TerraForm Power

TerraForm Power is dedicated to driving the renewable energy transition forward through various wind, solar, and battery storage solutions. With an emphasis on

Engineer/Senior Engineer, Firewall

Location

United States

Posted

91 days ago

Salary

$120K - $140K / year

Seniority

Senior

Job Description

Engineer/Senior Engineer, Firewall

TerraForm Power

Engineer/Senior Engineer, Firewall Location: TerraForm Power Remote Operation Center, Albany NY Employment Type: Full-time Travel: Ability to travel to remote sites (10–20%) About Us TerraForm Power (“TERP”), a platform company of Brookfield, attracts high-performing individuals who are driven to make an impact in a fast-paced and collaborative environment. We offer unparalleled opportunities to lead and manage one of the largest renewable energy businesses with decades of history, while contributing to the global need for sustainable energy. The company is committed to employee development, encouraging curiosity, ownership, and continuous learning. You’ll be empowered to take initiative, contribute ideas, and grow your career within a supportive and ambitious organization. This position will be based in remote. Job Summary This is an Operational Technology (OT) role embedded in the TerraForm Power Remote Operations Centre, responsible for designing, implementing, and maintaining secure network perimeters for wind, solar, and battery storage operations with a focus on NERC CIP compliant architecture. The Firewall Engineer will work in close partnership with the TERP Cybersecurity Manager, Compliance and Operations Centre staff to ensure robust, compliant, and resilient OT network security across all sites and control centers. Responsibilities Architecture, Design & Implementation - Design and implement OT network security controls, such as perimeter firewalls, internal segmentation, site‑to‑site and remote‑access VPNs, and WAFs. - Build secure network solutions that align with system architecture for wind, solar, and BESS facilities, EMS/SCADA, and the system control centers. - Define network security zones and conduits for OT, corporate IT, and cloud environments; enforce least privilege and micro‑segmentation. - Engineer solutions using Cisco (ASA/Firepower/FTD) and Check Point (CCSA/CCSE) platforms; integrate with management consoles and policy orchestration tools. - Implement secure remote access for operators, vendors, and field technicians using MFA, bastion/Jump hosts, and role‑based access. Operations, Monitoring & Incident Response - Administer firewall policies, objects, NAT, routing (OSPF/BGP), and HA/cluster configurations; manage rule lifecycle and clean‑up. - Maintain WAF protections (e.g., F5, Fortinet, Check Point, or cloud WAF) including rule tuning, bot mitigation, and API security. - Operate and improve monitoring and control tools (SIEM/SOAR, NetFlow, packet capture, IDS/IPS); build dashboards and alerts for NERC systems. - Conduct log analysis, threat hunting, and participate in incident triage and response; provide on‑call support for critical events. - Perform regular firewall health checks, performance tuning, firmware/OS upgrades, and vulnerability remediation. - Support occasional after‑hours maintenance windows on an as needed basis. Compliance & Change Management (NERC Focus) - Implement and maintain controls aligned to NERC CIP standards applicable to Low Impact sites and Medium Impact control centers (e.g., CIP‑003, CIP‑005, CIP‑007, CIP‑008, CIP‑009, CIP‑010, CIP‑011, CIP‑013). - Serve as the technical owner for firewall‑related CIP controls (for example CIP‑005, CIP‑007, CIP‑010), including configuration baselines, access controls, logging, and evidence collection. - Establish and enforce configuration baselines, access controls, evidence collection, and audit‑ready documentation. - Run structured change management programs for firewall and WAF policies, including risk assessment, testing, approvals, and post‑implementation review. - Support audits, self‑assessments, and impact ratings; assist with personnel risk assessment and vendor risk management where applicable. - Collaborate with OT, IT, Compliance, Engineering, and Plant Operations to ensure controls meet operational needs without compromising reliability. Collaborative Responsibilities - Work in close partnership with the TERP Cybersecurity Manager to align firewall, VPN, and WAF controls with OT/IT cybersecurity strategy, incident response protocols, and compliance requirements. - Participate in joint incident response, risk assessments, and continuous improvement initiatives with the Cybersecurity Manager and Operations Centre leadership. - Coordinate with Operations Centre, plant operators, and