Network Security Architect at APN Software Services, Inc.

Title: Firewall Architect

Req #: 755483

Location: 1898 Nick Nuccio Parkway, Tampa, FL 33619

Duration: 12 Months   

Overview -

The ideal candidate in our eyes needs to be someone with expansive firewall experience in IT infrastructure and OT.

• Extensive experience designing, implementing, and managing firewall architectures within IT and OT environments, ensuring seamless integration of critical systems such as SCADA, ADMS, EMS, OMS, and DMS. Skilled in deploying and maintaining secure communication protocols, including Modbus, DNP3, ICCP, and OSM, to support operational technology networks. Demonstrated expertise in supporting compliance with NERC regulatory requirements, particularly in environments leveraging smart grid technologies.
  Adept at collaborating with cross-functional teams to ensure the secure operation of critical infrastructure, facilitating interoperability between IT and OT systems while minimizing cybersecurity risks.
  Proven ability to design tailored security solutions for complex systems, enhancing the reliability and protection of data flow across diverse platforms in both enterprise IT and operational technology networks.

**MUST BE ONSITE**

Qualifications:

1. Education:

o   Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field.

o   Equivalent work experience of 10+ years in lieu of a degree.

2. Certifications (Preferred/Required):

o   Certified Information Systems Security Professional (CISSP)

o   Palo Alto Networks Certified Network Security Engineer (PCNSE)

o   Cisco Certified Network Professional Security (CCNP Security)

o   Check Point Certified Security Expert (CCSE)

o   Fortinet Network Security Expert (NSE) certifications

3. Experience:

o   7+ years of experience in network security, firewall architecture, and design.

o   Hands-on experience with enterprise firewall technologies such as Palo Alto Networks, Cisco Firepower, Check Point, Fortinet, or similar.

o   Knowledge of network protocols, including TCP/IP, DNS, DHCP, and routing protocols (e.g., OSPF, BGP).

o   Experience with firewall rule management and optimization.

o   Familiarity with SD-WAN, VPNs, and cloud-based firewall solutions (e.g., Azure Firewall, AWS Security Groups).

4. Technical Skills:

o   Proficient in designing, implementing, and managing firewalls in complex environments.

o   Deep understanding of firewall rule lifecycle management, segmentation, and policy enforcement.

o   Knowledge of intrusion detection/prevention systems (IDS/IPS) and threat intelligence.

o   Scripting and automation experience using Python, Ansible, or similar tools.

o   Understanding of compliance standards (e.g., PCI DSS, NERC CIP, ISO 27001).

5. Soft Skills:

o   Strong analytical and problem-solving skills.

o   Excellent communication and documentation abilities.

o   Team collaboration and leadership skills for cross-functional projects.

Job Duties:

1. Design and Architecture:

• Develop and maintain firewall architecture standards for on-premises, cloud, and hybrid environments.
• Design secure network segmentation strategies to minimize risk and limit attack surfaces.
• Collaborate with stakeholders to create tailored firewall solutions aligned with business objectives.

2. Implementation and Management:

• Oversee the deployment, configuration, and maintenance of enterprise firewalls.
• Manage firewall policies, ensuring they are optimized for security and performance.
• Implement and monitor access control rules to enforce least privilege principles.

3. Security and Risk Management:

• Conduct firewall audits to ensure compliance with internal policies and regulatory requirements.
• Analyze network traffic and identify potential vulnerabilities or misconfigurations.
• Implement intrusion prevention systems and other measures to protect against threats.

4. Troubleshooting and Support:

• Investigate and resolve firewall-related issues, providing advanced support to operations teams.
• Monitor performance metrics and optimize firewall configurations as needed.
• Serve as the subject matter expert (SME) for firewall technologies during incident response.

5. Documentation and Reporting:

• Maintain detailed documentation of firewall configurations, rule sets, and changes.
• Generate reports on firewall health, performance, and security incidents for stakeholders.
• Provide technical guidance and training to IT teams and end-users.

6. Innovation and Continuous Improvement:

• Stay current with emerging firewall technologies and threat landscapes.
• Evaluate and recommend new tools or solutions to enhance the organization’s network security posture.
• Develop and implement automation for routine firewall management tasks.

7. Collaboration:

• Partner with network, security, and application teams to align firewall solutions with broader IT strategies.
• Work with compliance teams to ensure adherence to standards and regulations.
• Act as a technical advisor for cross-functional projects involving network security.

Key Outcomes:

• Secure and optimized firewall infrastructure.
• Proactive identification and mitigation of threats.
• Compliance with regulatory and industry standards.
• Efficient rule management and reduced operational overhead through automation.