Infrastructure Engineering Analyst (Firewall Engineering)

Infrastructure Engineering Analyst (Firewall Engineering)

Description

Duties & Responsibilities:

• Combine Next Generation Firewall and Network Engineering skills.
• Assist with the Design, Deployment and Maintenance of Next Gen Firewall infrastructure on-prem and in the cloud.
• Maintain User Identification design for a zero trust environment.
• Manage SSL Decryption policies and troubleshoot related issues.
• Maintain hardware templates and Template Stacks.
• Manage Cloud Identity Engine.
• Manage Zone Protection and DOS protection policies design and deployment.
• Manage security and implement policy through Strata Cloud Manager.
• Assist with Palo Alto SD-WAN support
• Evaluate Palo Alto CVEs and recommendations for mitigating risk.
• Enhance the team’s proactive monitoring capability by creating automated reports/alerts (using Splunk) for Firewall events. 
• As part of project requirements, use modern scripting languages and automation engines to automate firewall and network tasks.
• Use APIs to integrate the automation tasks with other enterprise systems.
• Update documentation (drawings, spreadsheets, procedures) of firewalls and related network and producing reports for peer and management review.
• Handle escalation calls from the NOC, performing triage, resolving problems, or escalating to team members.
• Travel as needed to other WBG offices to promote mobility support advocacy, knowledge sharing, and facilitate deployments and improvements.  
• Flexibility to work in shifts including night shift if required.
• Provide on-call support on rotational basis based on need.

• Maintain the World Bank Group’s Firewall infrastructure for Headquarters, Country Offices and Cloud.
• Deploy, maintain and replace Palo Alto Firewall Appliances and Virtual Appliances in accordance with the Organizational Standard.
• Enhance the team’s proactive monitoring capability by creating automated reports/alerts (using Splunk, Ansible) for Firewall events. 
• Ensure compliance with various security standards for the environment.
• Handle escalation calls from the NOC, perform triage, and resolve problems.
• Provide continuous monitoring and troubleshooting for Firewall Infrastructure including adequate follow up on Problem Resolution tracking using the ServiceNow tool. 
• Monitor and review use of systems for World Bank access control policy violations in line with World Bank’s guidelines.
• Ensure that the defined decommissioning and disposal procedures are followed for all hardware systems and media.
• Report and respond to critical security events and take corrective measures per defined security incident management processes.
• Follow and comply with the World Bank Group policies, processes, and procedures.
• Participate in audits, as needed, producing necessary documentation, reports, and explanations, and implement corrective and preventive action plans approved by unit managers.
• Take personal responsibility and accountability for timely response to client queries, requests or needs, while working to remove obstacles that may impede execution or overall success.
• Able to present and explain technical information to diverse types of audience (management, users, vendor, and technical staff)

Selection Criteria

• Bachelor’s or Master’s degree with 2 years of experience or equivalent combination of education and experience (for example, in the IT field: Bachelor’s Degree with a minimum of 1 year of related work experience).
•  Palo Alto Firewall experience is required.
• Network engineering experience is required.
• SAFe Agile Certification is required.
• Hands-on experience with firewalls (e.g. Palo Alto), virtual and physical including security policy management and troubleshooting of issues.
• Hands-on Experience with Palo Alto Panorama Management tool
• Hands-on experience with Spanning Tree, OSPF and BGP routing protocols.
• Hands-on experience with TCP/IP, subnetting, VLSM, VLANs, STP, OSFP and BGP.
• Solid understanding of network engineering fundamentals/services: DHCP, OSI model, VRF, VPN, ACLs, GRE, policy-based routing.
• Ability to work independently with minimum supervision.
• Ability to quickly grasp new ideas and concepts.
• Ability to collaborate within the team and across boundaries.
• Ability to contribute to and readily apply WBG’s body of knowledge for internal and/or external client solutions.
• Ability and willingness to work, learn and contribute to an internationally diverse team environment.
• Fluency in English.

As the World Bank Group continues to evolve, we value candidates who:

• Demonstrate the ability to collaborate effectively across teams, disciplines, cultures, and institutional boundaries.
• Responsibly leverage digital and AI-enabled tools to enhance productivity, learning, and decision-making.
• Bring experience working in fragile, conflict-affected, and violent (FCV) contexts and are encouraged to highlight relevant experience in their application materials, where applicable.

WBG Culture Attributes:

1. Sense of urgency: Anticipate and quickly respond to the needs of internal and external stakeholders.
2. Thoughtful risk-taking: Challenge the status quo and push boundaries to achieve greater impact.
3. Empowerment and accountability: Empower yourself and others to act and hold each other accountable for results.

World Bank Group Core Competencies 

The World Bank Group offers comprehensive benefits, including a retirement plan; medical, life and disability insurance; and paid leave, including parental leave, as well as reasonable accommodations for individuals with disabilities.

We are proud to be an equal opportunity and inclusive employer with a dedicated and committed workforce, and do not discriminate based on gender, gender identity, religion, race, ethnicity, sexual orientation, or disability.

Learn more about working at the World Bank and IFC including our values and inspiring stories.