Firewall Network Engineer

Concept Solutions is seeking a Network Engineer specializing in Firewall Support to join our Infrastructure Support Team supporting the Federal Aviation Administration (FAA) Infrastructure & Operations (I&O) Program. This position is part of the Networks Group and plays a critical role in protecting and securing the FAA's enterprise network infrastructure that supports thousands of users and mission-critical aviation systems across the National Airspace System (NAS).

The Firewall Network Engineer will support day-to-day operations, cybersecurity initiatives, and infrastructure projects focused on maintaining a secure, resilient, and compliant network environment.

Work Location and Schedule

• Location Atlantic City, NJ
• Schedule: 40 hours per week, Monday through Friday, with core working hours from 9:00 a.m. to 3:00 p.m. local time. Monday through Friday, core hours 9:00 AM to 3:00 PM local time
• Telework may be permitted when determined to be in the best interest of the Government
• U.S. Citizenship required
• FAA Personnel Suitability clearance required (AMS 3.14-2)

Responsibilities

• Manage multiple Check Point Firewall clusters supporting the FAA Internet Access Point (IAP).
• Manage and support the Zscaler Zero Trust platform, including Internet Access (ZIA), Private Access (ZPA), and Digital Experience (ZDX).
• Implement and manage advanced security capabilities including Intrusion Prevention System (IPS), Anti-Virus, Anti-Bot, Data Loss Prevention (DLP), SSL Interception, and Identity Awareness.
• Monitor, prevent, identify, investigate, and remediate cybersecurity events and threats.
• Participate in annual security assessments, remediation efforts, and compliance activities, including POAM tracking and Trusted Internet Connection (TIC) compliance requirements.
• Support annual Cybersecurity Test Facility exercises, including the development and enhancement of incident response procedures.
• Manage traffic and audit logs for enterprise security systems and maintain historical data supporting Security Information and Event Management (SIEM) applications.
• Collaborate with network, security, and operations teams to ensure the availability, integrity, and security of enterprise network services.