Note: The job is a remote job and is open to candidates in USA. Dice is recruiting for a remote Firewall Engineer to support an enterprise-scale Managed Network Services environment for a government agency. The role provides Tier 3 troubleshooting, operational support, policy optimization, VPN and routing support, and change management for Cisco Secure Firepower firewall infrastructure.

Responsibilities

• Serve as a Tier 3 escalation point for complex firewall and network security issues
• Conduct advanced troubleshooting and root cause analysis for Cisco Secure Firepower Firewall incidents
• Support daily firewall operations using Cisco Secure Firewall Management Center (FMC), including monitoring health, performance, and traffic flows
• Analyze and optimize firewall access control and security policies
• Support routing protocols within secure network environments
• Troubleshoot and support VPN technologies, including site-to-site and remote access VPNs
• Participate in formal change management processes, including documentation, peer reviews, and scheduled implementations
• Execute authorized changes during designated after-hours change windows
• Engage in team-based on-call rotations to support after-hours and emergency incidents
• Collaborate with engineering and operational teams to meet Managed Network Services contractual obligations

Skills

• Extensive hands-on experience with Cisco Secure Firepower Firewalls
• Strong troubleshooting skills, including traffic flow analysis, NAT/PAT configuration, and inspection of security policies
• Operational expertise in Cisco Secure Firewall Management Center (FMC)
• Proven experience troubleshooting VPN technologies such as Cisco AnyConnect
• Deep understanding of OSI Layers 1–4, with knowledge extending to Layers 5–7
• Ability to analyze and support security intelligence policies and access rules
• Experience working in large-scale enterprise or government environments
• Effective verbal and written communication skills for technical documentation and team collaboration
• Availability to work mostly remotely, including participation in after-hours maintenance and on-call rotations
• Candidates must be legally authorized to work in the United States without employer sponsorship, now or in the future
• Familiarity with Cisco Catalyst SD-WAN is advantageous

Benefits

• This position is based in remote work and can be performed from an approved location.

Company Overview