26937 Network Engineer - Firewall Security

T+S

USC/GC

Must be local but 100% remote

Need LinkedIn

Job Summary

Under general supervision of the Network Operations Center Manager, this position will lead the network firewall installation, support, operation, monitoring and migration efforts within the UC Davis Network Operations Center. There are approximately 23 independent firewall-as-a-service clients throughout the campus operation. This position will be responsible for maintaining the firewall appliances (currently Fortinet), migrating to and from different vendor firewall platforms, optimizing and modifying security policy to meet demands and conform to security standards, integrate systems into monitoring system, ensuring reliable operation and consistent deployment strategy. This position will be the expert firewall engineer. Therefore, a strong foundation of firewall design, deployment and operation is required. This position will also work with the rest of the team on network engineering deployments, troubleshooting and operation. A strong background in general networking and route/switch is helpful and preferred.

This individual will be on-call for firewall operational or security issues.

Essential Responsibilities

• 40% Perform conversions of policy and configuration of existing firewall vendor platforms to the as-yet-selected new firewall vendor platform.
• Perform conversion of VPN services to the as-yet-selected SASE VPN-as-a-Service vendor platform.
  
  
  
  

• 30% Assume operation of existing Fortinet firewall-as-a-service deployments.
• Assume operation of existing Fortinet, Juniper and Cisco standalone and edge firewall deployments
• Assume operation of existing Ivanti VPN appliance systems.
• 10% Following change management process, perform all upgrades to ensure firewall and VPN deployments are on current and supported software versions.
• 5% Work with the network operation team to support the entire NOC environment. (Firewall/VPN/Route/Switch)
• 5% Respond to requests-for-service and operational issue situations that develop for all above environments.
• 5% Ensure all documentation on the supported systems is up to date and accurate, creating any missing documentation, as necessary.
• 5% Communicate effectively with team and leadership on project status, obstacles, trends and real-time problem mitigation.
  
  

Qualifications

Minimum Qualifications

• 4+ years performing direct administration and primary support activities for modern firewall and VPN platforms.
• 6+ years in a network engineering role to include route/switch duties.
• 8+ years of IT customer service experience, including incident resolution and direct customer communication.
• Experience must include medium to large size deployments with multi-tenancy experience preferred.
• Network engineering and/or network security certifications are desirable but depth of experience is more weighted.