{"id":2452912,"url":"https://alion.io/job/punch-cyber-cyber-security-engineer-firewall","title":"Cyber Security Engineer - Firewall","company":{"id":695911,"name":"Punch Cyber","domain":"punchcyber.com","url":"https://alion.io/company/punchcyber","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Breezy","truth_index":null},"role":"Security","role_family":"Security","seniority":"staff","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"posting_text","remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":[],"countries":[],"hiring_countries":["US"],"hiring_countries_total":1,"salary":null,"salary_estimate":{"min_usd":137000,"max_usd":244000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":95},"experience_years_min":9,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"FortiGate","optional":false},{"name":"LDAP","optional":false},{"name":"NIST 800-53","optional":false},{"name":"Python","optional":false},{"name":"VPN","optional":false}],"status":"live","first_seen_at":"2026-10-13T14:03:29Z","employer_posted_date":"2026-10-13","last_verified_at":"2026-10-13T23:14:12Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"About Us:\nPUNCH Cyber Analytics Group (PUNCH) is a Virginia-based, small business founded in 2012 operating as a cohesive team that incorporates the sum of our group’s diverse skills, talents, and resources toward our collective passion: advancing data analytics to impact cyber operations. PUNCH is a two-time Inc. Magazine ‘Best Workplaces’ awardee offering unique benefits and personal touches to provide a positive work-life experience for our team. PUNCH brings unique qualifications, resources, and past-performance that make us suitable to address the goals of our diverse customer-base. Further, we have past and current experience supporting cyber operations and cyber ML-based research, with well over 100 years of collective experience from our collaborative, multi-disciplinary team.\nResponsibilities\nThe selected candidate will support a large Federal agency. Candidates must be located in the United States.\nApply configurations on perimeter routers, firewalls, and security controls IAW NIST 800-53\nProvide recommendations regarding DOIs perimeter UTM devices IAW NIST 800-53 and industry best practices for Fortigate products\nConfigure, deploy, and maintain FortiGate firewalls.\nCreate and manage firewall policies, NAT, VIPs, and security rules.\nConfigure IPsec and SSL VPNs for remote and site-to-site connectivity.\nManage FortiManager for centralized firewall administration.\nMonitor security events and logs using FortiAnalyzer.\nImplement network segmentation using VLANs and security zones.\nTroubleshoot firewall, routing, VPN, and connectivity issues.\nPerform firewall rule reviews and remove obsolete or overly permissive rules.\nDevelop and maintain firewall/network security documentation.\nCreate security reports and dashboards for management or compliance requirements.\nConfigure authentication integrations such as RADIUS, LDAP, Active Directory, and MFA.\nPerform network troubleshooting using packet captures, routing tables, logs, and FortiGate diagnostic commands.\nParticipate in security architecture and network design projects.\nTest firewall policies and security controls after configuration changes.\nAutomate repetitive security/network tasks using Python, APIs, or FortiManager automation.\nMinimum Qualifications:\nTo be considered for this position, you must minimally meet the knowledge, skills, and abilities listed below:\n7 years of experience with a bachelor’s degree or 9 years of total experience\nProficient in network, routing, and switching.\nProficient in network scripting\nProficient with OSI Models Layers 1-7 and network troubleshooting.\nAbility to work in both an individual and team environment\nFlexibility to support after hours maintenance activities\nMust be able to obtain a Position of Public Trust from Dept. of Interior\nPreferred Qualifications:\nCandidates with these desired skills will be given preferential consideration:\nFortinet NSE 4 Certified and/or Fortinet Certified Professional (FCP)\nNext Generation Firewall Experience, preferably Fortinet.\nExperience support Incident Response (IR) Teams","description_format":"text","description_chars":3055,"description_truncated":false,"requirements":{"experience_years_min":9,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Information Security","Homeland Security"],"lifecycle":[{"event":"open","at":"2026-10-13T15:17:08Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":42,"reasons":["conf:0","win:early"],"computed_at":"2026-10-13T23:43:53Z"},"pay":null,"html_url":"https://alion.io/job/punch-cyber-cyber-security-engineer-firewall","json_url":"https://alion.io/job/punch-cyber-cyber-security-engineer-firewall.json","meta":{"generated_at":"2026-10-13T23:43:53Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":36160,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-14T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":695911},"rest":"https://alion.io/mcp/rest/get_company?id=695911"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fpunch-cyber-cyber-security-engineer-firewall"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fpunch-cyber-cyber-security-engineer-firewall"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fpunch-cyber-cyber-security-engineer-firewall"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/punch-cyber-cyber-security-engineer-firewall\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fpunch-cyber-cyber-security-engineer-firewall"}]}