Job description

The rate is $70 to $80 per hour We are seeking a highly skilled and analytical Firewall Security Automation Engineer to join our growing cybersecurity team. This specialized role is crucial for maintaining and enhancing our network security posture through meticulous firewall policy analysis, reporting, and automation. You will primarily leverage industry-leading tools like Tufin and Palo Alto Networks firewalls to ensure optimal security, efficiency, and compliance. Key Responsibilities: • Firewall Rule Analysis: Conduct in-depth analysis of complex firewall rule sets across our diverse network environment to identify inefficiencies, potential security risks, and compliance deviations. • Tufin Reporting: Develop, generate, and maintain comprehensive security policy reports and dashboards within the Tufin Orchestration Suite, providing actionable insights into firewall configurations and traffic flows. • Automation Development: Design, develop, and implement automation scripts and workflows to streamline firewall policy change auditing, ensuring accuracy, consistency, and continuous compliance. • Policy Optimization: Collaborate with security architects and network teams to optimize existing firewall policies, reducing the attack surface and enhancing overall security posture. • Compliance & Audit Support: Assist in preparing for and responding to security audits by generating required documentation and demonstrating policy adherence through Tufin. • Problem Solving: Provide expert analysis and recommendations for troubleshooting firewall policy-related issues. Required Qualifications: • Proven experience in a Network Security or Cybersecurity role. • Must have hands-on experience with Palo Alto Networks firewalls. (PCNSE certification is a strong plus). • Demonstrable proficiency with the Tufin Orchestration Suite for security policy management, analysis, and automation. • Experience with scripting and automation concepts/tools (e.g., Python, PowerShell) relevant to security tasks and API integration. • Solid understanding of firewall concepts, network segmentation principles, and general security best practices. • Familiarity with the security policy lifecycle, from request to audit and optimization. • Crucially, this role does NOT involve core networking implementation, such as routing, switching, or direct WAN/LAN configuration. Preferred Qualifications (Nice-to-Haves): • Experience with Check Point firewalls is a significant advantage. • Knowledge of other security policy management or orchestration tools. • Familiarity with cloud security principles (Azure, AWS, GCP) as they relate to firewall policies. • Experience with SIEM integration or SOAR platforms.

Requirements