Job Description: Established nearly two centuries ago, FM is a leading mutual insurance company whose capital, scientific research capability and engineering expertise are solely dedicated to property risk management and the resilience of its policyholder-owners. These owners, who share the belief that the majority of property loss is preventable, represent many of the world's largest organizations, including one of every four Fortune 500 companies. They work with FM to better understand the hazards that can impact their business continuity to make cost-effective risk management decisions, combining property loss prevention with insurance protection. Schedule & Location Employment type: Full-time, salaried position Location: Remote, within commutable distance of FM's Corporate Office in Johnston, Rhode Island. On-site presence at the Corporate Office is expected 1 to 2 days per week, depending on business needs. Relocation: Relocation assistance is not available for this position Position Summary Come join a newly formed team driving security architecture for a global Fortune 500 company. FM is building its Security Architecture function, and we're looking for a Senior Security Architect to be our subject matter expert for network security. Network security is your starting focus. As the function grows, your scope may expand into other security domains, based on your skills and the organization's needs. In this role, you'll define how network security controls are designed, standardized and governed across a global network that supports dozens of locations in countries around the world. That includes today's offices, internet perimeters and private wide-area networks, and the cloud-first, software-delivered network we're moving toward, with Microsoft Azure at its center. This is an individual contributor role for a forward-thinking architect with deep network security expertise and experience working in a modern cloud and DevOps environment. The ideal candidate connects the threat landscape to architecture decisions and sees the value of managing network and security configuration as code, but can also navigate the code itself or the management console to confirm that implemented configurations and architectures match design intent. What You'll Do Set the standard: Define control design intent, technical standards and evaluation criteria for network security across our global environment. This covers next-generation firewalls (NGFWs), network segmentation, secure ingress and egress, web application firewalls (WAFs), DNS and edge protection, intrusion detection and prevention (IDS/IPS), SASE, ZTNA, and remote and branch access. Build reusable patterns: Create reference architectures and patterns for on-premises, hybrid and Azure environments, including areas that don't have them today, so most work can move forward without case-by-case review. Drive modernization: Own the network security strategy and roadmap, including our move toward secure access service edge (SASE), zero trust network access (ZTNA) and identity- and application-aware segmentation. Sequence the work to align with business direction and stay ahead of evolving threats. Champion security as code: Promote infrastructure-as-code and configuration-as-code practices, along with CI/CD controls, so network and security changes are consistent, peer-reviewed, traceable and auditable. Apply a risk-based approach: Translate security policy and risk intent into clear technical requirements, working with engineering teams to ensure requirements are practical, implementable and appropriate for the environment. Be clear about where controls are required, where they can be tailored and why. Stay connected to implementation: Work closely with network security engineers to understand how designs are implemented in practice. Be comfortable reviewing configurations in firewall, SASE, WAF and cloud consoles and in code repositories, both to validate design intent and to identify opportunities to strengthen or evolve our architecture. Help define criteria for independent control validation and work with engineering teams to interpret and act on the findings. Guide decisions: Review and approve designs, patterns and exceptions against defined criteria, document architecture decisions, and represent security in architecture review forums. Collaborate across teams: Partner closely with enterprise architecture and with the network security, platform, and cloud engineers that operate security controls. Bring architectural perspective together with their hands-on expertise to develop solutions that are secure, practical and operable at scale. Stay close to implementation and work with engineering teams rather than operating platforms directly. Anticipate threats: Keep up with adversary techniques, attacks on network edge and remote access, and changes in platforms and the industry, and design for where the environment is heading. Communicate and mentor: Explain network security risk and requirements clearly to non-security audiences, and help develop other architects through coaching, design review and feedback Qualifications: 8 or more years of experience in IT or cybersecurity, with significant responsibility for network security architecture, engineering or design. Experience designing resilient, redundant global network architectures, including SD-WAN, MPLS and hybrid connectivity. Experience designing enterprise network security architectures, including NGFWs, segmentation, DMZs, secure ingress and egress, and IDS/IPS. Architecture-level experience with enterprise NGFW platforms, and enough hands-on depth to assess configurations directly. Strong Microsoft Azure network security experience, including virtual networks, network security groups, routing, private connectivity, and cloud ingress and egress. Strong networking fundamentals, including BGP, routing, IPsec, VLAN/VRF, load balancing and troubleshooting complex traffic flows. Experience with infrastructure as code, configuration as code, version control and CI/CD practices for network or security changes. Experience designing zero trust segmentation and SASE/ZTNA architectures. Understanding of the current threat landscape and how it informs network security architecture. Familiarity with data protection and data loss prevention concepts, and with how network controls support them. Familiarity with the risks of enterprise AI use. Experience with AI architectures or enterprise AI deployments is a plus but not required. Experience creating reference architectures, reusable control patterns, exception criteria and decision records that hold up across teams. Sound judgment in making and defending decisions when requirements conflict, and in knowing when to escalate. Clear communication with technical and business audiences, and the ability to build agreement across engineering, platform, risk and product teams. Education Bachelor's degree in computer science, information systems, engineering, cybersecurity, or a related field. A comparable combination of education and relevant experience may be considered. Even if your background doesn't match every requirement, we encourage you to apply. The hiring range for this position is $138,000 - $198,000 a year. The final salary offer will vary based on geographic location, individual education, skills, and experience. The position is eligible to participate in FM's comprehensive Total Rewards program that includes an incentive plan, medical, dental and vision insurance, life and disability insurance, well-being programs, a 401(k) and pension plan, career development opportunities, tuition reimbursement, flexible work, and time off, including vacation and sick time. FM is an Equal Opportunity Employer and is committed to attracting, developing, and retaining a diverse workforce.
