Firewall Engineer *Clearance, Sec +, OS Cert Required* Position Available In Montgomery, Alabama
Tallo's Job Summary: The Firewall Engineer position at Maxwell Air Force Base-Gunter Annex, Alabama, requires a security clearance and CompTIA Security + certification. Responsibilities include overseeing intrusion detection, prevention, and boundary protection operations to defend the Air Force Network. This role also involves monitoring, operating, and maintaining network security devices to protect AFNet resources. The position may require rotating weekends, 24x7 shift support, and on-call duties. Experience with IDS, Firewalls, and network security platforms is preferred.
Job Description
Description Our Router, Boundary Protection, and DNS Teams oversee an enterprise DoD environment supporting the USAF that requires a unique and dynamic skill set that is expected to complete associated training programs and/or actively pursue professional development/cross-training opportunities. All team members expected to provide continuity for 24/7/365 operations regardless of their current assigned shift. oServe as a Boundary Protection Team Operator for the 26 Network Operations Squadron (26 NOS) at Maxwell Air force Base-Gunter Annex, Alabama. oOversees intrusion detection, intrusion prevention, boundary protection and vulnerability assessment operations to defend the Air Force Network (AFNet). oIdentifies unknown or unauthorized sources which attempt to access the AFNet and, when such attempts occur, notifies the appropriate AF agencies. oMonitors, operates, and maintains intrusion detection/prevention systems, firewalls, load balancers, and web proxies to protect AFNet resources from both internal and external threat. Skills Network engineering, Router, Ccna, cisco routers, cisco switches, security clearance Top Skills Details Network engineering,Router,Ccna Additional Skills & Qualifications oMust have CompTIA Security + certification already in hand oAssist on-site LAN engineers with troubleshooting support of network equipment and installation of new hardware oPerform minor and major operating system upgrades on all network security devices.
Enterprise network troubleshooting:
oMust work with all corresponding technical support teams as required to resolve network traffic concerns. oUtilize monitoring tools and log collectors to provide in-depth analysis on traffic anomalies and issues. oWork network issues to resolution for customers via trouble tickets, change requests, and phone calls, in direct support with base-level, NOSC-level, and DISA counterparts. oReceive inbound calls from enterprise customers and work with other external NOCs to troubleshoot and resolve policy configuration issues. Perform packet capture analysis as required.
Device Management:
oExperience configuring and managing IDS, Firewalls and other network security platforms. oFamiliarity and experience with Palo Alto firewalls, F5 appliances, and Cisco ASAs is preferred.
Device and traffic monitoring:
oPerforms daily health checks to acknowledge system level faults and begin the process of resolution. oUtilizes monitoring tools and log collectors to begin initial analysis on network traffic, including (but not limited to) Splunk, Schnozz, ELK, InfoVista, and NIKSUN.
Flexible schedule as needed:
oThis position requires rotating weekends, 24×7 shift support, and on call duties oIt may be required to come in earlier than normal, stay later than normal, or work off shifts to meet contract requirements or to support network changes during off peak maintenance windows.
Experience and Education:
oPosition minimum requirements: 0-3 years (Jr) 3-5 years (Mid) oA professional level network security OS certification of any one of the following: CCNA;
F5 BIG-IP
Certified Administrator; F5 CTS Global Traffic Manager; F5 CTS Big-IP ASM; F5 CTS Big-IP APM; Broadcom Software Proven Professional (ProxySG). o Experience Level Entry Level
