Sr. Firewall Engineer, Checkpoint & Palo Alto Focus, Progression
TECO Energy, Inc.
Turn this role into an interview — a resume and cover letter built around what this employer wants.
Benefits offered by this job
Job summary
Tampa Electric seeks a Network & Systems Security Analyst Lead to design, implement, and support the company’s network, server, and security infrastructure. You will ensure firewall, WAF, proxies, NAC, and PCI/NERC controls are maintained, optimized, and compliant across the enterprise.
The role targets Lead-level responsibilities with project design, mentoring, and cross-training. On-site at Bearss Operations, you’ll work with the Telecommunication and IT teams to secure critical infrastructure
Qualifications
- Requires 8+ years of related hands-on experience in Windows/VMware/firewall support and network security.
- Experience with regulatory compliance such as NERC CIP, SOX, and PCI is required/preferred.
Responsibilities
- Plan, design, implement, and support network, server, storage infrastructure and security controls.
- Lead design and planning for small projects; mentor analysts and cross-train peers.
- Ensure configurations meet corporate security standards and disaster recovery plans.
Skills
Education
Tools
Job description
Select how often (in days) to receive an alert:
At Tampa Electric, dependable electricity starts with dedicated individuals whose talent, skill and passion drive our success. We’ve been lighting the way for West Central Florida for more than 125 years—and we’re just getting started.
Join us and build a rewarding career with competitive pay, comprehensive benefits and a culture that supports your growth. Your potential finds its purpose at Tampa Electric.
We proudly deliver 99.98% electric service reliability to nearly 860,000 customers across 2,000 square miles of Hillsborough County and parts of Polk, Pasco and Pinellas counties. Through innovation and strategic investments, we’re creating a cleaner, brighter energy future—whiledelivering exceptional service every step of the way.
We reflect the communities we serve and foster a workplace where every employee feels welcomed, valuedand engaged. Join our team of energy experts and help shape the future of power.
Tampa Electric and its sister companies serve a role in providing critical services to our community during an emergency. Team members are required to participate in the response/recovery activities related to emergencies/disasters to maintain service to our Tampa Electric customers. Team members are required to work in their normal job duties or other assigned activities. Proper compensation will be made in accordance with the company's rules and procedures.
Responding to stormswill beconsidered a condition of employment.
Tampa Electric is proud to be an Equal Opportunity Employer.
Title: Sr. Firewall Engineer, Checkpoint & Palo Alto Focus, Progression
Company: Tampa Electric Company
Location: Bearss Operations Center
State and City: Florida - LUTZ
Shift: 8 Hr. X 5 Days
TITLE: Network & Security Systems Analyst Lead, Progression
PERFORMANCE COACH: Mgr. Network Engineering & Cyber Security Operations
COMPANY: Tampa Electric
DEPARTMENT: High Performance Computing & BP Support
- Strong hands on Palo Alto experience in production
- Previous Checkpoint experience a plus
- Proven experience designing and supporting VPN solutions
- Experience in high availability or large scale enterprise environments
Note that this position can be hired at any level within the job family of progression based on Education and years of experience but is ideally targeting to hire at the Lead level (3rd level in the JD).
POSITION CONCEPT
The Network & Systems Security Analyst (Firewall Engineer), is responsible for planning/designing, implementing, and supporting new and existing network, server, storage infrastructure. This role is also responsible for ensuring all network security controls (i.e., firewalls, web application firewalls [WAF], proxies, network segmentation, NAC, ACLs, etc.) are implemented and managed per corporate information security standards. Additionally, responsibilities include assessing enterprise assets and critical assets for secure configurations and maintaining and enforcing regulations and standards such as NERC Critical Infrastructure Protection (CIP), Sarbanes-Oxley (SOX), and Payment Card Industry (PCI).
Responsible for the design, planning, operation, maintenance, and support of the TECO and NMGC network infrastructure. This includes primary accountability for network technologies such such as route/switch, on-premise LAN/WAN, IPAM, Wi-Fi, ISP management, site-to-site VPNs, proxies (forward and reverse), perimeter firewall management, DNS, Azure cloud environments, automation, NAC/user access, hyperconverged infrastructure, and overall network security. Partners with the Telecommunication teams on establishing/upgrading existing circuits/communication links. Responsible for the NERC Cyber Infrastructure Protection and disaster recovery plans.
