Lead Infrastructure Engineer: Firewall

Job responsibilities

• Applies technical expertise and problem-solving methodologies to projects of moderate scope and executes creative solutions for design, development, and technical troubleshooting for problems of moderate complexity
• Uses enterprise-authorized AI capabilities within the work environment to accelerate infrastructure analysis and design documentation, validating outputs and handling operational data according to sensitivity and security requirements.
• Drives a workstream or project consisting of one or more infrastructure engineering technologies and works with other platforms to architect and implement changes required to resolve issues and modernize the organization and technology processes
• Strongly considers upstream and downstream data and systems or technical implications and advises on mitigation actions
• Applies reuse-first, AI-assisted practices within delivery and automation routines to identify recurring issues and validate remediation options, ensuring changes are traceable/auditable and aligned to resiliency and security expectations.
• Design, implement, and manage enterprise firewall infrastructure, with hands-on expertise in Check Point, Fortinet, Palo Alto, and Tufin policy orchestration platforms
• Develop and maintain automation scripts for device provisioning and operational tasks, while establishing engineering standards and technical artifacts for certified technology products
• Develop implementation and operational documentations 
• Acting as the escalation point for Network Operations and Service Delivery teams  
• Cross-team coordination and collaboration with stakeholders

Required qualifications, capabilities, and skills

• Formal training or certification on infrastructure engineering concepts and 5+ years of firewall and network security design, engineering and implementation experience within a large enterprise environment
• Deep knowledge of one or more areas of infrastructure engineering such as: hardware, networking terminology, databases, storage engineering, deployment practices, integration, automation, scaling, resilience or performance assessments
• Demonstrated experience using enterprise-authorized AI capabilities within the work environment to support infrastructure engineering workflows with strong validation habits and awareness of data sensitivity.
• Ability to review and validate AI-assisted recommendations before implementation, escalating when uncertain and ensuring outcomes align to resiliency, security, and auditability expectations.
• Deep knowledge of one specific infrastructure technology and scripting languages
• Deep knowledge of cloud infrastructure and multiple cloud technologies with the ability to operate in and migrate across public and private clouds
• Knowledge and experience on DMZ and other boundary network architecture 
• Software development experience in one or more general purpose programming/scripting/DevOps languages: Python, Ansible, Terraform, JSON
• Understanding of micro-services, CI/CD pipelines such as Jenkins, APIs & In-depth knowledge TCP/IP and routing 

• Experience with network security technologies such as proxy and load balancer  

• Experience working with Agile methodologies like Kanban & Scrum