Firewall Network Security Engineer

Intel is seeking a Firewall Network Security Engineer to support the design, architecture, and build of secure classified network products for USG operations.

Responsibilities

• Support senior engineers with architecture and development of network and network security products for secured enclaves, including product testing, validation, and selection
• Assist with design and long-term roadmap planning for new and future scalability in secured enclaves
• Contribute to system security requirements, including authorization boundary, security domains, and data classification
• Design security interfaces, security interconnections, and trust relationships between system components and external systems
• Implement system security designs using COTS, GOTS, and open-source hardware and software
• Oversee hardening and configuration of systems and components in accordance with Federal, DoD, and IC guidance
• Coordinate security assessments to identify security control failures and recommend corrective actions

Requirements

• Ability to obtain an active US Government Security Clearance
• Bachelor’s degree and 3+ years of information technology experience
• 3+ years deploying and configuring Fortinet FortiGate firewalls (FortiOS, VDOMs, High Availability) (preferred)
• 3+ years building and deploying FortiManager and FortiAnalyzer in cloud or on premises (preferred)
• 3+ years experience with routing (BGP/OSPF), NAT, and network segmentation including IP subnetting
• 3+ years designing and managing firewall policies, IPS/IDS, and threat controls
• Must be a U.S. citizen due to citizenship-based legal restrictions supporting United States government customers

Technologies

• Fortinet FortiGate, FortiOS, VDOMs, High Availability
• FortiManager, FortiAnalyzer
• BGP, OSPF, NAT
• IPS/IDS
• Ansible, Python, APIs
• SIEM, NAC (ISE), SNMP, Enterprise Network Management Systems
• VPN implementation (IPSec, SSL)
• AD/MFA
• Unix, SD Elements, Splunk
• Sniffer, Wireshark, Microsoft Network Monitor
• COTS, GOTS

Preferred Qualifications

• Active US Government Top Secret (TS) Security Clearance with the skill to obtain and maintain SCI access
• Experience with DoD security implementation (for example, STIG) and security tools for managing the environment
• Experience building and managing network infrastructure using automation tools (Ansible, Python, APIs)
• Integration experience with SIEM, NAC (ISE), and enterprise network/security tools
• Understanding of NIST/STIG and compliance-driven environments (preferred)
• Ability to develop and maintain operational processes and documentation for ongoing support
• Experience supporting security operations such as monitoring, analysis, incident response, and vulnerability management
• Experience with network analysis tools such as SD Elements, Splunk, Sniffer, Wireshark, or Microsoft Network Monitor
• Certifications in cybersecurity including CCSP or CISSP
• Experience scripting in the UNIX environment
• Experience using Ansible for configuration management or security compliance automation
• Experience with operational monitoring using SNMP or other Enterprise Network Management Systems
• Familiarity with VPN implementation (IPSec, SSL) with identity integration (AD/MFA)
• Experience troubleshooting using CLI, packet capture, and log analysis

Compensation & Benefits

• Competitive pay
• Stock bonuses
• Health, retirement, and vacation benefits
• Annual Salary Range (US jobs): $105,300.00 - $175,210.00 USD

Job Details

• Job type: Experienced Hire
• Shift: Shift 1 (United States of America)
• Primary location: US, California, Santa Clara
• Work model: On-site presence (subject to change)

Note: Position of Trust: N/A