Source description
About the role
Position Summary
This position functions as a Tier 3 resource within the Firewall Team and is responsible for advanced troubleshooting, operational support, and change execution in accordance with contractual and agency-defined processes. The engineer will work closely with internal teams to ensure the reliability, security, and performance of the firewall infrastructure.
Key Responsibilities
Serve as a Tier 3 escalation point for complex firewall and network security issues.
Provide advanced troubleshooting and root cause analysis for Cisco Secure Firepower Firewall incidents.
Perform day-to-day firewall operational support using Cisco Secure FMC, including but not limited to:
Creating and maintaining operational and compliance reports,
Monitoring firewall health and system performance,
Analyzing traffic flows and connection behavior, and
Supporting routing protocols within secured environments.
Troubleshoot and support VPN technologies, including site-to-site and remote access VPNs.
Analyze, implement, and optimize firewall access control and security policies.
Participate in formal change management processes, including documentation, peer review, approvals, and scheduled implementations.
Execute approved changes during after-hours change windows, as required.
Participate in a team-based on-call rotation to support after-hours and emergency incidents.
Collaborate with engineering teams and operational stakeholders to meet Managed Network Services (MNS) obligations.
Required Skills
General Abilities
Familiarity with large-scale enterprise or government environments
Strong written and verbal communication skills
Ability to clearly document technical findings, configurations, and change activities
Ability to communicate effectively within structured, process-driven environments
General Technical Skills
Strong understanding of routing concepts and protocols in secured network environments
Specific Technical Skills
Strong hands-on experience with Cisco Secure Firepower Firewalls
Advanced troubleshooting experience, including but not limited to:
Snort 3 (Intrusion Prevention System [IPS] and file policies)
Traffic flow analysis and packet inspection
NAT and/or PAT configuration and troubleshooting
Security Intelligence policies
Access control rule analysis
OSI Layers 1 through 7, with particular emphasis on Layers 1 through 4
Solid operational experience with Cisco Secure FMC
Proven experience in troubleshooting VPN technologies (i.e., Cisco Secure Client/AnyConnect)
Desired Skills
Experience with Cisco Catalyst SD-WAN
Familiarity with ServiceNow and/or similar ITSM tools for incident and change management
Experience creating, editing, and maintaining network topology diagrams
Experience in Microsoft Visio
More at 3B Staffing