engineering teams to ensure security controls support operational reliability and compliance. Technology Evaluation & Continuous Improvement - Evaluate new firewall, WAF, VPN, and OT security technologies; lead POCs and make data‑driven recommendations. - Identify opportunities to enhance resilience (segmentation, Zero Trust, SD‑WAN security, secure cloud connectivity), and automate repeatable tasks (e.g., policy linting, backup/restore, compliance evidence collection). OT-Specific Duties - Manage vendor and contractor access for maintenance and commissioning, ensuring robust controls for temporary access and logging. - Design solutions that address site-specific challenges, including limited bandwidth, remote access constraints, and environmental factors. - Support operational resilience by coordinating change windows with grid operations and implementing failsafe configurations to avoid plant outages. Required Qualifications Engineer - 5+ years of hands‑on experience administering enterprise firewalls and VPNs (Cisco ASA/Firepower/FTD; Check Point). - Working knowledge of WAF technologies and web security (OWASP Top 10, TLS, mTLS, API security). - Strong command of TCP/IP, routing (OSPF/BGP), NAT, ACLs, IPS/IDS, and packet analysis. - Experience with SIEM/log management (e.g., Splunk, QRadar, LogRhythm), network monitoring (e.g., SolarWinds), and configuration management. - Familiarity with NERC CIP concepts and control implementations for Low and/or Medium Impact environments, or equivalent experience in other regulated OT/ICS environments (for example IEC 62443).. - Solid documentation skills and experience operating within formal change management processes. - Clear communicator able to translate complex security topics for plant operations, engineering, compliance, and leadership. - Strong prioritization and execution in high‑availability environments; calm under pressure during incidents. - Collaborative and customer‑focused; builds trusted relationships with site personnel and external partners. Senior Engineer - All above, plus; - 10+ years in network security with deep expertise in Cisco and Check Point ecosystems, including clustering/HA, threat defense, and advanced policy design. - Proven leadership of firewall/WAF architecture in OT/ICS or critical infrastructure (utilities, energy, industrial). - Demonstrated experience interpreting and implementing NERC CIP requirements in Medium Impact control centers, including evidence management and audit support. - Proficiency guiding incident response and problem management for high-availability environments; ability to mentor engineers and lead complex changes. - Track record of evaluating, selecting, and integrating new technologies; experience with automation (e.g., Ansible, Python) and policy compliance tooling. Education & Certifications - Bachelor’s degree in Computer Science, Electrical/Computer Engineering, Information Security, or related field; or equivalent experience. - Relevant certifications preferred: - Cisco: CCNP Security, CCIE (Security) (plus) - Check Point: CCSA/CCSE - Others, a plus Industry‑Specific (Renewable Energy & OT/ICS) Requirements - Experience with the secure transport of with SCADA/EMS, plant DCS/RTUs/PLCs, and OT protocols (OPC, DNP3, Modbus). - Understanding of interconnections between substations, collector systems, BESS EMS, and corporate networks; secure data flows to forecasting, trading, and asset performance platforms. - Knowledge of telecom links common in renewables (leased lines, microwave, LTE/private cellular) and secure backhaul to control centers. - Awareness of site conditions (limited bandwidth, remote access constraints, environmental factors) and designing resilient, maintainable solutions. - Vendor and contractor access management for maintenance, OEM support, and commissioning activities, with strong control over temporary access and logging. - Safety and reliability mindset: change windows coordinated with grid operations, rollback plans, and fail‑safe configurations to avoid plant outages. Compensation: $120,000-$140,000 USD, bonus eligible A note to Recruiting Agencies, TerraForm Power Human Resources team does not accept unsolicited resumes from third party recruiters, staffing firms, or related agencies. The Human Resources team coordinates all recruiting and hiring at our company. We do not accept resumes from third-party recruiters unless authorized by the Human Resources team and if a signed agreement is in place. Any unsolicited resumes will be considered property of TerraForm Power and we are not responsible for any related fees. All communication related to recruiting partnerships should ONLY be directed to the Human Resources team.

