Lead Firewall Engineer – IT/OT Networks & NERC CIP

KTek Resourcing LLC; Florida; On-site; USD 120,000 - 180,000; Full time

Job summary

NextEra Energy is seeking an experienced Lead Firewall Engineer to oversee enterprise firewall infrastructure across data centers and support IT-OT segmentation projects. You will drive automation, mentor engineers, and ensure zero customer impact while meeting regulatory requirements.

Required expertise includes Cisco Nexus, Catalyst, and IOS, with strong analytical and leadership skills to manage 450+ annual change requests and 20,000+ firewall rules in a regulated energy environment.

Qualifications

• Experience in designing and supporting enterprise firewall infrastructure.
• Strong knowledge of Cisco NX-OS, Catalyst switches and IOS.
• Ability to lead projects and mentor team members.

Responsibilities

• Manage enterprise firewall infrastructure, processing 450+ change requests a year with zero network impact
• Oversee implementation and maintenance of 20,000+ firewall rules supporting NextEra Energy and FPL business operations
• Provide technical leadership across multiple data centers and drive continuous improvement
• Mentor and develop team members
• Design, plan, and deploy network infrastructure, and find and fix potential issues before they affect operations
• Perform complex troubleshooting and root cause analysis with advanced diagnostic tools
• Ensure network operations comply with NERC CIP and other regulatory requirements
• Serve as Lead Firewall Engineer on critical IT-OT network segmentation projects
• Perform quarterly Electronic Security Perimeter (CIP-005) compliance assessments across 120+ network segments and stay audit-ready
• Drive automation of firewall rule management, with zero security violations and zero customer impact
• Handle other job-related duties as assigned

Skills

Cisco Nexus (NX-OS), Cisco Catalyst, I

Interpersonal and analytical skills

Job description

NextEra Energy is seeking an experienced Lead Firewall Engineer to oversee enterprise firewall infrastructure across data centers and support IT-OT segmentation projects. You will drive automation, mentor engineers, and ensure zero customer impact while meeting regulatory requirements.

Required expertise includes Cisco Nexus, Catalyst, and IOS, with strong analytical and leadership skills to manage 450+ annual change requests and 20,000+ firewall rules in a regulated energy environment.