Firewall Implementation Engineer

We are seeking mid-to-senior-level, hands-on implementation engineers , not candidates whose experience is primarily architecture, monitoring, ticket escalation, or operational support.

Ideal candidates should have:

• Approximately 5+ years of hands-on network engineering experience , preferably supporting a large, complex, 24x7 enterprise environment.
• Experience leading end-to-end network deployments , including:
• Greenfield site implementations
• Legacy-site modernization and architecture conversions
• Mergers and acquisitions integration
• Application and vendor connectivity deployments
• Subject matter expertise within their assigned technical area.
• Strong enterprise troubleshooting skills, including:
• Packet captures and protocol analysis
• Packet brokers and network visibility tools
• Root-cause analysis
• Application connectivity troubleshooting
• Working knowledge of:
• DHCP and DNS
• RADIUS and TACACS+
• LDAP and Active Directory
• Network access control and authentication services
• Ability to work directly with customers, application teams, vendors, security teams, architects, and other infrastructure teams.
• Experience working within formal change-management and documentation processes.
• Ability to create implementation plans, network diagrams, configuration documentation, operating procedures, and operational handoffs.
• Clear written and verbal English communication skills.
• Healthcare or similarly complex, highly regulated enterprise experience is preferred.

Firewall Implementation Engineer

Primary Focus

• Build firewall services for new sites and enterprise initiatives.
• Convert legacy firewall environments to current architecture and standards.
• Implement connectivity for applications, vendors, medical systems, and business-to-business integrations.
• Maintain and modernize enterprise firewall architecture.
• Lead implementation, troubleshooting, validation, documentation, and operational handoff.

Must-Have Experience

• Hands-on implementation and troubleshooting experience with multiple enterprise firewall and security platforms, including:
• Palo Alto Networks
• Cisco Firepower Threat Defense, or FTD
• Cisco Adaptive Security Appliance, or ASA
• Zscaler Internet Access, or ZIA
• Zscaler Private Access, or ZPA
• Zscaler Zero Trust Branch, or ZTB
• Enterprise firewall policy administration, including:
• Security policies
• Network and application objects
• Network Address Translation
• Routing
• Logging and monitoring
• Software upgrades
• Rule auditing and remediation
• Strong understanding of:
• Site-to-site and business-to-business VPNs
• Remote-access VPN services
• Application traffic flows
• Segmentation and security zones
• High-availability firewall configurations
• Ability to troubleshoot complex application connectivity issues across firewalls, proxies, VPNs, and network infrastructure.