Related Job Pages

More Backend Engineer Jobs

Comcast logo

Lead .Net Support Engineer (Mulesoft, SQL, Azure)- REMOTE

Comcast

Headquartered in Philadelphia, Pennsylvania, Comcast was established in 1963 as a single-system cable company. Over the years, Comcast experienced tremendous gr

Backend Engineer91 days ago
Full TimeRemoteTeam 10,000Since 1963

Comcast Advertising is driving the TV advertising industry forward, from delivering ads to linear and digital audiences to pioneering the tech that makes it possible. We help brands connect with their audiences on every screen using advanced data, technology, and premium video content. Our media sales division helps local, regional, and national brands reach potential customers through multiscreen TV advertising. Our ad tech division FreeWheel provides comprehensive adtech that makes it easier to buy and sell premium video advertising across all screens, data types, and sales channels. Job Summary Comcast Advertising, the advertising sales division of Comcast Cable, helps local, regional and national advertisers use the best of digital with the power of TV to grow their business. It provides multi-screen marketing solutions to make advertising campaigns more effective and easier to execute. Headquartered in New York with offices throughout the country, Comcast Advertising has a presence in 66 markets with nearly 35 million owned and represented subscribers. We’re dedicated to helping our clients meet their business goals by connecting them with their customers through multiscreen television advertising. Working with companies from local startups to nationwide corporations, we provide support to help each business reach its target customers. By applying data to television advertising in new ways, we’re able to bring our clients the best of digital media, coupled with the power of TV. Join a fast-paced and exciting Tier 3 Production Support team working in the advanced advertising industry; providing in-depth, full stack, solutions that support the cutting-edge applications that powers Comcast Advertising. Successful candidate Senior Engineer position will be a self-motivated individual with a passion for problem-solving, innovating, high standards, and a pro-active mindset. Job Description Core Responsibilities - Take responsibility for customer satisfaction and problem resolution. - Respond promptly, professional, and completely to support requests. - Provide technical subject matter expertise and mentoring to junior Tier 3 engineers. - Lead Tier 3 engagement in the support of major platform/system releases. - Lead Tier 3 collaborations with partner support Tiers, Development and cross-functional teams. - Positive attitude and excellent interpersonal skills and multitasking abilities. - Perform full stack troubleshooting, root cause analysis, and resolution of medium to complex problems. - Proven in-depth knowledge and experience in one or more technical stacks - (Azure / AWS cloud platforms, .Net Core, Angular, Java, Python, API’s, Salesforce, etc.) - Proven in-depth knowledge and experience working in a full stack environment. - Thrive in a collaborative, high-quality, and fluid environment. - Provide clear, concise, and thorough documentation. - Consistent exercise of independent judgement and discretion in matters of significance. - Consistent exercise of independent judgment and discretion in matters of significance. - Regular, consistent and punctual attendance. Must be able to work nights and weekends, variable schedule(s) and overtime as necessary. - Other duties and responsibilities as assigned. Preferred Experience: - 10+ Years of software development experience with .Net applications and API microservices - Experience with SQL, Azure, Salesforce, and Mulesoft - Experience being a lead or leading a team Employees at all levels are expected to: - Understand our Operating Principles; make them the guidelines for how you do your job. - Own the customer experience - think and act in ways that put our customers first, give them seamless digital options at every touchpoint, and make them promoters of our products and services. - Know your stuff - be enthusiastic learners, users and advocates of our game-changing technology, products and services, especially our digital tools and experiences. - Win as a team - make big things happen by working together and being open to new ideas. - Be an active part of the Net Promoter System - a way of working that brings more employee and customer feedback into the company - by joining huddles, making call backs and helping us elevate opportunities to do better for our customers. - Drive results and growth. - Support a culture of inclusion in how you work and