ZR_2698_JOB

Zohorecruit; United States; Remote; USD 120,000 - 165,000; Full time

Job summary

Zohorecruit seeks a Senior Firewall Rules & Automation Engineer on site across Alpharetta, GA; Columbus, OH; KC; Omaha; Denver; Dallas; Berkley Heights, NJ, United States. This role designs, optimizes, and automates enterprise firewall policies in complex environments.

You will lead firewall rule lifecycle, policy-as-code, and cloud/hybrid integrations, partnering with architects and security teams to deliver secure, scalable connectivity. Strong automation and cloud experience required.

Qualifications

• 7+ years in network security engineering with a firewall focus.
• 3+ years leading automation or strategic infrastructure initiatives.
• Strong scripting and automation skills.
• Experience with Palo Alto, Fortinet, Cisco ASA/Firepower, Check Point.

Responsibilities

• Architect and implement enterprise firewall rule sets across data centers, cloud platforms, and edge environments.
• Design zone-based segmentation and microsegmentation policies.
• Develop automation workflows for firewall provisioning, validation, and decommissioning.
• Implement policy-as-code frameworks and integrate with ITSM and CI/CD pipelines.
• Ensure firewall configurations meet regulatory standards (PCI-DSS, HIPAA, NIST).
• Lead strategic initiatives such as Zero Trust segmentation and cloud perimeter modernization.

Skills

Firewall technologies

Rule management

Scripting & automation

Cloud & SDN knowledge

Tools

Ansible

Terraform

Python

ServiceNow

AWS Security Groups

Azure NSGs

GCP Firewall Rules

Job description

Senior Firewall Rules & Automation Engineer - on site

Alpharetta, Columbus, KC, Omaha, Denver, Dallas & Berkley Heights, NJ, United States | Posted on 09/09/2025

• State/Province Georgia
• Country United States
• Work Experience 8-10 Years

Job Description

Senior Firewall Rules & Automation Engineer - on site

Job Summary

The Senior Firewall Rules & Automation Engineer in the Strategic Initiatives Group is responsible for designing, optimizing, and automating firewall policies across complex enterprise environments. This role is central to the organization’s efforts to modernize network security, enforce segmentation, and support digital transformation initiatives. You’ll lead strategic projects involving firewall rule lifecycle management, policy-as-code, and integration with cloud and hybrid platforms, while collaborating with architects, cybersecurity teams, and infrastructure leaders to ensure secure and scalable connectivity.

In addition, this role functions as a Network Strategic Initiatives leader—advising, communicating, and driving delivery for global and transformational programs. When global 'critical incidents' arise, the leader rapidly aligns teams on a tactical response, identifies resolution paths, and documents gaps to evolve into standards, governance, or longer-term initiatives. The position is designed to serve holistically, connecting product teams to strategic goals and milestones while ensuring execution from the ground up. This position requires the ability to build from the ground up—establishing frameworks, governance, delivery models, and operational mecnisms tt scale across a global enterprise.

This role is not limited to technical depth—it demands multi-disciplinary expertise, leadership across matrixed environments, and proven ability to execute from zero by building frameworks, governance, and delivery models. Familiarity with Agile/Lean practices is expected, enabling incremental value delivery and continuous improvement.

Key Responsibilities

Firewall Policy Design & Optimization

• Architect and implement enterprise firewall rule sets across data centers, cloud platforms, and edge environments.
• Design zone-based segmentation strategies and microsegmentation policies to reduce attack surface.
• Conduct rule audits, cleanup initiatives, and policy rationalization to eliminate redundancy and reduce complexity.

Automation & Policy-as-Code

• Develop automation workflows for firewall rule provisioning, validation, and decommissioning using tools like Ansible, Terraform, and Python.
• Implement policy-as-code frameworks to enforce standardized rule creation and cnge control.
• Integrate firewall automation with ITSM platforms (e.g., ServiceNow) and CI/CD pipelines.
• Design and manage firewall policies across cloud-native platforms (AWS Security Groups/NACLs, Azure NSGs, GCP Firewall Rules).
• Implement transit gateway and hub-spoke architectures with integrated firewall controls.
• Collaborate with cloud architects to align network security with cloud governance models.
• Tactical Response — Rapid activation to resolve global incidents, codify playbooks, and translate lessons learned into enduring standards.
• Network Consulting — Conduct assessments, provide reference architectures, and guide decision‑making with executive‑ready recommendations.
• Solution & Planning — Define and execute well-structured solution packages (HLD, LLD, BoM, QA, automation models) aligned with the One Management model. Empsize Infra-as-Code, observability, and governance at every stage.
• Gap Analysis — Map as‑is to to‑be states across people, process, technology, and compliance, prioritizing remediation into quick wins and strategic programs.
• Policy-as-Code and automation-first delivery, rmonizing firewall and cloud perimeter controls, detecting drift, and ensuring compliance.

Security & Compliance

• Ensure firewall configurations meet regulatory and internal compliance standards (PCI-DSS, HIPAA, NIST).
• Implement logging, alerting, and telemetry for firewall events using SIEM platforms (Splunk, Sentinel).
• Support incident response and forensic investigations by providing firewall logs and traffic analysis.

Strategic Leadership & Collaboration

• Lead strategic initiatives such as Zero Trust segmentation, cloud perimeter modernization, and firewall-as-a-service adoption.
• Partner with enterprise architects, cybersecurity teams, and application owners to align firewall policies with business needs.
• Present technical strategies, risk posture, and automation outcomes to executive stakeholders.

Required Skills & Qualifications

Technical Expertise

• Deep understanding of firewall technologies (Palo Alto Networks, Fortinet, Cisco ASA/Firepower, Check Point).
• Proficiency in rule management, NAT, VPNs, and application-layer filtering.
• Strong scripting and automation skills (Python, Ansible, Terraform).
• Familiarity with cloud-native firewall constructs and SDN/SASE architectures.

Certifications

Experience

• 7+ years in network security engineering with a focus on firewall management.
• 3+ years leading automation or strategic infrastructure initiatives.

Soft Skills

• Strong analytical and troubleshooting skills.
• Excellent communication and documentation abilities.
• Strategic mindset with a focus on scalability and governance.

Preferred Qualifications

• Experience with firewall rule lifecycle platforms (e.g., Tufin, AlgoSec, FireMon).
• Knowledge of Zero Trust segmentation and east‑west traffic control.
• Background in regulated or high-security environments.