Firewall Network Security Engineer

Description

Job Details:

The world is transforming - and so is Intel. Intel is a company of bold and curious inventors and problem solvers who create some of the most astounding technology advancements and experiences in the world. With a legacy of relentless innovation and a commitment to bring smart, connected devices to every person on Earth, our diverse and brilliant teams are continually searching for tomorrow's technology and revel in the challenge that changing the world for the better brings. We work every single day to design and manufacture silicon products that empower people's digital lives. Come join us and do something wonderful.

Who we Are:

Intel's Information Security organization enables Intel to provide secure products, solutions, and services which meet U.S. regulatory requirements. The Information Security organization supports the unique IT information Security and Compliance requirements for Intel federal projects that deliver products and/or services to the US Government (USG). As part of this team, you will help us grow our secure solution suite to meet U.S. Government requirements.

The Intel Information Security organization is seeking a Firewall Network Security Engineer. The candidate chosen for this role will assist senior engineers with design, architecture, and build of secure classified network products to support USG operations.

Primary duties and Responsibilities:

Assist with architecting network and network security products in secured enclaves, including product testing, validation, and selection.

Assist with design and long-term roadmap planning for new and future scalability in secure enclaves.

Play a supporting role with the definition of system security requirements, including but not limited to the authorization boundary, security domains, classification of data, etc.

Assist with design the security interfaces, security interconnections, and the trust relationship between system components and external systems.

Implement system security designs using commercial-off-the-shelf (COTS), government-off- the-shelf (GOTS), and open-source hardware and software.

Oversee the hardening and configuration systems and system components in accordance with various Federal, Department of Defense (DoD), and Intelligence Community (IC) guidance.

Coordinate security assessments to identify security control failures and recommend corrective actions.

cj

Requirements

• You must possess the below minimum qualifications to be initially considered for this position. Preferred qualifications are in addition to the minimum requirements and are considered a plus factor in identifying top candidates. Experience listed below would be obtained through a combination of your degree, research and or relevant previous job and or internship experiences.
• Minimum Qualifications:
• This position requires verification of U.S. citizenship due to citizenship-based legal restrictions. Specifically, this position supports United States government customers and is subject to certain citizenship-based restrictions.
• Ability to obtain an active US Government Security Clearance.
• Bachelor's degree with 3+ years of information technology experience.
• 3+ years of experience:
• o Deploying, configuring, Fortinet FortiGate firewalls (FortiOS, VDOMs, High Availability) (preferred)
• o Building and deploying FortiManager and FortiAnalyzer in cloud or on premises. (preferred)
• o Routing (BGP/OSPF), NAT, and network segmentation, IP address subnetting
• o Designing and managing firewall policies, IPS/IDS, and threat controls
• Preferred Qualifications:
• Active US Government Top Secret (TS) Security Clearance with the skill to obtain and maintain SCI access.
• Experience with DoD security implementation (e.g. STIG) and security tools for managing the environment.
• Business travel is required as needed.
• Experience with building and managing network infrastructure using automation tools. (Ansible, Python, APIs)
• Integration with SIEM, NAC (ISE), and enterprise network/security tools
• Understanding of NIST/STIG/compliance-driven environments (preferred)
• Develop and maintain operational processes and documentation for ongoing support
• Ability to support security operations: monitoring, analysis, incident response, and vulnerability management
• Experience with network analysis software such as SD Elements, Splunk, Sniffer, Wireshark, or Microsoft Network Monitor.
• Certifications in cybersecurity to include Certified Cloud Security Professional (CCSP) or Certified Information Systems Security Professional (CISSP).
• Experience with scripting in the UNIX environment.
• Experience utilizing Ansible as a configuration management tool, for system administration of users or devices, or as a security compliance automation tool.
• Experience with operational monitoring with SNMP or other Enterprise Network Management Systems
• Familiar with VPN implementation (IPSec, SSL) with identity integration (AD/MFA)
• Experience with troubleshooting tools from CLI, packet capture, and log analysis
• Your expertise and innovative thinking are essential for enhancing Intel's security capabilities. Join us to shape the future of secure technology and drive meaningful impact across the industry.
• Job Type:
• Experienced Hire
• Shift:
• Shift 1 (United States of America)
• Primary Location:
• US, California, Santa Clara
• Additional Locations:
• Posting Statement:
• Position of Trust
• N/A

Benefits

• We offer a total compensation package that ranks among the best in the industry. It consists of competitive pay, stock bonuses, and benefit programs which include health, retirement, and vacation. Find out more about the benefits of working at Intel .
• Annual Salary Range for jobs which could be performed in the US: $105,300.00-175,210.00 USD
• The range displayed on this job posting reflects the minimum and maximum target compensation for the position across all US locations. Within the range, individual pay is determined by work location and additional factors, including job-related skills, experience, and relevant education or training. Your recruiter can share more about the specific compensation range for your preferred location during the hiring process.
• Work Model for this Role
• This role will require an on-site presence. Job posting details (such as work model, location or time type) are subject to change.
• ADDITIONAL INFORMATION: Intel is committed to Responsible Business Alliance (RBA) compliance and ethical hiring practices. We do not charge any fees during our hiring process. Candidates should never be required to pay recruitment fees, medical examination fees, or any other charges as a condition of employment. If you are asked to pay any fees during our hiring process, please report this immediately to your recruiter.