Network Security Engineer

Jobs via Dice; Merrifield (VA); Remote; USD 100,000 - 130,000; Full time

Job summary

A leading company seeks a Network Security Engineer specializing in Palo Alto to optimize firewall rules for client environments. This contract role requires expertise in Cisco and firewalls, providing critical support for cybersecurity compliance. This position offers competitive compensation and benefits in a remote setting.

Benefits

Medical benefits

Competitive pay, 401(k)

Retirement plan

Qualifications

• 7 - 10 years advanced hands-on experience.
• Experience in a large company environment (preferably financial institutions).
• Cisco CCNA or CompTIA Security+ certification.

Responsibilities

• Validate existing firewall rulesets and approve new firewall requests.
• Review and optimize firewall rules, removing legacy rules.
• Provide on-call coverage and work after-hour changes as needed.

Skills

Advanced hands-on experience

General understanding of Cisco CDO

Knowledge of Palo Alto SCM

Checkpoint experience

FireMon experience

Azure Cloud experience

Splunk experience

Cross-functional communication skills

Education

Bachelor's Degree in Computer or Electrical Engineering

Tools

Cisco ASAs

FireMon Security Manager

ASDM/Cisco Defense Orchestrator

Job description

Join to apply for the Network Security Engineer role at Jobs via Dice.

3 days ago Be among the first 25 applicants.

Get AI-powered advice on this job and more exclusive features.

Dice is the leading career destination for tech experts at every stage of their careers. Our client, INSPYR Solutions, is seeking the following. Apply via Dice today!

Title: Network Security Engineers (specializing in Palo Alto)

Location: Remote

Duration: Initial 6 months contract plus extension

Work Requirements: Holders or Authorized to work in US

Job Description

Network Security Engineering services to validate existing firewall rulesets in place and approve new firewall requests for client's on-premise and cloud firewalls. The project requires that all firewall rules be reviewed and optimized, removing legacy rules, and validating business owners for existing production rules to meet Automated Cybersecurity Evaluation Toolbox (ACET) evolving private banking audit requirements. Additionally, the project requires security engineering services support the integration of FireMon and ServiceNow ticketing to automate the quarterly and annual firewall rules compliance reviews.

Scope of Work:

• Firewall Rule analysis across various vendor devices (over 30,000 firewall rules & 11,000 servers)
• Ensure new firewall rule requests align with client’s security and compliance policies
• Recommendation of Firewall Rule security and design improvements
• Validation of rules to disable
• In-depth troubleshooting of infrastructure as applicable
• Establish and maintain system documentation
• Integration support between FireMon and ServiceNow
• Integration support between Firemon and Illumio
• Tracking of Firewall Rule status and their metrics
• Ability to provide OnCall coverage and work after-hour changes as needed to support project/KTLO efforts

Firewall Rule Configuration and Audit Consulting:

• Review existing FireMon rule audit reports and findings with client’s team (hit counts, unused rules, etc.)
• Determine process for rule owner identification and cleanup
• Review of firewall rules - Cisco and Check Point virtual firewalls
• For each rule, determine current asset owner and document
• Validate if the firewall rule is still required for all assets covered by rule (consult Navy Federal rule owners)
• If rules contain assets no longer in production or policies no longer required, document findings and schedule change control to remove/clean up rules from existing firewall policy.
• Leverage existing firewall management tools for discovery and maintenance/cleanup: ASDM/Cisco Defense Orchestrator and FireMon Security Manager
• Determine and document process for validating rules with client's team members
• Monitor ServiceNow ticket queue to avoid SLA delays for client tickets

Key Qualifications:

• Bachelor's Degree in Computer or Electrical Engineering, Computer Science, or related field or equivalent work experience
• 7 - 10 years advanced hands-on experience and knowledge
• General understanding of Cisco CDO for legacy Cisco ASAs
• Knowledge of Palo Alto SCM for NGFW migration and effort estimation
• Checkpoint experience needed
• FireMon experience needed
• Azure Cloud experience a plus
• Palo Alto experience a plus
• Splunk experience needed
• Cisco CCNA cert OR CompTIA Security+ (Plus) Certification
• Experience in a large company environment (preferably financial institutions)
• Cross-functional communication skills

Additional Info:

A Cyber Security Engineer protects the organization's systems and networks from cyber threats by implementing security measures, monitoring systems, and responding to incidents. Expertise in firewalls, VPNs, IDS/IPS, web proxies, etc., is required.

Our benefits include:

• Medical benefits
• Competitive pay, 401(k)
• Retirement plan
• And more!

About INSPYR Solutions:

We focus on technology and quality, providing tailored professional services, projects, and talent solutions. Learn more at inspyrsolutions.com.

INSPYR Solutions is an Equal Employment Opportunity employer.

Additional Details:

• Seniority level: Mid-Senior level
• Employment type: Contract
• Job function: Information Technology
• Industries: Software Development