Network Administrator II

KeyLogic LLC is seeking a Network Administrator - Firewalls expert who is responsible for the configuration, management, and security of firewall infrastructure to protect enterprise networks from unauthorized access and cyber threats. This role requires expertise in managing Palo Alto and Cisco ASA firewalls, troubleshooting network security issues, and ensuring compliance with security best practices.

Location: Lakewood, CO onsite
Must be a US Citizen

Job Responsibilities:
Manage and configure Palo Alto and Cisco ASA firewalls, including setting up security policies, access control lists (ACLs), and network address translations (NAT).
Monitor and analyze firewall logs to detect, investigate, and respond to potential security incidents or breaches.
Troubleshoot and resolve firewall-related network issues, ensuring minimal downtime and maximum security.
Perform firmware updates, patching, and upgrades to keep firewalls up to date and secure.
Collaborate with the security team to implement firewall best practices and enhance network security.
Assist with network performance monitoring, optimizing firewall configurations for efficient traffic flow without compromising security.
Participate in network security audits, providing recommendations to strengthen firewall defenses and overall network security posture.
Create and maintain documentation for firewall configurations, security policies, and incident response procedures.
Provide support during network troubleshooting, ensuring a rapid response to security events and network outages.

Qualifications:
Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field (or equivalent experience).
3-5 years of hands-on experience managing Palo Alto and/or Cisco ASA firewalls in enterprise environments.
Strong knowledge of firewall rule configurations, ACLs, NAT, VPNs, and threat prevention.
Proficiency in firewall log analysis and SIEM tools for security event detection.
Experience with network protocols (TCP/IP, BGP, OSPF, VLANs, DNS, DHCP) and troubleshooting.
Familiarity with network security best practices, Zero Trust principles, and industry compliance frameworks (NIST, CIS, ISO 27001, etc.).
Scripting experience with Python, PowerShell, or automation tools is a plus.

Preferred Qualifications:
Palo Alto Networks Certified Network Security Engineer (PCNSE)
Certified Information Systems Security Professional (CISSP)
Cisco Certified Network Associate - Security (CCNA Security) or equivalent.

Other:
Must be a US Citizen and be able to pass a federal background investigation and obtain a Public Trust.
This position may require the ability to operate a government vehicle. The incumbent must be at least 18 years of age, able to obtain and maintain Defensive Drivers certification and have a valid state driver's license.

Physical Demands and Working Conditions:
Listed below are the physical or mental requirements necessary for the job's performance. Reasonable accommodation may be made to enable individuals with disabilities to perform essential job functions:
Prolonged periods of computer desk work.
Dexterity of hands and fingers to operate a computer keyboard and other computer components.
Speaking and hearing are sufficient to converse and understand conversations, both in-person, telephone, and virtual meetings.
The cognitive skills needed to complete tasks, including abilities such as learning, remembering, focusing, categorizing, and integrating information for decision-making, problem- solving, and comprehending.
Ability to learn new tasks, remember processes, maintain focus, complete tasks independently, make timely decisions in the context of a workflow, and the ability to communicate with managers and co-workers.
Mental aptitude to respond appropriately in high-pressure situations or deadline-driven environments.
Maintain a professional emotional response when working with others.
Ability to lift up to 25 lbs.
Bend, stretch, squat, kneel, to move equipment, set up workstations (projectors, TV screens, computers, servers, routers, printers, tools, etc.).

Salary: 85-88K/annually

About KeyLogic:

Supporting critical missions at the intersection of data and science, KeyLogic provides mission management, systems analysis, data analytics, digital transformation, and cybersecurity to customers in the energy, federal civilian, and defense sectors, with a 20+ year portfolio of successes supporting DOE, DOC, EPA, DOD, DHS, FBI, and other federal agencies challenged with complex missions. We help our customers solve the world's most challenging problems with unsurpassed anticipatory service.

KeyLogic employs over 600 team members, including systems designers, developers, data scientists, IT and cybersecurity specialists, engineers, mission experts, program managers, and more than 70 Ph.D. scientists. This multidisciplinary team works together solving challenging problems with anticipatory service-always staying one step ahead-benefiting our customers, and ultimately helping build a better world.

We are committed to the success of each customer's mission. We care enough to make their mission our mission and their success our success. We take technical service delivery to a level above our peers. Our anticipatory service is best-in-class.

All qualified applicants will receive consideration for employment at KeyLogic without regard to race; creed; color; religion; national origin; sex; age; disability; sexual orientation; gender identity or expression; genetic predisposition or carrier status; veteran, marital; or any other status protected by law. KeyLogic is proud to be an affirmative action and equal opportunity employer.

NOTE: KeyLogic is an Equal Employment/Affirmative Action employer. We do not discriminate in hiring on the basis of sex, gender identity, sexual orientation, race, color, religious creed, national origin, physical or mental disability, protected Veteran status, or any other characteristic protected by federal, state, or local law.

If you need a reasonable accommodation for any part of the employment process, please contact us by email at and let us know the nature of your request and your contact information. Request for accommodation will be considered on a case-by-case basis.

Job Code:
2537