Senior Firewall Network Engineer

KPI Partners, A global consulting firm focused on strategy, technology, and digital transformation. We help companies tackle their most ambitious projects and build new capabilities. We provide solutions in Cloud, Data, Application Development & BI spaces.

We enable your growth

At KPI, you can become who you want to be and learn skills that will take you further in your career

• Continuously upgrade yourself
• Develop as a future leader
• Drive cloud enablement around the world

Engineering Excellence

Enhance your engineering expertise with our unique approach

This program gives engineers the opportunity to excel in product and software engineering by learning our industry-leading practices, tools, and technologies to build excellence by enhancing their competencies and skills

Visit to Know more:

Title: Senior Firewall Network Engineer - Full time

Location: Washington, DC 20007 (Hybrid - Has to be onsite when there is a need)

Key Areas

• Experience with ISP and Internet-scale networking, optical/DWDM, CDN, and edge network security
• Expert level knowledge in large-scale IP networking technologies and protocols such as MP-BGP, OSPF, ISIS, VRF, VxLAN, EVPN, QoS, GRE, IP SEC, DNS, and MACsec.
• Experience in Cisco environment and Cisco certification preferred.

Job Overview

• The Senior Firewall Network Engineer leads the firewall design, configuration, and troubleshooting for the network backbone and edge network engineering team. This role is responsible for the design, planning, scalability, deployment, performance, and operation of our Firewall network. This position drives our security strategy and advances our security operations for WiFi, Internet, Data Center, and Cloud for all sites
• The Network Operations and Engineering (INO) team supports our software and hardware networks, daily functions, ticketing, on-call, troubleshooting, maintenance, and installation and management of network and information security infrastructure including routers, switches, firewalls, and VPNs.  INO is responsible for ensuring all network components are at consistent releases of software and firmware and have been patched for security.  This team manages network services including DHCP, firewall rules, and network access control lists (ACLs). This position works closely and in collaboration with the Information Security Office.  INO has primary responsibility for the engineering design, implementation, and operational maintenance of the University’s $50M network.
• The INO team manages and provides support for the University’s integrated network (wired, wireless, data, telecommunications), data center production control for academic and administrative processing, systems management of enterprise server infrastructure, and facilities infrastructure project management.

To achieve this goal, NCS focuses on the following strategies:

• Reduce system downtime and increase operating efficiencies by ensuring that management of all systems and services follow defined standards and operating procedures and that all problems are resolved in a timely manner
• Prioritizing activities using a goal-driven process that, in combination with external benchmarking and research, attempts to maximize the mapping of our team’s activities to user-prioritized, business goals (i.e., we strive to work on the highest value activities while saying ‘no’ to lower value distractions)
• Increasing collaboration at all levels (e.g., within and between teams, with other UIS divisions, and with our user communities)

• The Senior Firewall Network Engineer manages the enterprise network, which includes capital and non-capital assets (switches, routers, gateways, cabling, servers, and software licenses) that exceed $40M in value.
• They manage the critical enterprise network and voice systems and carry a cell phone for managing and participating in the resolution, communication, and escalation of system events and outages. As well, they work off-hours in the early mornings and late evenings to accommodate the requirements of the change management procedures.

Work Interactions

• Reporting to the Senior Engineer Manager, the Senior Firewall Network Engineer is accountable to the AVP, Systems Engineering and Operations, works directly with network managers, technical and non-technical staff; and with our customers.

Qualifications

• 8-10 years of experience
• Experience in selecting, testing, and deploying networking hardware and software.
• Experience with ISP and Internet-scale networking, optical/DWDM, CDN, edge network security
• Background in building and operating large-scale backbone and edge networks.
• Ability to understand scripts and programs for automation, tools, frameworks, dashboards, and alarms (common uses: Python, Go)
• Expert level knowledge in large-scale IP networking technologies and protocols such as MP-BGP, OSPF, ISIS, VRF, VxLAN, EVPN, QoS, GRE, IP SEC, DNS, and MACsec.
• Experience with using software development to operate or deploy a large network. 5 years of experience using Ansible, Python, YAML, or NETCONF/YANG.
• Proficiency with various networking vendors such as Palo Alto and Cisco
• Willingness and availability to carry a cell phone – and to work off-hours in the early mornings and late evenings – for duties as described above

Preferred Qualifications

• Cisco CCNP or CCIE certification
• Experience managing voice systems PBX and IP telephony
• Experience with tools such as Cisco Prime, Nagios, and SolarWinds
• Experience in Systems Programming/Development