[Hiring] Cyber Security Engineer @PUNCH Cyber Analytics Group

Role Description

The selected candidate will support a large Federal agency. Candidates must be located in the United States.

• Apply configurations on perimeter routers, firewalls, and security controls IAW NIST 800-53
• Provide recommendations regarding DOIs perimeter UTM devices IAW NIST 800-53 and industry best practices for Fortigate products
• Configure, deploy, and maintain FortiGate firewalls
• Create and manage firewall policies, NAT, VIPs, and security rules
• Configure IPsec and SSL VPNs for remote and site-to-site connectivity
• Manage FortiManager for centralized firewall administration
• Monitor security events and logs using FortiAnalyzer
• Implement network segmentation using VLANs and security zones
• Troubleshoot firewall, routing, VPN, and connectivity issues
• Perform firewall rule reviews and remove obsolete or overly permissive rules
• Develop and maintain firewall/network security documentation
• Create security reports and dashboards for management or compliance requirements
• Configure authentication integrations such as RADIUS, LDAP, Active Directory, and MFA
• Perform network troubleshooting using packet captures, routing tables, logs, and FortiGate diagnostic commands
• Participate in security architecture and network design projects
• Test firewall policies and security controls after configuration changes
• Automate repetitive security/network tasks using Python, APIs, or FortiManager automation

Qualifications

• 7 years of experience with a bachelor's degree or 9 years of total experience
• Proficient in network, routing, and switching
• Proficient in network scripting
• Proficient with OSI Models Layers 1-7 and network troubleshooting
• Ability to work in both an individual and team environment
• Flexibility to support after hours maintenance activities
• Must be able to obtain a Position of Public Trust from Dept. of Interior

Preferred Qualifications

• Fortinet NSE 4 Certified and/or Fortinet Certified Professional (FCP)
• Next Generation Firewall Experience, preferably Fortinet
• Experience supporting Incident Response (IR) Teams