11/12/2026
Full time
Job Description: Established nearly two centuries ago, FM is a leading mutual insurance company whose capital, scientific research capability and engineering expertise are solely dedicated to property risk management and the resilience of its policyholder-owners. These owners, who share the belief that the majority of property loss is preventable, represent many of the world's largest organizations, including one of every four Fortune 500 companies. They work with FM to better understand the hazards that can impact their business continuity to make cost-effective risk management decisions, combining property loss prevention with insurance protection. Schedule & Location Employment type: Full-time, salaried position Location: Remote, within commutable distance of FM's Corporate Office in Johnston, Rhode Island. On-site presence at the Corporate Office is expected 1 to 2 days per week, depending on business needs. Relocation: Relocation assistance is not available for this position Position Summary Come join a newly formed team driving security architecture for a global Fortune 500 company. FM is building its Security Architecture function, and we're looking for a Senior Security Architect to be our subject matter expert for network security. Network security is your starting focus. As the function grows, your scope may expand into other security domains, based on your skills and the organization's needs. In this role, you'll define how network security controls are designed, standardized and governed across a global network that supports dozens of locations in countries around the world. That includes today's offices, internet perimeters and private wide-area networks, and the cloud-first, software-delivered network we're moving toward, with Microsoft Azure at its center. This is an individual contributor role for a forward-thinking architect with deep network security expertise and experience working in a modern cloud and DevOps environment. The ideal candidate connects the threat landscape to architecture decisions and sees the value of managing network and security configuration as code, but can also navigate the code itself or the management console to confirm that implemented configurations and architectures match design intent. What You'll Do Set the standard: Define control design intent, technical standards and evaluation criteria for network security across our global environment. This covers next-generation firewalls (NGFWs), network segmentation, secure ingress and egress, web application firewalls (WAFs), DNS and edge protection, intrusion detection and prevention (IDS/IPS), SASE, ZTNA, and remote and branch access. Build reusable patterns: Create reference architectures and patterns for on-premises, hybrid and Azure environments, including areas that don't have them today, so most work can move forward without case-by-case review. Drive modernization: Own the network security strategy and roadmap, including our move toward secure access service edge (SASE), zero trust network access (ZTNA) and identity- and application-aware segmentation. Sequence the work to align with business direction and stay ahead of evolving threats. Champion security as code: Promote infrastructure-as-code and configuration-as-code practices, along with CI/CD controls, so network and security changes are consistent, peer-reviewed, traceable and auditable. Apply a risk-based approach: Translate security policy and risk intent into clear technical requirements, working with engineering teams to ensure requirements are practical, implementable and appropriate for the environment. Be clear about where controls are required, where they can be tailored and why. Stay connected to implementation: Work closely with network security engineers to understand how designs are implemented in practice. Be comfortable reviewing configurations in firewall, SASE, WAF and cloud consoles and in code repositories, both to validate design intent and to identify opportunities to strengthen or evolve our architecture. Help define criteria for independent control validation and work with engineering teams to interpret and act on the findings. Guide decisions: Review and approve designs, patterns and exceptions against defined criteria, document architecture decisions, and represent security in architecture review forums. Collaborate across teams: Partner closely with enterprise architecture and with the network security, platform, and cloud engineers that operate security controls. Bring architectural perspective together with their hands-on expertise to develop solutions that are secure, practical and operable at scale. Stay close to implementation and work with engineering teams rather than operating platforms directly. Anticipate threats: Keep up with adversary techniques, attacks on network edge and remote access, and changes in platforms and the industry, and design for where the environment is heading. Communicate and mentor: Explain network security risk and requirements clearly to non-security audiences, and help develop other architects through coaching, design review and feedback Qualifications: 8 or more years of experience in IT or cybersecurity, with significant responsibility for network security architecture, engineering or design. Experience designing resilient, redundant global network architectures, including SD-WAN, MPLS and hybrid connectivity. Experience designing enterprise network security architectures, including NGFWs, segmentation, DMZs, secure ingress and egress, and IDS/IPS. Architecture-level experience with enterprise NGFW platforms, and enough hands-on depth to assess configurations directly. Strong Microsoft Azure network security experience, including virtual networks, network security groups, routing, private connectivity, and cloud ingress and egress. Strong networking fundamentals, including BGP, routing, IPsec, VLAN/VRF, load balancing and troubleshooting complex traffic flows. Experience with infrastructure as code, configuration as code, version control and CI/CD