Security/Firewall Architect

Overview As a Security/Firewall Architect, you translate business requirements into robust security architectures and configurations for internal and MSSP clients. You provide hands-on engineering support and adopt a service desk approach to sustain operations. You will drive continuous improvements across security architecture, engineering, and operations. You operate in a client-facing, contract setting in Dallas, shaping firewall and network security programs with current best practices. This role offers impact by strengthening security controls and incident response capabilities in a dynamic environment. ResponsibilitiesTranslate business requirements into technical architectures, frameworks and configurations for internal and MSSP customers.Provide engineering and operational support for internal and external customers using a Service Desk approach.Perform continuous process improvement across security architecture, engineering, and operations.Evaluate and implement move/add/change requests for customers.Read, write and analyze firewall policies; manage VPNs and firewall environments. Key requirementsMinimum 12 years in IT with operational and engineering support experienceHands-on experience with Juniper, Cisco, and Check Point firewalls; Palo Alto a plus5 years’ experience with formal ticketing systems (Remedy, CA USD)Ability to create data flow diagrams from business requirementsAdvanced Layer 3 and Layer 4 packet analysisCheckpoint, Cisco and Juniper multi-services platformsAbility to read/write ACLs and firewall policiesExperience with PCI-DSS governance and compliance frameworkExperience with TCPDUMP and/or WiresharkCisco IDS/IPS, Cisco PIX firewall and Blue Coat Proxy familiarityITIL framework familiarity for handling requestsCisco routing protocols (BGP, OSPF, STP, IPv6, MPLS)Checkpoint NG, Checkpoint advanced firewall solution design and administrationSecurity architectures and certifications (CISSP)Layer 3 networking, NAT and complex routing understandingOn-call and after-hours support availabilityExperience with VisioExperience with security incident identification and client remediationJuniperCiscoCheck PointPalo AltoRemedyCA USD