Role Summary This Firewall Security Engineer role focuses on identifying and remediating overly permissive firewall rules and routing configurations in an enterprise environment. The engineer will use rule-analysis tools, traffic-flow analysis, and validated application requirements to implement least-privilege access changes safely. This role partners with application, infrastructure, network, architecture, and security teams while working within formal change-control processes. The US-based engineer supports the Eastern time zone within a follow-the-sun operating model alongside teams in the UK and India. Responsibilities Review and optimize firewall rules using AlgoSec analysis, including rule usage, risk, shadowed rules, and redundant rules. Narrow sources, destinations, services, and ports based on observed traffic and validated application requirements. Identify routing configurations that bypass proxy controls and coordinate remediation with network and infrastructure teams. Analyze Layer 4 through Layer 7 traffic flows to validate business requirements before modifying or removing access rules. Partner with application and infrastructure owners to assess proposed changes, confirm impacts, and validate results after implementation. Prepare and execute firewall and routing changes through formal change-control processes, including implementation plans, testing, and rollback procedures. Document rule changes, business rationale, approvals, and validation results to support effective handoffs across time zones. Participate in follow-the-sun handoffs and status updates while tracking progress and open remediation items. Align firewall and routing remediation with target-state security architecture and escalate conflicts or gaps to architecture and security teams. Support audit and risk reviews by providing evidence of changes, approvals, testing, and outcomes. Qualifications Hands-on experience with firewall engineering and firewall rule-base optimization in an enterprise environment. Strong routing knowledge and understanding of Layer 4 through Layer 7 traffic behavior. Ability to analyze traffic flows and determine least-privilege access requirements for applications. Experience working within formal change-control processes in a regulated enterprise environment. Strong written communication skills and a disciplined approach to documenting technical work. Ability to collaborate effectively with application, infrastructure, network, architecture, and security teams across multiple time zones. Experience with AlgoSec or similar firewall rule-analysis and policy-management tools preferred. Proxy technology experience, such as Blue Coat, Symantec, or Skyhigh, preferred. Financial services industry experience preferred. Relevant education, training, certifications, or equivalent practical experience. Publishing Pay Range: $60.00 - $70.00 hourly This position offers a hybrid schedule, with time split between the office and remote work. About GDH: At GDH, we believe in the power of people and the importance of caring. Our culture statement, "We care about people," isn't just a tagline - it's the core of everything we do. GDH is a premier staffing and talent solutions company dedicated to helping businesses find the best talent and assisting job seekers in finding their dream jobs. Who We Are: GDH, founded in 2001, has grown into a leader in providing staffing solutions across various industries. We specialize in IT across several sectors, connecting top talent with leading enterprises. As a Best of Staffing firm recognized for excellence in client, employee, talent, and women's services, we pride ourselves on our commitment to quality and service. GDH Benefits GDH offers a range of employee benefits that are designed to promote well-being and help maintain a healthy work-life balance. These comprehensive benefits cover various aspects of an employee's life and aim to enhance their overall experience with the company. Our health