Senior Technical Engineer IV, Firewall Engineering

Location: Buffalo, NY (Preferred) | Remote Available
Duration: 12-Month Contract
Work Schedule: East Coast Hours (8:00 AM - 5:00 PM ET)

About the Role

We are seeking a Senior Technical Engineer IV, Firewall Engineering to join a newly unified Firewall Engineering organization responsible for enterprise firewall infrastructure, policy management, and network security operations.

This role is suited for a senior-level engineer who combines strong technical expertise with a consultative approach. You will partner with infrastructure, networking, and application teams to design secure connectivity solutions, troubleshoot complex network challenges, and support strategic modernization initiatives, including data center migration and infrastructure transformation programs.

As a senior member of the team, you will help drive firewall engineering best practices, provide architectural guidance, and contribute to the evolution of enterprise network security capabilities.

Team Overview

The Firewall Engineering organization brings together two core functions:

Firewall Infrastructure Engineering

• Firewall lifecycle management
• Software upgrades and platform maintenance
• Infrastructure visibility and monitoring
• Network buildouts and expansion projects
• Routing and network engineering

Firewall Policy Management

• Firewall rule creation and administration
• Traffic allow/deny policy governance
• Access request fulfillment and approvals
• Security policy implementation and compliance

The team is actively supporting infrastructure modernization efforts, including migration from legacy data centers to modern colocation and cloud-connected environments.

Responsibilities

• Design, implement, and maintain enterprise firewall solutions.
• Partner directly with application and infrastructure teams to define secure connectivity requirements.
• Troubleshoot complex firewall, routing, and network performance issues.
• Provide technical guidance on firewall architecture, network segmentation, and traffic flow design.
• Develop, review, and implement firewall policies, security controls, and access requirements.
• Support large-scale data center migration and infrastructure modernization initiatives.
• Participate in change planning, implementation reviews, and risk assessments.
• Drive operational excellence through documentation, process improvements, and audit readiness.
• Collaborate across security, infrastructure, networking, and application teams to deliver secure and scalable solutions.

Minimum Qualifications

• Bachelor's degree in Computer Science, Information Technology, Network Engineering, Cybersecurity, or equivalent practical experience.
• 3+ years of experience in firewall engineering, network security engineering, or enterprise network infrastructure.
• Experience designing and managing enterprise firewall policies and security controls.
• Advanced knowledge of networking fundamentals, including routing, switching, and BGP.
• Experience troubleshooting complex network connectivity and traffic-flow issues.
• Experience working directly with business stakeholders, application owners, and technical teams.
• Strong analytical, communication, and problem-solving skills.
• Experience working within structured change management environments.

Preferred Qualifications

• Strong experience with Check Point Firewall technologies.
• Experience with Palo Alto Networks firewalls.
• Experience with Aviatrix networking and cloud connectivity platforms.
• Experience supporting enterprise-scale infrastructure environments.
• Experience with data center migration, network transformation, or modernization initiatives.
• Experience working within colocation or Equinix environments.
• Experience in highly regulated industries such as financial services, healthcare, defense, or government.
• Industry certifications such as CISSP, Check Point, Palo Alto, Aviatrix, or equivalent security certifications.

Technical Skills

Network Security

• Firewall Engineering
• Security Policy Management
• Access Control Administration
• Network Segmentation
• Traffic Flow Analysis

Networking

• Enterprise Networking
• Routing and Switching
• Border Gateway Protocol (BGP)
• Network Architecture
• Connectivity Troubleshooting

Infrastructure & Operations

• Change Management
• Infrastructure Modernization
• Data Center Migration
• Audit and Compliance Readiness
• Technical Documentation

Tools & Technologies

• Check Point Firewalls
• Palo Alto Firewalls
• Aviatrix
• ServiceNow
• Enterprise Network Management Platforms

Medical, dental, and vision insurance are available to qualified candidates who meet eligibility requirements.

By providing your phone number, you consent to: (1) receive automated text messages and calls from the Judge Group, Inc. and its affiliates (collectively “Judge”) to such phone number regarding job opportunities, your job application, and for other related purposes. Message & data rates apply and message frequency may vary. Consistent with Judge's Privacy Policy, information obtained from your consent will not be shared with third parties for marketing/promotional purposes. Reply STOP to opt out of receiving telephone calls and text messages from Judge and HELP for help.