Role Summary/Key Objectives

We are seeking a Senior Cybersecurity Firewall Engineer to join our Information Security team. The team protects the confidentiality, integrity, and availability of data and systems in core systems and platforms. As a Senior Firewall Engineer, your daily responsibilities revolve around the design, implementation, and management of the network security infrastructure perimeter. Working in tandem with a team of cybersecurity engineers, you will spearhead efforts to prevent and remediate cybersecurity incidents through continuous optimization of infrasfructure, policies and rules.

As a senior technical member of the team, you'll play a crucial role in fostering cross-functional partnerships, particularly with the IT department and product groups. You will provide robust support and implement stringent security measures across global platforms, ensuring that solutions remain fortified against evolving cyber threats while seamlessly integrating with the company’s objectives.

The work includes:

• Plan, engineer, and implement next generation Firewall (NGFW) infrastructure solutions at the enterprise level.

• Perform migration changes from Checkpoint and Cisco ASA, to Palo Alto Firewalls.

• Diagnose and resolve application issues post firewall implementation.

• Analyze firewall requirements for application migrations to new infrastructure.

• Manage changes through ServiceNow ITSM and other applications.

• Manage firewall implementations through AlgoSec (FireFlow, Appviz &  ObjectFlow), and Panorama applications.

• Remove/optimize old firewall policy configurations no longer required for optimization.

• Participate in trouble-shooting application issues that may involve firewalls and other perimeter security infrastructure.

• Exercise good judgment, a sense of urgency, and maintain a commitment to high standards of ethics, regulatory compliance, customer service, and business integrity.

Requirements:

Demonstrated deep technical experience with Palo Alto firewalls.Demonstrated experience utilizing Palo Alto Expedition and other tools for policy migration.Experience placing firewall security infrastructure and enforcing policy in new (previously unsecured) network environments.Experience with AlgoSec and Panorama Firewall Management applications.Experience with scripting utilizing Python and/or Ansible a plusExperience with cloud DDOS technologies such as Akamai/ProlexicExperience with large scale global/enterprise projects.Knowledge of security protocols and implementations within ICS/IOT environments.Experience in the use of multiple network tools, such as, SyslogNG, SevOne, Spectrum, Splunk, tcpdump and Qradar, for network troubleshooting and monitoring.Well versed in crisis management and root cause analysis techniques.Experience working in a team-oriented, collaborative environment.Proven analytical and problem-solving abilities.Strong interpersonal, written, and oral communication skills.Able to conduct research into networking issues and products as required.Ability to prioritize and execute tasks in a high-pressure environment and make sound decisions in emergency situations.Ability to present ideas in a user-friendly manner to non-technical individuals.Highly self-motivated and directed.Keen attention to detail.Strong customer service orientation.In-depth knowledge of complex LAN/WAN communications, including routing, switching, and network security.

If you will be working at home occasionally or permanently, the internet connection must be obtained through a cable broadband or fiber optic internet service provider with speeds of at least 10Mbps download/5Mbps upload.

About The Cigna Group

Doing something meaningful starts with a simple decision, a commitment to changing lives. At The Cigna Group, we’re dedicated to improving the health and vitality of those we serve. Through our divisions Cigna Healthcare and Evernorth Health Services, we are committed to enhancing the lives of our clients, customers and patients. Join us in driving growth and improving lives.

Qualified applicants will be considered without regard to race, color, age, disability, sex, childbirth (including pregnancy) or related medical conditions including but not limited to lactation, sexual orientation, gender identity or expression, veteran or military status, religion, national origin, ancestry, marital or familial status, genetic information, status with regard to public assistance, citizenship status or any other characteristic protected by applicable equal employment opportunity laws.

If you require reasonable accommodation in completing the online application process, please email: SeeYourself@cigna.com for support. Do not email SeeYourself@cigna.com for an update on your application or to provide your resume as you will not receive a response.

The Cigna Group has a tobacco-free policy and reserves the right not to hire tobacco/nicotine users in states where that is legally permissible. Candidates in such states who use tobacco/nicotine will not be considered for employment unless they enter a qualifying smoking cessation program prior to the start of their employment. These states include: Alabama, Alaska, Arizona, Arkansas, Delaware, Florida, Georgia, Hawaii, Idaho, Iowa, Kansas, Maryland, Massachusetts, Michigan, Nebraska, Ohio, Pennsylvania, Texas, Utah, Vermont, and Washington State.

Qualified applicants with criminal histories will be considered for employment in a manner consistent with all federal, state and local ordinances.