FortiGate Firewall Engineer: Cyber Defense Expert

Punch Cyber Corp; Reston (VA); On-site; USD 110,000 - 170,000; Full time

Job summary

PUNCH Cyber Analytics Group (PUNCH) in the United States seeks a seasoned security professional to support a large federal agency. You will configure Fortinet FortiGate devices, manage policies, VPNs, and centralized Fortinet tools, while aligning with NIST 800-53 controls and security best practices for Fortigate products.

The role requires strong networking, scripting, and troubleshooting skills, with a willingness to work after hours and obtain the required public trust clearance from the

Qualifications

• 7 years of experience with a bachelor’s degree or 9 years of total experience.
• Proficient in network, routing, and switching.
• Proficient in network scripting.
• Proficient with OSI Models Layers 1-7 and network troubleshooting.
• Ability to work in both an individual and team environment.
• Flexibility to support after hours maintenance activities.
• Must be able to obtain a Position of Public Trust from Dept. of Interior.

Responsibilities

• Apply configurations on perimeter routers, firewalls, and security controls IAW NIST 800-53.
• Provide recommendations regarding DOIs perimeter UTM devices IAW NIST 800-53 and industry best practices for Fortigate products.
• Configure, deploy, and maintain FortiGate firewalls.
• Create and manage firewall policies, NAT, VIPs, and security rules.
• Configure IPsec and SSL VPNs for remote and site-to-site connectivity.
• Manage FortiManager for centralized firewall administration.
• Monitor security events and logs using FortiAnalyzer.
• Implement network segmentation using VLANs and security zones.
• Troubleshoot firewall, routing, VPN, and connectivity issues.
• Develop and maintain firewall/network security documentation.
• Create security reports and dashboards for management or compliance requirements.
• Configure authentication integrations such as RADIUS, LDAP, Active Directory, and MFA.
• Perform network troubleshooting using packet captures, routing tables, logs, and FortiGate diagnostic commands.
• Participate in security architecture and network design projects.
• Test firewall policies and security controls after configuration changes.
• Automate repetitive security/network tasks using Python, APIs, or FortiManager automation.

Skills

Networking

Routing & switching

Scripting

OSI model

Troubleshooting

Teamwork

After-hours support

Education

Bachelor's degree

Tools

FortiGate

FortiManager

FortiAnalyzer

RADIUS

LDAP

Active Directory

Job description

PUNCH Cyber Analytics Group (PUNCH) in the United States seeks a seasoned security professional to support a large federal agency. You will configure Fortinet FortiGate devices, manage policies, VPNs, and centralized Fortinet tools, while aligning with NIST 800-53 controls and security best practices for Fortigate products.

The role requires strong networking, scripting, and troubleshooting skills, with a willingness to work after hours and obtain the required public trust clearance from the