Network Security & Firewall Engineer

Introduction

The Department of Information Technology (DoIT) provides support to state agencies, the Executive Office of the Governor, the Governor's coordinating offices, and a variety of independent agencies within the Executive Branch.

Striving to provide the highest level of customer service to its internal and external customers, DoIT supports Maryland's agencies and commissions through its leadership and strategic direction for Information Technology and Telecommunications, establishing a long range, target technology architecture, encouraging cross agency collaboration and advocating best practices for operations and project management.

GRADE

STD 0023

LOCATION OF POSITION

100 Community Place, Crownsville, MD 21032

Main Purpose of Job

Supporting multiple state agencies, the Network Firewall Engineer is primarily responsible for designing, implementing, managing, and troubleshooting complex Palo Alto Networks firewalls, including configuration of security policies, application control, threat prevention, VPNs, and network segmentation, while also providing expert technical support, performing capacity planning, and ensuring the overall security posture of the network infrastructure.

This role requires meticulous attention to detail, strong organizational skills, and the ability to manage multiple tasks simultaneously. Candidate must be familiar with change management process, ServiceNow ticketing systems, and will be expected to document status updates and perform problem resolutions.

Candidate will be expected to participate in technical discussions with multi-functional teams, creating an environment of transparency that ultimately leads to better products, better working environments, and better cybersecurity. Candidates' quick thinking and support to our agency clients will provide the fast assistance they need to keep their environment secure - which means you'll need to move quickly, thoughtfully, and provide technical assistance as needed (often, in high pressure situations). The candidate will be expected to provide Firewall Audit support as well.

MINIMUM QUALIFICATIONS

Experience: Eight years of experience designing and implementing complex data communications or telecommunications networks.

Notes:

1. Candidates may substitute a bachelor's degree from an accredited college or university in Computer Information Technology, Management Information Systems, Computer Science or other information technology related field of study to include coursework in database management systems for up to four years of the required experience.

2. Candidates may substitute additional graduate education at an accredited college or university, at the rate of thirty credit hours for each year of the required experience.

3. Candidates may substitute the U.S. Armed Forces military service experience in Database Administration classifications or Database Administration specialty codes in the Information Technology field of work on a year for year basis for the required experience and education.

DESIRED OR PREFERRED QUALIFICATIONS

- Four years of hands-on experience with Palo Alto Network firewalls and security platforms, with a preference for managing various (peer-to-peer, client-server, hybrid, cloud-based, and software-defined) network architectures.

- Three years expertise implementing core protocols like TCP/IP and BGP, alongside security concepts such as IPS/IDS, VPNs, SSL decryption, and NAT.

- Scripting and Automation: One year experience in DevOps scripting and automation using tools such as Ansible, Puppet, Chef, and/or Terraform.

SPECIAL REQUIREMENTS

Employees in this classification may be subject to call-in 24 hours a day and, therefore, may be required to provide the employing agency with a telephone number where the employee can be reached. Employees may be furnished with a pager or cell phone.

Applicants for this classification may handle sensitive data. This will require a full scope background investigation prior to appointment. A criminal conviction may be grounds for rejection of the applicant.

Employees may occasionally be required to travel to field locations and must have access to an automobile in the event a state vehicle cannot be provided. Standard mileage allowance will be paid for use of a privately owned vehicle.

SELECTION PROCESS

Please make sure that you provide sufficient information on your application to show that you meet the qualifications for this recruitment. All information concerning your qualifications must be submitted by the closing date. We will not consider information submitted after this date. Successful candidates will be ranked as Best Qualified, Better Qualified, or Qualified and placed on the eligible (employment) list for at least one year.

EXAMINATION PROCESS

The assessment may consist of a rating of your education, training, and experience related to the requirements of the position. It is important that you provide complete and accurate information on your application. Please report all experience and education that is related to this position.

BENEFITS

STATE OF MARYLAND BENEFITS

FURTHER INSTRUCTIONS

Online applications are highly recommended. However, if you are unable to apply online, the paper application and supplemental questionnaire may be submitted to: Department of Budget and Management, Recruitment and Examination Division, 301 W. Preston St., Baltimore, MD 21201. Paper application materials must be received in our office by the closing date for the recruitment. No postmarks will be accepted.

For questions regarding this recruitment, please contact the DBM Recruitment and Examination Division at or , MD TTY Relay Service 1-.

We thank our Veterans for their service to our country.

People with disabilities and bilingual candidates are encouraged to apply.

As an equal opportunity employer, Maryland is committed to recruitment, retaining and promoting employees who are reflective of the State's diversity.