practices for network or security changes. Experience designing zero trust segmentation and SASE/ZTNA architectures. Understanding of the current threat landscape and how it informs network security architecture. Familiarity with data protection and data loss prevention concepts, and with how network controls support them. Familiarity with the risks of enterprise AI use. Experience with AI architectures or enterprise AI deployments is a plus but not required. Experience creating reference architectures, reusable control patterns, exception criteria and decision records that hold up across teams. Sound judgment in making and defending decisions when requirements conflict, and in knowing when to escalate. Clear communication with technical and business audiences, and the ability to build agreement across engineering, platform, risk and product teams. Education Bachelor's degree in computer science, information systems, engineering, cybersecurity, or a related field. A comparable combination of education and relevant experience may be considered. Even if your background doesn't match every requirement, we encourage you to apply. The hiring range for this position is $138,000 - $198,000 a year. The final salary offer will vary based on geographic location, individual education, skills, and experience. The position is eligible to participate in FM's comprehensive Total Rewards program that includes an incentive plan, medical, dental and vision insurance, life and disability insurance, well-being programs, a 401(k) and pension plan, career development opportunities, tuition reimbursement, flexible work, and time off, including vacation and sick time. FM is an Equal Opportunity Employer and is committed to attracting, developing, and retaining a diverse workforce.
Job Description Job Description Network Operations - Firewall Operations Engineer Position Description Description This is an opening for a Firewall Engineer to support a Department of State (DoS) Bureau of Diplomatic Technology (DT) program. This program provides transparent, interconnected systems and security supporting the DoS in successfully carrying out its U.S. foreign policy mission. DT provides enterprise architecture design, engineering, operations and maintenance support services for servers, networks, firewalls, and enterprise applications across the Department. This is a firewall engineer position, providing general Tier 2 monitoring, configuration, and support to multiple firewalls and perimeter security systems. The position directly supports DoS on-site to provide perimeter security protection to over 80,000 customers globally. This is a hybrid position based out of Beltsville, MD with 3 days on-site. Shift is Day's (7:00am-3:30pm), Tuesday-Saturday after training. During the 6-8-week training period, it will be 5 days on-site Mon-Fri (7:00am-3:30pm). Your responsibilities will include: Provides Tier 2 support in the monitoring, management, and troubleshooting of perimeter devices to include firewalls, proxies, and mail transport agents. Monitor Service Now application for Firewall Operations (FWOPS) incident and service requests. Implements firewall rules and policies, perform troubleshooting of firewalls (Palo Alto, Cloud Palo Alto, and FortiGate), CISCO Email Security Appliance (ESA), A10 (load balancer), Proxy platforms, URL filtering across platforms, and analyzing network traffic captures. Escalates issues as required to Tier 3 staff and monitors issues throughout a problem's life cycle. Performs recurring maintenance activities such as device reboots and software upgrades on all devices underneath the Firewall Operations Team. Records and reports on firewall operations, utilization, and maintenance. Collaborate across Bureaus and Agencies to implement and repair network changes as they relate to perimeter security devices. Support Diplomatic Security Computer Incident Response Team (CIRT) by implementing block requests for IP's, Websites, and Email addresses. Update architecture diagrams using Visio. Monitor and perform health checks on multiple perimeter security devices. Draft, coordinate and publish outage notifications as required. Update shift logs and provide reports to leadership as needed. Maintain standard operating procedures (SOP), work instructions, and other working documents. Attend calls requiring a FWOPS team to attend, to include troubleshooting calls. Required Education & Experience: BA degree and 2-4 years of experience, may accept additional experience in lieu of degree. In Depth experience using Palo Alto Firewalls and Panorama monitoring tools to troubleshoot and configure a Firewall infrastructure. Strong understanding of networking, proxy, and packet filtering technologies. Minimum 3-5 years of IT Customer Support experience (Tier I and/or Tier II). First-hand experience with supporting the monitoring and configuration of Firewall/DMZ infrastructure including Network and Application Firewall Packet Filtering technologies (Palo Alto, Palo Alto virtual FW (cloud), FortiGate, Azure Firewall, Cloudflare, Cisco Email Security Appliances (ESA), A10 (Load Balancer), and proxy devices. CLI experience preferred. Experienced in utilizing network monitoring tools such as NeuralStar. Experienced with TCP/IP network implementation and troubleshooting. Required Clearance US Citizenship. An Interim Secret clearance is required to start work and requires eligibility to obtain a Top-Secret clearance. Powered by JazzHR 2IrLa6mmdU
09/28/2026
Full time
