ZR_2713_JOB

Zohorecruit; Houston (TX); Hybrid; USD 110,000 - 170,000; Full time

Benefits offered by this job

Hybrid work model

Job summary

Sr. Cisco Certified Firewall Engineer – hybrid role in Houston, TX. You will migrate legacy Cisco ASA systems to Cisco Firepower and reinforce security for regulated OT environments, coordinating with an onsite/remote team.

The ideal candidate has extensive Cisco ASA/Firepower, ISE and MPLS experience, familiarity with BGP/OSPF, and a proven ability to document configurations. Local Houston-area candidates within 50 miles are required; CCNP/CCIE preferred.

Qualifications

• Extensive experience with Cisco ASA and Firepower.
• Experience with Cisco ISE and MPLS.
• Experience in highly regulated, air-gapped OT environments.
• Familiarity with BGP, OSPF and Spanning Tree Protocol.
• Proven ability to document network configurations and migration processes.
• Excellent communication skills and teamwork.

Responsibilities

• Lead migration of legacy Cisco ASA systems to Cisco Firepower with minimal disruption.
• Design and implement network solutions for regulated OT environments.
• Perform route optimization and manage MPLS environments.
• Collaborate with a small team to stabilize the network and plan future migrations.
• Develop and maintain documentation and migration plans.
• Provide onsite support in Houston with travel within 50 miles as needed.

Skills

Cisco ASA/Firepower

Cisco ISE

MPLS

BGP

OSPF

Spanning Tree

Documentation

Communication

OT networks

Education

CCNP or CCIE certification

Tools

ASDM lift-and-shift

FMC

Job description

Sr. Cisco Certified Firewall Engineer - hybrid 2-4 days on site

houston, United States | Posted on 09/30/2025

Job Title: Sr. Cisco Certified Firewall Engineer

Location: Houston, TX (Hybrid - 2 to 4 days onsite per week)

Contract Duration: 6-12 Months (Possibility of extension)

Overview:

The partner will provide full compensation and benefit information prior to employment with the partner. This person will be focusing on migrating legacy Cisco ASA systems to Cisco Firepower. This role is critical for ensuring the stability and security of our regulated, air-gapped operational technology (OT) environments. The ideal candidate will have extensive experience with Cisco ASA, Cisco ISE, and MPLS, and will be comfortable working in sensitive, regulated data networks. This position requires a local candidate within a 50-mile radius of Houston to ensure rapid response and minimize logistical challenges.

Key Responsibilities:

• Lead the migration of legacy Cisco ASA systems to Cisco Firepower, ensuring minimal disruption to operations.
  
• Design and implement network solutions that enhance the stability and security of regulated OT environments.
  
• Perform route optimization and manage MPLS environments, identifying areas for improvement.
  
• Collaborate with a small, dynamic team to stabilize the network environment and prepare for future migrations.
  
• Develop and maintain comprehensive documentation, including as-built records and migration plans.
  
• Provide onsite support in Houston, with occasional travel within a 50-mile radius as needed.
  

Work closely with substation operations and SCADA teams to ensure seamless integration and compliance with regulatory standards.

Skills and Qualifications:

• Extensive experience with Cisco ASA and Firepower, including ASDM lift and shift processes. FMC experience will be highly preferred.
  
• Strong knowledge of Cisco ISE and MPLS, with the ability to optimize and manage these environments.
  
• Experience working in highly regulated, air-gapped OT environments.
  
• Familiarity with Cisco networking technologies, including BGP, OSPF, and Spanning Tree Protocol.
  
• Proven ability to document network configurations and migration processes thoroughly.
  
• Excellent communication skills, with the ability to work collaboratively in a team environment.
  

Local to Houston, TX, with the ability to work onsite 2 to 4 days per week and travel within a 50-mile radius.

Preferred Qualifications: CCNP or CCIE would be better

• Previous experience in a similar role within a regulated industry, such as federal defense or utilities.