Note: The job is a remote job and is open to candidates in USA. Dice is recruiting for a remote Firewall Engineer to support an enterprise-scale Managed Network Services environment for a government agency. The role provides Tier 3 troubleshooting, operational support, policy optimization, VPN and routing support, and change management for Cisco Secure Firepower firewall infrastructure.
Responsibilities
- Serve as a Tier 3 escalation point for complex firewall and network security issues
- Conduct advanced troubleshooting and root cause analysis for Cisco Secure Firepower Firewall incidents
- Support daily firewall operations using Cisco Secure Firewall Management Center (FMC), including monitoring health, performance, and traffic flows
- Analyze and optimize firewall access control and security policies
- Support routing protocols within secure network environments
- Troubleshoot and support VPN technologies, including site-to-site and remote access VPNs
- Participate in formal change management processes, including documentation, peer reviews, and scheduled implementations
- Execute authorized changes during designated after-hours change windows
- Engage in team-based on-call rotations to support after-hours and emergency incidents
- Collaborate with engineering and operational teams to meet Managed Network Services contractual obligations
Skills
- Extensive hands-on experience with Cisco Secure Firepower Firewalls
- Strong troubleshooting skills, including traffic flow analysis, NAT/PAT configuration, and inspection of security policies
- Operational expertise in Cisco Secure Firewall Management Center (FMC)
- Proven experience troubleshooting VPN technologies such as Cisco AnyConnect
- Deep understanding of OSI Layers 1–4, with knowledge extending to Layers 5–7
- Ability to analyze and support security intelligence policies and access rules
- Experience working in large-scale enterprise or government environments
- Effective verbal and written communication skills for technical documentation and team collaboration
- Availability to work mostly remotely, including participation in after-hours maintenance and on-call rotations
- Candidates must be legally authorized to work in the United States without employer sponsorship, now or in the future
- Familiarity with Cisco Catalyst SD-WAN is advantageous
Benefits
- This position is based in remote work and can be performed from an approved location.
Company Overview