Job Description Job Description Network Operations - Firewall Operations Engineer Position Description Description This is an opening for a Firewall Engineer to support a Department of State (DoS) Bureau of Diplomatic Technology (DT) program. This program provides transparent, interconnected systems and security supporting the DoS in successfully carrying out its U.S. foreign policy mission. DT provides enterprise architecture design, engineering, operations and maintenance support services for servers, networks, firewalls, and enterprise applications across the Department. This is a firewall engineer position, providing general Tier 2 monitoring, configuration, and support to multiple firewalls and perimeter security systems. The position directly supports DoS on-site to provide perimeter security protection to over 80,000 customers globally. This is a hybrid position based out of Beltsville, MD with 3 days on-site. Shift is Day's (7:00am-3:30pm), Tuesday-Saturday after training. During the 6-8-week training period, it will be 5 days on-site Mon-Fri (7:00am-3:30pm). Your responsibilities will include: Provides Tier 2 support in the monitoring, management, and troubleshooting of perimeter devices to include firewalls, proxies, and mail transport agents. Monitor Service Now application for Firewall Operations (FWOPS) incident and service requests. Implements firewall rules and policies, perform troubleshooting of firewalls (Palo Alto, Cloud Palo Alto, and FortiGate), CISCO Email Security Appliance (ESA), A10 (load balancer), Proxy platforms, URL filtering across platforms, and analyzing network traffic captures. Escalates issues as required to Tier 3 staff and monitors issues throughout a problem's life cycle. Performs recurring maintenance activities such as device reboots and software upgrades on all devices underneath the Firewall Operations Team. Records and reports on firewall operations, utilization, and maintenance. Collaborate across Bureaus and Agencies to implement and repair network changes as they relate to perimeter security devices. Support Diplomatic Security Computer Incident Response Team (CIRT) by implementing block requests for IP's, Websites, and Email addresses. Update architecture diagrams using Visio. Monitor and perform health checks on multiple perimeter security devices. Draft, coordinate and publish outage notifications as required. Update shift logs and provide reports to leadership as needed. Maintain standard operating procedures (SOP), work instructions, and other working documents. Attend calls requiring a FWOPS team to attend, to include troubleshooting calls. Required Education & Experience: BA degree and 2-4 years of experience, may accept additional experience in lieu of degree. In Depth experience using Palo Alto Firewalls and Panorama monitoring tools to troubleshoot and configure a Firewall infrastructure. Strong understanding of networking, proxy, and packet filtering technologies. Minimum 3-5 years of IT Customer Support experience (Tier I and/or Tier II). First-hand experience with supporting the monitoring and configuration of Firewall/DMZ infrastructure including Network and Application Firewall Packet Filtering technologies (Palo Alto, Palo Alto virtual FW (cloud), FortiGate, Azure Firewall, Cloudflare, Cisco Email Security Appliances (ESA), A10 (Load Balancer), and proxy devices. CLI experience preferred. Experienced in utilizing network monitoring tools such as NeuralStar. Experienced with TCP/IP network implementation and troubleshooting. Required Clearance US Citizenship. An Interim Secret clearance is required to start work and requires eligibility to obtain a Top-Secret clearance. Powered by JazzHR 2IrLa6mmdU
Job Description Job Description We're looking for a Network Security Engineer to help strengthen and modernize the network and security infrastructure behind Cinch Home Services. You'll work hands-on across Zero Trust, SD-WAN, cloud networking, wireless, VPNs, and secure remote access, while troubleshooting complex issues and helping shape secure, reliable solutions. It's a great opportunity to work across a broad technology environment and play a meaningful role in how our infrastructure continues to evolve. Essential Responsibilities Contribute to the design of secure network architectures (zero trust, micro-segmentation, DMZ, WAN security, secure remote access) Implement and maintain security measures across IT infrastructure, support automation of security testing, and monitor systems for threats. Support cloud network security architecture (Azure, AWS) configuring security groups, firewalls, and private endpoints. Participate in reviews of application/network designs to help identify security gaps. Assist in evaluating security technologies and provide recommendations to senior staff. Support the development and enforcement of security policies and procedures. Maintain solid knowledge of security principles, practices, and technologies, including encryption, authentication, authorization, and network security. Perform regular security assessments, vulnerability scanning, and penetration testing to identify and help mitigate risks. Troubleshoot network and communication problems related to local wired, wireless, and wide-area networks. Work with project teams to understand requirements, help formulate networking solutions, and support implementation. Assist in analyzing, designing, and documenting wired/wireless network architectures to support new technology, business solutions, and new locations. Provide support for network users, partners, and third-party vendors. Respond to network outages. Perform other duties as assigned. Experience and Qualifications 2-4 years of progressive experience supporting network routing, switching, and wireless in an enterprise environment. Solid understanding of network design, topology, and integrated security. Cato/Cisco/Ruckus platform experience a plus (Wi-Fi, security, routers, switches). Experience with installation and configuration of network devices. Ability to troubleshoot network communications to the transport layer. Familiarity with SD-WAN and cloud networking technologies. Experience with Cato Networks a plus. Understanding of IPsec and SSL VPN. Exposure to business continuity and disaster recovery best practices. Familiarity with virtualization technology. Working knowledge of networking diagnostic, monitoring, and analysis tools. Exposure to datacenter technologies, including servers, storage, and data center facilities (power, cooling, cabling). Education Bachelor's degree preferred. CCNA or equivalent certification preferred.
