Sr Checkpoint Firewall Engineer, Progression

Overview Select how often (in days) to receive an alert: At Tampa Electric, dependable electricity starts with dedicated individuals whose talent, skill and passion drive our success. We’ve been lighting the way for West Central Florida for more than 125 years—and we’re just getting started. Join us and build a rewarding career with competitive pay, comprehensive benefits and a culture that supports your growth. Your potential finds its purpose at Tampa Electric. We proudly deliver 99.98% electric service reliability to nearly 860,000 customers across 2,000 square miles of Hillsborough County and parts of Polk, Pasco and Pinellas counties. Through innovation and strategic investments, we’re creating a cleaner, brighter energy future—while delivering exceptional service every step of the way. We reflect the communities we serve and foster a workplace where every employee feels welcomed, valued and engaged. Join our team of energy experts and help shape the future of power. Storm Duty Requirements Tampa Electric and its sister companies serve a role in providing critical services to our community during an emergency. Team members are required to participate in the response/recovery activities related to emergencies/disasters to maintain service to our Tampa Electric customers. Team members are required to work in their normal job duties or other assigned activities. Proper compensation will be made in accordance with the company's rules and procedures. Responding to storms will be considered a condition of employment. Tampa Electric is proud to be an Equal Opportunity Employer. To learn more, please click on link below: Title: Sr Checkpoint Firewall Engineer, Progression Company : Tampa Electric Company Location : Bearss Operations Center State and City : Florida - LUTZ Shift : 8 Hr. X 5 Days TITLE: Network & Systems Security Analyst, Progression PERFORMANCE COACH: Mgr Network Engineering & Cyber Security Operations COMPANY: Tampa Electric DEPARTMENT: High Performance Computing & BP Support Focus Areas Check Point experience in production (R82) Hands-on experience with Check Point Maestro (deployment, Security Group management, orchestration, scaling, and troubleshooting) Deep Layer 2 / Layer 3 networking and TCP/IP troubleshooting skills GAIA and Security management Server experience Proven experience designing and supporting VPN solutions Experience in high‑availability or large‑scale enterprise environments Note : This position can be hired at any level within the progression job family based on education and years of experience, but is ideally targeting Sr level (level 3). Position Concept The Network & Systems Security Analyst is responsible for planning/designing, implementing, and supporting new and existing network, server, storage infrastructure. This role ensures all network security controls (firewalls, web application firewalls [WAF], proxies, network segmentation, NAC, ACLs, etc.) are implemented and managed per corporate information security standards. Responsibilities include assessing enterprise assets and critical assets for secure configurations and maintaining regulations and standards such as NERC CIP, SOX, and PCI. Responsible for the design, planning, operation, maintenance, and support of the TECO and NMGC network infrastructure. This includes technologies such as route/switch, on‑premise LAN/WAN, IPAM, Wi‑Fi, ISP management, site‑to‑site VPNs, proxies, perimeter firewall management, DNS, Azure cloud environments, automation, NAC/user access, hyperconverged infrastructure, and overall network security. Partners with Telecommunication teams on circuits/links. Responsible for the NERC Cyber Infrastructure Protection and disaster recovery plans. Responsible for VoIP, SIP, DHCP, DNS, TCP/IP routing and routing protocols (OSPF, BGP), NAT, IPsec/SSL VPNs, GRE, route redistribution, traffic shaping, port‑level filtering, SD‑WAN, MPLS, and other related technologies. Responsible for the installation, configuration, and maintenance of WAN/LAN connectivity including core and campus switches, routers, firewalls, wireless access points, WAN scalers, and load balancers. Responsible for DNP over IP and serial SCADA communications between primary and backup control centers, power plants, solar sites, and substations. Responsible for Smart GRID communication hardware switches and routers between centers. Career Levels and Duties NETWORK & SYSTEMS SECURITY ANALYST I (LEVEL 1): Monitors and troubleshoots server, network, and security controls related problems; installs and configures hardware/software. Works under direct supervision. Primary Duties and Responsibilities Plan, design, and implement network, server, and storage infrastructure based on project requirements, capacity plans, and system support. (20%) Problem solving involves basic troubleshooting following the OSI model, making or calling for equipment repairs, and problem escalation. (20%) Detection and correction of work stoppages and/or errors through monitoring systems and configuration adjustments. (20%) Install and support network, server, and storage hardware and software. (10%) Participate in planning, designing, maintenance, testing and documentation of disaster recovery plans. (10%) Provide and apply security consulting and support for IT infrastructure across multiple platforms (Firewalls, proxies, WAFs, ACLs, NAC, OS, NetScaler, DDoS protection, other network devices). (10%) Provide third‑level technical support for security systems and authentication mechanisms. (10%) Qualifications Education Required: High School Diploma or GED Preferred : Bachelor’s degree in Computer Science, Engineering, Math, or equivalent IT discipline (e.g., MIS). Licenses/Certifications Required: Related network, system, operating system, or information security certifications (e.g., MCSA, MCSE, CCNA, CEH, GIAC, CISSP). Preferred: ITIL v3, CCNA/CCNP, MCSE, VCP, GIAC, CISSP Experience Level I and Level II requirements detailed per level below. Summary: substantial hands‑on experience in Windows, VMware, firewall support, DDoS protection, proxies, WAFs, NetScaler load balancers, and Cisco networking. See each level for specifics. Level I (I) : Minimum four (4) years of related hands‑on experience (or equivalent with education). See above for specifics. Level II (II) : Minimum six (6) years; access to project leadership and mentoring duties. See above for specifics. Level III (III) : Minimum eight (8) years; broader project leadership and architecture responsibilities. See above for specifics. Level IV (Lead) : Minimum ten (10) years; lead network analyst team and manage cross‑level mentorship. Experience notes : In lieu of some experience, degrees may substitute per policy. Knowledge/Skills/Abilities (KSA) Expert knowledge of network, server, and security controls infrastructure Thorough working knowledge of essential technologies: switching, routing, DNS/DHCP, Windows AD, VMware, VoIP, SAN, firewall support, DDoS protection, proxy, WAF, NetScaler, network segmentation, NAC, IDS/IPS, antivirus, cybersecurity best practices Strong analytical and communication skills; ability to explain complex topics to non‑technical audiences Regulatory compliance knowledge (NERC CIP, SOX, PCI) Working Conditions Normal working conditions with occasional extended hours during the week and weekends. Physical Demands Normal physical demands for office and operational environments. Must be able to lift 50 pounds and work on ladders for network access points. Additional Roles NETWORK & SYSTEMS SECURITY ANALYST II (LEVEL 2): Increased responsibilities in consulting on small project design; may serve as a project lead and mentor Level 1 Analysts. Works under general supervision. NETWORK & SYSTEMS SECURITY ANALYST III (LEVEL 3): Increased responsibilities; project leadership and mentorship across levels. NETWORK & SYSTEMS SECURITY ARCHITECT (LEVEL 4): Lead larger projects; mentor all levels; general direction. Notes on Certifications and Training Leadership/management certifications may be considered in lieu of some professional certifications. Additional certifications may be required within one year of hire for some levels (as applicable).

#LI-SC1

Teco offers a competitive Benefits package!! Competitive Salary, 401k with company matching, Pension plan, Paid time off, Paid holiday time, Medical/Dental Coverage, Tuition Assistance, EAP, Wellness Programs, On-site Fitness Centers, Bonus Plan and more! #J-18808-Ljbffr TECO Energy Inc.