Security Firewall Administrator

Location: Chicago, IL — Onsite Only
Candidates must be able to work onsite at Chicago-area data center locations, including O’Hare and Midway. This is not a remote position.

What You’ll Do

• Configure, administer, maintain, and troubleshoot Palo Alto, Fortinet, Cisco, and related enterprise network security platforms.
• Manage firewall policies, ACLs, NAT/PAT, segmentation, logging, VPN connectivity, routing, switching, and LAN security controls.
• Troubleshoot enterprise network and firewall issues using ICMP, DNS, packet analysis, logs, command-line tools, and monitoring platforms.
• Configure and support routing protocols including OSPF, BGP, static routing, and related enterprise network services.
• Configure and troubleshoot TCP/IP, IP subnetting, spanning-tree protocols, VLANs, trunking, tunneling, vPCs, switch stacks, and VSS.
• Support IPsec VPN configuration, troubleshooting, and connectivity.
• Perform IOS upgrades, password recovery, and related network maintenance activities.
• Support Infoblox and DNS architecture where applicable.
• Monitor network security environments using tools such as Panorama, FortiManager, Cisco DNA Center, Cisco Prime, Cisco ISE, SolarWinds, or similar platforms.
• Support incident response, outage troubleshooting, service restoration, and escalation activities.
• Maintain accurate incident, service request, and change-management documentation in ServiceNow.
• Develop implementation plans, test plans, contingency plans, backout plans, firewall change documentation, network diagrams, and operational procedures.
• Coordinate work with project managers, technical leads, vendors, client stakeholders, and internal infrastructure teams.
• Contribute to consistent change-management, documentation, security, and operational procedures.
• Perform other network and security-related activities as assigned.

What We’re Looking For

• 5+ years of enterprise network engineering, firewall administration, or network security operations experience.
• Strong hands-on experience administering and troubleshooting enterprise firewall and network environments.
• Palo Alto PCCET certification or equivalent experience.
• Fortinet NSE 1–3 or higher, or equivalent experience.
• Strong understanding of firewall rules, ACLs, NAT/PAT, network segmentation, logging, and security policy enforcement.
• Hands-on knowledge of TCP/IP, IP subnetting, routing, switching, VLANs, trunking, spanning tree, and enterprise network architecture.
• Experience configuring and troubleshooting OSPF, BGP, static routing, and related network protocols.
• Experience with IPsec VPN technologies.
• Strong incident-management, troubleshooting, escalation, and change-control discipline.
• Experience using ServiceNow or a similar enterprise ticketing and change-management platform.
• Strong Microsoft Visio or network diagramming skills.
• Excellent customer service, written communication, verbal communication, documentation, and problem-solving skills.
• Ability to work effectively across client, vendor, technical, and management teams.

Preferred Qualifications

• Cisco CCNA or CCNP.
• Additional Palo Alto, Fortinet, Cisco, or network security certifications.
• Experience with Panorama, FortiManager, Cisco DNA Center, Cisco Prime, Cisco ISE, SolarWinds, or similar enterprise management platforms.
• Experience with Infoblox and DNS architecture.
• College degree in information technology, cybersecurity, networking, computer science, or a related field.
• Experience supporting highly regulated, mission-critical, or airport technology environments.

Additional Requirements

• Ability to work onsite at Chicago O’Hare and Chicago Midway airports as the standard work arrangement.
• Must be able to pass a TSA background check.
• Valid Driver’s License or State ID required.
• Ability to support incident response, maintenance windows, and other operational requirements as needed.

Job Details

Pay: $130,000–$150,000 annually, negotiable, plus benefits

Location: Chicago, IL – City of Chicago Airports

Work Arrangement: Onsite; this is not a remote position.