Cyber Security Firewall Support 1

EXPERIENCE AND EDUCATION:

Essential Qualifications/Experience:

·         Bachelor's degree in Computer Science, Information Technology, or related field Or equivalent experience

·         Minimum qualifications required is a firewall certification (such as PCNSA or similar)

·         Strong understanding of security best practices

·         Demonstrable experience of analysing and interpreting system, security and application logs in order to diagnose faults and spot abnormal behaviours

·         6+ months of experience in the following areas:

ü  Palo Alto Networks Firewalls and Palo Alto Networks Panorama for Enterprise level deployments

ü  Firewall installation and management of other vendors

ü  System monitoring and troubleshooting

ü  LAN/WAN networking including protocol network architecture

ü  TCP/IP protocols and services

Desirable Qualifications/Experience:

·         Working experience in the following areas:

ü  Experience with network protocols and traffic analysis

ü  Ability to troubleshoot complex network security issues

ü  Scripting/Automation (Bash, Python, Ansible)

·         Official Network Management certification (such as Network+)

·         Official Service Management certification (such as ITIL Foundation)

·         Understanding of Information Security Practices; relating to the Confidentiality, Integrity and Availability of information (CIA triad.)

·         Possession of Industry leading certification in the area of Cybersecurity such as CISSP, CISM, CISA, GSNA, SANS GIAC

·         In addition to the above, it is desirable for the contracted individual to have working experience and knowledge in the following areas:

ü  Experience in working with NATO

ü  Previous work in an international environment comprising both military and civilian elements

DUTIES/ROLE:

·         D01 - Central system administration of NGFWs to ensure continuing functionality and availability.

ü  Initial systems installation (software, application and threat signatures) and configuration

ü  Adding system to central management capability

ü  Assign initial template and device group settings

ü  Configure date/time/DNS settings

ü  Configure high-availability settings

ü  Update system software/signatures during pre-defined maintenance windows

ü  The Contractor’s personnel will:

o   Support the team by routinely reviewing the tickets queue to ensure 4 hours response time for normal events and 1 hour response time for high/critical events

o   Provide multi-channel support (phone, email, internal chat)

o   Develop and maintain a repository of scrips to automate recurring systems administration activities.

o   Ensure correct logging and log forwarding configurations to support availability of system events in central log database.

o   Provide pro-active system administration and maintenance to prevent system failures

o   Escalate critical events to appropriate channels within 4 hours

o   Support system upgrading/patching during established maintenance windows

·         D02. Central configuration of NGFWs

ü  Implementation and verification of firewall rulesets/policies

ü  Adaptation of firewall rulesets/policies

ü  Adaptation of email attachment types

ü  Configuration of additional firewall rulesets/policies

ü  The Contractor’s personnel will:

o   Support the team by routinely reviewing the tickets queue to ensure 4 hours response time for normal events and 1 hour response time for high/critical events

o   Provide multi-channel support (phone, email, internal chat)

o   Update the configuration of firewall rules/policies based on changing requirements.

o   Support the development of new firewall rules/policies

·         D03. Documentation of Firewall systems

ü  Development of SOPs and other documentation for repetitive activities

ü  Produce and maintain comprehensive documentation for all implemented systems

ü  Review and update security documentation

ü  The Contractor’s personnel will:

o   Document the setup, configuration, installation specifics into the GSS documentation repository

o   Attend internal meetings within GSS team to provide hands-on demonstration and familiarization of firewall systems

·         D04. ITSM Support of Firewall systems

ü  Technical support in troubleshooting infrastructure and operational issues

ü  Collaborate with other teams for a successful resolution

ü  Provide technical support and guidance by answering end-user requests to identify issues in secure cross-domain data exchange

ü  The Contractor’s personnel will:

o   Provide support to NATO staff users and collaborate with other admin staff to resolve tickets related to firewall configurations and policies

o   Create/update entries on ticket activities