Network/Firewall Engineer

You will conduct high- and low-level network discovery, design, implementation incl Service Transition and Operations support in a large enterprise global network. You will report to Program lead and be responsible for completing tasks assigned by the customer, project manager and program lead. The successful candidate must be able to work alone and in a team and be able to complete documentation to a high level and educate others on the environment.

Essential Functions

60% – Design, document, and implement network and firewall solutions.

40% – Perform operational support as a technical escalation resource within the team.

10% – Document Design/Implementation proposals for peer and security.

10% – Work with project managers for tasks related to project activities.

Education

Bachelor Degree in Computer Science or Engineering Discipline

Vocation School Completion in Network/Security/Computer Technology

Accreditation/Certifications

Cisco CCNP Route Switch and Firewall Certifications – Highly Desired

Checkpoint CCSA/CCSE

ITILv3 or 4

Previous Job Experience

4+ Years

Experience of Check-Point CLI and GUI, Single and Multi-context installations, routing, trunking, ether-channeling, troubleshooting, including tcp-dump, Packet Capture and Analysis, ACL interrogation and deployment

Management of platforms to access Cisco routers, switches and firewalls

Understanding of LAN switching and WAN routing protocols and deployment in a routing in an enterprise environment

Building a firewall policy from general business requirements in an interactive Q&A process.

Ability to learn and implement secure connectivity solutions that follow customer best-practices/requirements

Ability to interact with customers, build rapport and establish a strong working relationship.

Ability/experience with analysing current connectivity and traffic flows and how to translate them to workable yet secure/compliant OT connectivity solutions

Previous experience planning implementations, building comprehensive test plans, troubleshooting methodology

Special Knowledge/Skills

Familiarity with OT protocols, services, function’s typical functional components (examples below)

OPCUA, MQTT, Canary, Historian, RabbitMQ, Zigbee, etc etc

• programmable logic controllers (PLCs)
• Supervisory control and data acquisition systems (SCADA)
• Distributed control systems (DCS)
• Computer Numerical Control (CNC) systems, including computerized machine tools.
• Scientific equipment (e.g. digital oscilloscopes)
• Building Management and Building Automation Systems
• AWS