DescriptionJob Title Firewall Admin / Engineer (Cybersecurity Technical Staff 1/2)
Location Los Alamos, NM, US
Organization Name ISD-NS/Network Services
Minimum Salary
Maximum Salary
This position is open for external candidates only to apply. What You Will Do This position will be filled at either the Cybersecurity Technical Staff 1 or 2 level, depending on the skills of the selected candidate. Additional job responsibilities (outlined below) will be assigned if the candidate is hired at the higher level. As a key member of the Edge Security Team in the Infrastructure Service Division - Network Services Group (ISD-NS), you'll administer and maintain our core and perimeter firewalls while monitoring complex, mission-critical networks. You'll tackle some of the most challenging and rewarding work in the field, supporting the day-to-day operations of our team including firewalls, DNS, load balancers, remote access solutions, underlying network services, and cross-domain solutions across both unclassified and classified environments. If you're passionate about technology and security and want to make a real impact, we want to hear from you.
Cybersecurity Technical Staff 1 - $87,800 - $143,000 As a Cybersecurity Technical Staff 1 you will do the following:
- Respond to firewall requests
- Respond to service incidents / outages
- Implement Firewall policies
- Monitor firewall logs and alerts for security events and anomalies
- Perform basic troubleshooting of firewall connectivity issues
- Document firewall rule changes and maintain accurate configuration records
- Review and validate firewall rule requests for completeness and accuracy
- Support firewall performance monitoring and capacity planning activities
- Collaborate with cross-functional teams to resolve network security issues
- Maintain knowledge of current firewall technologies and security best practices
- Generate routine reports on firewall usage, traffic patterns, and rule utilization
Cybersecurity Technical Staff 1 - $96,600 - $158,000 In addition to what was outlined at the lower level, at this level:
- OS upgrades
- Device configurations and standards
- Lead complex firewall implementation projects and migrations
- Perform advanced troubleshooting and root cause analysis for critical incidents
- Design and optimize firewall rulesets for performance and security
- Develop and maintain firewall configuration standards and best practices documentation
- Conduct security assessments and audits of firewall policies
What You Need
Minimum Job Requirements: - Hands-on experience with enterprise firewall technologies (e.g., Juniper, Palo Alto, Cisco ASA)
- Working knowledge of network protocols (TCP/IP, DNS, DHCP, VPN, routing protocols)
- Basic understanding of cybersecurity principles and defense-in-depth concepts
- Experience with network monitoring and troubleshooting tools
- Demonstrated analytical and problem-solving abilities with strong written and verbal communication skills
- Ability to work independently and as part of a team
Additional Job Requirements for level 2:
In addition to the requirements outlined above, qualification at the higher level requires: - Advanced experience in firewall administration and network security inlcuding leading firewall implementations, infrastructure upgrades, and related projects.
- Proficiency with multiple enterprise platforms and technologies such as, Loadbalancers, VPNS, & DNS
- Strong understanding of compliance frameworks (NIST, DISA STIGs, FISMA, etc.)
- Demonstrated ability to perform complex root cause analysis and develop remediation strategies
- Experience with change management processes and presenting technical recommendations to leadership
- Knowledge of security architecture concepts like zero-trust and integration with related technologies (IDS/IPS, SIEM, proxies)
- Ability to work with minimal supervision and make critical decisions during high-pressure situations
Education/Experience at lower level:
Position requires a Bachelor's Degree in Computer Science, Information Systems or related field from an accredited institution and 2 years related experience; or, an equivalent combination of education and experience directly related to the occupation.
Education/Experience at higher level:
Position requires a Bachelor's Degree and 5 years related experience; or, an equivalent combination of education and experience directly related to the occupation. At this level, vendor and/or professional certifications are desirable and post graduate course work may be expected. Desired Qualifications: - Proven experience with employee performance management.
- Strong background with purchasing and budgeting.
- Proven ability to quickly adapt to changing priorities in a fast-paced environment.
- Active DOE-Q Clearance.
Essential Job Functions (can perform with or without reasonable accommodation):Lifting 30+ pounds, ability to operate a motor vehicle, standing, bending, stooping, squatting, prolonged sitting and typing, climb ladders, distinguishing color-coded cables, reading small text on equipment, and troubleshooting auditory signals, working in, or in close proximity to, server rooms (loud noises, cool temperatures).
Work Location : The work location for this position is onsite and located in Los Alamos, NM. All work locations are at the discretion of management.
Position commitment: Regular appointment employees are required to serve a period of continuous service in their current position in order to be eligible to apply for posted jobs throughout the Laboratory. If an employee has not served the time required, they may only apply for Laboratory jobs with the documented approval of their Division Leader. The position commitment for this position is 1 Year.
Note to Applicants: - Employee will be required to participate in an on-call rotation and work occasionally on non-standard hours (nights and weekends)
- Along with your resume, a detailed cover letter is required explaining how you meet each of the minimum requirements and applicable desired qualifications.
- While the posted salary range for each position is broad, it is highly unusual for selected applicants to be hired at the top end of the range and more common for selected candidates to grow into the full salary band over time.
- Due to federal restrictions contained in the current National Defense Authorization Act, citizens of the People's Republic of China, the Islamic Republic of Iran, the Democratic People's Republic of North Korea, and the Russian Federation, who are not Lawful Permanent Residents ("green card" holders) are prohibited from accessing facilities that support the mission, functions, and operations of national security laboratories and nuclear weapons production facilities, which includes Los Alamos National Laboratory.
Employment Status Full Time
Appointment Type Regular
Regular
Contact Details
Contact Name Vigil, Brittany Rose
Email [email protected]
Work Telephone 
