CYBER SECURITY FIREWALL Support 2
Duties
- Tasks performed by a contractor include: Build, implement, maintain, and support Next-Generation Firewalls (NGFW) (System Administration).
- Configure, maintain and review security policies on Next-Generation Firewalls (System Configuration)
- Central system administration of NGFWs to ensure continuing functionality and availability.
- Initial systems installation (software, application and threat signatures) and configuration
- Adding system to central management capability
- Assign initial template and device group settings
- Configure date/time/DNS settings
- Configure high-availability settings
- Update system software/signatures during pre-defined maintenance windows
- Implementation and verification of firewall rulesets/policies
- Adaptation of firewall rulesets/policies Adaptation of email attachment types
- Configuration of additional firewall rulesets/policies
- Development of SOPs and other documentation for repetitive activities
- Produce and maintain comprehensive documentation for all implemented systems
- Review and update security documentation
- Technical support in troubleshooting infrastructure and operational issues
- Collaborate with other teams for a successful resolution;
- Provide technical support and guidance by answering end-user requests to identify issues in secure cross-domain data exchange
- Support the team by routinely reviewing the tickets queue to ensure 4 hours response time for normal events and 1 hour response time for high/critical events
- Provide multi-channel support (phone, email, internal chat)
- Develop and maintain a repository of scrips to automate recurring systems administration activities.
- Ensure correct logging and log forwarding configurations to support availability of system events in central log database.
- Provide pro-active system administration and maintenance to prevent system failures
- Escalate critical events to appropriate channels within 4 hours
- Support system upgrading/patching during established maintenance windows
- Update the configuration of firewall rules/policies based on changing requirements.
- The primary purpose of Central configuration of firewalls is to ensure that all configuration requests are properly prepared (investigated, evaluated and risk assessed) for consideration, documented and implemented.
- Document the setup, configuration, installation specifics into the GSS documentation repository
- Attend internal meetings within GSS team to provide hands-on demonstration and familiarization of firewall systems
Requirement
- Bachelor's degree in Computer Science, Information Technology, or related field Or equivalent experience.
- Minimum qualifications required Official firewall certification (such as PCNSA,)
- Official Network Management certification (such as Network )
- Official Service Management certification (such as ITIL Foundation)
- 2 years of experience in IT security, with a focus on Security Tools Management in large organisations.
- More than 2 years of experience in the following areas: Palo Alto Networks Firewalls and Palo Alto Networks Panorama for Enterprise level deployments
- More than 2 years of experience in the following areas: Firewall installation and management of other vendors
- More than 2 years of experience in the following areas: Scripting/Automation (Bash, Python, Ansible)
- More than 2 years of experience in the following areas: System monitoring and troubleshooting Experience with network protocols and traffic analysis
- More than 2 years of experience in the following areas: Ability to troubleshoot complex network security issues
- More than 2 years of experience in the following areas: LAN/WAN networking including protocol network architecture
- More than 2 years of experience in the following areas: TCP/IP protocols and services
- Boundary Protection Components deployed within and on the edge of NATO networks.
- GSS contractor is expected to be a knowledgeable firewall administrator and should have sufficient knowledge in Networks, and Cyber Security Tools.
- Demonstrable experience of analysing and interpreting system, security and application logs in order to diagnose faults and spot abnormal behaviours.
- Good engineering skills including programming
- Profound communication abilities, both written and verbal, with the ability to clearly and successfully articulate complex issues to a variety of audiences and teams
- The contractor will be required to provide the service 100% on-site at NCIA Mons, Belgium.
- Required Security Clearance: NATO Cosmic Top Secret
Preferences
- Understanding of Information Security Practices; relating to the Confidentiality, Integrity and Availability of information (CIA triad.)
- Possession of Industry leading certification in the area of Cybersecurity such as CISSP, CISM, CISA, GSNA, SANS GIAC
- In addition to the above, it is desirable for the contracted individual to have working experience and knowledge in the following areas: Experience in working with NATO.
- In addition to the above, it is desirable for the contracted individual to have working experience and knowledge in the following areas: Experience of working with NATO Communications and Information Agency.
- In addition to the above, it is desirable for the contracted individual to have working experience and knowledge in the following areas: Experience of working with national Defence or Government entities.
- Previous work in an international environment comprising both military and civilian elements.