09/28/2026
Full time
Job Description Job Description We're looking for a Network Security Engineer to help strengthen and modernize the network and security infrastructure behind Cinch Home Services. You'll work hands-on across Zero Trust, SD-WAN, cloud networking, wireless, VPNs, and secure remote access, while troubleshooting complex issues and helping shape secure, reliable solutions. It's a great opportunity to work across a broad technology environment and play a meaningful role in how our infrastructure continues to evolve. Essential Responsibilities Contribute to the design of secure network architectures (zero trust, micro-segmentation, DMZ, WAN security, secure remote access) Implement and maintain security measures across IT infrastructure, support automation of security testing, and monitor systems for threats. Support cloud network security architecture (Azure, AWS) configuring security groups, firewalls, and private endpoints. Participate in reviews of application/network designs to help identify security gaps. Assist in evaluating security technologies and provide recommendations to senior staff. Support the development and enforcement of security policies and procedures. Maintain solid knowledge of security principles, practices, and technologies, including encryption, authentication, authorization, and network security. Perform regular security assessments, vulnerability scanning, and penetration testing to identify and help mitigate risks. Troubleshoot network and communication problems related to local wired, wireless, and wide-area networks. Work with project teams to understand requirements, help formulate networking solutions, and support implementation. Assist in analyzing, designing, and documenting wired/wireless network architectures to support new technology, business solutions, and new locations. Provide support for network users, partners, and third-party vendors. Respond to network outages. Perform other duties as assigned. Experience and Qualifications 2-4 years of progressive experience supporting network routing, switching, and wireless in an enterprise environment. Solid understanding of network design, topology, and integrated security. Cato/Cisco/Ruckus platform experience a plus (Wi-Fi, security, routers, switches). Experience with installation and configuration of network devices. Ability to troubleshoot network communications to the transport layer. Familiarity with SD-WAN and cloud networking technologies. Experience with Cato Networks a plus. Understanding of IPsec and SSL VPN. Exposure to business continuity and disaster recovery best practices. Familiarity with virtualization technology. Working knowledge of networking diagnostic, monitoring, and analysis tools. Exposure to datacenter technologies, including servers, storage, and data center facilities (power, cooling, cabling). Education Bachelor's degree preferred. CCNA or equivalent certification preferred.
