Cyber Security Engineer – Firewall

PUNCH Cyber Analytics Group

. Support a large Federal agency .

Posted 10/13/2026full-timeRemote • Virginia • United StatesSeniorLeadWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in configuring and managing FortiGate firewalls, implementing security controls in compliance with NIST 800-53, and performing network troubleshooting. Proficient in network scripting and automation, with a strong ability to support security architecture and incident response initiatives.

Highest-signal resume keywords

FortiGate Firewall ConfigurationNIST 800-53 ComplianceNetwork TroubleshootingFortinet NSE 4 CertificationIncident Response Support

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Network RoutingNetwork SwitchingNetwork ScriptingOSI Model ProficiencyIPsec VPN ConfigurationSSL VPN ConfigurationFirewall Policy ManagementNetwork SegmentationSecurity Event MonitoringAutomation with Python

Soft Skills

Team CollaborationFlexibility for After Hours Support

Tools & Technologies

FortiManagerFortiAnalyzerRADIUSLDAPActive DirectoryMFA

Certifications & Qualifications

Fortinet NSE 4 CertifiedFortinet Certified Professional (FCP)

Industry Keywords

Federal Agency SupportNext Generation FirewallSecurity ArchitectureNetwork Security DocumentationIncident Response Teams

Tech Stack

Tools & technologies

FirewallsPythonSwitching

About the role

Key responsibilities & impact

Support a large Federal agency
Apply configurations on perimeter routers, firewalls, and security controls in accordance with NIST 800-53
Provide recommendations regarding DOI perimeter UTM devices in accordance with NIST 800-53 and industry best practices for Fortigate products
Configure, deploy, and maintain FortiGate firewalls
Create and manage firewall policies, NAT, VIPs, and security rules
Configure IPsec and SSL VPNs for remote and site-to-site connectivity
Manage FortiManager for centralized firewall administration
Monitor security events and logs using FortiAnalyzer
Implement network segmentation using VLANs and security zones
Troubleshoot firewall, routing, VPN, and connectivity issues
Perform firewall rule reviews and remove obsolete or overly permissive rules
Develop and maintain firewall/network security documentation
Create security reports and dashboards for management or compliance requirements
Configure authentication integrations such as RADIUS, LDAP, Active Directory, and MFA
Perform network troubleshooting using packet captures, routing tables, logs, and FortiGate diagnostic commands
Participate in security architecture and network design projects
Test firewall policies and security controls after configuration changes
Automate repetitive security/network tasks using Python, APIs, or FortiManager automation

Requirements

What you’ll need

Candidates must be located in the United States
7 years of experience with a bachelor’s degree or 9 years of total experience
Proficient in network, routing, and switching
Proficient in network scripting
Proficient with OSI Models Layers 1-7 and network troubleshooting
Ability to work in both an individual and team environment
Flexibility to support after hours maintenance activities
Must be able to obtain a Position of Public Trust from Dept. of Interior
Fortinet NSE 4 Certified and/or Fortinet Certified Professional (FCP) preferred
Next Generation Firewall experience, preferably Fortinet
Experience supporting Incident Response (IR) Teams

Benefits

Comp & perks

Unique benefits and personal touches to provide a positive work-life experience
Flexibility to support after hours maintenance activities