Firewall Implementation Engineer

We are seeking mid-to-senior-level, hands-on implementation engineers, not candidates whose experience is primarily architecture, monitoring, ticket escalation, or operational support.
Ideal candidates should have:
Approximately 5+ years of hands-on network engineering experience, preferably supporting a large, complex, 24x7 enterprise environment.
Experience leading end-to-end network deployments, including:
Greenfield site implementations
Legacy-site modernization and architecture conversions
Mergers and acquisitions integration
Application and vendor connectivity deployments
Subject matter expertise within their assigned technical area.
Strong enterprise troubleshooting skills, including:
Packet captures and protocol analysis
Packet brokers and network visibility tools
Root-cause analysis
Application connectivity troubleshooting
Working knowledge of:
DHCP and DNS
RADIUS and TACACS+
LDAP and Active Directory
Network access control and authentication services
Ability to work directly with customers, application teams, vendors, security teams, architects, and other infrastructure teams.
Experience working within formal change-management and documentation processes.
Ability to create implementation plans, network diagrams, configuration documentation, operating procedures, and operational handoffs.
Clear written and verbal English communication skills.
Healthcare or similarly complex, highly regulated enterprise experience is preferred.
Firewall Implementation Engineer
Primary Focus
Build firewall services for new sites and enterprise initiatives.
Convert legacy firewall environments to current architecture and standards.
Implement connectivity for applications, vendors, medical systems, and business-to-business integrations.
Maintain and modernize enterprise firewall architecture.
Lead implementation, troubleshooting, validation, documentation, and operational handoff.
Must-Have Experience
Hands-on implementation and troubleshooting experience with multiple enterprise firewall and security platforms, including:
Palo Alto Networks
Cisco Firepower Threat Defense, or FTD
Cisco Adaptive Security Appliance, or ASA
Zscaler Internet Access, or ZIA
Zscaler Private Access, or ZPA
Zscaler Zero Trust Branch, or ZTB
Enterprise firewall policy administration, including:
Security policies
Network and application objects
Network Address Translation
Routing
Logging and monitoring
Software upgrades
Rule auditing and remediation
Strong understanding of:
Site-to-site and business-to-business VPNs
Remote-access VPN services
Application traffic flows
Segmentation and security zones
High-availability firewall configurations
Ability to troubleshoot complex application connectivity issues across firewalls, proxies, VPNs, and network infrastructure.

Work arrangement
No