo Alto, Cisco, Fortinet, Check Point).
• Create, modify, review, and optimize firewall rules for security and performance.
• Implement and update firewall rules and ACLs in accordance with security policies.
• Monitor and interpret firewall logs and alerts to detect, analyze, and respond to potential security incidents.
• Apply firmware updates and security patches to firewall systems to mitigate vulnerabilities.
• Diagnose connectivity issues, packet drops, and misconfigured policies.
• Troubleshoot firewall-related issues affecting network performance or connectivity.
• Document firewall architecture, configurations, change management activities, and incident response actions.
• Remote Access/VPN Management: Build and maintain IPsec and SSL VPNs, both site-to-site and client-based.
• Configure, deploy, and maintain VPN solutions (IPsec, SSL VPN, remote access, site-to-site).
• Implement and enforce security policies for Remote Access/VPN access; manage user access with LDAP/RADIUS/SAML.
• Apply firmware updates and security patches to Remote Access/VPN appliances and infrastructure.
• Monitor Remote Access/VPN performance and availability.
• Integrate Remote Access/VPN with IAM and MFA systems (Duo, SecurID, Azure MFA).
• Troubleshoot Remote Access/VPN issues affecting remote users or inter-site communications.
• Maintain documentation of Remote Access/VPN architecture and procedures.
• Conduct regular audits of firewall and remote access/VPN configurations for compliance.
• Research cyber security threat indicators and advise on mitigation.
• Assess new security technologies for enterprise value.

Skills

Problem solving

Autonomy

Network knowledge

Syslog/SIEM

Unix/Linux

Windows

VMware

Cisco

NIST/ISO/PCI/HIPAA awareness

ACLs and firewalls

Education

Bachelor's degree in information security/cyber security

Cisco Security certifications (Specialist/CCNP/CCOP)

Tools

Palo Alto

Cisco

Fortinet

Check Point

Job description

The Chicago Transit Authority is seeking a Cyber Security Firewall Administrator to deploy, configure, and manage enterprise firewall and remote access/VPN solutions, ensuring secure, compliant network environments. You will monitor logs, implement rules, and coordinate with IT and security teams to uphold standards and regulatory requirements.

You will also manage VPNs, update firmware, audit configurations, and document changes while supporting IAM integrations and MFA.