Security Engineer

Orange Cyber Defense Mid-Level Network Security Engineer

Orange Cyber defense is seeking a highly motivated, customer-oriented, Mid-Level Network Security Engineer to join our team. The engineer will act as a subject matter expert for the customer's firewall/VPN/loadbalancer and other network related technologies. The engineer will maintain firewall operations and document the current environment. The engineer will also incorporate change management into all processes and procedures.

Responsibilities include:

• Troubleshoot and resolve critical security incidents related to firewall platforms (Fortinet FortiGate, Palo Alto Networks NGFW, Check Point, Cisco ASA), SSL/IPSec VPNs, DNS/IPAM systems (Infoblox), and secure remote access (Ivanti Connect Secure, Zscaler ZIA/ZPA).
• Perform deep-dive diagnostics for routing issues involving Border Gateway Protocol (BGP), policy-based routing, and Software-Defined WAN (SD-WAN) overlays.
• Coordinate with Engineering, Planning, Customer Configuration, and VPN (Virtual Private Network) teams to address network design, capacity, or service-related problems.
• Engage external vendors (Fortinet, Palo Alto Networks, Check Point) to resolve hardware failures and software defects.
• Support internal stakeholders in preparing RCA (Root Cause Analysis), TIR (Technical Incident Report), and SIP (Service Improvement Plan) documentation for complex issues.
• Perform Web Application Firewall (WAF) tuning and policy enforcement using FortiWeb, addressing threats like SQL injection and cross-site scripting in compliance with OWASP Top 10 standards.
• Configure and centrally manage firewalls through FortiManager, Panorama, and Check Point SmartConsole, ensuring consistency and audit-readiness across customer environments.
• Implement and validate security features and upgrades, including:
• FortiAnalyzer for log correlation and event analysis.
• Palo Alto Panorama templates for large-scale policy deployment.
• GlobalProtect for secure user access via SAML/LDAP integrations.
• Support service introduction projects by validating new hardware/software features, documenting operational acceptance criteria, and performing pilot deployments.
• Monitor firewall and routing performance using vendor tools and third-party telemetry; develop improvement plans in collaboration with Engineering teams.

Assist in the execution of critical changes, such as SSL decryption policy deployment, advanced NAT configurations, SD-WAN path monitoring, and high availability failover validation.

Requirements: Bachelor's degree in computer science, Information Systems, or Engineering followed by 5 years of experience in networking and/or security support roles. Experience must include:

• 5 years of experience with IP, MPLS (Multiprotocol Label Switching) and Core enterprise networks.
• 5 years of experience troubleshooting Layer 3 routing protocols (OSPF, BGP), packet capture analysis, and VPN tunnel diagnostics.
• 3 years of hands-on experience with FortiGate, FortiWeb, FortiManager, FortiAnalyzer, Panorama, Palo Alto NGFW, Check Point, Cisco ASA, Infoblox, Zscaler, and Ivanti SSL VPN platforms.
• 3 years of experience securing AWS, FortiGate, firewalls, configuring VPCs, Security Groups, NACLs, and IAM (Identity and Access Management) policies.
• 3 years of experience with SIEM (Security Information and Event Management) integration, syslog analysis, and log forwarding.

Telework: Hybrid position; 2 days per week remote.

Location: 100 Galleria Parkway, Suite 300, Atlanta, GA, 30339