Senior Firewall Engineer

PSEG Long Island LLC; Bethpage (NY); On-site; USD 130,000 - 170,000; Full time

Job summary

PSEG Long Island LLC is seeking a Senior Firewall/Network Engineer to lead the design, configuration, testing, and support of secure network solutions. You will work with Analysts and Product Managers to translate business needs into technical designs and drive automation and secure architecture across LAN/WAN environments.

The role requires deep knowledge of Cisco IOS, Next-Gen firewalls, VPNs, WAFs, F5, and security monitoring tools, with a track record of mentoring teammates and delivering

Qualifications

• Bachelor’s degree in computer science or related STEM field.
• 6 years IT networking experience with 3+ years in design, implementation, operation and management of multiple network projects or large-scale IT systems.
• Diverse experience in network, systems and security design using standards like NIST/CIS.
• Experience with Secure LAN/WAN and Zero-Trust technologies.
• In-depth knowledge of Cisco IOS, Next-Gen firewalls, VPNs, WAFs, and F5 load balancers.
• Working knowledge of network security tools (FireMon, SolarWinds, FMC) and Cisco ISE.
• Ability to work independently, multitask, and communicate effectively; capable of mentoring others.
• Experience defining metrics to measure technology outcomes and business impact.
• Exposure to cybersecurity concepts and DOE 10 CFR 810 is required.
• Cisco certifications - CCNP Datacenter, CCNP Routing & Switching, CISSP; AWS Solution Architect.
• Knowledge of VMware vCenter, vSphere, and Cisco UCS integration.

Responsibilities

• Design, configure, test, implement and support secure network designs.
• Advance network automation through architecture, configuration, documentation and maintenance.
• Provide training on tools and solutions to team members.
• Evaluate existing solutions for new requirements and improvements.
• Research and recommend innovative solutions with stakeholders for proper integration.
• Create production-ready network solutions following change management processes.
• Stay current on network technologies and industry trends; plan critical patches and upgrades.
• Mentor team members and non-technical super users.

Skills

Network design

Network security

Analytical thinking

Mentoring

Project coordination

Education

Bachelor's degree in computer science

Tools

FireMon

SolarWinds

Firepower Monitoring Center (FMC)

Cisco ISE

VMware vCenter

vSphere

Cisco UCS

Cisco IOS

Next-Gen firewalls

VPNs

Web Application Firewalls

F5 load balancers

Job description

The Senior Firewall/ Network Engineer is involved in the full technology life cycle and is responsible for designing, configuring, testing, implementing and supporting software, hardware and systems. The Senior Firewall/ Network Engineer works closely with Analysts and Product Managers to understand the business requirements that drive the analysis and physical design of technical solutions Technology Engineers may be assigned to either implementation or support functions. Implementation involves creating new technology based solutions whereas support involves upgrades, maintenance or issue resolution to existing technology solutions.

Job Responsibilities

• Application of concepts, best practices, and functions to design and implement complex and secure network designs.
• Advances network automation capabilities through Identification, architecture, design, configuration, building, documentation, and maintenance of solutions to meet business or technology requirements.
• Provide training on such tools and solutions to team members.
• Evaluate existing network technology solutions to determine fit for the new requirements.
• Research and recommend innovative solutions, alternatives in collaboration with other stakeholders to ensure proper integration of the new technology solution(s) with the existing solution(s) and processes.
• Create network solutions based on a disciplined process, including meeting all change management, security requirements, quality standards, product, and service operating requirements.
• Maintain currency in network technologies and industry trends, including participating in the planning and execution of critical patches and version upgrades.
• Makes solutions and solution parts production‑ready by following the standard change management processes, completing required forms, following procedures, completing version control documents, etc.
• Serves as technical mentor to team members and non‑technical super users.

Job Specific Qualifications

• Bachelor’s degree in computer science or a related STEM degree.
• 6 years of experience in IT networking, with at least three years experience in doing some of the following: designing, implementing, operating & managing multiple network projects and or large‑scale IT systems.
• Diverse experience in network/systems/security design and implementation of data network infrastructure based on security frameworks like NIST and CIS.
• Demonstrated experience creating and maintaining various Secure LAN/WAN, Zero‑Trust technologies and tools.
• In‑depth knowledge of Cisco IOS, Next‑Gen firewalls , IPS/IDS, Virtual Private Networks (VPNs), Web Application Firewalls, F5 load balancers, and other network security technologies that may emerge over time.
• Working knowledge of Network Security management and monitoring tools (e.g., FireMon, SolarWinds, Firepower Monitoring Center (FMC), etc.), Cisco ISE and commands to ensure quick and efficient resolution of issues.
• Demonstrated ability to work independently and multi‑task effectively with strong analytical ability, problem‑solving skills, and attention to detail. Demonstrated effective verbal and written communication and facilitation skills; demonstrated ability to develop business cases and sell network investment concepts and foster working relationships with key stakeholders.
• Demonstrated experience defining metrics that measure success of the technology solution in addressing business and technical requirements as well as achieving the desired outcomes.
• Exposure to Cybersecurity concepts and best practices.
• Department of Energy’s regulation 10 CFR 810 is required.
• Cisco certifications - CCNP Datacenter, CCNP Routing and Switching, Certified Information Systems Security Professional (CISSP).
• Amazon Solution architect - Certification.
• Knowledge of Virtual technology platforms including VMware vCenter, vSphere, and integration with Cisco UCS