Cybersecurity Engineer

Network Security Engineer – Firewall Specialist

Duration: 6 Months Contract-to-Hire (looking for W2 Candidates only)

Location: Remote

Shifts: 1st Shift: 6 AM – 2 PM EST (Mon–Fri) 3rd Shift: 10 PM – 6 AM EST (Sun night–Fri morning)

About the Role

As part of Capital One's post-merger network security initiatives, our team is enhancing firewall, web proxy, and network infrastructure security. We are seeking a motivated Network Security Engineer with strong Cisco ASA firewall and secure web gateway experience to manage and troubleshoot security infrastructure, handle incident response, and collaborate with internal and external stakeholders. You will work in a fast-paced environment, triaging tickets, resolving outages, and participating in network migrations. While the focus is on firewall and proxy administration, there's an opportunity to contribute to automation, AWS projects, and other network security initiatives.

Key Responsibilities

• Manage & Troubleshoot: Cisco ASA firewalls (Firepower experience a plus), secure gateways, and web proxy solutions (Zscaler, Netskope, Broadcom, etc.).
• Incident Response: Handle outage calls, investigate firewall/proxy issues, and resolve network security incidents.
• Infrastructure Migration: Support IP and network migration projects into secure environments.
• Collaboration: Work with customers, application owners, and internal teams to resolve incidents and manage change requests.
• Documentation: Maintain detailed network configuration, troubleshooting, and resolution records.
• Automation (Optional): Support automation efforts using Python, Ansible, AWS, or Splunk.

Required Qualifications

• 3–5 years' experience in network security engineering roles, layer 7 firewall
• Strong Cisco ASA firewall administration skills
• Web proxy/secure gateway experience
• AWS certifications or hands-on AWS experience
• Python automation scripting experience
• Solid networking background (routing, switching, TCP/IP troubleshooting)
• Familiarity with PCI compliance requirements

Top Skills (in order of importance)

1. Firewall Expertise – Cisco ASA (application-centric firewall experience a plus)
2. Secure Web Gateway / Web Proxy Management – Zscaler, Netskope, Broadcom SWG, etc.
3. Networking Troubleshooting – Routing, switching, and network diagnostics
4. Automation Skills – Python or Ansible scripting
5. AWS Experience – Networking and security within AWS environments

Preferred Qualifications

• Experience with Firepower, Cisco AnyConnect, and Palo Alto URL filtering
• Splunk administration or log analysis
• Relevant certifications: CCNA, CCNP, Security+, Network+, AWS Certified Solutions Architect/Cloud Practitioner, vendor-specific firewall/proxy certs (Fortinet, Palo Alto, etc.)

Shift Details

• First Shift: Collaborate with European teams, engage with application owners during business hours, handle incoming tickets and change requests.
• Third Shift: Execute nightly change windows, validate deployments, troubleshoot post-change issues, handle firewall/proxy tickets.
• Candidate shift will be determined during the interview process based on location and preference.

Interview Process

• 2 Rounds (Video) – Combination of personality/culture fit and technical deep dive.
• May include whiteboard exercises and/or hands-on problem-solving scenarios.