Senior Juniper SRX Firewall Engineer

Accountabilities: As a Senior Juniper SRX Firewall Engineer, you will oversee day-to-day firewall operations, resolve technical challenges, and ensure the security and availability of critical network services. Your responsibilities will include: Administer, configure, and maintain Juniper SRX firewalls, including edge and core devices, across a large enterprise and multi-tenant environment. Create, modify, review, and implement firewall rules and security policies based on agency and project requirements. Build, manage, and troubleshoot IPsec site-to-site and remote-access VPN connections using IKE and IKEv2 protocols. Diagnose and resolve network connectivity and traffic-flow issues using command-line tools, session and flow analysis, system logs, and packet-level troubleshooting. Execute planned network changes, firewall upgrades, and maintenance activities while preparing detailed documentation and rollback plans. Respond to escalated and critical incidents affecting network availability, connectivity, or security. Collaborate directly with agency IT teams and system owners to understand technical requirements and implement secure, reliable firewall configurations. Coordinate with network engineering and cybersecurity teams to maintain alignment between security policies, network architecture, and incident response procedures. Schedule infrastructure changes according to the operational requirements of public safety and other mission-critical services. Communicate technical issues, planned changes, and potential service impacts clearly to both technical and non-technical stakeholders. Maintain accurate documentation of firewall configurations, operational standards, and technical procedures. Support the expansion and administration of Palo Alto firewall infrastructure, with training provided when necessary. Requirements The ideal candidate is a hands-on network security professional with deep expertise in Juniper SRX firewall administration, VPN technologies, and enterprise network troubleshooting. You should bring: 5+ years of direct experience administering and troubleshooting Juniper SRX firewalls running Junos OS. Experience limited to Juniper switches and routers is not sufficient. Strong command-line interface (CLI) skills, including configuring firewall policies, security zones, Network Address Translation (NAT), and VPNs without relying exclusively on graphical interfaces. Proven experience troubleshooting IPsec, IKE, and IKEv2 VPN connectivity. Solid understanding of routing, switching, and enterprise networking fundamentals. Experience supporting large enterprise environments or multi-customer network infrastructures. Strong analytical and troubleshooting skills, with the ability to independently investigate and resolve complex technical issues. Excellent written and verbal communication skills, including the ability to explain technical problems to non-networking stakeholders. Willingness and ability to complete a practical, hands-on technical assessment as part of the interview process. Ability to successfully pass a background check. Nice to have: Hands-on experience with Palo Alto firewalls or related network security technologies. Familiarity with Juniper Security Director, Junos Space, or other centralized firewall management platforms. Experience managing high-end Juniper SRX platforms, particularly the SRX4000 or SRX5000 series, in edge or data center environments. Previous experience supporting government, municipal, or public safety network environments. Juniper professional certifications such as JNCIS-SEC, JNCIP-SEC, or higher. Benefits Competitive compensation. Comprehensive healthcare coverage, including medical, dental, and vision insurance. 401(k) retirement savings plan. Paid time off, including vacation, sick leave, and public holidays. Fully remote work arrangement. Full-time W2 consulting employment. Opportunity to work on mission-critical enterprise network security infrastructure. Exposure to Palo Alto firewall technologies, with training opportunities provided as needed.