C004000, Firewall Engineer

Duties:

• Build, implement, maintain, and support Next Generation Firewalls (System Administration).
• Configure, maintain, and review security policies and additional Next Generation Firewall capabilities (System Configuration).
• Central administration and configuration of Firewalls to ensure ongoing functionality and availability.
• Implement and verify firewall policies/rulesets.
• Provide technical support for troubleshooting infrastructure and operational issues, collaborating with other teams for resolution.
• Collaborate with Infrastructure Management and Cyber Security teams.
• Assist Incident Handlers in identifying and remediating security incidents.
• Review security documentation and provide technical advice when requested.
• Perform other related duties as required.

Requirements:

• Over 5 years of extensive experience in:
  • Palo Alto Networks Firewalls and Panorama for Enterprise-level deployments.
  • Firewall installation and management of other vendors.
  • Scripting (Bash, Python, Ansible).
  • Network protocols and traffic analysis.
  • Troubleshooting complex network security issues.
  • LAN/WAN networking, network protocol architecture, and security vulnerabilities of operating systems and applications.
  • TCP/IP protocols and services.
  • *nix-based Operating Systems.
• Strong written and verbal communication skills, with the ability to articulate complex issues clearly to various teams and audiences.

Desirable Skills:

• Knowledge of Information Security Practices related to the Confidentiality, Integrity, and Availability (CIA triad).
• Previous experience working in international environments with both military and civilian teams.
• Industry certifications in Cybersecurity (e.g., CISSP, CISM, MCSE/S, CISA, GSNA, SANS GIAC).

Additional Information:

• NATO Grade: G15.
• Full-time on-site role at the NCI Agency offices in Mons, Belgium, with the possibility of remote work at times.
• Occasional out-of-hours work and on-call support.
• Limited travel to Brussels, The Hague, or Brunssum (max 1 x per month).
• Required security clearance: NATO Cosmic Top Secret