Position Tittle: Technology Engineer (158479-1)
Duration: Contract to Hire
Work Location:  Pittsburgh, PA or Dallas, TX or Birmingham, AL or Phoenix, AZ or Strongsville, OH
Work Mode: Hybrid - 3 days in office, 2day in remote
Years of Experience: 8+ years applicable experience required overall

***For immediate consideration, you can email me at “shafique.mohammed@systemone.com"***

***Connect with me on LinkedIn*** https://www.linkedin.com/in/shafique-m-519421bb/

Function of the Group: Network security operations and policy management
Initiatives/Projects: Help support Network Access Control (NAC)
Industry Background: Network Security, Cryptography, Network Access Control
Team Dynamic: Network security ops team, working with a vendor


Roles and Responsibilities:
• Design, configure, and deploy firewall rules on Fortinet FortiGate, Azure Firewall, Azure Network Security Groups (NSGs), and AWS Security Groups/Network Firewall.
• Utilize AlgoSec for automated policy management, rule optimization, and compliance checks across on-premises and cloud environments (AWS, Azure).
• Analyze network traffic and security requirements to create optimized, secure firewall rule sets, minimizing risks and ensuring performance.
• Conduct firewall rule audits, cleanups, and optimizations to eliminate redundant or unused rules, using tools like AlgoSec’s Firewall Analyzer or CloudFlow.
• Troubleshoot and resolve firewall-related issues, including connectivity, misconfigurations, and performance bottlenecks, using packet captures, logs, and CLI.
• Collaborate with network and security teams to align firewall policies with business needs and compliance standards (e.g., PCI-DSS, HIPAA, GDPR).
• Implement and manage VPNs, NAT policies, and application-layer controls across hybrid cloud environments.
• Document firewall configurations, rule changes, and processes for auditing and compliance purposes.
• Provide knowledge transfer to internal teams on firewall management and AlgoSec workflows.
• Stay current on Fortinet, Azure, AWS, and AlgoSec updates, as well as emerging security threats and best practices.

Must have technical skills (Min 8+yrs of exp required in all of the below skills)
• Fortinet certifications (NSE 4, NSE 5, NSE 7) and/or cloud certifications (e.g., AWS Certified Advanced Networking, Azure Security Engineer Associate).
• Experience with other firewall platforms (e.g., Palo Alto, Check Point, Cisco) for broader context.
• Knowledge of SD-WAN, IPS, and application control in cloud and on-premises environments.
• Expertise in Fortinet FortiGate, FortiManager, FortiAnalyzer, Azure Firewall, Azure NSGs, and AWS Network Firewall/Security Groups.
• Strong understanding of IPsec/SSL VPNs, stateful inspection, and Layer 3/4/7 firewall capabilities.
• Familiarity with cloud-native tools (e.g., AWS VPC Flow Logs, Azure Monitor) and network monitoring solutions.
• Proficiency in configuring and managing Fortinet FortiGate firewalls, Azure Firewalls, Azure NSGs, and AWS Security Groups/Network Firewall.
• Strong knowledge of network protocols (TCP/IP, UDP, HTTP/S), security concepts (zero trust, segmentation), and cloud networking (VPCs, VNETs
• Expertise in troubleshooting complex firewall issues using CLI, packet analysis tools (e.g., Wireshark), and cloud-native logging (e.g., AWS VPC Flow Logs, Azure Monitor).
• Familiarity with compliance frameworks (e.g., NIST, ISO 27001) and their application to firewall policies.
Flex Skills/Nice to Have:
• Advanced proficiency with AlgoSec for unified security policy management across hybrid and multi-cloud environments.
• Proficiency in scripting (e.g., Python, Bash) for automating firewall rule deployments or audits.
• Advanced experience with AlgoSec’s Security Management Suite, including AutoDiscovery, BusinessFlow, and FireFlow for end-to-end policy management.
• Experience with traffic simulation, risk assessment, and policy compliance tools in AlgoSec.
• Create and maintain documentation for systems, processes, and standard operating procedures (SOPs)
• Ensure compliance with security, backup, and disaster recovery policies
• Platform monitoring using Dynatrace

Education/Certifications:
Bachelor’s degree in Computer Science, Information Technology, Engineering, or a related field (or equivalent experience).
 

Certifications: Fortinet certifications (NSE 4, NSE 5, NSE 7) and/or cloud certifications (e.g., AWS Certified Advanced Networking, Azure Security Engineer Associate).

System One, and its subsidiaries including Joulé, ALTA IT Services, TeamPeople, and Mountain Ltd., are leaders in delivering outsourced services and workforce solutions across North America. We help clients get work done more efficiently and economically, without compromising quality. System One not only serves as a valued partner for our clients, but we offer eligible employees health and welfare benefits coverage options including medical, dental, vision, spending accounts, life insurance, voluntary plans, as well as participation in a 401(k) plan.

System One is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, age, national origin, disability, family care or medical leave status, genetic information, veteran status, marital status, or any other characteristic protected by applicable federal, state, or local law.