Network Firewall Admin

* Must reside in the state of CO on start date. Relocation assistance is not provided*

**This is a hybrid position requiring 2 days a week in office and remaining remote work must be from CO**

***FirstBank does not sponsor work visas***

Salary Range

$100K - $120K

Founded in 1963, FirstBank is Colorado's largest locally owned holding company and we are still growing, serving customers in Colorado and Arizona. Our growth can be attributed to one simple philosophy: do right by customers, communities, and employees, which is at the center of the company’s “banking for good” mantra. FirstBank believes that diversity, equity, and inclusion are part of everything we do, both within and outside our company, and we take pride in hiring and training a diverse and talented group. We strive to not only maintain a diverse workforce, but also ensure our employee experience garners a sense of belonging, is inclusive and equitable. FirstBank believes that a company is nothing without the people that comprise it. By joining the FirstBank team you will experience our great team culture with ample opportunity for growth. There’s an opportunity for everyone with positions across the company, from Personal Banker and Call Center to Technology and Lending. Apply today to learn more and join the team!

A Brief Overview

Responsibilities include evaluation, design, installation, configuration, operation, and maintenance of enterprise-level next-generation Firewall technologies such as Cisco ASA, , Intrusion Prevention Systems (IPS), and Virtual Private Networks (VPN) in an enterprise 24x7 environment. Participate in technical research, documentation and projects with a primary focus on Data Center, Cloud, Campus, and Branch network security. Must be able to participate in after-hours work as required for on-call and system implementations.

What you will do

• Provide technical knowledge in the administration and implementation of enterprise-level firewall and intrusion prevention solutions, and virtual private networks, specializing in Cisco ASA and Firepower next-generation firewall technologies.
• Maintain a functional  understanding of  all aspects of network infrastructure, including Cloud, Data Center, Campus, Wireless (WLAN) and Wide Area Networks (WAN).
• Works on projects/systems/issues of high complexity surrounding network segmentation, intrusion detection and prevention, configuration and optimization.
• Regularly audit firewall configurations for all segments of the network including Data Center, Campus, Wireless and Wide Area Networks.
• Support implementation projects involving existing and new technical solutions; responsibilities include planning, scheduling, and coordinating some aspects of the project.
• Establish, maintain, and troubleshoot virtual private network connections to 3rd party external entities. Provide escalation support for firewall configuration and troubleshooting with the Branch WAN and Campus networks; provide guidance to assist the network admins in resolving problems.
• Make decisions and recommendations to Management as necessary to keep projects on schedule.
• Perform other duties and projects as assigned.
• Understand and comply with all provisions of the Security in the Workplace policy.

Minimum Requirements

• Typically requires a bachelor's degree in related field and a minimum of 2 years of related experience.
• A combination of post-high school education, job related certification and related experience equivalent to 5 years may be considered in lieu of minimum requirements

Preferred Requirements

• Bachelor’s Degree in Computer Science or other technical field
• Experience in administering enterprise-level next-generation Firepower firewall technology with a medium to large organization

Knowledge, Skills, and Abilities

• Strong organizational skills with the ability to balance multiple projects and multiple tasks while meeting agreed upon objectives
• Strong technical problem-solving skills
• Strong foundation in the principles, design and implementation of TCP/IP networks including OSI model, routing, VLAN’s, QoS tuning and capacity management
• Strong knowledge with layer 2 and layer 3 technologies with a focus on Cisco networking equipment such as routers, switches, firewalls, WAAS and network load balancers
• Strong knowledge of routing protocols including Open Short Path First (OSPF), Enhanced Interior Gateway Routing Protocol (EIGRP), and Border Gateway Protocol (BGP)
• Working knowledge in the principles, design and implementation of voice technology, including VoIP, SIP and voice gateways<