Overview As a Security/Firewall Architect, you translate business requirements into robust security architectures and configurations for internal and MSSP clients. You provide hands-on engineering support and adopt a service desk approach to sustain operations. You will drive continuous improvements across security architecture, engineering, and operations. You operate in a client-facing, contract setting in Dallas, shaping firewall and network security programs with current best practices. This role offers impact by strengthening security controls and incident response capabilities in a dynamic environment.
Responsibilities- Translate business requirements into technical architectures, frameworks and configurations for internal and MSSP customers.
- Provide engineering and operational support for internal and external customers using a Service Desk approach.
- Perform continuous process improvement across security architecture, engineering, and operations.
- Evaluate and implement move/add/change requests for customers.
- Read, write and analyze firewall policies; manage VPNs and firewall environments.
Key requirements- Minimum 12 years in IT with operational and engineering support experience
- Hands-on experience with Juniper, Cisco, and Check Point firewalls; Palo Alto a plus
- 5 years' experience with formal ticketing systems (Remedy, CA USD)
- Ability to create data flow diagrams from business requirements
- Advanced Layer 3 and Layer 4 packet analysis
- Checkpoint, Cisco and Juniper multi-services platforms
- Ability to read/write ACLs and firewall policies
- Experience with PCI-DSS governance and compliance framework
- Experience with TCPDUMP and/or Wireshark
- Cisco IDS/IPS, Cisco PIX firewall and Blue Coat Proxy familiarity
- ITIL framework familiarity for handling requests
- Cisco routing protocols (BGP, OSPF, STP, IPv6, MPLS)
- Checkpoint NG, Checkpoint advanced firewall solution design and administration
- Security architectures and certifications (CISSP)
- Layer 3 networking, NAT and complex routing understanding
- On-call and after-hours support availability
- Experience with Visio
- Experience with security incident identification and client remediation
- Juniper
- Cisco
- Check Point
- Palo Alto
- Remedy
- CA USD
