{"id":2419883,"url":"https://alion.io/job/eze-castle-integrations-senior-network-firewall-engineer-architect","title":"Senior Network Firewall Engineer / Architect","company":{"id":3810727,"name":"ECI","domain":"eci.com","url":"https://alion.io/company/eze-castle-integrations","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Dayforce","truth_index":null},"role":"Networking","role_family":"Networking","seniority":"staff","employment_type":null,"work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"posting_text","remote_working_hours":{"label":"CT","utc_offset_min":-6,"utc_offset_max":-6},"hiring_geo_confidence":"inferred","locations":["Dallas, United States"],"countries":["US"],"hiring_countries":["US","MX"],"hiring_countries_total":2,"salary":{"min":125000,"max":135000,"currency":"USD","period":"year","gross":null,"usd_annual":135000},"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"DNS","optional":false},{"name":"FortiGate","optional":false},{"name":"TCP/IP","optional":false},{"name":"VPN","optional":false}],"status":"live","first_seen_at":"2026-09-16T06:00:00Z","employer_posted_date":"2026-10-13","last_verified_at":"2026-10-14T17:31:54Z","board_verified":true,"closed_at":null,"days_open":28,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":28},"description":"Senior Network Firewall Engineer / Architect\nPrimary focus: hands-on firewall engineering and operations, representing approximately 90% of the role.\nPosition Overview\nWe are seeking an experienced, hands-on Senior Network Firewall Engineer / Architect to provide dedicated support for a complex, global client network. The role is heavily focused on firewall administration, troubleshooting, security policy management, VPN connectivity, and firewall platform standardization, while also requiring strong enterprise networking fundamentals and architecture-level judgment.\nThe environment includes a mix of Palo Alto Networks and Fortinet FortiGate firewalls, along with Cisco, Cisco Meraki, Aruba, HP ProCurve, and Ubiquiti networking technologies. The successful candidate will be comfortable taking ownership of day-to-day firewall work, partnering directly with client stakeholders, resolving inherited configuration and security issues, and supporting a longer-term transition toward a more standardized network environment.\nKey Responsibilities\nPerform hands-on administration and troubleshooting of Palo Alto Networks and Fortinet FortiGate firewalls.\nCreate, review, modify, and troubleshoot firewall security policies, access permissions, rules, objects, and whitelisting requests.\nManage and troubleshoot site-to-site VPN tunnels and remote-access VPN services, including Palo Alto GlobalProtect and Fortinet FortiClient.\nUse Palo Alto Panorama and Fortinet management tooling to manage devices, configurations, policies, and operational changes across the environment.\nAssess existing firewall configurations for security gaps, inconsistencies, technical debt, and deviations from standards or best practices.\nSupport the gradual migration and standardization of firewall platforms, including movement from Fortinet toward Palo Alto where approved and funded.\nProvide dedicated technical support and direct communication for a specific global client while collaborating with ECI network services, implementation, NOC, compliance, and principal engineering teams.\nSupport firewall and network integration for newly acquired offices and other merger-and-acquisition activity.\nPlan and execute upgrades, technology refreshes, patching, configuration changes, and remediation activities through established change-management processes.\nTroubleshoot network and application connectivity issues across firewalls, routing, switching, wireless, SD-WAN, circuits, DNS, and adjacent infrastructure.\nReview traffic flows, logs, packet captures, latency, jitter, packet loss, utilization, and application policies to isolate performance or connectivity problems.\nProduce and maintain accurate technical documentation, including network diagrams, firewall standards, rule documentation, implementation plans, validation steps, rollback plans, and client-facing recommendations.\nHelp assess inherited client environments, verify how systems are configured, and recommend practical remediation and modernization priorities.\nTechnical Environment\nPalo Alto Networks firewalls and Panorama\nGlobalProtect remote-access VPN\nFortinet FortiGate firewalls, FortiClient, Fortinet SD-WAN, and centralized Fortinet management tools\nFirewall policies, permissions, rule bases, objects, NAT, whitelisting, and VPN tunnels\nCisco routing and switching, including Catalyst and Nexus platforms\nCisco Meraki switching and wireless\nCisco ISE and 802.1X initiatives\nAruba, HP ProCurve, and Ubiquiti networking and wireless technologies\nEnterprise LAN, WAN, wireless, routing, SD-WAN, DNS, and network security\nRequired Qualifications\nSignificant hands-on experience administering and troubleshooting enterprise firewalls in production environments.\nStrong practical experience with Palo Alto Networks firewalls, including policy and rule management, VPN troubleshooting, and Panorama.\nHands-on experience with Fortinet FortiGate firewalls and related VPN or management technologies.\nDemonstrated ability to manage firewall permissions, security policies, rule bases, whitelisting, objects, and connectivity requirements.