Network Engineer

Role Summary

A Tier 3 Perimeter Engineer with specialized expertise in Cisco Secure Firepower Firewalls is needed to support enterprise-scale Managed Network Services for a government agency. This senior-level role involves advanced troubleshooting, operational support, and security management within a highly secure and process-driven environment. The engineer will ensure firewall infrastructure reliability, security, and performance through collaboration with internal teams and adherence to strict operational protocols.

Responsibilities

• Act as a Tier 3 escalation point for complex firewall and network security issues, providing expert troubleshooting and root cause analysis.
• Manage day-to-day firewall operations using Cisco Secure Firepower Management Center (FMC), including monitoring system health, performance, and traffic flow analysis.
• Support and troubleshoot VPN technologies such as site-to-site and remote access VPNs.
• Analyze, develop, and refine firewall access control policies and security configurations to optimize security posture.
• Participate in formal change management processes by documenting procedures, obtaining approvals, and implementing scheduled updates.
• Execute approved configuration changes during designated after-hours change windows in compliance with established protocols.
• Contribute to a team-based on-call rotation, providing after-hours and emergency incident support.
• Collaborate with engineering and operational teams to meet Managed Network Services (MNS) contractual obligations.
• Support operational activities at the physical layer, including periodic onsite support as needed, particularly during major or high-risk network changes.
• Maintain comprehensive documentation of technical findings, configurations, and operational activities, ensuring compliance with security standards.

Qualifications

• Proven experience with Cisco Secure Firepower Firewalls, including advanced troubleshooting like Snort IPS and file policies.
• Strong understanding of routing protocols and concepts within secured enterprise or government networks.
• Hands-on operational experience with Cisco Secure FMC for firewall management and monitoring.
• Demonstrated ability to troubleshoot VPN solutions such as Cisco Secure Client/AnyConnect.
• Familiarity with network security policies, NAT/PAT configuration, and traffic analysis tools.
• Excellent written and verbal communication skills, capable of clear documentation in structured environments.
• Ability to work independently and collaboratively under strict operational procedures and security policies.
• Availability to support periodic onsite activities in Austin, TX, and participate in after-hours maintenance and on-call rotations.
• Experience within large-scale enterprise or government environments is preferred.
• In compliance with federal law, all persons hired must verify their identity and eligibility to work in the United States and complete the required employment eligibility verification form upon hire. Candidates must be legally authorized to work in the United States without employer sponsorship, now or in the future.

Publishing Pay Range: $60.00 – $65.00

This is a fully remote role and can be performed from an approved location.