Firewall Engineer

Perimeter Security / Firewall Engineer

Contract: 12 Months

Location: Remote - EST/CST Time Zones Only

Visa: Open

Work Schedule: Must be available for occasional nights and weekends during implementation activities


Fortinet & Check Point Firewalls, Perimeter Security/DMZ Engineering, Firewall Design & Implementation, FortiManager/FortiAnalyzer, IDS/IPS (TippingPoint), Cisco Routing/Switching, Network Security, HLD/LLD Documentation, Release & Deployment Management, Technical Troubleshooting, Linux/UNIX, Python, Strong Communication.

Job Summary


We are seeking a highly experienced Perimeter Security / Firewall Engineer with strong hands-on expertise in Fortinet and Check Point firewall platforms to support enterprise release, deployment, and network security initiatives.


The ideal candidate will be a subject matter expert in perimeter security and DMZ environments , with experience designing, engineering, implementing, and troubleshooting firewall solutions in large enterprise environments. This role requires someone who can independently assess technical requests, develop implementation plans, execute changes, and ensure minimal or zero impact to production networks.


Candidates should have focused expertise in firewall and perimeter security engineering rather than broad exposure across numerous technologies.

Key Responsibilities

• Lead release and deployment activities for perimeter security and firewall solutions.
• Perform technical assessments of complex firewall and network security requests.
• Review proposed solutions and validate designs before implementation.
• Develop detailed implementation plans, including:
  • Pre-implementation validation
  • Post-implementation validation
  • UAT acceptance criteria
  • Back-out/rollback procedures
• Translate high-level designs into detailed implementation procedures based on established standards and runbooks.
• Build, configure, operate, and troubleshoot enterprise firewall platforms, particularly Fortinet and Check Point .
• Perform quality assurance reviews before implementations to ensure engineering standards and risk controls are met.
• Identify technical risks, dependencies, and potential production impacts before changes are implemented.
• Collaborate with Design Engineering, Perimeter Security Architecture, and Engineering teams.
• Participate in technical troubleshooting and lead firewall/network security triage activities.
• Maintain implementation documentation, asset records, inventories, databases, and other project close-out documentation.
• Support adoption of new perimeter security technologies, automation, and process improvements.
• Identify opportunities to improve service delivery, operational processes, and implementation quality.
• Support scheduled implementation activities during nights and weekends when required.

Required Qualifications

• Strong hands-on experience building, configuring, operating, and troubleshooting Fortinet and Check Point firewalls .
• In-depth engineering experience with enterprise perimeter security solutions .
• Strong experience with DMZ network environments , security policies, firewall topology, and perimeter infrastructure.
• Experience designing, engineering, and delivering firewall/security solutions for enterprise applications.
• Experience developing and maintaining High-Level Design (HLD) and Low-Level Design (LLD) diagrams and documentation.
• Experience with release, deployment, and change implementation processes.
• Strong understanding of pre- and post-implementation validation procedures and rollback planning.
• Strong analytical, problem-solving, and troubleshooting skills.
• Ability to assess technical solutions and identify risks before implementation.
• Ability to work independently while following established standards, processes, and runbooks.
• Strong communication skills with the ability to communicate effectively with engineers, business stakeholders, and senior management.
• Strong collaboration and leadership skills during technical troubleshooting and implementation activities.
• Ability to work nights and weekends when required.

Preferred Qualifications

• Experience with FortiManager and FortiAnalyzer .
• Experience with Check Point Provider-1 , SmartView Manager, and SmartView Tracker.
• Experience with IDS/IPS technologies , including TippingPoint and Fortinet.
• Strong knowledge of Cisco routing and switching , including routing protocols, multicast, and LAN protocols.
• Strong understanding of DMZ architecture, including:
  • Firewalls
  • Security policies
  • L2/L3 switches
  • Routers
  • Network topology
• Experience supporting network applications and protocols such as SSH, FTP, DNS, NTP, and Anycast .
• Programming/scripting experience with Python, Perl, Shell, Golang, C, or C++ .
• Administrator-level experience with Linux/UNIX environments.
• Previous experience supporting banking/financial services environments is highly preferred.
• Bachelor's degree or equivalent experience.