Firewall Management

Firewall Management Cybersecurity Jobs

14 jobs found

5d ago

Senior Cybersecurity Engineer

eTeam Inc Columbus, OH

Columbus, OH

5d ago

$60 - $67/hr Contract Senior Application Security Cloud Platforms

Apply Now

Job Description

Senior Cybersecurity Engineer focusing on Web Application and Network Protection leads the design, implementation, administration, and ongoing support of enterprise web and network security solutions.

Role Overview

Location: Columbus, OH (Hybrid)
Employment Type: Temp-to-Hire
Duration: 12 Month
Hourly Salary: USD 60 - 67

Responsibilities

Lead the setup, configuration, ongoing administration, and support of the F5 Distributed Cloud XC Web Application Firewall
Tune and maintain WAF policies, signatures, and related security controls
Deploy and oversee API protection measures
Configure and manage bot mitigation capabilities
Implement and supervise DDoS protection strategies
Establish and enforce geolocation based access policies
Configure rate limiting to regulate traffic flow
Create and manage custom WAF challenges
Optimize WAF policies to reduce false positives
Assist onboarding of applications into WAF services
Conduct policy reviews and pursue continual optimization
Participate in incident response for web application attacks
Protect enterprise applications against OWASP Top 10 vulnerabilities
Guard against injection attacks targeting enterprise applications
Mitigate credential stuffing threats
Counter clickjacking risks
Prevent Cross-Site Scripting (XSS) vulnerabilities
Guard against Cross-Site Request Forgery (CSRF) attacks
Review application architectures and recommend security improvements
Collaborate with development teams during onboarding and troubleshooting of applications
Support and manage Palo Alto Networks Next-Generation Firewalls (NGFW)
Implement and maintain network segmentation
Configure Site-to-Site and Remote Access VPNs
Manage firewall rules and network security policies
Implement security controls and perform network troubleshooting
Respond to security incidents and participate in an on-call rotation
Monitor and report on enterprise security posture
Automate repetitive security operations where feasible
Engage in Incident Response activities
Conduct threat hunting and security assessments
Remediate vulnerabilities and perform root cause analysis
Perform security architecture reviews

Requirements

Education: Bachelor's degree in Computer Science, Information Security, Cybersecurity, or related field, or equivalent experience
Experience: 5+ years of cybersecurity or network security experience
WAF: 3+ years of hands-on Web Application Firewall experience

Technologies

F5 Distributed Cloud XC WAF
Palo Alto Networks NGFW and Firewalls
HTTP/HTTPS, TLS/SSL
REST APIs, DNS
Load Balancing, VPN Technologies
WAF Policy Management, API Protection, Bot Defense, DDoS Protection
Vulnerability Management

View full job page →

5d ago

Principal Security Engineer - PAN and Panorama

Calance US Charlotte, NC

Charlotte, NC

5d ago

$70 - $85/hr Full time Cloud Platforms Data Security Engineering

Apply Now

Job Description

Lead the strategy, engineering, and modernization of a global firewall program as a hands-on Principal Security Engineer in Charlotte, NC onsite, driving policy governance and operational excellence.

Responsibilities

Serve as the principal technical lead and SME for the enterprise firewall program.
Define and deploy global firewall standards, policies, and governance mechanisms.
Drive enterprise wide firewall policy standardization across regions, business units, and environments.
Create scalable firewall design patterns to support cloud, data center, and hybrid architectures.
Continuously improve firewall architecture, security controls, and day to day operations.
Own the lifecycle of firewall rules, including design, implementation, validation, and ongoing maintenance.
Develop policy sequencing strategies to optimize performance, manageability, and security effectiveness.
Conduct rule reviews, policy tuning, cleanup, and recertification tasks.
Identify and remediate redundant, orphaned, shadowed, and overly permissive firewall rules.
Apply best practices for change management, policy governance, and compliance requirements.
Analyze firewall environments to uncover gaps, risks, inefficiencies, and bottlenecks.
Assess current state and develop strategic roadmaps to modernize firewall operations and architecture.
Promote advanced security capabilities including application based policies, threat prevention, DNS security, SSL inspection, and zero trust adoption.
Collaborate with architecture and engineering teams to enhance segmentation and overall security posture.
Identify and implement automation opportunities to improve operations, policy deployment, compliance reporting, and vulnerability remediation.
Leverage AI, analytics, and machine learning to streamline security workflows and boost efficiency where applicable.
Target reductions in manual effort through intelligent automation and infrastructure as code practices.
Work with vulnerability management to automate risk based remediation and policy recommendations.
Serve as the senior technical advisor for firewall engineering initiatives and strategic security programs.
Mentor engineers and provide guidance on firewall and network security best practices.
Coordinate closely with network engineering, cloud, infrastructure, security operations, and compliance teams.
Influence enterprise security standards and contribute to long term cybersecurity strategy.

