Senior Firewall Engineer / Architect

Software Guidance & Assistance, Inc. (SGA), is searching for a Senior Firewall Engineer / Architect for a contract assignment with one of our premier Utility services clients in Tampa, FL.

Responsibilities:

• Design, implement, configure, maintain, and troubleshoot enterprise firewall solutions across complex IT and Operational Technology (OT) environments.
• Support the administration, optimization, and modernization of enterprise firewall infrastructure, primarily utilizing Check Point and Palo Alto Networks technologies.
• Participate in firewall migration initiatives, including the transition from Check Point to Palo Alto, ensuring minimal disruption to business operations and security services.
• Engineer and maintain firewall policies, access control rules, NAT configurations, VPN connectivity, and network security controls.
• Collaborate with security architects, network engineers, infrastructure teams, and operations personnel to develop and implement secure network solutions.
• Contribute to firewall architecture, network segmentation strategies, security design standards, and technical implementation plans.
• Support secure connectivity between on-premises infrastructure, data centers, and cloud environments, including AWS and Microsoft Azure.
• Configure, maintain, and troubleshoot site-to-site IPsec VPN tunnels and hybrid cloud connectivity solutions.
• Review firewall change requests, evaluate security implications, and support implementation and change management processes.
• Troubleshoot complex network connectivity and security issues, performing root cause analysis and implementing corrective actions.
• Support network security requirements associated with grid modernization, cloud migration, data center infrastructure, and IT/OT integration initiatives.
• Develop and maintain technical documentation, firewall configurations, network diagrams, and operational procedures.
• Ensure firewall solutions align with enterprise security standards, regulatory requirements, and industry best practices.

Required Skills:

• Extensive hands-on experience engineering, implementing, administering, and troubleshooting enterprise firewall solutions in large, complex network environments.
• Strong technical experience with Check Point and/or Palo Alto Networks next-generation firewalls, with familiarity or exposure to both platforms highly desirable.
• Experience configuring and managing firewall policies, security rules, NAT, VPNs, and access control configurations.
• Demonstrated experience supporting firewall upgrades, migrations, implementations, or infrastructure modernization initiatives.
• Strong understanding of network security architecture, network segmentation, TCP/IP, routing, switching, and common network protocols.
• Experience troubleshooting complex firewall, network connectivity, and security-related issues.
• Knowledge of IPsec VPN technologies and secure connectivity between enterprise networks and external environments.
• Ability to contribute to technical architecture discussions, evaluate design alternatives, and translate security requirements into working engineering solutions.
• Experience working within structured change management, configuration management, and production support processes.
• Strong communication, documentation, analytical, and problem-solving skills.
• Ability to collaborate effectively with security architecture, network engineering, cloud infrastructure, and operational support teams.

Preferred Skills:

• Direct experience migrating enterprise firewall environments from Check Point to Palo Alto Networks.
• Experience with Check Point management tools and Palo Alto Panorama, including centralized policy management and firewall administration.
• Experience with AWS and Microsoft Azure networking and security services, including cloud firewall implementations and hybrid connectivity.
• Familiarity with AWS Direct Connect, Azure ExpressRoute, and cloud-to-on-premises IPsec connectivity.
• Experience designing or implementing firewall solutions for Operational Technology (OT), industrial control systems, or critical infrastructure environments.
• Knowledge of IT/OT network segmentation, industrial communication protocols such as DNP3, and substation networking environments.
• Familiarity with NERC CIP compliance requirements and cybersecurity standards applicable to electric utilities.
• Experience supporting grid modernization, private LTE networks, or large-scale infrastructure transformation initiatives.
• Relevant certifications such as Palo Alto PCNSE, Check Point CCSA/CCSE, or equivalent network security certifications.
• Prior experience within electric utilities, energy, telecommunications, or other highly regulated enterprise environments.

By applying for a job with SGA, you agree to allow SGA to process your application for this and future opportunities in accordance with our Privacy Policy. Also, to ensure timely processing, you agree to be contacted by our AI recruiter via email, text, or phone. Message frequency varies and data rates may apply, but you can reply STOP to any SMS message to opt-out of texts and may contact SGA at to opt-out of AI communications. The choice not to engage with AI will not adversely impact your consideration for placement. AI is not used to make any hiring determinations.

SGA is a technology and resource solutions provider driven to stand out. We are a women-owned business. Our mission: to solve big IT problems with a more personal, boutique approach. Each year, we match consultants like you to more than 1,000 engagements. When we say let's work better together, we mean it. You'll join a diverse team built on these core values: customer service, employee development, and quality and integrity in everything we do. Be yourself, love what you do and find your passion at work. Please find us at .

SGA is an Equal Opportunity Employer and does not discriminate on the basis of Race, Color, Sex, Sexual Orientation, Gender Identity, Religion, National Origin, Disability, Veteran Status, Age, Marital Status, Pregnancy, Genetic Information, or Other Legally Protected Status. We are committed to providing access, equal opportunity, and reasonable accommodation for individuals with disabilities in employment, and our services, programs, and activities. Please visit our company to request an accommodation or assistance regarding our policy.