Engineer II - Firewall

Engineer II – Firewall – Frontier Airlines

The Firewall Engineer II is an experienced, competent, and hands‑on firewall engineer who serves as a Subject Matter Expert (SME) within the Frontier Firewall Engineering team. The role is responsible for the availability, reliability, and administration of Frontier’s firewall environments including installation, configuration, hardening, and 24‑hour monitoring and support (Firewall On‑Call) for incident management. Duties may extend to connection interfaces supporting IT systems, System Operations Center (SOC), telecommunications, and all other entities dependent upon firewall environments for connectivity.

• Administration of Checkpoint and Cisco NGFWs including deep packet inspection technologies
• Configure and maintain firewall routing and switching protocols within the firewall environments such as BGP, OSPF, VRRP, VLANs, and QoS
• Configure and maintain SD‑WAN firewall technology that supports Frontier’s extended networks via MPLS, broadband, and cellular
• Architectural assistance in design, configuration, implementation, and support of Frontier’s core and extended (station & BPO) firewall environments
• Monitor, respond, troubleshoot, and respond to incidents related to connectivity loss within Frontier’s firewall environments
• Communicate to the Major Incident Management (MIM) team and executive‑level staff on firewall issues and required corrective action to support time‑sensitive decisions
• Determine MTTR, possible short‑term fixes, prioritize services for critical needs of the network, and implement corrective actions in the event of a “firewall incident”
• Architectural assistance in analysis, design, and administration of Frontier’s Info Sec posture to defend against Info Sec deficiencies and potential breaches
• Recommend process improvements to ensure hardened firewall environments
• Provide regular status updates to leadership and the PMO on existing projects and support activities
• Support various firewall projects while collaborating with other IT and business departments to determine requirements and meet project milestones
• Provide Level‑3 escalation support for the maintenance and troubleshooting of the WAN and LAN firewall connections
• Develop and implement scripts for automated change deployment
• Implement and maintain firewall engineering policies and procedures to ensure network availability and compliance with Info Sec standards including, but not limited to, Sarbanes‑Oxley (SOX) and Payment Card Industry (PCI)
• Create and maintain detailed firewall documentation including related updates to Solar Winds
• Ensure currency and enforcement of all Info Sec policies as they relate to Frontier’s enterprise network
• Work within the Change Management (CM) process for production firewall changes
• Utilize network monitoring tools and syslog files to verify healthy operations and identify potential network/firewall problems

• Associate’s or Bachelor’s degree (Computer Science, Computer Engineering, or Computer Information Security preferred) OR minimum of seven (7) years of demonstrable professional experience and continuing education
• Current technical certification(s) such as CISSP, CCSA, CCSE, CCSM, SANS, CCNA Security, CCNP Security, Cisco ASA or Firewall Specialist, OR 1‑3 years of Checkpoint or Cisco NGFW administration

• Checkpoint installation, configuration, and administration
• Cisco NGFW installation, configuration, and administration preferred
• TCP/IP routing and switching protocols such as BGP, OSPF, QoS, VRRP, and VLANs
• Network Address Translation (NAT)
• Firewall policy analysis, review, and hardening
• Network management tools such as Solar Winds (including Net Flow Analyzer), Nessus, Wireshark, Nmap, PAM, MFA, and Kiwi
• Firewall scripting
• Networking media such as CAT5, CAT6, SMF, MMF, and Small Form‑factor Pluggable (SFP)
• Cloud security installation and maintenance in Azure or AWS including related firewall services preferred
• Checkpoint Maestro Hyperscale Network Security preferred
• Versa, Fortinet, or HPE/Aruba SD‑WAN technology preferred
• SIEM technologies such as Splunk, QRadar, McAfee, or Azure…