Lead Information Security Engineer - Firewall

About Lumen

Lumen connects the world. We are igniting business growth by connecting people, data and applications – quickly, securely, and effortlessly. Together, we are building a culture and company from the people up – committed to teamwork, trust and transparency. People power progress.

 

We’re looking for top-tier talent and offer the flexibility you need to thrive and deliver lasting impact. Join us as we digitally connect the world and shape the future.

The Role

The Lead Information Security Engineer is a member of the Fusion Center Corporate Firewall Operations (CNFW) team that is responsible for managing and securing the Lumen Enterprise including but not limited to maintaining Firewall and VPN Operations.  In addition, CNFW Engineers are responsible to evaluate current capabilities and predict future needs, then work with internal stakeholders, vendors, and peers to anticipate, define, and pursue these capabilities.

 

Location

This is a remote opportunity open to candidates located anywhere in the U.S.

The Main Responsibilities

• Perform as Subject Matter Expert (SME) for existing environments, mentor lower-level engineers, and assume ownership and accountability in areas of accepted technical expertise
• Perform third-level trouble identification, interpretation of standards, and design resolution for internal network security problems or issues
• Maintain next-generation physical hardware or virtual firewall across various environments
• Lead operational or participate in architectural security projects dedicated to improving Lumen’s security posture
• Respond to, remediate, and document network security related alerts and issues not limited to dashboard alerts, tickets, emails, or phone calls
• Maintain security of the network by ensuring firewall rules meet company policy and configuring best practice security measures on devices
• Review and resolve firewall vulnerability and compliance monitoring findings
• Develop and maintain written procedures to maintain technical accuracy 
• Identify new technology to be reviewed by the Cyber Defense Infrastructure team

What We Look For in a Candidate

• Bachelor’s degree in computer science, engineering, or related field, or equivalent experience
• 7+ years of experience in Network Operations, Security Operations, Network Security, or Application Security 
• Knowledge of information security industry and regulatory obligations; PCI, CIS, NIST Frameworks (800-53, CSF, CMMC, etc.), HIPAA, FedRAMP, etc.
• Excellent understanding of common computing platforms including Windows Client/Server, Macintosh, Linux, networking, and security appliances
• Extensive hands-on experience with Next-Generation Firewalls and their security features and/or VPN devices
• Candidate must possess, or be willing to pursue, applicable professional/technical certifications, such as CISSP, GSEC, Palo Alto, Checkpoint, Juniper, and Cisco
• Strong work ethic, ability to work in a fast-paced team-oriented environment, and excellent oral and written communication skills
• Knowledge of cloud-based firewalls from Amazon, Google, Microsoft, or firewall vendors
• Participate in on-call rotation
• Able to work other shifts as needed based on business requirements
• Must be able to obtain a GSA Public Trust suitability

 

Preferred Qualifications:

 

• 7+ years of experience in network and/or firewall engineering, administration, design, and implementation including experience in applying methodologies and principles for all levels of security
• Solid understanding of information security fundamentals, host and network security hardening and requirements; networking protocols; common risk management concepts
• Knowledge of Project Management processes and practices
• Solid analytical and problem-solving skills related to networking and operating systems
• Development experience in scripting langua