Unisys
From Unisys's careers page
Status: listed on the employer's own careers page when we last checked (daily). Confirm on their site before applying.
What success looks like in this role: Skill Set: Firewall Security Engineer (Basic Troubleshooting, Fortinet and Palo Alto, Any Firewall Experience) 1.
Skill Set: Firewall Security Engineer (Basic Troubleshooting, Fortinet and Palo Alto, Any Firewall Experience)
1. Core Firewall Skills
Fortinet FortiGate
Understanding of FortiOS CLI and GUI navigation
Interface, zone, and VDOM configuration (including HA pairs such as FGT-A/B)
Firewall policy creation, review, and troubleshooting (source, destination, service, NAT, security profiles)
Routing: static routes, BGP, OSPF, and policy-based routing
Basic VPN troubleshooting (IPsec site-to-site, SSL VPN)
HA status checks (get system ha status), failover validation, and config sync
Session and traffic troubleshooting: diagnose sniffer packet, diagnose debug flow, get router info bgp, session table review
Log review and threat/event analysis via FortiAnalyzer or FortiGate logs
Firmware upgrade planning and config backup/restore
Palo Alto Networks
PAN-OS navigation (web UI and CLI)
Security policy, NAT policy, and Zone-based configuration
Security profiles (Antivirus, Anti-Spyware, URL Filtering, File Blocking, WildFire)
Routing: static, BGP, and OSPF on virtual routers
VPN: IPsec tunnels and GlobalProtect basics
HA (active/passive, active/active) status and failover checks
Troubleshooting tools: show session all, test security-policy-match, packet-capture, show routing route, debug dataplane, system and traffic logs
Panorama basics for centralized management
Content and PAN-OS upgrade planning
Vendor-Neutral Firewall Concepts
Stateful inspection, NAT (SNAT, DNAT, PAT), and zone-based design
OSI layer troubleshooting approach (ping, traceroute, packet capture, logs)
Routing protocols: BGP fundamentals (peering, AS-path, local preference, route advertisement)
IPsec and TLS basics
Asymmetric routing and how it causes dropped sessions
Change management and rollback practices
2. Cloud and Network Platform Skills
Microsoft Azure networking: VNets, peering, Route Server, ExpressRoute, VPN Gateway, Network Security Groups, and route tables (UDR)
Azure NVA deployment: Understanding of firewall appliances deployed as virtual machines in hub-spoke topologies
Route Server and BGP: Peer status, learned and advertised routes, and route preference
ExpressRoute and Global Reach: Basic understanding of circuit and peering behavior
Azure permissions and tools: Azure Portal, Azure CLI, and Network Watcher (connection troubleshoot, NSG flow logs, IP flow verify)
Routing and switching fundamentals: VLANs, subnetting, ARP, and L2 extension concepts
3. Security Operations Skills
These map to the role’s responsibility to work with senior security engineers on protection, detection, and response.
Security policy hardening and least-privilege rule design
Threat log analysis and incident triage (IPS, malware, malicious URL, and blocked-traffic events)
Basic SIEM familiarity (Splunk, Microsoft Sentinel, or FortiAnalyzer)
Vulnerability and patch awareness for firewall OS and platform software
Incident response support: containment steps, evidence collection, and escalation
Understanding of the cybersecurity lifecycle: identify, protect, detect, respond, recover
4. Operational and Process Skills
Change execution: Following approved change plans, runbooks, and rollback steps for adds, moves, and changes
Documentation: Maintaining operating procedures, configuration records, and network diagrams
Ticketing and workflow: Using ServiceNow, Jira, or similar tools to request, track, and close work
Transitions and migrations: Supporting cutovers, parallel runs, and knowledge transfer
Coordination: Working with GITS, application owners, and senior engineers during maintenance windows
Communication: Clear status updates, escalation of blockers, and stakeholder notifications
5. Metrics and Reporting
Collecting firewall and security metrics on a routine basis (policy hit counts, blocked threats, VPN uptime, HA status, and device health)
Producing weekly or monthly reports for senior security engineers and management
Tracking change success rate, incident trends, and patch compliance
Using dashboards in FortiAnalyzer, Palo Alto Panorama or Cortex, Azure Monitor, or similar tools
BA/BS degree and 0-2 years’ relevant experience OR equivalent combination of education and experience
Unisys is proud to be an equal opportunity employer that considers all qualified applicants without regard to age, blood type, caste, citizenship, color, disability, family medical history, family status, ethnicity, gender, gender expression, gender identity, genetic information, marital status, national origin, parental status, pregnancy, race, religion, sex, sexual orientation, transgender status, veteran status or any other category protected by law.
Local employment practices and rights may vary by jurisdiction and are subject to applicable local laws. This commitment includes our efforts to provide for all those who seek to express interest in employment the opportunity to participate without barriers.
If you are a US job seeker unable to review the job opportunities herein, or cannot otherwise complete your expression of interest, without additional assistance and would like to discuss a request for reasonable accommodation, please contact our Global Recruiting organization at GlobalRecruiting@unisys.com. US job seekers can find more information about Unisys’ EEO commitment here.
A free account lets you apply, save this job, see how well you match and check your resume against it.
Scores your resume against this job the way resume scanners do: the job's hard and soft skills, searchability, recruiter tips and formatting.
Create a free account to see your score. Your resume stays in this browser until then, and we never store it.
Already a member? Sign in
