Checkpoint Firewall Engineer 4 A' A' Job number:A' 2139Location: Washington, DCPosition Type: Full-TimeA' Trowbridge & Trowbridge is seeking a Firewall Engineer 4 to join our outstanding T&T team in Washington, DC.A' Position Responsibilities:A' A' A' Provide senior level, advanced hands-on support for Checkpoint enterprise firewalls, Cisco ASA VPN server, Cisco AnyConnect client (a must), remote (VPN) management solutions (ie, two factor authentications), AAA servers, log reporting, firewall audits and vulnerability managementAbility to take on, with minimum supervision, technical leadership roles and hold experience with enterprise security solutions, IPv4 and dynamic routing, PKI, VPN, OCSP, AD, LDAP and SecureID serversAdvanced troubleshooting skills, incident and problem management, overseeing escalations, and has a solid understanding of encryption technologiesExpert in all aspects of the firewall device installations, maintenance and usage of a large-scale local and wide area networkManages network performance and maintain a high security postureExperience in network monitoring tools such as Solarwinds, Wireshark, tcpdump, snoop (or similar network packet capturing tools)Excellent communication, documentation and presentation skillsDemonstrates organizational and project planning skills by being a visionary and a self-starter, taking charge of current operations from a high-level, covering all aspects of security operations including, but not limited to: patch management, vulnerability remediation, network security designs, working knowledge of endpoint security, client-to-site and site-to-site VPNs, IPSEC tunnels, Checkpoint firewall clustering, Checkpoint security management servers, Cisco AnyConnect profiles, ASA Clustering, wireless technologies, McAfee Web Proxy and Checkpoint URL filtering blade, project management, change management, configuration management, and schedulingA' A' A' Position Requirements: A' A' A' A' Ten (10) years of experience working in a large organization responsible for administering, operating, maintaining, and securing a network infrastructureFive (5) years of experience in a technical leadership or supervisory roleFive (5) years of experience in engineering, implementing, testing, debugging and migrating Checkpoint (R77.x and higher) and Cisco ASA VPN server (9.x and higher) along with direct Cisco AnyConnect VPN client (4.2 and higher) supportThorough knowledge of network telecommunications, endpoint security, Windows Server operating systems, and TCP/IP protocolTwo (2) years of experience supporting Web content filtering/proxy and wireless technologiesThorough knowledge of PKI and supporting technologiesThorough knowledge of network-based protocols such as Exchange, Oracle, DNS, DNSSec, DHCP, and Internet-Based Domain Naming services and registration processRegular business hours work along with scheduled maintenance weekend support (as needed)US Citizen or Green Card requiredMust be able to pass a government background checkA' A' Education and/or CertificationsA' A' A' A' Certifications desired: ITIL, CCNA Security, CCNP Security and CCSE CheckpointA' A' Clearance RequirementsA' A' Must be able to achieve and maintain a Public Trust.