Senior Network Engineer Firewall Engineering
Oak Ridge National Laboratory (ORNL) is a U.S. Department of Energy national laboratory conducting multidisciplinary research in computing, AI, energy, materials, nuclear science, neutron science, isotopes, and national security.
Funding history
Investors
About Oak Ridge National Laboratory
ORNL is a government-owned, contractor-operated U.S. Department of Energy research laboratory in Oak Ridge, Tennessee. UT-Battelle operates ORNL for DOE; the laboratory currently provides AI and high-performance-computing capabilities alongside science and engineering research infrastructure.
Skills
Candidate Availability
Required and preferred rules are kept separate and reflect the wording in the original posting.
About the Role
You will design, implement, maintain, and improve enterprise firewall architectures. You will lead deployments, migrations, upgrades, and policy conversions; troubleshoot complex network-security issues; monitor capacity and threats; and provide escalation or on-call support.
Requirements
- BS degree in computer science, information technology, cybersecurity, engineering, or a related discipline with 8 years of professional experience, or an equivalent combination of education and experience
- Experience designing, implementing, and supporting enterprise network and firewall environments
- Advanced hands-on experience with next-generation firewalls and centralized management
- Knowledge of TCP/IP, IPv4, IPv6, subnetting, routing, switching, network segmentation, access control, NAT, VPN technologies, and high-availability design
- Knowledge of network-security architecture, defense-in-depth, least privilege, zero trust, and secure network-design principles
- Experience with change-control, configuration-management, and incident-management processes
- Ability to obtain and maintain a Department of Energy Q clearance
- Pass a pre-placement drug test and participate in an ongoing random drug testing program
Responsibilities
- Design, implement, maintain, and improve complex information systems that comply with cybersecurity policies
- Evaluate system integrations and securely incorporate new technologies
- Develop solutions that balance cybersecurity, availability, performance, maintainability, and mission requirements
- Design and maintain enterprise firewall architectures
- Serve as a subject-matter expert for firewalls, firewall management, VPN clients, and security services
- Translate requirements into secure firewall designs and implementation plans
- Lead firewall deployments, migrations, upgrades, hardware refreshes, policy conversions, and platform-standardization initiatives
- Troubleshoot connectivity, routing, application, performance, high-availability, and security-policy issues
- Monitor firewall capacity, system health, software lifecycle status, security advisories, and threats
- Participate in scheduled maintenance and provide escalation or on-call support
Benefits
- Medical plan
- Retirement plans
- Flexible work hours
- On-site fitness facilities
- On-site banking facilities
- On-site cafeteria facilities
- Prescription drug plan
- Dental plan
- Vision plan
- 401(k) retirement plan
- Contributory pension plan
- Life insurance
- Disability benefits
- Vacation and holidays
- Parental leave
- Legal insurance with identity theft protection
- Employee assistance plan
- Flexible spending accounts
- Health savings accounts
- Wellness programs
- Educational assistance
- Relocation assistance
- Employee discounts