Cyber Security Engineer - Firewall

About Us:

PUNCH Cyber Analytics Group (PUNCH) is a Virginia-based, small business founded in 2012 operating as a cohesive team that incorporates the sum of our group’s diverse skills, talents, and resources toward our collective passion: advancing data analytics to impact cyber operations. PUNCH is a two-time Inc. Magazine ‘Best Workplaces’ awardee offering unique benefits and personal touches to provide a positive work-life experience for our team. PUNCH brings unique qualifications, resources, and past-performance that make us suitable to address the goals of our diverse customer-base. Further, we have past and current experience supporting cyber operations and cyber ML-based research, with well over 100 years of collective experience from our collaborative, multi-disciplinary team. 

Responsibilities

The selected candidate will support a large Federal agency.  Candidates must be located in the United States.  

• Apply configurations on perimeter routers, firewalls, and security controls IAW NIST 800-53
• Provide recommendations regarding DOIs perimeter UTM devices IAW NIST 800-53 and industry best practices for Fortigate products

• Configure, deploy, and maintain FortiGate firewalls.
• Create and manage firewall policies, NAT, VIPs, and security rules.
• Configure IPsec and SSL VPNs for remote and site-to-site connectivity.
• Manage FortiManager for centralized firewall administration.
• Monitor security events and logs using FortiAnalyzer.
• Implement network segmentation using VLANs and security zones.
• Troubleshoot firewall, routing, VPN, and connectivity issues.
• Perform firewall rule reviews and remove obsolete or overly permissive rules.
• Develop and maintain firewall/network security documentation.
• Create security reports and dashboards for management or compliance requirements.
• Configure authentication integrations such as RADIUS, LDAP, Active Directory, and MFA.
• Perform network troubleshooting using packet captures, routing tables, logs, and FortiGate diagnostic commands.
• Participate in security architecture and network design projects.
• Test firewall policies and security controls after configuration changes.
• Automate repetitive security/network tasks using Python, APIs, or FortiManager automation.

Minimum Qualifications:

To be considered for this position, you must minimally meet the knowledge, skills, and abilities listed below:

• 7 years of experience with a bachelor’s degree or 9 years of total experience
• Proficient in network, routing, and switching.
• Proficient in network scripting
• Proficient with OSI Models Layers 1-7 and network troubleshooting.
• Ability to work in both an individual and team environment
• Flexibility to support after hours maintenance activities
• Must be able to obtain a Position of Public Trust from Dept. of Interior

Preferred Qualifications:

Candidates with these desired skills will be given preferential consideration:

• Fortinet NSE 4 Certified and/or Fortinet Certified Professional (FCP)
• Next Generation Firewall Experience, preferably Fortinet.
• Experience support Incident Response (IR) Teams