Requirements

Bachelor's degree in Information Security, Computer Science, Engineering, or equivalent experience.
10+ years of experience in network security engineering within large scale enterprise environments.
5+ years of advanced experience with Palo Alto Networks Firewalls and Panorama.
Firewall policy design and implementation experience.
Security policy optimization and sequencing expertise.
Network segmentation experience.
Proficiency with threat prevention technologies.
Enterprise security architecture background.
Experience with multi site / global firewall deployments.
Strong TCP/IP networking knowledge, routing and switching skills.
Knowledge of network security architectures across hybrid and cloud networking models.
Experience with Zero Trust security frameworks.
Proven track record leading enterprise security modernization initiatives.
Strong analytical, troubleshooting, and communication skills; ability to translate findings into strategic recommendations.
Certifications: PCNSA, PCNSE, and Palo Alto Cybersecurity Professional certifications.

Technologies

Palo Alto Networks Firewalls
Panorama
Python
Ansible
Terraform
AWS
Azure
GCP
APIs
SIEM
SOAR

View full job page →

11d ago

Cisco Network Security Engineer/ Senior Consultant

Deloitte Morristown, NJ

Morristown, NJ

11d ago

$105k - $208k/yr Full time Cisco Cisco Identity Services Engine Cloud Platforms

Apply Now

Job Description

Details

Location: Morristown, NJ (onsite)
Salary: USD 105,400 - 207,800 per year
Minimum experience: 3 years
Education: BA/BS degree in a technical field

Responsibilities

Plan, implement, and operate Cisco Firepower Threat Defense (FTD) and Firepower Management Center (FMC) across enterprise environments, spanning physical, virtual, and cloud deployments
Deploy and support Cisco Identity Services Engine (ISE) capabilities, including 802.1X network access control, device profiling, guest lifecycle management, TrustSec segmentation, and integration with enterprise identity stores
Configure and optimize advanced Cisco security features such as IPS, malware protection, URL filtering, DNS-based protections, Security Intelligence, and SSL/TLS decryption policies
Deploy and integrate Cisco Secure Firewall solutions in cloud settings (AWS, Azure, GCP) while enabling centralized policy management and secure connectivity across hybrid infrastructures
Develop client-facing security architectures, integrating Cisco platforms with SIEM tools and automation, and deliver recommendations that balance technical needs, compliance, and business goals

Requirements

Proven ability to design, assess, and troubleshoot enterprise network security environments using Cisco technologies
Experience implementing and managing Cisco Firepower Threat Defense (FTD), Firepower Management Center (FMC), and Identity Services Engine (ISE) solutions
Capability to support 802.1X network access control, profiling, guest access, TrustSec segmentation, and policy enforcement requirements
Skill in analyzing and tuning firewall, IPS, SSL/TLS decryption, and threat prevention controls
Ability to support secure network and firewall deployments across on-premises, campus, data center, and cloud environments
Capacity to produce technical assessments, target-state architectures, implementation roadmaps, and executive-ready deliverables
Proven ability to lead projects or workstreams
Strong aptitude for managing multiple tasks in a fast-paced environment and providing clear guidance to others

Technologies

Cisco Firepower Threat Defense (FTD)
Cisco Firepower Management Center (FMC)
Cisco Identity Services Engine (ISE)
AWS, Microsoft Azure, Google Cloud Platform (GCP)
REST APIs
Ansible, Terraform, Python
Cisco Catalyst Center
Cisco Secure Access, Cisco Umbrella, Cisco Secure Client, Duo Security, Cisco SecureX
SSL/TLS decryption, TrustSec, 802.1X Network Access Control, SIEM, Security Intelligence

The Team

The Enterprise Security practice integrates security across digital transformation, securing a client’s technical backbone while enabling secure innovation. The team encompasses security architecture, secure development and deployment, end-to-end cyber cloud capabilities, application security, and protection for emerging technologies and connected products.

View full job page →

12d ago

Cisco Network Security Engineer/ Senior Consultant

Deloitte Dallas, TX

Dallas, TX

12d ago

$105k - $208k/yr Full time Cisco Cisco Identity Services Engine Cloud

Apply Now

Job Description

A senior consultant in Deloitte's Cyber practice specializing in Cisco network security engineering.

