Security Firewall Engineer - Information Technology

Fort Bend; Richmond (TX); On-site; USD 51,000 - 63,000; Full time

Job summary

Fort Bend County is seeking a Network Security Specialist to protect the county's information systems and respond to incidents. On-call 24/7 duties and emergency management participation are expected.

The role requires hands-on experience with IPS/IDS, VPNs, firewall technologies, SIEMs, DNS/DHCP, and packet-level analysis. CCNP/CISSP are preferred. The position offers competitive compensation and benefits in a public sector environment.

Qualifications

• Bachelor’s degree in a computer science related field required.
• 3 years hands-on experience in IPS/IDS, VPNs, firewall technologies, SIEMs, DNS, UDP/TCP, and network security.
• Knowledge of Cisco Firepower firewall and topologies; ability to analyze security incidents.

Responsibilities

• Ensure network operates with minimum downtime and troubleshoot security incidents.
• Develop requirements for firewall rules including source/destination IPs and ports.
• Participate in emergency management actions and on-call duties 24/7.

Skills

IPS/IDS

VPNs

Firewall technologies

SIEMs

DNS/DHCP

Network security

Packet analysis

Penetration testing

Vulnerability assessment

WAN concepts

Analytical thinking

Education

Bachelor’s Degree in Computer Science

High School Diploma or GED with 4 years relevant experience

Tools

Cisco Firepower

Security tools

Job description

Fort Bend County is ranked as one of the fastest growing counties in the nation. We have capitalized on not only the creed of our location, but on the \"quality of life\" for our families to call home. Our employees are the key to our success and the heartbeat of our foundation. The diversity and inclusivity of our community is our strength and at the forefront of a workplace environment welcoming to all. Live Here! Work Here!* Ensures network operates efficiently with minimum downtime.* Troubleshoots network security incidents.* Configures and supports network and firewall infrastructure.* Develops requirements for firewall rule implementation including source and destination Ips, Ports, Transport Protocol.* Responsible for enterprise network security design standards.* Identifies root cause of incidents and providing appropriate recommendations.* On call 24 hours per day, 7 days per week to respond to network related problems and outages.* Participates in activities and duties related to emergency management during a local state of disaster as directed by appropriate county managers. **MINIMUM JOB REQUIREMENTS:** * Bachelor’s Degree in Computer Science related field. (High School/GED and four years of relevant professional experience may be substituted for the Bachelor’s Degree.* 3 years hands-on experience in IPS, IDS, VPNs, Firewall Technologies, IDS, TCP & UDP, SIEMs, Network, Security Endpoints, DNS, and DHCP.* Understanding of the County’s Logical and Physical Topologies, Understanding of Network Protocols.* Knowledge of the Cisco Firepower Firewall and excellent routing & switching expertise.* The ability to perform analysis using security tools.* Investigative mindset with excellent attention to detail.* An understanding of the different types of information security threats and attack patterns.* Analytical thinking and problem-solving skills.* Strong understanding in threat and network traffic analysis mythologies, including packet-level analysis.* Knowledge of networking principles such as WAN connection.* Excellent hands-on expertise and understanding of installing, configuring, integrating, and maintaining network security.* Knowledge of firewall management tools.* Attention to detail and strong problem-solving abilities.* Network planning and design experience as well as great communication skills. The ability to develop and deliver comprehensive data-driven reports to team and key stakeholders.* Capable of utilizing tools to diagnose and resolve network issues.* Has the ability to Multitask and work under pressure in a fast-paced environment. Ability to Conduct network Pen Test, and vulnerability assessments.* CCNP, CISSP, Security+, ITIL, CCSE, CCNA preferred. **STARTING SALARY RANGE:** $36.49 - $45.62 hourly based on qualifications