Cyber Security Engineer – Firewall

This is a fully remote position, open to applicants in Virginia.

📋 Description

• Support a major Federal agency

• Implement configurations on perimeter routers, firewalls, and security controls in alignment with NIST 800-53

• Offer recommendations concerning DOI perimeter UTM devices in accordance with NIST 800-53 and industry best practices for Fortigate products

• Configure, deploy, and sustain FortiGate firewalls

• Develop and manage firewall policies, NAT, VIPs, and security rules

• Set up IPsec and SSL VPNs for both remote and site-to-site connectivity

• Oversee FortiManager for centralized firewall management

• Monitor security events and logs utilizing FortiAnalyzer

• Implement network segmentation through VLANs and security zones

• Diagnose firewall, routing, VPN, and connectivity issues

• Conduct reviews of firewall rules and eliminate outdated or excessively permissive rules

• Create and maintain documentation for firewall/network security

• Generate security reports and dashboards to meet management or compliance needs

• Configure authentication integrations such as RADIUS, LDAP, Active Directory, and MFA

• Execute network troubleshooting through packet captures, routing tables, logs, and FortiGate diagnostic commands

• Engage in security architecture and network design projects

• Test firewall policies and security controls following configuration updates

• Automate repetitive security/network tasks utilizing Python, APIs, or FortiManager automation

⛳️ Requirements

• Candidates must reside in the United States

• 7 years of experience with a bachelor’s degree or 9 years of total experience

• Expertise in networking, routing, and switching

• Skilled in network scripting

• Proficient with OSI Model Layers 1-7 and network troubleshooting

• Ability to work independently as well as collaboratively within a team

• Willingness to support after-hours maintenance activities

• Must be eligible to obtain a Position of Public Trust from the Department of the Interior

• Fortinet NSE 4 Certification and/or Fortinet Certified Professional (FCP) preferred

• Experience with Next Generation Firewalls, preferably Fortinet

• Background in supporting Incident Response (IR) Teams

🏝️ Benefits

• Distinctive benefits and personal touches to ensure a positive work-life experience

• Flexibility to accommodate after-hours maintenance activities