Responsibilities

Designing, deploying, and managing Cisco Firepower Threat Defense (FTD) and Firepower Management Center (FMC) across enterprise environments, including on-premises, virtual, and cloud-delivered deployments.
Implementing and supporting Cisco Identity Services Engine (ISE), covering 802.1X network access control, device profiling, guest lifecycle management, TrustSec segmentation, and integration with enterprise identity stores.
Configuring and tuning advanced Cisco security features such as intrusion prevention system (IPS), malware protection, URL filtering, DNS-based security, Security Intelligence, and SSL/TLS decryption policies.
Deploying and integrating Cisco Secure Firewall in cloud platforms (AWS, Azure, GCP) with centralized policy management and secure connectivity across hybrid infrastructures.
Developing client-facing security architectures that integrate Cisco platforms with SIEM tools and automation solutions, delivering recommendations aligned to technical requirements, compliance needs, and business objectives.

Requirements

Design, assess, and troubleshoot enterprise network security environments using Cisco technologies.
Implement and manage Cisco FTD, FMC, and ISE solutions.
Support 802.1X network access control, device profiling, guest access, TrustSec segmentation, and policy enforcement requirements.
Analyze and tune firewall, IPS, SSL/TLS decryption, and threat prevention controls.
Support secure network and firewall deployments across on-premises, campus, data center, and cloud environments.
Produce technical assessments, target-state architectures, implementation roadmaps, and executive-ready deliverables.
Lead projects or workstreams and manage multiple tasks in fast-paced, dynamic settings.
Provide clear guidance to colleagues and clients.

Technologies

Cisco Firepower Threat Defense (FTD)
Firepower Management Center (FMC)
Cisco Identity Services Engine (ISE)
802.1X Network Access Control
TrustSec
Intrusion Prevention System (IPS)
SSL/TLS decryption
URL filtering
DNS-based security
Security Intelligence
Cisco Secure Firewall
AWS
Microsoft Azure
Google Cloud Platform (GCP)
SIEM
REST APIs
Ansible
Terraform
Python
Cisco Secure Access
Cisco Umbrella
Cisco Secure Client
Duo Security
Cisco SecureX
Cisco Catalyst Center
Software-Defined Access (SD-Access)

Benefits

Discretionary annual incentive program

View full job page →

14d ago

Cyber Palo Alto Networks Security Engineer/ Senior Consultant, Strategy, Growth, and Transformation

Deloitte Houston, TX

Houston, TX

14d ago

$105k - $208k/yr Full time Cloud Cloud Infrastructure Cloud Platforms

Apply Now

Job Description

Deloitte seeks a Cyber Palo Alto Networks Security Engineer / Senior Consultant to join the Cyber Enterprise Security team in Houston, TX on-site, with a yearly salary range of USD 105,400 to 207,800.

Responsibilities

Design, deploy, and manage Palo Alto Networks Next-Generation Firewalls (NGFW) across on-premises and cloud environments, including AWS, Azure, and GCP
Implement and optimize Prisma Access capabilities, including GlobalProtect, Prisma Agent, and Prisma Browser, to support secure internet access and remote connectivity
Administer Panorama and Strata Cloud Manager to enable centralized policy management, device configuration, visibility, and operational consistency across enterprise environments
Configure and tune security features such as Threat Prevention, IPS/IDS, Anti-Spyware, Antivirus, WildFire, DNS Security, and SSL/TLS decryption policies
Develop client solution designs and recommendations, integrating Palo Alto platforms with SIEM/SOAR and identity provider tools, and supporting automation via Terraform, Ansible, or Python

Requirements

BA/BS degree in a technical field (e.g., Computer Science, Cyber Security, Information Technology) or equivalent work experience
PCNSE certification
5+ years of progressively responsible experience in network security engineering with depth in Palo Alto technologies and increasing technical ownership and leadership
5+ years hands-on experience designing, deploying, and managing Palo Alto NGFW in both on-premises and cloud environments (AWS, Azure, and/or GCP)
3+ years designing, deploying, and managing Prisma Access, including GlobalProtect, Prisma Agent, and Prisma Browser for internet and secure remote access use cases
3+ years designing, deploying, and managing Panorama centralized management, and Strata Cloud Manager
3+ years configuring and tuning Threat Prevention features, including IPS/IDS, Anti-Spyware, Antivirus, WildFire, and DNS Security
3+ years implementing and troubleshooting SSL/TLS Decryption policies, including forward proxy and inbound inspection, certificate management, and decryption exclusion handling
3+ years defining, managing, and reviewing security policies, including rule base optimization, policy lifecycle management, and periodic access reviews
3+ years of experience with one or more major cloud providers (AWS, GCP, Azure) and their native security toolsets, including deployment of VM-Series firewalls within cloud-native architectures
Ability to travel up to 50% on average based on client assignments
Limited immigration sponsorship may be available

