Sr. Firewall Engineer, Progression

Title: Sr. Firewall Engineer, Progression 
Company: Tampa Electric Company
Location: Bearss Operations Center 
State and City: Florida  -  LUTZ
Shift: 8 Hr. X 5 Days

Hiring Manager:  David Cain

Recruiter: Mark E Koener 

 

 

TITLE:   Sr Firewall Engineer, Progression
PERFORMANCE COACH:  Mgr. Network Engineering & Cyber Security Operations
COMPANY:   Tampa Electric
DEPARTMENT:   High Performance Computing & BP Support

 

FOCUS Areas:

•    Strong hands on Palo Alto experience in production 
•    Previous Checkpoint experience a plus 
•    Proven experience designing and supporting VPN solutions
•    Experience in high availability or large scale enterprise environments

 
Note that this position can be hired at any level within the job family of progression based on Education and years of experience but is ideally targeting to hire at the Sr. level (level 3).
 

POSITION CONCEPT
The Network & Systems Security Analyst (Firewall Engineer), is responsible for planning/designing, implementing, and supporting new and existing network, server, storage infrastructure. This role is also responsible for ensuring all network security controls (i.e., firewalls, web application firewalls [WAF], proxies, network segmentation, NAC, ACLs, etc.) are implemented and managed per corporate information security standards. Additionally, responsibilities include assessing enterprise assets and critical assets for secure configurations and maintaining and enforcing regulations and standards such as NERC Critical Infrastructure Protection (CIP), Sarbanes-Oxley (SOX), and Payment Card Industry (PCI).
Responsible for the design, planning, operation, maintenance, and support of the TECO and NMGC network infrastructure. This includes primary accountability for network technologies such as route/switch, on-premise LAN/WAN, IPAM, Wi-Fi, ISP management, site-to-site VPNs, proxies (forward and reverse), perimeter firewall management, DNS, Azure cloud environments, automation, NAC/user access, hyperconverged infrastructure, and overall network security. Partners with the Telecommunication teams on establishing/upgrading existing circuits/communication links. Responsible for the NERC Cyber Infrastructure Protection and disaster recovery plans.
Responsible for VoIP, SIP, DHCP, DNS, TCP/IP routing and routing protocols such as OSPF and BGP, binary mathematics, NAT, PAT, IPsec and SSL VPN technologies, GRE tunneling, route redistribution, traffic shaping, port-level filtering, SD-WAN, MPLS and other communications related technologies. Responsible for the installation, configuration, and maintenance of all WAN and LAN connectivity which includes core and campus switches, routers, firewalls, wireless access points, WAN scalers and load balancer technologies. Responsible for the design, installation, configuration, and maintenance of DNP over IP and serial SCADA communications between the primary and backup control centers, power plants, solar sites, and substations. Responsible for the configuration and maintenance of Smart GRID communication hardware switches and routers between the primary and backup control centers.
 

NETWORK & SYSTEMS SECURITY ANALYST I (LEVEL 1) 
Monitors and troubleshoots server, network, and security controls related problems and failures; and installs and configures hardware/software. Works under direct supervision.
 

PRIMARY DUTIES AND RESPONSIBILITIES
1.    Plan, design, and implement network, server, and storage infrastructure based on project requirements, capacity plans, and system support. (20%)
2.    Problem solving involves basic troubleshooting following the OSI (Open Systems Interconnection) model, making or calling for equipment repairs, and problem escalation. (20%)
3.    Detection and correction of work stoppages and/or errors are accomplished by monitoring systems and changing configurations, as necessary. (20%)
4.    Install and support network, server, and storage hardware and software. (10%)
5.    Direct participation in the planning and designing, maintenance, testing and documentation of the company’s disaster recovery plans are vital. (10%)
6.    Provide and apply appropriate security consulting and support for IT infrastructure across multiple platforms (Firewalls, proxies, WAFs, ACLs, NAC, Operating Systems, NetScaler load balancers, DDoS protection, and other network devices). (10%)
7.    Provide third-level technical support for security systems and authentication mechanisms on all operating system platforms. (10%)

 

QUALIFICATIONS
EDUCATION  Required:    High School Diploma or GED    
Preferred:     Bachelor’s degree in Computer Science, Engineering, Math, or equiv