Firewall Security Engineer

Description:
Under the supervision of the IT Security Manager, the successful candidate will design, build, and manage the security infrastructure of Port Authority information technology (IT) systems. This includes installing hardware, software, configuring firewalls, setting up virtual private networks (VPNs), and upgrades. Engage with clients, relaying information about the project and troubleshooting all issues. Proficient in change management and disaster response. Work with other engineers to resolve critical issues. Occasional off hours support sometimes required.

Responsibilities:

• Review and implement firewall rule changes working through a ticketing system.
• Collaborate with Cyber Security Team along with Network Operations to complete projects on schedule
• Review client and policy requirements for security systems.
• Collaborate with engineers and developers towards a secure technical approach.
• Installation of software and hardware components of firewalls and other portions of security infrastructure.
• Configure firewalls for usage, manage their day-to-day operations, and perform regular maintenance through upgrades and patches.
• Track and manage licenses status for renewal, upgrade, etc...
• Fully test, monitor and document system changes through change process.
• Support and maintain web proxy, VPN, firewalls and other network traffic management (occasionally off hours)
• Monitor security devices and applications for performance problems.
• Write and maintain documentation on process procedures, device statuses, firewall block lists, and other important technical areas.
• Manage projects related to implementing Cyber Security tools and products (not necessarily firewall)
• Create diagrams of network topologies and record details of troubleshooting processes.
• Follow policies and standards to support network security and regulatory requirements. As well as recommend changes to policies and standards as technology develops
• Support and provide evidence and services to audit teams in a timely manner
• Enforce quality control and ensure output meets project requirements

Qualifications:
Candidates must present the following qualifications to be considered eligible for this position:

• 5 years in a security engineer role using the following technologies: Checkpoint firewalls, & Cisco firewalls, Splunk
• Understanding of networking concepts such as routing and switching

Desired:
Ideal candidates will present the following profile:

• Knowledge of Cyber Security Tools such as:
• CISSP, CISM certification or similar
• Understanding of threat modeling

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or protected veteran status.