\nExperience configuring and troubleshooting site-to-site VPNs and remote-access VPN solutions.\nStrong enterprise networking fundamentals across TCP/IP, routing, switching, VLANs, LAN/WAN, wireless, DNS, and packet flow analysis.\nAbility to troubleshoot complex connectivity and performance issues using logs, packet captures, traffic analysis, device health data, and systematic fault isolation.\nExperience working in mixed-vendor, poorly standardized, or inherited network environments.\nExperience preparing and executing controlled infrastructure changes, including implementation, validation, rollback, peer review, and stakeholder coordination.\nAbility to communicate directly with client stakeholders, explain technical findings clearly, and operate with limited day-to-day supervision.\nStrong technical documentation, prioritization, analytical, and collaboration skills.\nPreferred Qualifications\nAdvanced Palo Alto Networks experience, certifications, or deep operational expertise.\nExperience migrating firewalls from Fortinet to Palo Alto.\nExperience with Fortinet SD-WAN and potential transition planning toward Palo Alto SD-WAN.\nExperience standardizing office networks on Cisco Meraki switching and wireless.\nExperience with Cisco ISE, 802.1X, network access control, or related security initiatives.\nExperience supporting global clients, acquisitions, carve-outs, and newly integrated office locations.\nPrevious managed services, consulting, or customer-facing infrastructure experience.\nRelevant advanced networking or security certifications are preferred but not required.\nIdeal Candidate Profile\nThe ideal candidate is a firewall-first engineer who can work independently across Palo Alto and Fortinet platforms and is comfortable owning the full lifecycle of firewall-related requests, incidents, changes, and remediation. This individual should be equally capable of working through detailed rule and VPN issues, communicating with client stakeholders, documenting the environment, and contributing to broader network modernization decisions. General network architecture and engineering skills remain important, but deep, current, hands-on firewall expertise is essential for success in this role.\nWork Arrangement and Engagement Type\nRemote role with Central Time Zone availability preferred.\nSupport will be provided primarily through remote access for sites in the United States, Europe, Asia, and Mexico.\nThe role is initially being considered as a contract-to-hire engagement, with potential conversion to a permanent position based on performance and mutual interest.\nInterview Focus\nHands-on depth with Palo Alto and Fortinet firewall administration.\nPanorama experience and centralized firewall management.\nFirewall permissions, policies, rules, objects, NAT, and whitelisting.\nSite-to-site and client VPN troubleshooting, including GlobalProtect and FortiClient.\nPractical troubleshooting scenarios involving traffic flow, logs, packet captures, and connectivity.\nAbility to document changes, communicate with clients, and operate in a mixed-vendor global environment.\nECI’s culture is all about connection - connection with our clients, our technology and most importantly with each other. In addition to working with an amazing team around the world, ECI also offers a competitive compensation package and the range for this role is $125,000 to $135,000 annually (DOE & location), plus variable with flexible PTO, health benefit eligibility the first of the month, life insurance, pet insurance, 401K and so much more! If you believe you’d be a great fit and are ready for your best job ever, we’d like to hear from you!!\nLove Your Job, Share Your Technology Passion, Create Your Future Here!","description_format":"text","description_chars":7821,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["401k plan","Life insurance"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"},{"name":"Mexico","iso":"MX","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Information Security","Managed IT Services (MSP)"],"lifecycle":[{"event":"open","at":"2026-10-13T04:52:21Z"}],"visa":[],"liveness":{"score":76,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.843,"p_room":0.9,"age_days":28,"expected_fill_days":53,"reasons":["conf:1","win:mid"],"computed_at":"2026-10-14T06:34:16Z"},"pay":{"stated_usd_annual":135000,"is_top_pay":false},"html_url":"https://alion.io/job/eze-castle-integrations-senior-network-firewall-engineer-architect","json_url":"https://alion.io/job/eze-castle-integrations-senior-network-firewall-engineer-architect.json","meta":{"generated_at":"2026-10-14T20:12:34Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":26694,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-15T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3810727},"rest":"https://alion.io/mcp/rest/get_company?id=3810727"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Feze-castle-integrations-senior-network-firewall-engineer-architect"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Feze-castle-integrations-senior-network-firewall-engineer-architect"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Feze-castle-integrations-senior-network-firewall-engineer-architect"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/eze-castle-integrations-senior-network-firewall-engineer-architect\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Feze-castle-integrations-senior-network-firewall-engineer-architect"}]}