Security Firewall Administrator

Location: Chicago, IL Onsite Only
Candidates must be able to work onsite at Chicago-area data center locations, including O’Hare and Midway. This is not a remote position.

• Configure, administer, maintain, and troubleshoot Palo Alto, Fortinet, Cisco, and related enterprise network security platforms.

• Manage firewall policies, ACLs, NAT/PAT, segmentation, logging, VPN connectivity, routing, switching, and LAN security controls.

• Troubleshoot enterprise network and firewall issues using ICMP, DNS, packet analysis, logs, command-line tools, and monitoring platforms.

• Configure and support routing protocols including OSPF, BGP, static routing, and related enterprise network services.

• Configure and troubleshoot TCP/IP, IP subnetting, spanning-tree protocols, VLANs, trunking, tunneling, vPCs, switch stacks, and VSS.

• Support IPsec VPN configuration, troubleshooting, and connectivity.

• Perform IOS upgrades, password recovery, and related network maintenance activities.

• Support Infoblox and DNS architecture where applicable.

• Monitor network security environments using tools such as Panorama, FortiManager, Cisco DNA Center, Cisco Prime, Cisco ISE, SolarWinds, or similar platforms.

• Support incident response, outage troubleshooting, service restoration, and escalation activities.

• Maintain accurate incident, service request, and change-management documentation in ServiceNow.

• Develop implementation plans, test plans, contingency plans, backout plans, firewall change documentation, network diagrams, and operational procedures.

• Coordinate work with project managers, technical leads, vendors, client stakeholders, and internal infrastructure teams.

• Contribute to consistent change-management, documentation, security, and operational procedures.

• Perform other network and security-related activities as assigned.

• 5+ years of enterprise network engineering, firewall administration, or network security operations experience.

• Strong hands-on experience administering and troubleshooting enterprise firewall and network environments.

• Palo Alto PCCET certification or equivalent experience.

• Fortinet NSE 1–3 or higher, or equivalent experience.

• Strong understanding of firewall rules, ACLs, NAT/PAT, network segmentation, logging, and security policy enforcement.

• Hands-on knowledge of TCP/IP, IP subnetting, routing, switching, VLANs, trunking, spanning tree, and enterprise network architecture.

• Experience configuring and troubleshooting OSPF, BGP, static routing, and related network protocols.

• Experience with IPsec VPN technologies.

• Strong incident-management, troubleshooting, escalation, and change-control discipline.

• Experience using ServiceNow or a similar enterprise ticketing and change-management platform.

• Strong Microsoft Visio or network diagramming skills.

• Excellent customer service, written communication, verbal communication, documentation, and problem-solving skills.

• Ability to work effectively across client, vendor, technical, and management teams.

• Cisco CCNA or CCNP.

• Additional Palo Alto, Fortinet, Cisco, or network security certifications.

• Experience with Panorama, FortiManager, Cisco DNA Center, Cisco Prime, Cisco ISE, SolarWinds, or similar enterprise management platforms.

• Experience with Infoblox and DNS architecture.

• College degree in information technology, cybersecurity, networking, computer science, or a related field.

• Experience supporting highly regulated, mission-critical, or airport technology environments.

• Ability to work onsite at Chicago O’Hare and Chicago Midway airports as the standard work arrangement.

• Must be able to pass a TSA background check.

• Valid Driver’s License or State ID required.

• Ability to support incident response, maintenance windows, and other operational requirements as needed.

Pay: $130,000–$150,000 annually, negotiable, plus benefits

Location: Chicago, IL – City of Chicago Airports

Work Arrangement: Onsite; this is not a remote position.