Technologies

Palo Alto Networks NGFW, Prisma Access, GlobalProtect, Prisma Agent, Prisma Browser, Panorama, Strata Cloud Manager
Threat Prevention, IPS/IDS, Anti-Spyware, Antivirus, WildFire, DNS Security, SSL/TLS decryption policies
Terraform, Ansible, Python
AWS, Microsoft Azure, Google Cloud Platform (GCP)
VM-Series
Splunk, Microsoft Sentinel, Palo Alto XSOAR

Benefits

Discretionary annual incentive program

View full job page →

14d ago

Cisco Network Security Engineer/ Senior Consultant

Deloitte Philadelphia, PA

Philadelphia, PA

14d ago

$105k - $208k/yr Full time Cisco Cisco Identity Services Engine Cloud Platforms

Apply Now

Job Description

Join Deloitte's Cyber team in Philadelphia on site, focusing on Cisco security technologies across on-premises, cloud, and hybrid environments. This role offers a competitive compensation package with a yearly salary ranging from USD 105,400 to 207,800, plus eligibility for a discretionary annual incentive program. A BA/BS degree is required, and the position emphasizes hands-on delivery, security architecture, and collaboration with enterprise security initiatives.

As part of Deloitte's Enterprise Security offering, you will help secure digital transformation by protecting the technical backbone while enabling secure innovation. The team encompasses security architecture, secure development and deployment, end-to-end cyber cloud capabilities, application security, and security for emerging technologies and connected products.

Responsibilities

Designing, deploying, and managing Cisco Firepower Threat Defense (FTD) and Firepower Management Center (FMC) solutions across enterprise environments, including physical, virtual, and cloud-delivered deployments
Implementing and supporting Cisco Identity Services Engine (ISE) capabilities, including 802.1X network access control, device profiling, guest lifecycle management, TrustSec segmentation, and integration with enterprise identity stores
Configuring and tuning advanced Cisco security features, including intrusion prevention system (IPS), malware protection, URL filtering, DNS-based security, Security Intelligence, and SSL/TLS decryption policies
Deploying and integrating Cisco Secure Firewall solutions in cloud environments, including AWS, Microsoft Azure, and Google Cloud Platform (GCP), while supporting centralized policy management and secure connectivity across hybrid infrastructures
Developing client-facing security architectures, integrating Cisco platforms with security information and event management (SIEM) tools and automation solutions, and delivering recommendations that align technical requirements, compliance needs, and business objectives

Requirements

BA/BS degree in a technical field (e.g., Computer Science, Cyber Security, Information Technology, or equivalent work experience)
CCNP Security or CCIE Security certification required
5+ years of experience in network security engineering with Cisco security technologies
5+ years of experience designing, deploying, and managing Cisco Firepower Threat Defense (FTD) and Firepower Management Center (FMC) in enterprise environments, including physical appliances, virtual instances, and cloud-delivered Firewall Management Center (cdFMC)
5+ years of experience designing and implementing Cisco Identity Services Engine (ISE), including distributed node architectures, high availability configurations, patch management, and upgrade planning
3+ years of experience with Cisco Identity Services Engine (ISE) 802.1X Network Access Control (NAC), guest lifecycle management, profiling policies, TrustSec segmentation, and Cisco Firepower capabilities including IPS, malware protection, URL filtering, DNS-based security, SSL/TLS decryption, and cloud firewall deployments in AWS, Azure, or GCP
Ability to travel up to 50%, on average, based on the work you do and the clients and industries/sectors you serve
Limited immigration sponsorship may be available

Technologies

Cisco Firepower Threat Defense (FTD)
Firepower Management Center (FMC)
Cisco Identity Services Engine (ISE)
802.1X Network Access Control
TrustSec
IPS, URL filtering, DNS-based security, SSL/TLS decryption
Security Intelligence
Cisco Secure Firewall
AWS, Microsoft Azure, Google Cloud Platform (GCP)
SIEM, cdFMC
Cisco Catalyst Center, SD-Access
REST APIs, Ansible, Terraform, Python
Duo Security, Cisco Umbrella, Cisco Secure Client, Cisco SecureX, Cisco Secure Access

