Sr Checkpoint Firewall Engineer, Progression

TECO Energy Inc.; Town of Florida (NY); On-site; USD 90,000 - 130,000; Full time

Benefits offered by this job

401k with company matching

Pension plan

Paid time off

Medical/Dental Coverage

Tuition Assistance

Bonus Plan

Job summary

A major utility company is seeking a Network & Systems Security Analyst. This role entails designing, implementing, and supporting network and security infrastructure while ensuring compliance with industry standards. Candidates should have a strong background in network security, troubleshooting protocols, and relevant certifications. Competitive salary and benefits are offered, along with opportunities for growth.

Qualifications

• 4+ years of related hands-on experience.
• Specialized knowledge in network security controls.
• Experience with regulations like NERC CIP and SOX.

Responsibilities

• Design and implement network/security infrastructure.
• Monitor and troubleshoot network/security controls.
• Participate in disaster recovery planning.
• Install and support network/server/storage hardware/software.
• Assist in disaster recovery planning and testing.
• Provide third-level security system support and authentication mechanisms.

Skills

Check Point experience

Troubleshooting skills

VPN solutions

Network security

Communication skills

Firewall management

Education

High School Diploma or GED

Bachelor’s degree in Computer Science or related field

Tools

Firewalls

Cisco networking

VMware

DDoS protection

Job description

Overview

Select how often (in days) to receive an alert:

At Tampa Electric, dependable electricity starts with dedicated individuals whose talent, skill and passion drive our success. We’ve been lighting the way for West Central Florida for more than 125 years—and we’re just getting started.

Join us and build a rewarding career with competitive pay, comprehensive benefits and a culture that supports your growth. Your potential finds its purpose at Tampa Electric.

We proudly deliver 99.98% electric service reliability to nearly 860,000 customers across 2,000 square miles of Hillsborough County and parts of Polk, Pasco and Pinellas counties. Through innovation and strategic investments, we’re creating a cleaner, brighter energy future—while delivering exceptional service every step of the way.

We reflect the communities we serve and foster a workplace where every employee feels welcomed, valued and engaged. Join our team of energy experts and help shape the future of power.

Storm Duty Requirements

Tampa Electric and its sister companies serve a role in providing critical services to our community during an emergency. Team members are required to participate in the response/recovery activities related to emergencies/disasters to maintain service to our Tampa Electric customers. Team members are required to work in their normal job duties or other assigned activities. Proper compensation will be made in accordance with the company's rules and procedures.

Responding to storms will be considered a condition of employment.

Tampa Electric is proud to be an Equal Opportunity Employer. To learn more, please click on link below:

Title: Sr Checkpoint Firewall Engineer, Progression
Company: Tampa Electric Company
Location: Bearss Operations Center
State and City: Florida - LUTZ
Shift: 8 Hr. X 5 Days

TITLE: Network & Systems Security Analyst, Progression
PERFORMANCE COACH: Mgr Network Engineering & Cyber Security Operations
COMPANY: Tampa Electric
DEPARTMENT: High Performance Computing & BP Support

Focus Areas

• Check Point experience in production (R82)
• Hands-on experience with Check Point Maestro (deployment, Security Group management, orchestration, scaling, and troubleshooting) Deep Layer 2 / Layer 3 networking and TCP/IP troubleshooting skills
• GAIA and Security management Server experience
• Proven experience designing and supporting VPN solutions
• Experience in high‑availability or large‑scale enterprise environments

Note: This position can be hired at any level within the progression job family based on education and years of experience, but is ideally targeting Sr level (level 3).

Position Concept

The Network & Systems Security Analyst is responsible for planning/designing, implementing, and supporting new and existing network, server, storage infrastructure. This role ensures all network security controls (firewalls, web application firewalls [WAF], proxies, network segmentation, NAC, ACLs, etc.) are implemented and managed per corporate information security standards. Responsibilities include assessing enterprise assets and critical assets for secure configurations and maintaining regulations and standards such as NERC CIP, SOX, and PCI.

Responsible for the design, planning, operation, maintenance, and support of the TECO and NMGC network infrastructure. This includes technologies such as route/switch, on‑premise LAN/WAN, IPAM, Wi‑Fi, ISP management, site‑to‑site VPNs, proxies, perimeter firewall management, DNS, Azure cloud environments, automation, NAC/user access, hyperconverged infrastructure, and overall network security. Partners with Telecommunication teams on circuits/links. Responsible for the NERC Cyber Infrastructure Protection and disaster recovery plans.

