Firewall Engineer

Senior Network Security Engineer – Tufin & Security AutomationLocation: Chicago, IL or Salisbury, NC (Need only local candidates from any of this location, can't consider relocation candidate)Duration: Only W2 Contract Work Arrangement: 2 days onsite per weekTop 3 Must-Have Skills Tufin SecureTrack & SecureChange — strong hands-on administration/engineering experience.Enterprise Firewall Management — Palo Alto, Check Point, Fortinet, or Cisco Firepower; firewall policy governance and change management.Security Automation & Workflow — automation using Python/PowerShell/Ansible/Terraform/REST APIs, ideally with ServiceNow/Tufin integration.About the RoleWe are seeking a Senior Network Security Engineer with strong hands-on experience in Tufin SecureTrack and SecureChange, enterprise firewall management, and security automation.The ideal candidate will have experience managing firewall policies, implementing security workflows, integrating security platforms with ITSM tools, and improving network security operations through automation.Key ResponsibilitiesDesign, implement, maintain, and optimize enterprise network security solutions.Administer and support Tufin SecureTrack and SecureChange.Manage firewall policies, rule reviews, recertification, and compliance activities.Develop and improve automated workflows for firewall policy and change management.Support enterprise firewall technologies such as Palo Alto, Check Point, Fortinet, and Cisco Firepower.Support IDS/IPS, VPN, WAF, and NAC technologies.Integrate Tufin with ServiceNow and other ITSM platforms.Monitor security events and analyze network/security logs.Support security incident response and troubleshooting.Conduct vulnerability assessments and security risk analysis.Work with infrastructure, cloud, and cybersecurity teams to secure hybrid environments.Support network segmentation and Zero Trust initiatives.Develop security standards, procedures, and technical documentation.Use automation and scripting to improve operational efficiency.Support compliance and audit requirements.Provide technical guidance and mentorship to other team members.Required QualificationsStrong experience in enterprise network security engineering.Hands-on experience with Tufin SecureTrack and SecureChange.Experience managing enterprise firewall policies.Experience with one or more firewall platforms such as:Palo AltoCheck PointFortinetCisco FirepowerExperience with firewall governance, policy optimization, and change management.Experience with ServiceNow or similar ITSM platforms.Strong understanding of TCP/IP, routing, switching, DNS, and DHCP.Experience with cloud security across AWS, Azure, or GCP.Knowledge of network segmentation and Zero Trust principles.Experience with security automation or scripting using Python, PowerShell, Ansible, Terraform, or REST APIs.Knowledge of vulnerability management and security risk assessment.Familiarity with security frameworks such as NIST, CIS, ISO 27001, or PCI-DSS.Strong analytical, troubleshooting, communication, and problem-solving skills.Preferred Qualifications3–5+ years of hands-on Tufin administration/engineering experience.Experience supporting large enterprise firewall environments.Experience automating firewall policy and security operations.Experience in highly regulated environments.Relevant certifications such as CISSP, CCNP Security, PCNSE, Tufin Certified Administrator, Fortinet, GIAC, or Security+.Work ArrangementHybrid schedule with 2 days onsite per week.Candidates near Chicago, IL or Salisbury, NC are preferred.Candidates outside these locations may be considered.Occasional travel may be required based on business needs.Ideal CandidateThe ideal candidate is a hands-on Network Security Engineer who combines strong firewall expertise with Tufin administration, security automation, and policy governance. Experience improving security processes through automation and working across infrastructure, cloud, cybersecurity, and governance teams is highly valued.