Firewall Engineer

Role Summary
This position requires a highly skilled Tier 3 Network Security Engineer specializing in Cisco Secure Firepower Firewalls. The role involves supporting an enterprise-scale Managed Network Services environment for a government agency, focusing on advanced troubleshooting, operational support, and change management. The engineer will work in a remote capacity, collaborating with internal teams to ensure the security, reliability, and performance of the firewall infrastructure.

Responsibilities

• Serve as a Tier 3 escalation point for complex firewall and network security issues.
• Conduct advanced troubleshooting and root cause analysis for Cisco Secure Firepower Firewall incidents.
• Support daily firewall operations using Cisco Secure Firewall Management Center (FMC), including monitoring health, performance, and traffic flows.
• Analyze and optimize firewall access control and security policies.
• Support routing protocols within secure network environments.
• Troubleshoot and support VPN technologies, including site-to-site and remote access VPNs.
• Participate in formal change management processes, including documentation, peer reviews, and scheduled implementations.
• Execute authorized changes during designated after-hours change windows.
• Engage in team-based on-call rotations to support after-hours and emergency incidents.
• Collaborate with engineering and operational teams to meet Managed Network Services contractual obligations.

Qualifications

• Extensive hands-on experience with Cisco Secure Firepower Firewalls.
• Strong troubleshooting skills, including traffic flow analysis, NAT/PAT configuration, and inspection of security policies.
• Operational expertise in Cisco Secure Firewall Management Center (FMC).
• Proven experience troubleshooting VPN technologies such as Cisco AnyConnect.
• Deep understanding of OSI Layers 1–4, with knowledge extending to Layers 5–7.
• Ability to analyze and support security intelligence policies and access rules.
• Familiarity with Cisco Catalyst SD-WAN is advantageous.
• Experience working in large-scale enterprise or government environments.
• Effective verbal and written communication skills for technical documentation and team collaboration.
• Availability to work mostly remotely, including participation in after-hours maintenance and on-call rotations.
• In compliance with federal law, all persons hired must verify their identity and eligibility to work in the United States and complete the required employment eligibility verification form upon hire. Candidates must be legally authorized to work in the United States without employer sponsorship, now or in the future.
  .

Publishing Pay Range: $50.00 – $60.00 USD Hourly
This position is based in remote work and can be performed from an approved location.