Job description

About Us: PUNCH Cyber Analytics Group (PUNCH) is a Virginia-based, small business founded in 2012 operating as a cohesive team that incorporates the sum of our group’s diverse skills, talents, and resources toward our collective passion: advancing data analytics to impact cyber operations. PUNCH is a two-time Inc. Magazine ‘Best Workplaces’ awardee offering unique benefits and personal touches to provide a positive work-life experience for our team. PUNCH brings unique qualifications, resources, and past-performance that make us suitable to address the goals of our diverse customer-base. Further, we have past and current experience supporting cyber operations and cyber ML-based research, with well over 100 years of collective experience from our collaborative, multi-disciplinary team. Responsibilities The selected candidate will support a large Federal agency. Candidates must be located in the United States. • Apply configurations on perimeter routers, firewalls, and security controls IAW NIST 800-53 • Provide recommendations regarding DOIs perimeter UTM devices IAW NIST 800-53 and industry best practices for Fortigate products • Configure, deploy, and maintain FortiGate firewalls . • Create and manage firewall policies, NAT, VIPs, and security rules. • Configure IPsec and SSL VPNs for remote and site-to-site connectivity. • Manage FortiManager for centralized firewall administration. • Monitor security events and logs using FortiAnalyzer . • Implement network segmentation using VLANs and security zones. • Troubleshoot firewall, routing, VPN, and connectivity issues. • Perform firewall rule reviews and remove obsolete or overly permissive rules. • Develop and maintain firewall/network security documentation. • Create security reports and dashboards for management or compliance requirements. • Configure authentication integrations such as RADIUS, LDAP, Active Directory, and MFA . • Perform network troubleshooting using packet captures, routing tables, logs, and FortiGate diagnostic commands. • Participate in security architecture and network design projects. • Test firewall policies and security controls after configuration changes. • Automate repetitive security/network tasks using Python, APIs, or FortiManager automation. Minimum Qualifications: To be considered for this position, you must minimally meet the knowledge, skills, and abilities listed below: • 7 years of experience with a bachelor’s degree or 9 years of total experience • Proficient in network, routing, and switching. • Proficient in network scripting • Proficient with OSI Models Layers 1-7 and network troubleshooting. • Ability to work in both an individual and team environment • Flexibility to support after hours maintenance activities • Must be able to obtain a Position of Public Trust from Dept. of Interior Preferred Qualifications: Candidates with these desired skills will be given preferential consideration: • Fortinet NSE 4 Certified and/or Fortinet Certified Professional (FCP) • Next Generation Firewall Experience, preferably Fortinet. • Experience support Incident Response (IR) Teams

Requirements

Must-haves

The selected candidate will support a large Federal agency. Candidates must be located in the United States.
Apply configurations on perimeter routers, firewalls, and security controls IAW NIST 800-53
Provide recommendations regarding DOIs perimeter UTM devices IAW NIST 800-53 and industry best practices for Fortigate products
Configure, deploy, and maintain FortiGate firewalls .
Create and manage firewall policies, NAT, VIPs, and security rules.
Configure IPsec and SSL VPNs for remote and site-to-site connectivity.
Manage FortiManager for centralized firewall administration.
Monitor security events and logs using FortiAnalyzer .
Implement network segmentation using VLANs and security zones.
Troubleshoot firewall, routing, VPN, and connectivity issues.
Perform firewall rule reviews and remove obsolete or overly permissive rules.
Develop and maintain firewall/network security documentation.
Create security reports and dashboards for management or compliance requirements.
Configure authentication integrations such as RADIUS, LDAP, Active Directory, and MFA .
Perform network troubleshooting using packet captures, routing tables, logs, and FortiGate diagnostic commands.
Participate in security architecture and network design projects.
Test firewall policies and security controls after configuration changes.
Automate repetitive security/network tasks using Python, APIs, or FortiManager automation.
To be considered for this position, you must minimally meet the knowledge, skills, and abilities listed below:
7 years of experience with a bachelor’s degree or 9 years of total experience

Nice-to-haves

Candidates with these desired skills will be given preferential consideration:
Fortinet NSE 4 Certified and/or Fortinet Certified Professional (FCP)
Next Generation Firewall Experience, preferably Fortinet.
Experience support Incident Response (IR) Teams

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

mlpython

Platform: breezy
Effort: medium