Benefits

Discretionary annual incentive program eligibility

View full job page →

15d ago

Cisco Network Security Engineer/ Senior Consultant

Deloitte Milwaukee, WI

Milwaukee, WI

15d ago

$105k - $208k/yr Full time Cisco Cisco Identity Services Engine Cloud

Apply Now

Job Description

Deloitte's Cyber practice invites a senior Cisco network security engineer to shape advanced security architectures for enterprise clients. This onsite role in Milwaukee, WI, centers on Cisco security engineering, delivering Firepower deployments, ISE integrations, and cloud-ready defenses that align technical controls with business objectives. The position offers a competitive salary range of USD 105,400 to 207,800 annually and requires a BA/BS alongside hands-on field experience.

Responsibilities

Architect, deploy, and operate Cisco Firepower Threat Defense (FTD) and Firepower Management Center (FMC) across large networks, including on‑premises hardware, virtual deployments, and cloud-delivered solutions.
Implement and support Cisco Identity Services Engine (ISE) capabilities such as 802.1X NAC, device profiling, guest lifecycle management, TrustSec segmentation, and integration with enterprise identity stores.
Configure and optimize advanced Cisco security features, including IPS, malware protection, URL filtering, DNS‑based security, Security Intelligence, and SSL/TLS decryption policies.
Deploy and integrate Cisco Secure Firewall technologies in cloud environments (AWS, Azure, GCP), maintaining centralized policy management and secure connectivity across hybrid infrastructures.
Develop client‑facing security architectures that integrate Cisco platforms with SIEM and automation tools, delivering recommendations that balance technical requirements with compliance and business goals.

Requirements

Bachelor’s degree in a technical field (e.g., Computer Science, Cyber Security, Information Technology) or equivalent work experience.
CCNP Security or CCIE Security certification required.
Over five years of experience in network security engineering with Cisco security technologies.
More than five years designing, deploying, and managing Cisco FTD and FMC in enterprise environments, including physical appliances, virtual instances, and the cloud-delivered Firewall Management Center (cdFMC).
Over five years designing and implementing Cisco ISE, including distributed node architectures, high availability, patch management, and upgrade planning.
At least three years of experience with ISE 802.1X NAC, guest lifecycle management, profiling policies, TrustSec segmentation, and Cisco Firepower capabilities (IPS, malware protection, URL filtering, DNS‑based security, SSL/TLS decryption) and cloud firewall deployments in AWS and Azure.
Ability to travel up to 50% on average, depending on client engagements.
Limited immigration sponsorship may be available.
Additional cybersecurity certifications such as CISSP, GSEC, or GCED are a plus.
Experience with Cisco Secure Access, Cisco Umbrella, Cisco Secure Client, or Duo Security in Zero Trust architectures.
Experience with Cisco Extended Detection and Response (XDR), Cisco SecureX, or integrating Firepower and ISE telemetry for threat detection, investigation, and response.
Experience using REST APIs, Ansible, Terraform, or Python for policy provisioning, compliance checks, drift detection, or security automation.
Experience with Cisco Catalyst Center and ISE integration for Software-Defined Access (SD-Access) deployments and segmentation policy enforcement.
Experience delivering network security, access control, segmentation, or Zero Trust engagements within consulting environments.

Technologies

Cisco Firepower Threat Defense (FTD)
Cisco Firepower Management Center (FMC)
Cisco Identity Services Engine (ISE)
802.1X network access control
TrustSec
Intrusion Prevention System (IPS)
Malware protection
URL filtering
DNS-based security
SSL/TLS decryption
Cisco Secure Firewall
AWS, Microsoft Azure, Google Cloud Platform (GCP)
SIEM tools
REST APIs
Ansible
Terraform
Python
Cisco Secure Access
Cisco Umbrella
Cisco Secure Client
Duo Security
Cisco Extended Detection and Response (XDR)
Cisco SecureX
Cisco Catalyst Center
Software-Defined Access (SD-Access)

Benefits

Discretionary annual incentive program

The Team

Our Enterprise Security offering integrates security across the entire digital transformation journey, safeguarding a client’s core infrastructure while enabling secure innovation. The team covers security architecture, secure development and deployment, end-to-end cyber cloud capabilities, application security, and protection for emerging technologies and connected products.