Responsible for VoIP, SIP, DHCP, DNS, TCP/IP routing and routing protocols (OSPF, BGP), NAT, IPsec/SSL VPNs, GRE, route redistribution, traffic shaping, port‑level filtering, SD‑WAN, MPLS, and other related technologies. Responsible for the installation, configuration, and maintenance of WAN/LAN connectivity including core and campus switches, routers, firewalls, wireless access points, WAN scalers, and load balancers. Responsible for DNP over IP and serial SCADA communications between primary and backup control centers, power plants, solar sites, and substations. Responsible for Smart GRID communication hardware switches and routers between centers.

Career Levels and Duties

• NETWORK & SYSTEMS SECURITY ANALYST I (LEVEL 1): Monitors and troubleshoots server, network, and security controls related problems; installs and configures hardware/software. Works under direct supervision.

Primary Duties and Responsibilities

1. Plan, design, and implement network, server, and storage infrastructure based on project requirements, capacity plans, and system support. (20%)
2. Problem solving involves basic troubleshooting following the OSI model, making or calling for equipment repairs, and problem escalation. (20%)
3. Detection and correction of work stoppages and/or errors through monitoring systems and configuration adjustments. (20%)
4. Install and support network, server, and storage hardware and software. (10%)
5. Participate in planning, designing, maintenance, testing and documentation of disaster recovery plans. (10%)
6. Provide and apply security consulting and support for IT infrastructure across multiple platforms (Firewalls, proxies, WAFs, ACLs, NAC, OS, NetScaler, DDoS protection, other network devices). (10%)
7. Provide third‑level technical support for security systems and authentication mechanisms. (10%)

Qualifications

Education
Required: High School Diploma or GED

Preferred: Bachelor’s degree in Computer Science, Engineering, Math, or equivalent IT discipline (e.g., MIS).

Licenses/Certifications

• Required: Related network, system, operating system, or information security certifications (e.g., MCSA, MCSE, CCNA, CEH, GIAC, CISSP).
• Preferred: ITIL v3, CCNA/CCNP, MCSE, VCP, GIAC, CISSP

Experience

Level I and Level II requirements detailed per level below. Summary: substantial hands‑on experience in Windows, VMware, firewall support, DDoS protection, proxies, WAFs, NetScaler load balancers, and Cisco networking. See each level for specifics.

• Level I (I): Minimum four (4) years of related hands‑on experience (or equivalent with education). See above for specifics.
• Level II (II): Minimum six (6) years; access to project leadership and mentoring duties. See above for specifics.
• Level III (III): Minimum eight (8) years; broader project leadership and architecture responsibilities. See above for specifics.
• Level IV (Lead): Minimum ten (10) years; lead network analyst team and manage cross‑level mentorship.

Experience notes: In lieu of some experience, degrees may substitute per policy.

Knowledge/Skills/Abilities (KSA)

• Expert knowledge of network, server, and security controls infrastructure
• Thorough working knowledge of essential technologies: switching, routing, DNS/DHCP, Windows AD, VMware, VoIP, SAN, firewall support, DDoS protection, proxy, WAF, NetScaler, network segmentation, NAC, IDS/IPS, antivirus, cybersecurity best practices
• Strong analytical and communication skills; ability to explain complex topics to non‑technical audiences
• Regulatory compliance knowledge (NERC CIP, SOX, PCI)

Working Conditions

Normal working conditions with occasional extended hours during the week and weekends.

Physical Demands

Normal physical demands for office and operational environments. Must be able to lift 50 pounds and work on ladders for network access points.

Additional Roles

• NETWORK & SYSTEMS SECURITY ANALYST II (LEVEL 2): Increased responsibilities in consulting on small project design; may serve as a project lead and mentor Level 1 Analysts. Works under general supervision.
• NETWORK & SYSTEMS SECURITY ANALYST III (LEVEL 3): Increased responsibilities; project leadership and mentorship across levels.
• NETWORK & SYSTEMS SECURITY ARCHITECT (LEVEL 4): Lead larger projects; mentor all levels; general direction.

Notes on Certifications and Training

• Leadership/management certifications may be considered in lieu of some professional certifications.
• Additional certifications may be required within one year of hire for some levels (as applicable).

#LI-SC1

Teco offers a competitive Benefits package!!

Competitive Salary, 401k with company matching, Pension plan, Paid time off, Paid holiday time, Medical/Dental Coverage, Tuition Assistance, EAP, Wellness Programs, On-site Fitness Centers, Bonus Plan and more!