Cyber Security Engineer - Firewall

About the role

The Cyber Security Engineer will support a large Federal agency by configuring, deploying, and maintaining FortiGate firewalls and related security controls in accordance with NIST 800-53 standards.

Key responsibilities

• Configure, deploy, and maintain FortiGate firewalls, including policies, NAT, VIPs, and security rules.
• Set up IPsec and SSL VPNs for remote and site‑to‑site connectivity.
• Manage FortiManager for centralized administration and monitor events with FortiAnalyzer.
• Implement network segmentation using VLANs and security zones.
• Perform firewall rule reviews, troubleshoot connectivity issues, and automate tasks with Python or APIs.
• Develop documentation, security reports, and dashboards for compliance.

Required profile

• 7+ years of experience with a bachelor’s degree (or 9+ years total experience).
• Proficiency in network routing, switching, and scripting.
• Ability to work independently and in a team, with flexibility for after‑hours maintenance.
• Eligibility to obtain a Position of Public Trust from the Dept. of Interior.

Required skills

• FortiGate, FortiManager, FortiAnalyzer administration.
• Configuration of IPsec and SSL VPNs.
• Network segmentation (VLANs, security zones).
• NIST 800‑53 compliance.
• Python scripting and API automation.
• Network troubleshooting using packet captures, routing tables, and logs.
• Integration with RADIUS, LDAP, Active Directory, and MFA.