Job Description Job Description PALO ALTO FIREWALL ENGINEER Position Description Description This is an opening for a Firewall Engineer/Team Lead to support a Department of State (DoS) Bureau of Diplomatic Technology (DT) program. This program provides transparent, interconnected systems and security supporting the DoS in successfully carrying out its U.S. foreign policy mission. DT provides enterprise architecture design, engineering, operations and maintenance support services for servers, networks, firewalls, and enterprise applications across the Department. Program is named "Vanguard" and is an IT consolidation consisting of the Department's servers, mainframes, network devices, network perimeter, anti-virus engineering, public key infrastructure (PKI)/biometrics/encryption, monitoring tools, telephony, mobile computing platform, virtual environment, and enclave design/security engineering. This is a firewall engineer position within the Vanguard 2025 program, providing general Tier II monitoring, configuration, and support to multiple firewalls and perimeter security systems. The position directly supports DoS on-site to provide perimeter security protection to over 80,000 customers globally. This is a hybrid position based out of Beltsville, MD with 3 days on-site. Shift is MIDs (11:00pm-7:30am), Sun-Thurs after training. During the 6-8 week training period, it will be 5 days on-site Mon-Fri (7:00am-3:30pm). Your responsibilities will include: Provides Tier 2 support in the monitoring, management, and troubleshooting of perimeter devices to include firewalls, proxies, and mail transport agents. Along with being a Team Lead for the MID shift. As the Lead you will be expectant to give a turnover of events for the past shift, create weekly Quad Chart, and be able to direct work to other firewall operations staff. Must be able to guide other staff on tasks assigned to the team. Review request for time off and stay in touch with the manager on all events happening on the shift. Monitor Service Now application for Firewall Operations incident and service requests. Implements firewall rules and policies, perform troubleshoots of firewall, email, and Proxy platforms for performance issues. Analyzes network traffic captures. Escalates issues as required to Tier 3 staff and monitors issues throughout a problem's life cycle. Performs recurring maintenance activities such as device reboots and software upgrades on perimeter devices. Records and reports on firewall operations, utilization, and maintenance. Collaborate across Bureaus and Agencies to implement and repair network changes as they relate to perimeter security devices. Support Diplomatic Security Computer Incident Response Team (CIRT) by implementing block requests for IP's, Websites, and Email addresses. Update architecture diagrams using Visio. Monitor and perform health checks on multiple perimeter security devices. Draft, coordinate and publish outage notifications as required. Update shift logs and provide reports to leadership daily. Maintain standard operating procedures (SOP), work instructions, and other working documents. Attend weekly teleconferences, onsite meetings, and participate in working groups as required. Qualifications Required Education & Experience BA degree and 6 years of experience; may accept additional experience in lieu of degree. In Depth experience using Palo Alto Firewalls and Panorama monitoring tools to troubleshoot and configure a Firewall infrastructure. Strong understanding of networking, proxy, and packet filtering technologies. Minimum 5 years IT Customer Support experience (Tier I and/or Tier II). First-hand experience with supporting the monitoring and configuration of Firewall/DMZ infrastructure including Network and Application Firewall Packet Filtering technologies (StoneGate, Palo Alto, FortiGate, Azure Firewall, Cloudflare, Cisco Email Security Appliances (ESA), A10 proxy devices). CLI experience preferred. Experienced in utilizing network monitoring tools such as Nagios and NeuralStar. Basic Microsoft Windows Server 2016 implementation and troubleshooting from a security/firewall perspective. Experienced with TCP/IP network implementation and troubleshooting. Required Clearance US Citizenship. An Interim Secret clearance is required to start work and requires eligibility to obtain a Top Secret clearance. Powered by JazzHR ZpLPHj5F0L
09/28/2026
Full time
Job Description Job Description PALO ALTO FIREWALL ENGINEER Position Description Description This is an opening for a Firewall Engineer/Team Lead to support a Department of State (DoS) Bureau of Diplomatic Technology (DT) program. This program provides transparent, interconnected systems and security supporting the DoS in successfully carrying out its U.S. foreign policy mission. DT provides enterprise architecture design, engineering, operations and maintenance support services for servers, networks, firewalls, and enterprise applications across the Department. Program is named "Vanguard" and is an IT consolidation consisting of the Department's servers, mainframes, network devices, network perimeter, anti-virus engineering, public key infrastructure (PKI)/biometrics/encryption, monitoring tools, telephony, mobile computing platform, virtual environment, and enclave design/security engineering. This is a firewall engineer position within the Vanguard 2025 program, providing general Tier II monitoring, configuration, and support to multiple firewalls and perimeter security systems. The position directly supports DoS on-site to provide perimeter security protection to over 80,000 customers globally. This is a hybrid position based out of Beltsville, MD with 3 days on-site. Shift is MIDs (11:00pm-7:30am), Sun-Thurs after training. During the 6-8 week training period, it will be 5 days on-site Mon-Fri (7:00am-3:30pm). Your responsibilities will include: Provides Tier 2 support in the monitoring, management, and troubleshooting of perimeter devices to include firewalls, proxies, and mail transport agents. Along with being a Team Lead for the MID shift. As the Lead you will be expectant to give a turnover of events for the past shift, create weekly Quad Chart, and be able to direct work to other firewall operations staff. Must be able to guide other staff on tasks assigned to the team. Review request for time off and stay in touch with the manager on all events happening on the shift. Monitor Service Now application for Firewall Operations incident and service requests. Implements firewall rules and policies, perform troubleshoots of firewall, email, and Proxy platforms for performance issues. Analyzes network traffic captures. Escalates issues as required to Tier 3 staff and monitors issues throughout a problem's life cycle. Performs recurring maintenance activities such as device reboots and software upgrades on perimeter devices. Records and reports on firewall operations, utilization, and maintenance. Collaborate across