Firewall Admin / Engineer (Cybersecurity Technical Staff 1/2)

What You Will Do

This position will be filled at either the Cybersecurity Technical Staff 1 or 2 level, depending on the skills of the selected candidate. Additional job responsibilities (outlined below) will be assigned if the candidate is hired at the higher level.

As a key member of the Edge Security Team in the Infrastructure Service Division - Network Services Group (ISD-NS), you'll administer and maintain our core and perimeter firewalls while monitoring complex, mission-critical networks. You'll tackle some of the most challenging and rewarding work in the field, supporting the day-to-day operations of our team including firewalls, DNS, load balancers, remote access solutions, underlying network services, and cross-domain solutions across both unclassified and classified environments. If you're passionate about technology and security and want to make a real impact, we want to hear from you.

Cybersecurity Technical Staff 1 - $87,800 - $143,000

As a Cybersecurity Technical Staff 1 you will do the following:

• Respond to firewall requests
• Respond to service incidents / outages
• Implement Firewall policies
• Monitor firewall logs and alerts for security events and anomalies
• Perform basic troubleshooting of firewall connectivity issues
• Document firewall rule changes and maintain accurate configuration records
• Review and validate firewall rule requests for completeness and accuracy
• Support firewall performance monitoring and capacity planning activities
• Collaborate with cross-functional teams to resolve network security issues
• Maintain knowledge of current firewall technologies and security best practices
• Generate routine reports on firewall usage, traffic patterns, and rule utilization

Cybersecurity Technical Staff 1 - $96,600 - $158,000

In addition to what was outlined at the lower level, at this level:

• OS upgrades
• Device configurations and standards
• Lead complex firewall implementation projects and migrations
• Perform advanced troubleshooting and root cause analysis for critical incidents
• Design and optimize firewall rulesets for performance and security
• Develop and maintain firewall configuration standards and best practices documentation
• Conduct security assessments and audits of firewall policies

What You Need

Minimum Job Requirements:

• Hands-on experience with enterprise firewall technologies (e.g., Juniper, Palo Alto, Cisco ASA)
• Working knowledge of network protocols (TCP/IP, DNS, DHCP, VPN, routing protocols)
• Basic understanding of cybersecurity principles and defense-in-depth concepts
• Experience with network monitoring and troubleshooting tools
• Demonstrated analytical and problem-solving abilities with strong written and verbal communication skills
• Ability to work independently and as part of a team

Additional Job Requirements for level 2:

In addition to the requirements outlined above, qualification at the higher level requires:

• Advanced experience in firewall administration and network security inlcuding leading firewall implementations, infrastructure upgrades, and related projects.
• Proficiency with multiple enterprise platforms and technologies such as, Loadbalancers, VPNS, & DNS
• Strong understanding of compliance frameworks (NIST, DISA STIGs, FISMA, etc.)
• Demonstrated ability to perform complex root cause analysis and develop remediation strategies
• Experience with change management processes and presenting technical recommendations to leadership
• Knowledge of security architecture concepts like zero-trust and integration with related technologies (IDS/IPS, SIEM, proxies)
• Ability to work with minimal supervision and make critical decisions during high-pressure situations

Education/Experience at lower level:

Position requires a Bachelor's Degree in Computer Science, Information Systems or related field from an accredited institution and 2 years related experience; or, an equivalent combination of education and experience directly related to the occupation.

Education/Experience at higher level:

Position requires a Bachelor's Degree and 5 years related experience; or, an equivalent combination of education and experience directly related to the occupation. At this level, vendor and/or professional certifications are desirable and post graduate course work may be expected.

Desired Qualifications:

• Proven experience with employee performance management.
• Strong background with purchasing and budgeting.
• Proven ability to quickly adapt to changing priorities in a fast-paced environment.
• Active DOE-Q Clearance.

