L2/L3 Security & Firewall Engineer - INSPYR Solutions
Coral Gables, FL 33134-3157
About the Job
Title: L2/L3 Security and Firewall Engineer
Duration : 3 months Contract to Hire
Location : Coral Gables
Work Requirements: US Citizen, GC Holders or Authorized to Work in the US
Job Description
L2/L3 engineering capability as related to cybersecurity design/architecture covering data, voice and
cloud to support strategy and business requirements for perimeter security, compliance, resilience,
recovery, capacity and access. This incorporates all aspects of the communications infrastructure
including internal and external, mobile, public, private, cloud, intranet and data centers.
Current Environment
• Multiple data centers and 300+ office locations.
• Palo Alto Firewalls + Panorama, and FortiNet FortiGate Firewalls + FortiManager/FortiAnalyzer.
• Cisco Multi-Site Datacenter ACI/SDN.
• Cisco Nexus 9000 (ACI leaf/spine & standalone), Nexus 7000 (VDC), and Nexus 5000 switches.
• Cisco ASR multigigabit routers. Advanced IP traffic engineering via BGP & OSPF routing.
• Cisco ASA (for NAC-enabled remote-access VPN), ISE, and AnyConnect VPN.
• Cisco Enterprise Wireless Controllers with 900+ wireless-access-points.
• Site-to-Site VPN via FortiGate SDWAN and Palo Alto FWs.
• FortiNet FortiNAC for wired, wireless and RA-VPN network-access-control (NAC).
• Vivai Solutions Observer Apex, GigaStor, OMS and Analyzer.
• Cisco Unified Communications Manager, Unity Voice Mail, UCCX, ExpressWay and QoS.
• Cloud exchange peering with Amazon Web Services and Azure cloud computing platforms.
• NetScaler Load Balancers & Infoblox centralized DHCP.
Responsibilities
• L2/3 responsibility for enterprise I&O security strategy, architecture, implementation and
steady-state support.
• Functions as subject matter advisor for all aspects of firewall perimeter security.
• Produces and maintains documentation re: topologies, configuration and design.
• Assesses associated risks; specifies recovery routines and contingency procedures.
Formal Education & Certification
• Bachelor's degree in Computer Science or Information Systems and 6 years related work
experience or any equivalent combination.
• Certifications in Palo Alto, FortiGate, Cisco switching/routing and related security
technologies preferred.
Knowledge and Experience
• L2/3 architect-caliber skills in Palo Alto firewall solutions and the Palo Alto Panorama
management platform.
• L2/3 architect-caliber skills with FortiNet FortiGate firewalls and the FortiNet
FortiManager/FortiAnalyzer management platform.
• Proficiency with configuration and operational support of BGP routing on Palo Alto and
FortiNet firewall solutions. Troubleshooting capability in multi-platform BGP routing
environments, specifically Cisco, Palo Alto, FortiNet, AWS and Azure.
• Must be very comfortable with the technical elements of network security and design, to
include datacenter-caliber clustered-FW perimeter solutions, IPSec VPNs (S2S, ADVPN &
B2B), TCP/IP, IPS/IDS, CASB, VoIP, load balancers, routers and switches.
• Must be very comfortable with the technical elements of network security and design as
related to hybrid cloud environments, including AWS and Azure.
• MUST have packet capture skills using Wireshark or other tools for packet capture, decode &
analysis.
Personal Attributes
• Excellent written, oral, and communication skills.
• Ability to conduct and direct research into IT issues and products.
• Ability to present ideas in business-friendly and user-friendly language.
• Highly self-motivated, self-directed, and attentive to detail.
• Ability to effectively prioritize and execute tasks in a high-pressure environment.
Work Conditions
• Some travel may be required for meeting with stakeholders, network projects, etc..
• Ability to lift at least 50lbs for hardware equipment installations as needed.Work
Our benefits package includes:
About INSPYR Solutions
Technology is our focus and quality is our commitment. As a national expert in delivering flexible technology and talent solutions, we strategically align industry and technical expertise with our clients' business objectives and cultural needs. Our solutions are tailored to each client and include a wide variety of professional services, project, and talent solutions. By always striving for excellence and focusing on the human aspect of our business, we work seamlessly with our talent and clients to match the right solutions to the right opportunities. Learn more about us at inspyrsolutions.com.
INSPYR Solutions provides Equal Employment Opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, sex, national origin, age, disability, or genetics. In addition to federal law requirements, INSPYR Solutions complies with applicable state and local laws governing nondiscrimination in employment in every location in which the company has facilities.
