[Remote] Senior Firewall Engineer

Note: The job is a remote job and is open to candidates in USA. Talisman is a leading renewable energy operator seeking a Senior Firewall Engineer to design, implement, and maintain secure network perimeters across wind, solar, and battery storage facilities. This role involves working closely with the Cybersecurity Manager and Compliance teams to ensure NERC CIP compliant OT network security across all sites and control centers.ResponsibilitiesDesign and implement OT network security controls including firewalls, VPNs, network segmentation, and WAFs for wind, solar, and BESS environmentsAdminister Cisco (ASA/Firepower/FTD) and Check Point platforms including policy management, NAT, routing, and HA configurationsMonitor and respond to security events using SIEM/SOAR, IDS/IPS, and packet analysis toolsOwn firewall-related NERC CIP controls (CIP-005, CIP-007, CIP-010) including configuration baselines, evidence collection, and audit supportManage vendor and contractor access for OT maintenance and commissioning activitiesCoordinate change windows with grid operations to ensure plant reliability and uptimeSkills5+ years administering enterprise firewalls and VPNs; NERC CIP familiarity10+ years with deep Cisco and Check Point expertise; proven NERC CIP implementation in Medium Impact environmentsExperience with OT protocols (DNP3, Modbus, OPC) and SCADA/EMS environmentsBachelor's degree in Computer Science, Electrical Engineering, Information Security, or equivalentCisco CCNP Security or Check Point CCSA/CCSE certifications preferredCompany Overviewtalisman is a workforce solutions partner to the real asset industries and the financial markets that underpin them. It was founded in 2021, and is headquartered in Los Angeles, California, USA, with a workforce of 51-200 employees. Its website is https://www.talismanap.com.Company H1B Sponsorshiptalisman has a track record of offering H1B sponsorships, with 11 in 2025, 5 in 2024, 1 in 2023. Please note that this does not guarantee sponsorship for this specific role.