Tufin Engineer

System One, Inc.; Cary (NC); Remote; USD 76,000 - 96,000; Full time

Benefits offered by this job

Health insurance

Dental coverage

Vision insurance

401(k) plan

Job summary

System One is seeking a Tufin Engineer to improve firewall policy visibility, governance, and automation across complex environments. The role emphasizes hands-on optimization of Tufin SecureTrack and SecureChange and strengthening policy hygiene for reliable workflows.

This fully remote US-based position requires onboarding firewalls and devices, troubleshooting policy ingestion, and delivering governance reports and dashboards.

Qualifications

• Hands-on experience administering and optimizing Tufin SecureTrack and SecureChange.
• Experience onboarding security devices into Tufin and troubleshooting firewall policy collection.
• Strong understanding of firewall policy analysis, rule lifecycle management, and security governance.
• Experience configuring policy change workflows, automation, and reporting in Tufin.
• Ability to document technical recommendations and train operational teams.

Responsibilities

• Assess and optimize Tufin SecureTrack and SecureChange configuration, health, and policy visibility.
• Onboard firewalls and security devices, troubleshoot policy ingestion, and validate topology and rule visibility.
• Analyze unused, redundant, shadowed, and overly permissive rules and guide policy cleanup.
• Design and validate SecureChange workflows for access requests, policy changes, risk reviews, and rule lifecycle management.
• Configure policy governance, compliance reporting, and operational dashboards.
• Document recommended practices and train engineering and operations teams on Tufin administration.

Skills

Tufin SecureTrack

Tufin SecureChange

Firewall policy analysis

Rule lifecycle management

Policy change workflows

Automation in Tufin

Training operational teams

Tools

Tufin

Job description

Job title: Tufin engineer
Fully remote - only U.S based
Compensation range: $55 - $70 per hour
Candidates must have hands-on experience deploying, configuring, and operating Tufin, along with strong client-facing communication skills.
Role overview

We are seeking a Tufin Engineer to improve firewall policy visibility, governance, and automation across complex environments. This hands-on role focuses on optimizing Tufin SecureTrack and SecureChange, strengthening policy hygiene, and helping teams adopt reliable workflows.

Responsibilities

• Assess and optimize Tufin SecureTrack and SecureChange configuration, health, and policy visibility.
• Onboard firewalls and security devices, troubleshoot policy ingestion, and validate topology and rule visibility.
• Analyze unused, redundant, shadowed, and overly permissive rules and guide policy cleanup.
• Design and validate SecureChange workflows for access requests, policy changes, risk reviews, and rule lifecycle management.
• Configure policy governance, compliance reporting, and operational dashboards.
• Document recommended practices and train engineering and operations teams on Tufin administration.

Required qualifications

• Hands-on experience administering and optimizing Tufin SecureTrack and SecureChange.
• Experience onboarding security devices into Tufin and troubleshooting firewall policy collection.
• Strong understanding of firewall policy analysis, rule lifecycle management, and security governance.
• Experience configuring policy change workflows, automation, and reporting in Tufin.
• Ability to document technical recommendations and train operational teams.

System One, and its subsidiaries including Mountain Ltd., are leaders in delivering outsourced services and workforce solutions across North America. We help clients get work done more efficiently and economically, without compromising quality. System One not only serves as a valued partner for our clients, but we offer eligible employees health and welfare benefits coverage options including medical, dental, vision, spending accounts, life insurance, voluntary plans, as well as participation in a 401(k) plan.

System One is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, age, national origin, disability, family care or medical leave status, genetic information, veteran status, marital status, or any other characteristic protected by applicable federal, state, or local law.

Ref: #404-IT Pittsburgh