Firewall Network Security Engineer

## Job Description The world is transforming - and so is Intel. Intel is a company of bold and curious inventors and problem solvers who create some of the most astounding technology advancements and experiences in the world. With a legacy of relentless innovation and a commitment to bring smart, connected devices to every person on Earth, our diverse and brilliant teams are continually searching for tomorrow's technology and revel in the challenge that changing the world for the better brings. We work every single day to design and manufacture silicon products that empower people's digital lives. Come join us and do something wonderful. ## Who we Are Intel's Information Security organization enables Intel to provide secure products, solutions, and services which meet U.S. regulatory requirements. The Information Security organization supports the unique IT information Security and Compliance requirements for Intel federal projects that deliver products and/or services to the US Government (USG). As part of this team, you will help us grow our secure solution suite to meet U.S. Government requirements. ## Responsibilities - Assist with architecting network and network security products in secured enclaves, including product testing, validation, and selection. - Assist with design and long-term roadmap planning for new and future scalability in secure enclaves. - Play a supporting role with the definition of system security requirements, including but not limited to the authorization boundary, security domains, classification of data, etc. - Assist with design the security interfaces, security interconnections, and the trust relationship between system components and external systems. - Implement system security designs using commercial-off-the-shelf (COTS), government-off-the-shelf (GOTS), and open-source hardware and software. - Overseer the hardening and configuration systems and system components in accordance with various Federal, Department of Defense (DoD), and Intelligence Community (IC) guidance. - Coordinate security assessments to identify security control failures and recommend corrective actions. ## Requirements - Must be a U.S. citizen due to citizenship-based legal restrictions. - Ability to obtain an active US Government Security Clearance. - Bachelor's degree with 3+ years of information technology experience. - 3+ years of experience: - Deploying, configuring, Fortinet FortiGate firewalls (FortiOS, VDOMs, High Availability) - Building and deploying FortiManager and FortiAnalyzer in cloud or on premises. - Routing (BGP/OSPF), NAT, and network segmentation, IP address subnetting - Designing and managing firewall policies, IPS/IDS, and threat controls ## Nice to Have - Active US Government Top Secret (TS) Security Clearance with the skill to obtain and maintain SCI access. - Experience with DoD security implementation (e.g. STIG) and security tools for managing the environment. - Business travel is required as needed. - Experience with building and managing network infrastructure using automation tools (Ansible, Python, APIs) - Integration with SIEM, NAC (ISE), and enterprise network/security tools - Understanding of NIST/STIG/compliance-driven environments - Develop and maintain operational processes and documentation for ongoing support - Ability to support security operations: monitoring, analysis, incident response, and vulnerability management - Experience with network analysis software such as SD Elements, Splunk, Sniffer, Wireshark, or Microsoft Network Monitor - Certifications in cybersecurity to include Certified Cloud Security Professional (CCSP) or Certified Information Systems Security Professional (CISSP) - Experience with scripting in the UNIX environment - Experience utilizing Ansible as a configuration management tool, for system administration of users or devices, or as a security compliance automation tool - Experience with operational monitoring with SNMP or other Enterprise Network Management Systems - Familiar with VPN implementation (IPSec, SSL) with identity integration (AD/MFA) - Experience with troubleshooting tools from CLI, packet capture, and log analysis ## Benefits All qualified applicants will receive consideration for employment without regard to race, color, religion, religious creed, sex, national origin, ancestry, age, physical or mental disability, medical condition, genetic information, military and veteran status, marital status, pregnancy, gender, gender expression, gender identity, sexual orientation, or any other characteristic protected by local law, regulation, or ordinance.