Essential Job Functions (can perform with or without reasonable accommodation):Lifting 30+ pounds, ability to operate a motor vehicle, standing, bending, stooping, squatting, prolonged sitting and typing, climb ladders, distinguishing color-coded cables, reading small text on equipment, and troubleshooting auditory signals, working in, or in close proximity to, server rooms (loud noises, cool temperatures).

Work Location: The work location for this position is onsite and located in Los Alamos, NM. All work locations are at the discretion of management.

Position commitment: Regular appointment employees are required to serve a period of continuous service in their current position in order to be eligible to apply for posted jobs throughout the Laboratory. If an employee has not served the time required, they may only apply for Laboratory jobs with the documented approval of their Division Leader. The position commitment for this position is 1 Year.

Note to Applicants:

• Employee will be required to participate in an on-call rotation and work occasionally on non-standard hours (nights and weekends)
• Along with your resume, a detailed cover letter is required explaining how you meet each of the minimum requirements and applicable desired qualifications.
• While the posted salary range for each position is broad, it is highly unusual for selected applicants to be hired at the top end of the range and more common for selected candidates to grow into the full salary band over time.
• Due to federal restrictions contained in the current National Defense Authorization Act, citizens of the People's Republic of China, the Islamic Republic of Iran, the Democratic People's Republic of North Korea, and the Russian Federation, who are not Lawful Permanent Residents ("green card" holders) are prohibited from accessing facilities that support the mission, functions, and operations of national security laboratories and nuclear weapons production facilities, which includes Los Alamos National Laboratory.

Where You Will Work

Located in beautiful northern New Mexico, Los Alamos National Laboratory (LANL) is a multidisciplinary research institution engaged in strategic science on behalf of national security. Our generous benefits package includes:

• PPO or High-Deductible medical insurance with the same large nationwide network
• Dental and vision insurance
• Free basic life and disability insurance
• Paid maternity and parental leave
• Award-winning 401(k) (6% matching plus 3.5% annually)
• Learning opportunities and tuition assistance
• Flexible schedules and time off (paid sick, vacation, and holidays)
• Onsite gyms and wellness programs
• Extensive relocation packages (outside a 50 mile radius)

Additional Details

Directive 206.2 - Employment with Triad requires a favorable decision by NNSA indicating employee is suitable under NNSA Supplemental Directive 206.2. Please note that this requirement applies only to citizens of the United States. Foreign nationals are subject to a similar requirement under DOE Order 142.3A.

Clearance: Q (Position will be cleared to this level). Selected applicants will be subject to a background investigation conducted by or on behalf of the Federal Government, and must meet eligibility requirements* for access to classified matter. This position requires a Q clearance, and obtaining such clearance requires US Citizenship except in extremely rare circumstances. Dependent upon the position, additional authorization to access classified information may be required, which may or may not be available to dual citizens. Receipt of a Q clearance and additional access authorization ultimately is a decision of the Federal Government and not of Triad.

• Eligibility requirements: To obtain a clearance, an individual must be at least 18 years of age; U.S. citizenship is required except in very limited circumstances. See DOE Order 472.2 for additional information.

New-Employment Drug Test: The Laboratory requires successful applicants to complete a new-employment drug test and maintains a substance abuse policy that includes random drug testing. Although New Mexico and other states have legalized the use of marijuana, use and possession of marijuana remain illegal under federal law. A positive drug test for marijuana will result in termination of employment, even if the use was pre-offer.

Regular position: Term status Laboratory employees applying for regular-status positions are converted to regular status.

Equal Opportunity: Los Alamos National Laboratory is an equal opportunity employer. All employment practices are based on qualification and merit, without regard to protected categories such as race, color, national origin, ancestry, religion, age, sex, gender identity, sexual orientation, marital status or spousal affiliation, physical or mental disability, medical conditions, pregnancy, status as a protected veteran, genetic information, or citizenship within the limits imposed by federal, state, and local laws and regulations. The Laboratory is also committed to making our workplace accessible to individuals with disabilities and will provide reasonable accommodations, upon request, for individuals to participate in the application and hiring process. To request such an accommodation, please send an email to [email protected] or call (505)-664-6947.