lead. - Do what's right for each other, our customers, investors and our communities. Disclaimer: - This information has been designed to indicate the general nature and level of work performed by employees in this role. It is not designed to contain or be interpreted as a comprehensive inventory of all duties, responsibilities and qualifications. Skills Collaboration, Design, Design Processes, New Software, Planning Compensation National Pay Range: $98,678.80 USD-$231,278.44 USD Illinois Pay Range: $104,846.23 USD - $203,525.03 USD Colorado Pay Range: $111,013.65 USD - $212,776.16 USD Hawaii Pay Range: $129,515.93 USD - $194,273.89 USD Washington DC Pay Range: $141,850.78 USD - $212,776.16 USD Maryland Pay Range: $117,181.08 USD - $212,776.16 USD Minnesota Pay Range: $111,013.65 USD - $194,273.89 USD New York Pay Range: $117,181.08 USD - $231,278.44 USD Washington Pay Range: $111,013.65 USD - $222,027.30 USD New Jersey Pay Range: $123,348.50 USD - $222,027.30 USD Vermont Pay Range: $117,181.08 USD - $185,022.75 USD Massachusetts Pay Range: $123,348.50 USD - $222,027.30 USD California Pay Range: $111,013.65 USD - $205,580.83 Comcast intends to offer the selected candidate base pay within the posted range for this role at the time of posting dependent on job-related, non-discriminatory factors such as experience. Base pay is one part of the Total Rewards that Comcast provides to compensate and recognize employees for their work. Most sales positions are eligible for a Commission under the terms of an applicable plan, while most non-sales positions are eligible for a Bonus. Additionally, Comcast provides best-in-class Benefits to eligible employees. We believe that benefits should connect you to the support you need when it matters most, and should help you care for those who matter most. That’s why we provide an array of options, expert guidance and always-on tools, that are personalized to meet the needs of your reality – to help support you physically, financially and emotionally through the big milestones and in your everyday life. Please visit the compensation and benefits summary on our careers site for more details. The application window is 30 days from the date job is posted, unless the number of applicants requires it to close sooner or later. Education Bachelor's Degree While possessing the stated degree is preferred, Comcast also may consider applicants who hold some combination of coursework and experience, or who have extensive related professional experience. Certifications (if applicable) Relevant Work Experience 7-10 Years Comcast is an equal opportunity workplace. We will consider all qualified applicants for employment without regard to race, color, religion, age, sex, sexual orientation, gender identity, national origin, disability, veteran status, genetic information, or any other basis protected by applicable law. Comcast will consider for employment applicants with arrest or conviction records in accordance with the requirements of applicable law, including the San Francisco Fair Chance Ordinance, the Los Angeles Fair Chance Initiative for Hiring Ordinance, the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act. Please note that federal state, or local laws and regulations may restrict or prohibit Comcast from hiring individuals convicted of certain crimes. Additionally, an applicant’s criminal history may have a direct, adverse, and negative relationship on the job duties of this position, which may result in the withdrawal of a conditional offer of employment.

United States
$98.7K - $231K / year
BotCity logo

Java Developer

BotCity

BotCity centralizes Python-based RPA & AI governance, enabling secure, scalable automation with clear ROI.

Backend Engineer91 days ago
Full TimeRemoteTeam 11-50Since 2018H1B No Sponsor

• Develop and maintain core Java components of BotCity's Products • Develop solutions in Core Java with a focus on clarity, maintainability, and performance • Write clean, efficient, and well-tested code, with ownership from requirement to production • Apply design patterns and object-oriented principles thoughtfully in the architecture of solutions • Implement and optimize routines that require concurrency control, thread management, and JVM resource handling • Write robust unit tests, ensuring coverage and testable code design from the start • Participate in code reviews focused on technical quality, pointing out design improvements and readability • Communicate blockers and progress clearly and in a timely manner • Analyze and resolve performance issues, identifying bottlenecks in JVM behavior and application code • Document technical decisions and contribute to the evolution of the team's development standards.