Responsible for VoIP, SIP, DHCP, DNS, TCP/IP routing and routing protocols such as OSPF and BGP, binary mathematics, NAT, PAT, IPsec and SSL VPN technologies, GRE tunneling, route redistribution, traffic shaping, port-level filtering, SD-WAN, MPLS and other communications related technologies. Responsible for the installation, configuration, and maintenance of all WAN and LAN connectivity which includes core and campus switches, routers, firewalls, wireless access points, WAN scalers and load balancer technologies. Responsible for the design, installation, configuration, and maintenance of DNP over IP and serial SCADA communications between the primary and backup control centers, power plants, solar sites, and substations. Responsible for the configuration and maintenance of Smart GRID communication hardware switches and routers between the primary and backup control centers.
In addition to the duties & responsibilities of the Analyst Sr, has increased responsibilities in consulting on small project design and plans. May serve as a project lead, cross-train peers, and mentor Analysts. Works under general direction.
1. Monitors, troubleshoots, diagnoses, and remedies server, network, DDoS protection, NetScaler load balancers, and security controls related problems and failures.
2. Installs and configures server and network related hardware/software which meet the company’s security standards.
3. Design and planning required for small projects.
4. Project leadership, consulting, or cross-train peers.
Key Internal: Consults with all IT departments as needed. This role requires the ability to provide technical direction to members of project teams.
Key External: Consults with vendor technical specialists and account managers for the various technologies deployed.
Required: High School Diploma or GED
Preferred: Bachelor’s degree in Computer Science, Engineering, Math, or equivalent IT discipline (MIS).
Required: Has obtained at least three or two, with the condition to obtain a third certification within one year of hire for this position, related network, system, operating system, or information security professional certifications: (e.g., Microsoft Certified Solutions Associate (MCSA), Microsoft Certified Solutions Expert (MCSE), VMware Certified Professional (VCP), Cisco Certified Network Associate (CCNA), Cisco Certified Network Professional (CCNP), Certified Ethical Hacker (CEH), GIAC Network Forensic Analyst (GNFA) or other GIAC Certifications, Certified Information Systems Security Professional (CISSP), Certified SCADA Security Architect (CSSA).
Preferred: ITIL v3, CCNP, MCSE, VCP, GNFA, CISSP
Required: Minimum eight (8) years of related hands-on experience implementing and maintaining Windows, VMware, firewall support, DDoS protection, proxies, WAFs, NetScaler load balancers, Storage Area Networks, or Cisco Networking. In lieu of some experience listed above, may consider six (6) years of related experience with an Associate’s Degree or four (4) years of related experience with a Bachelor’s Degree in Computer Science, Engineering, Math, or equivalent IT discipline (e.g., MIS).
- Expert knowledge of network, server, and security controls infrastructure regardless of the complexity
- Thorough working knowledge for most of the following technologies and operational functions: switching, routing, DNS/DHCP, Windows Active Directory, VMware, Voice over IP, Storage Area Networking, firewall support, DDoS protection, proxy, WAF, NetScaler load balancing, network segmentation, NAC, IDS/IPS, antivirus support, cyber security best practices, and networking/hardware installation and maintenance
- Thorough working knowledge with packet analysis and denial of service protection
- Strong critical thinking, analytical, problem solving, and risk assessment skills as well as strong listening and communication skills (oral and written)
- Ability to present issues and topics of a complex technical nature to non-technical audiences
- Excellent interpersonal, mentoring, and organizational skills
- Good working knowledge of the processes that ensure compliance with regulatory or industry requirements such as NERC CIP, SOX, and PCI
- Competitive Salary
- 401k Savings plan w/ company matching
- Pension plan
- Paid time off
- Paid Holiday time
- Medical, Prescription Drug, & Dental Coverage
- Tuition Assistance Program
- Employee Assistance Program
- Wellness Programs
- On-site Fitness Centers
- Bonus Plan and more!
'/%3e%3cpath%20d='M101.744%2012.4726L102.894%2016.1947L99.0021%2013.2201L101.744%2012.4726ZM105.3%208.40937H100.488L99.0026%203.59473L97.5116%208.41047L92.7%208.40385L96.5965%2011.3834L95.1055%2016.1942L99.0021%2013.2196L101.408%2011.3834L105.3%208.40992V8.40937Z'%20fill='white'/%3e%3cdefs%3e%3clinearGradient%20id='paint0_linear_5593_1381'%20x1='90'%20y1='9.44471'%20x2='99'%20y2='9.44471'%20gradientUnits='userSpaceOnUse'%3e%3cstop%20stop-color='%2300AD70'/%3e%3cstop%20offset='0.998594'%20stop-color='%2300B67A'/%3e%3cstop%20offset='1'%20stop-color='%23DCDCE6'/%3e%3c/linearGradient%3e%3c/defs%3e%3c/svg%3e){kind=small}
