VPN/Firewall Engineer - 173626

Zachary Piper Solutions; Norfolk (VA); On-site; USD 90,000 - 100,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

401k Plan

Holidays

PTO

Sick leave

Job summary

Zachary Piper Solutions seeks a VPN/Firewall Engineer to support the U.S. Navy. The role is 100% onsite across multiple US locations including Norfolk, VA and other bases.

You will serve as a network security SME focusing on enterprise firewalls, VPNs, DMZs, and related engineering, operations and troubleshooting. Responsibilities include Tier III support for NMCI, designing and maintaining security appliances, collaborating with cross-functional teams, and creating engineering plans and SOPs.

Qualifications

• :
• Bachelor's Degree in Engineering, Computer Science, Information Technology, or a related field
• 8)
• 8–12+ years of relevant network engineering experience; equivalent experience may be considered
• 8)
• Active Secret security clearance
• 8)
• IAT Level III certification (CCNP Security, CISSP, or CASP+)
• 9)
• Certification from Cisco, Juniper, Palo Alto, or F5 Networks
• 9)
• Extensive experience engineering & troubleshooting enterprise networks, including firewalls, VPNs, DMZs, routing, switching, MPLS, BGP, OSPF, IS-IS, VLANs, STP, multicast, & IP/subnet addressing
• 7)
• Strong understanding of network security, defense-in-depth principles, network architecture, modern network topologies, & network appliance security
• 8)
• Experience with Ansible, Python, Infrastructure as Code (IaC), & network automation
• 7)

Responsibilities

• Provide Tier III network engineering & SME support for enterprise firewall, VPN, DMZ, routing, switching, & network security technologies supporting NMCI
• Design, configure, maintain, troubleshoot, & implement enterprise network security appliances, including firewalls, VPNs, DMZs, & Cisco/Juniper network infrastructure
• Collaborate with Network Operations, Network Engineering, NOC, Release Management, & project teams to execute network upgrades, maintenance, integrations, performance tuning, & service improvements
• Develop & maintain Engineering Implementation Plans (EIPs), network SOPs/TTPs, automation solutions, & technical documentation while identifying opportunities for network automation & best-practice improvements
• Support Incident & Problem Management, including Tier III escalations, vendor engagement, root cause analysis, & participation in an on-call rotation to support mission-critical operations

Skills

Network engineering experience

Active Secret clearance

IAT Level III certification

DoD/ NMCI networking

Python & Ansible

Network security concepts

Education

Bachelor's degree in Engineering/CS/IT

Tools

Cisco

Juniper

Palo Alto

F5

Cisco ASA

Ansible

Python

Job description

Zachary Piper Solutions is seeking a VPN/Firewall Engineer to support the U.S. Navy. This role is 100% onsite in Norfolk, VA; Pearl Harbor, HI; San Diego, CA; Washington Navy Yard, DC; or Pensacola, FL. The VPN/Firewall Engineer will serve as a network security go-to, with a focus on enterprise firewall, VPN, DMZ, and network security engineering, operations, troubleshooting, and continuous improvement.

Responsibilities of the VPN/Firewall Engineer include:

• Provide Tier III network engineering & SME support for enterprise firewall, VPN, DMZ, routing, switching, & network security technologies supporting the NMCI environment
• Design, configure, maintain, troubleshoot, & implement enterprise network security appliances, including firewalls, VPNs, DMZs, & Cisco/Juniper network infrastructure
• Collaborate with Network Operations, Network Engineering, NOC, Release Management, & project teams to execute network upgrades, maintenance, integrations, performance tuning, & service improvements
• Develop & maintain Engineering Implementation Plans (EIPs), network SOPs/TTPs, automation solutions, & technical documentation while identifying opportunities for network automation & best-practice improvements
• Support Incident & Problem Management, including Tier III escalations, vendor engagement, root cause analysis, & participation in an on-call rotation to support mission-critical operations

Qualifications of the VPN/Firewall Engineer include:

• Bachelor's Degree in Engineering, Computer Science, Information Technology, or a related field
• 8–12+ years of relevant network engineering experience; equivalent experience may be considered
• Active Secret security clearance
• IAT Level III certification (CCNP Security, CISSP, or CASP+)
• Certification from Cisco, Juniper, Palo Alto, or F5 Networks
• Extensive experience engineering & troubleshooting enterprise networks, including firewalls, VPNs, DMZs, routing, switching, MPLS, BGP, OSPF, IS-IS, VLANs, STP, multicast, & IP/subnet addressing
• Strong understanding of network security, defense-in-depth principles, network architecture, modern network topologies, & network appliance security
• Experience with Ansible, Python, Infrastructure as Code (IaC), & network automation

Compensation for the VPN/Firewall Engineer includes:

• Salary: $90,000–$100,000 depending on experience
• Benefits: Medical, Dental, Vision, 401k Plan, Holidays, PTO, sick leave as required by law

Keywords: Firewall Engineer, Network Security Engineer, Network Engineer, VPN Engineer, Network Security, Firewall, VPN, Virtual Private Network, DMZ, Demilitarized Zone, Network Engineering, Transport Engineer, Tier III Network Engineer, Network SME, Juniper, Cisco, Palo Alto, F5, Cisco ASA, ASA, Juniper SRX, SRX, IPSec, SSL VPN, BGP, OSPF, IS-IS, MPLS, VLAN, STP, Spanning Tree, Multicast, TCP/IP, TCP, IP, IP Addressing, Subnetting, firewall, router, routing, switch, switches, switching, VPN, network security, firewall, application delivery controllers, load balancers, security appliance, Adaptive Security Appliance, configure, configuring, troubleshoot, troubleshooting, Internet Protocol Security, encrypt, encryption, Border Gateway Protocol, traffic, Intermediate System to Intermediate System, Multiprotocol Label Switching, WAN, Wide Area Network, Virtual Local Area Network, Spanning Tree Protocol, Transmission Control Protocol, Internet Protocol, Ansible, Python, Network Automation, Infrastructure as Code, IaC, DevSecOps, DevOps, Automation, Configuration Management, Active DoD Secret, IAT Level III, 8570, CCNP Security, CISSP, Security+, Juniper certification, Cisco certification, Palo Alto certification, F5 certification, CASP, CISSP, CASP+ CE, CASP+ce, certified information systems security professional, certified informations systems security professional, certified information system security professional, certified advanced security practitioner, comptia casp, comptia CASP+, Iat III, iat level iii, iat3, iat 3, iat level three, iat three, iatthree, iat3, CISA, GCED, GCIH, certified information systems auditor, certified information system auditor, GIAC Certified enterprise defender, GIAC certified incident handler, dod cleared, dod clearance, secret clearance, secret, secret cleared, secret security clearance, security clearance, security cleared