Latin America
Job Closed
Ascent logo

Data Scientist, Python – MLOps

Ascent

Helping customers connect data, software and purpose to drive extraordinary outcomes.

Backend Engineer91 days ago
Full TimeRemoteTeam 201-500H1B Sponsor

• Collaborate closely with key stakeholders and a team of data scientists • Design and implement new project code and MLOps frameworks for the deployment of models in production • Build machine learning models for financial / investment company • Partner with client teams to identify opportunities where data science could add value, helping generate demand and shape a roadmap for future work • Monitor existing productionised pipelines, addressing any issues in a timely manner to ensure smooth and continuous operation

United Kingdom
Job Closed
Airwallex logo

Staff Software Engineer, Backend - Growth

Airwallex

Empowering businesses to grow beyond borders

Backend Engineer91 days ago
Full TimeRemoteTeam 1,001-5,000Since 2015H1B Sponsor

About Airwallex Airwallex is the only unified payments and financial platform for global businesses. Powered by our unique combination of proprietary infrastructure and software, we empower over 200,000 businesses worldwide - including Brex, Rippling, Navan, Qantas, SHEIN and many more - with fully integrated solutions to manage everything from business accounts, payments, spend management and treasury, to embedded finance at a global scale. Proudly founded in Melbourne, we have a team of over 2,000 of the brightest and most innovative people in tech across 26 offices around the globe. Valued at US$8 billion and backed by world-leading investors including T. Rowe Price, Visa, Mastercard, Robinhood Ventures, Sequoia, Salesforce Ventures, DST Global, and Lone Pine Capital, Airwallex is leading the charge in building the global payments and financial platform of the future. If you're ready to do the most ambitious work of your career, join us. Attributes We Value We hire successful builders with founder-like energy who want real impact, accelerated learning, and true ownership. You bring strong role-related expertise and sharp thinking, and you're motivated by our mission and operating principles. You move fast with good judgment, dig deep with curiosity, and make decisions from first principles, balancing speed and rigor. You're humble and collaborative; turn zero-to-one ideas into real products, and you "get stuff done" end-to-end. You use AI to work smarter and solve problems faster. Here, you'll tackle complex, high-visibility problems with exceptional teammates and grow your career as we build the future of global banking. If that sounds like you, let's build what's next. The Opportunity: Be Part of Our Growth Team Our Growth Team sits at the heart of Airwallex's mission, focusing on user acquisition and strategic market expansion. We leverage data and cutting-edge technologies to craft seamless, intuitive experiences that help millions of users discover, engage with, and benefit from our products. From new-user funnels to onboarding optimizations, our Growth team is all about experimentation, rapid iteration, and driving sustainable business impact. Whether it's designing scalable architectures for high-traffic pages, building robust A/B testing frameworks, or integrating global marketing platforms, the Growth team's contributions directly shape how we attract and retain customers worldwide. Joining the Growth team means you'll have a front-row seat to the most crucial stage of our product lifecycle and play a pivotal role in fueling the next wave of our global expansion. Responsibilities: - Design and Build Scalable Systems - Architect, develop, and maintain microservices in Java/Kotlin (or similar languages), ensuring our high-traffic, high-availability systems meet global user demands. - Implement best practices for service-to-service communication, orchestration, and fault tolerance. - Enable Data-Driven Decisions - Collaborate with data scientists and product managers to design data pipelines, analytics platforms, and event-driven architectures. - Ensure the data powering our Growth initiatives is accurate, reliable, and easily accessible. - Collaborate and Innovate - Work closely with cross-functional teams-Frontend, Product, Design, and Marketing-to translate business requirements into scalable backend solutions. - Participate in architectural reviews, code reviews, and strategy sessions to continually elevate the quality and performance of our backend services. - Experiment and Iterate - Develop services that support rapid A/B testing, feature toggles, and real-time performance monitoring. - Continuously improve backend functionalities