Bureaus and Agencies to implement and repair network changes as they relate to perimeter security devices. Support Diplomatic Security Computer Incident Response Team (CIRT) by implementing block requests for IP's, Websites, and Email addresses. Update architecture diagrams using Visio. Monitor and perform health checks on multiple perimeter security devices. Draft, coordinate and publish outage notifications as required. Update shift logs and provide reports to leadership daily. Maintain standard operating procedures (SOP), work instructions, and other working documents. Attend weekly teleconferences, onsite meetings, and participate in working groups as required. Qualifications Required Education & Experience BA degree and 6 years of experience; may accept additional experience in lieu of degree. In Depth experience using Palo Alto Firewalls and Panorama monitoring tools to troubleshoot and configure a Firewall infrastructure. Strong understanding of networking, proxy, and packet filtering technologies. Minimum 5 years IT Customer Support experience (Tier I and/or Tier II). First-hand experience with supporting the monitoring and configuration of Firewall/DMZ infrastructure including Network and Application Firewall Packet Filtering technologies (StoneGate, Palo Alto, FortiGate, Azure Firewall, Cloudflare, Cisco Email Security Appliances (ESA), A10 proxy devices). CLI experience preferred. Experienced in utilizing network monitoring tools such as Nagios and NeuralStar. Basic Microsoft Windows Server 2016 implementation and troubleshooting from a security/firewall perspective. Experienced with TCP/IP network implementation and troubleshooting. Required Clearance US Citizenship. An Interim Secret clearance is required to start work and requires eligibility to obtain a Top Secret clearance. Powered by JazzHR ZpLPHj5F0L
Job Description Job Description Network Security Engineer 11001 A growing technology organization is seeking a Senior Network Security Engineer to join its centralized Security Engineering team. This is a hands-on technical role responsible for designing, implementing, and maintaining network security infrastructure that protects a large-scale, high-performance computing and cloud environment. This position will contribute directly to the controls, automation, and operational practices required to secure complex infrastructure at scale. The Senior Network Security Engineer will help design, develop, and deliver critical network security capabilities across enterprise-scale systems and projects. The ideal candidate brings deep technical expertise in network security architecture and controls, along with the judgment needed to solve complex problems while balancing security requirements, operational needs, and delivery timelines. Working closely with security leadership and cross-functional infrastructure, cloud, and IT teams, this individual will help strengthen the organization's security posture while serving as a subject matter expert and mentor to other engineers. Responsibilities Contribute to the design, implementation, and delivery of scalable network security architecture and controls, including firewalls, IDS/IPS, and VPN technologies across on-premises and cloud environments. Serve as a subject matter expert for network security technologies, providing technical guidance and direction on complex security challenges. Apply strong technical judgment to resolve network security issues and make appropriate trade-offs between security requirements, operational needs, and delivery objectives. Collaborate with infrastructure, cloud, IT operations, and other cross-functional teams to communicate technical decisions, coordinate implementation efforts, and maintain alignment. Develop and maintain network security standards, policies, procedures, and technical documentation. Support network segmentation and micro-segmentation initiatives, providing expertise related to traffic flows, access controls, and policy enforcement. Participate in security architecture reviews for new projects, systems, and third-party integrations to ensure network security requirements are appropriately addressed. Identify and implement opportunities for process improvement, automation, and security tooling enhancements. Mentor junior security engineers and contribute to the technical growth of the security engineering team. Requirements 7+ years of experience in network security engineering, including hands-on experience across trusted, untrusted, and DMZ environments. Strong understanding of network protocols and the OSI model, with practical experience supporting TCP/UDP-based applications, routing, switching, and load balancing. Experience designing and securing both on-premises and cloud network environments using platforms such as AWS, Azure, or GCP. Demonstrated ability to identify and deliver process improvements, automation opportunities, and tooling enhancements within a security engineering environment. Experience with security monitoring tools and SIEM platforms, including investigating and responding to network-based security threats. Strong knowledge of recognized security frameworks and hardening standards such as NIST, CIS Benchmarks, or ISO 27001. Strong communication skills with the ability to clearly explain technical decisions, risks, and trade-offs to both technical stakeholders and leadership. Nice to Have Relevant security or networking certifications such as CCNP Security, PCNSE, CISSP, or equivalent. Experience with VXLAN EVPN data center architecture. Background in Security Operations Center (SOC) environments or experience working with managed security service providers (MSSPs). Experience with firewall automation. Company Description Thomas Edwards Group is an Executive Search Firm specializing in the direct hire and interim placement of Accounting, Finance, HR and IT professionals. We've been in business since 1997 and the Dallas Business Journal has ranked us a Top Search Firm in Dallas and one of the "Best Places to Work" multiple times. Thomas Edwards Group also made the Inc. 5000 list in 2016 and our award-winning team of Search Consultants, which rank among the best and most experienced in the area, includes MBAs, CPAs, former Big 4 Professionals, Controllers, IT Search Professionals, Finance/Banking, and Business Professionals. Company Description Thomas Edwards Group is an Executive Search Firm specializing in the direct hire and interim placement of Accounting, Finance, HR and IT professionals. We've been in business since 1997 and the Dallas Business Journal has ranked us a Top Search Firm in Dallas and one of the "Best Places to Work" multiple times. Thomas Edwards Group also made the Inc. 5000 list in 2016 and our award-winning team of Search Consultants, which rank among the best and most experienced in the area, includes MBAs, CPAs, former Big 4 Professionals, Controllers, IT Search Professionals, Finance/Banking, and Business Professionals.
