GuidePoint Security

Network Security Engineer (Firewall) - Mid-Atlantic region

GuidePoint Security

full-time

Posted on:

Origin:  • 🇺🇸 United States

Visit company website
✨ AI Apply
Manual Apply

Job Level

Mid-LevelSenior

Tech Stack

AzureCloudCyber SecurityFirewallsSplunkSwitching

About the role

  • Cisco ASA/CheckPoint/Palo Alto Firewall Rule Configuration and Audit Consulting:
  • Review Existing FireMon Rule Audit Reports and findings with Customer Team (Hit Counts, Unused Rules, etc)
  • Determine Process for Rule Owner Identification and Cleanup
  • Review of Firewall Rules
  • Cisco and Checkpoint Virtual Firewalls
  • For each rule, determine current asset owner and document
  • For each rule, validate if the firewall rule is still required for all assets covered by rule (consult owners)
  • For each rule, if rules contain assets that are no longer in production or policy that is no longer required document finding and schedule change control to remove/clean up rule from existing firewall policy
  • Leverage existing Firewall Management Tools for Discovery and Maintenance/Cleanup
  • Strata Cloud Manager, ASDM/Cisco Defense Orchestrator and FireMon Security Manager
  • Determine and Document Process for Validating Rules with Customer Team Members
  • 5+ years of Network Security experience (Enterprise network experience preferred)
  • Current CCNA Security, CCNP Security or CCIE certification
  • Strong/Expert Level Cisco ASA Configuration/Engineering Experience (not FirePower)
  • Strong/Expert Level Cisco Defense Orchestrator Experience – Administration/Config
  • Strong Routing and Switching with Firewall
  • Firewall Rule Cleanup/Audit/Optimization Experience on Large Deployments 50+ Firewalls
  • User Experience with Splunk for Auditing Firewall Deny Logs, etc
  • Strong/Expert Level Palo Alto Firewall Configuration/Engineering Experience
  • User Experience with Palo Alto Networks Panorama for centralized management
  • Palo Alto Networks Certified Cybersecurity Associate (PCCSA) or higher certification
  • FireMon Security – Security Manager and Other Modules
  • Tufin or Similar Firewall Automation Experience
  • Checkpoint Firewalls (Virtual)
  • Azure Networking Experience
  • Experience with Palo Alto Networks Automation Tools (e.g., Palo Alto Networks Automation API)
  • Integration experience with Palo Alto Networks and other security solutions (e.g., Threat Prevention, URL Filtering)

Requirements

  • 5+ years of Network Security experience (Enterprise network experience preferred)
  • Current CCNA Security, CCNP Security or CCIE certification
  • Strong/Expert Level Cisco ASA Configuration/Engineering Experience (not FirePower)
  • Strong/Expert Level Cisco Defense Orchestrator Experience – Administration/Config
  • Strong Routing and Switching with Firewall
  • Firewall Rule Cleanup/Audit/Optimization Experience on Large Deployments 50+ Firewalls
  • User Experience with Splunk for Auditing Firewall Deny Logs, etc
  • Strong/Expert Level Palo Alto Firewall Configuration/Engineering Experience
  • User Experience with Palo Alto Networks Panorama for centralized management
  • Palo Alto Networks Certified Cybersecurity Associate (PCCSA) or higher certification