HSSE Firewall Engineer

Core4ce is a team of innovators, self-starters, and critical thinkers—driven by a shared mission to strengthen national security and advance warfighting outcomes. They are seeking a Network Security Firewall Engineer to configure, monitor, and maintain network security equipment, manage firewall systems, and ensure security compliance. The role involves troubleshooting, developing documentation, and implementing security policies in a flexible work environment.

Responsibilities:

• Skill in implementation of physical and virtual firewalls
• Experience with Remedy trouble ticketing system
• Manage firewall and network security systems by establishing and enforcing approved policies
• Ability to research and verify ports, protocol and services (PPS) for security compliance
• A thorough understanding of how applications communicate over the network using source and destination IP addresses, ports and protocols
• Ability to analyze network security requirements and implement perimeter security changes
• Serve as a subject matter expert in coordinating and troubleshooting with customers, other infrastructure support activities and business units
• Develop network documentation of security infrastructure
• Troubleshooting a variety of products within a multi-vendor environment
• Monitor network performance and implement performance tuning as necessary
• Utilize industry best practices for security, disaster recovery, business continuity, change control, the engineer will design, configure, manage and troubleshoot a variety of network firewall technologies
• This position is designed to be flexible, with responsibilities evolving to meet business needs and enable individual growth

Requirements:

• 8+ years of Networking experience
• Ability to obtain a Secret Clearance
• Knowledge or experience of Cisco ASA and Palo Alto Firewalls
• Experience in administrating and troubleshooting firewalls in medium to large, complex organizations
• Solid experience configuring and troubleshooting routing and switched infrastructure
• Experience with packet capture and analysis methodologies
• Experience scripting with Python, Java, and or Perl
• Experience with intrusion detection systems, VPN technologies, vulnerability assessment tools, event and log analysis solutions, configuration and change management and other network security systems and devices
• Familiar with government information assurance standards including DISA STIGs, NIST 800-53, IAVAs management, auditing and accreditation processes