#LI-GE1
Duration : 3 months Contract to Hire
Location : Coral Gables
Work Requirements: US Citizen, GC Holders or Authorized to Work in the US
Job Description
L2/L3 engineering capability as related to cybersecurity design/architecture covering data, voice and
cloud to support strategy and business requirements for perimeter security, compliance, resilience,
recovery, capacity and access. This incorporates all aspects of the communications infrastructure
including internal and external, mobile, public, private, cloud, intranet and data centers.
Current Environment
• Multiple data centers and 300+ office locations.
• Palo Alto Firewalls + Panorama, and FortiNet FortiGate Firewalls + FortiManager/FortiAnalyzer.
• Cisco Multi-Site Datacenter ACI/SDN.
• Cisco Nexus 9000 (ACI leaf/spine & standalone), Nexus 7000 (VDC), and Nexus 5000 switches.
• Cisco ASR multigigabit routers. Advanced IP traffic engineering via BGP & OSPF routing.
• Cisco ASA (for NAC-enabled remote-access VPN), ISE, and AnyConnect VPN.
• Cisco Enterprise Wireless Controllers with 900+ wireless-access-points.
• Site-to-Site VPN via FortiGate SDWAN and Palo Alto FWs.
• FortiNet FortiNAC for wired, wireless and RA-VPN network-access-control (NAC).
• Vivai Solutions Observer Apex, GigaStor, OMS and Analyzer.
• Cisco Unified Communications Manager, Unity Voice Mail, UCCX, ExpressWay and QoS.
• Cloud exchange peering with Amazon Web Services and Azure cloud computing platforms.
• NetScaler Load Balancers & Infoblox centralized DHCP.
Responsibilities
• L2/3 responsibility for enterprise I&O security strategy, architecture, implementation and
steady-state support.
• Functions as subject matter advisor for all aspects of firewall perimeter security.
• Produces and maintains documentation re: topologies, configuration and design.
• Assesses associated risks; specifies recovery routines and contingency procedures.
Formal Education & Certification
• Bachelor's degree in Computer Science or Information Systems and 6 years related work
experience or any equivalent combination.
• Certifications in Palo Alto, FortiGate, Cisco switching/routing and related security
technologies preferred.
Knowledge and Experience
• L2/3 architect-caliber skills in Palo Alto firewall solutions and the Palo Alto Panorama
management platform.
• L2/3 architect-caliber skills with FortiNet FortiGate firewalls and the FortiNet
FortiManager/FortiAnalyzer management platform.
• Proficiency with configuration and operational support of BGP routing on Palo Alto and
FortiNet firewall solutions. Troubleshooting capability in multi-platform BGP routing
environments, specifically Cisco, Palo Alto, FortiNet, AWS and Azure.
• Must be very comfortable with the technical elements of network security and design, to
include datacenter-caliber clustered-FW perimeter solutions, IPSec VPNs (S2S, ADVPN &
B2B), TCP/IP, IPS/IDS, CASB, VoIP, load balancers, routers and switches.
• Must be very comfortable with the technical elements of network security and design as
related to hybrid cloud environments, including AWS and Azure.
• MUST have packet capture skills using Wireshark or other tools for packet capture, decode &
analysis.
Personal Attributes
• Excellent written, oral, and communication skills.
• Ability to conduct and direct research into IT issues and products.
• Ability to present ideas in business-friendly and user-friendly language.
• Highly self-motivated, self-directed, and attentive to detail.
• Ability to effectively prioritize and execute tasks in a high-pressure environment.
Work Conditions
• Some travel may be required for meeting with stakeholders, network projects, etc..
• Ability to lift at least 50lbs for hardware equipment installations as needed.Work
Our benefits package includes:
- Comprehensive medical benefits
- Competitive pay
- 401(k) retirement plan
- ...and much more!
About INSPYR Solutions
Technology is our focus and quality is our commitment. As a national expert in delivering flexible technology and talent solutions, we strategically align industry and technical expertise with our clients' business objectives and cultural needs. Our solutions are tailored to each client and include a wide variety of professional services, project, and talent solutions. By always striving for excellence and focusing on the human aspect of our business, we work seamlessly with our talent and clients to match the right solutions to the right opportunities. Learn more about us at inspyrsolutions.com.
INSPYR Solutions provides Equal Employment Opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, sex, national origin, age, disability, or genetics. In addition to federal law requirements, INSPYR Solutions complies with applicable state and local laws governing nondiscrimination in employment in every location in which the company has facilities.
#LI-GE1
Source : INSPYR Solutions