09/26/2026
Full time
Job Description Job Description Network Security Engineer 11001 A growing technology organization is seeking a Senior Network Security Engineer to join its centralized Security Engineering team. This is a hands-on technical role responsible for designing, implementing, and maintaining network security infrastructure that protects a large-scale, high-performance computing and cloud environment. This position will contribute directly to the controls, automation, and operational practices required to secure complex infrastructure at scale. The Senior Network Security Engineer will help design, develop, and deliver critical network security capabilities across enterprise-scale systems and projects. The ideal candidate brings deep technical expertise in network security architecture and controls, along with the judgment needed to solve complex problems while balancing security requirements, operational needs, and delivery timelines. Working closely with security leadership and cross-functional infrastructure, cloud, and IT teams, this individual will help strengthen the organization's security posture while serving as a subject matter expert and mentor to other engineers. Responsibilities Contribute to the design, implementation, and delivery of scalable network security architecture and controls, including firewalls, IDS/IPS, and VPN technologies across on-premises and cloud environments. Serve as a subject matter expert for network security technologies, providing technical guidance and direction on complex security challenges. Apply strong technical judgment to resolve network security issues and make appropriate trade-offs between security requirements, operational needs, and delivery objectives. Collaborate with infrastructure, cloud, IT operations, and other cross-functional teams to communicate technical decisions, coordinate implementation efforts, and maintain alignment. Develop and maintain network security standards, policies, procedures, and technical documentation. Support network segmentation and micro-segmentation initiatives, providing expertise related to traffic flows, access controls, and policy enforcement. Participate in security architecture reviews for new projects, systems, and third-party integrations to ensure network security requirements are appropriately addressed. Identify and implement opportunities for process improvement, automation, and security tooling enhancements. Mentor junior security engineers and contribute to the technical growth of the security engineering team. Requirements 7+ years of experience in network security engineering, including hands-on experience across trusted, untrusted, and DMZ environments. Strong understanding of network protocols and the OSI model, with practical experience supporting TCP/UDP-based applications, routing, switching, and load balancing. Experience designing and securing both on-premises and cloud network environments using platforms such as AWS, Azure, or GCP. Demonstrated ability to identify and deliver process improvements, automation opportunities, and tooling enhancements within a security engineering environment. Experience with security monitoring tools and SIEM platforms, including investigating and responding to network-based security threats. Strong knowledge of recognized security frameworks and hardening standards such as NIST, CIS Benchmarks, or ISO 27001. Strong communication skills with the ability to clearly explain technical decisions, risks, and trade-offs to both technical stakeholders and leadership. Nice to Have Relevant security or networking certifications such as CCNP Security, PCNSE, CISSP, or equivalent. Experience with VXLAN EVPN data center architecture. Background in Security Operations Center (SOC) environments or experience working with managed security service providers (MSSPs). Experience with firewall automation. Company Description Thomas Edwards Group is an Executive Search Firm specializing in the direct hire and interim placement of Accounting, Finance, HR and IT professionals. We've been in business since 1997 and the Dallas Business Journal has ranked us a Top Search Firm in Dallas and one of the "Best Places to Work" multiple times. Thomas Edwards Group also made the Inc. 5000 list in 2016 and our award-winning team of Search Consultants, which rank among the best and most experienced in the area, includes MBAs, CPAs, former Big 4 Professionals, Controllers, IT Search Professionals, Finance/Banking, and Business Professionals. Company Description Thomas Edwards Group is an Executive Search Firm specializing in the direct hire and interim placement of Accounting, Finance, HR and IT professionals. We've been in business since 1997 and the Dallas Business Journal has ranked us a Top Search Firm in Dallas and one of the "Best Places to Work" multiple times. Thomas Edwards Group also made the Inc. 5000 list in 2016 and our award-winning team of Search Consultants, which rank among the best and most experienced in the area, includes MBAs, CPAs, former Big 4 Professionals, Controllers, IT Search Professionals, Finance/Banking, and Business Professionals.