to reduce friction, increase user engagement, and drive conversions. - Promote Security & Compliance - Integrate secure coding practices and frameworks to protect user data and maintain global regulatory compliance. - Identify potential vulnerabilities, ensure robust authentication and authorization mechanisms, and proactively address security risks. Who you are: - Experienced and Technically Proficient: You possess a wealth of experience in software development, underpinned by a robust expertise in Java/Kotlin. Your approach goes beyond mere coding; you are a craftsman of comprehensive solutions. As a technical bar raiser, you set high standards and lead by example, elevating the capabilities of those around you. - Empathetic and Insightful: Your deep empathy for customer needs drives your development process, allowing you to create intuitive and impactful products. This understanding is not just about meeting requirements, but about enriching user experiences. - Data-Driven and Analytical: You view data as a narrative element of development, a critical tool that informs your decision-making process. Your ability to interpret data enhances product performance and elevates user satisfaction, making you a pivotal member of our team. - Collaborative and Knowledge-Sharing: True collaboration is second nature to you. You thrive in team settings and are committed to sharing knowledge and ideas, which you see as vital to fostering innovation. Your role as a coach involves mentoring peers and promoting a learning culture within the team. - Adaptable and Continuously Learning: In the fast-paced world of fintech, you stand out for your agility and eagerness to adopt new skills and technologies. Challenges are opportunities for growth, and you are always prepared to expand your horizons. - Proactive and Ownership-Driven: You are self-motivated and take initiative, demonstrating a strong sense of ownership in your projects. Your proactive approach ensures that you are always ahead of the curve, ready to take on responsibilities and lead projects to successful outcomes. - Efficient and Prioritization-Savvy: You excel at prioritizing tasks, which enables you to manage your workload effectively while maintaining high standards of quality. This skill ensures that critical project components receive the attention they need without sacrificing overall progress. Minimum qualifications: - Bachelor degree or above in computer science or engineering related majors. - 5+ years of experience in modern engineering practices focused on continuous integration and quality engineering. - Strong computer science fundamentals, solid understanding of OOP concepts. - Experience domain driven design and event driven architectures. - Deep working experience with high throughput / low latency / high available distributed systems. - Cloud experience with GCP (preferred) or AWS (EC2, RDS, ELB, CloudFront, etc.) with Docker and Kubernetes. - Familiarity with observability tooling such as Splunk, Grafana, and Prometheus. Preferred qualifications: - Experience with JVM based programming Java or Kotlin, familiar with Spring/Spring Boot - Experience solving GTM operations end-to-end - Knowledge of data warehousing, customer segmentation, and analytics tools - Familiarity with building internal or customer-facing products with AI & LLMs Applicant Safety Policy: Fraud and Third-Party Recruiters To protect you from recruitment scams, please be aware that Airwallex will not ask for bank details, sensitive ID numbers (i.e. passport), or any form of payment during the application or interview process. All official communication will come from an @airwallex.com email address. Please apply only through careers.airwallex.com or our official LinkedIn page. Airwallex does not accept unsolicited resumes from search firms/recruiters. Airwallex will not pay any fees to search firms/recruiters if a candidate is submitted by a search firm/recruiter unless an agreement has been entered into with respect to specific open position(s). Search firms/recruiters submitting resumes to Airwallex on an unsolicited basis shall be deemed to accept this condition, regardless of any other provision to the contrary. Equal opportunity Airwallex is proud to be an equal opportunity employer. We value diversity and anyone seeking employment at Airwallex is considered based on merit, qualifications, competence and talent. We don't regard color, religion, race, national origin, sexual orientation, ancestry, citizenship, sex, marital or family status, disability, gender, or any other legally protected status when making our hiring decisions. If you have a disability or special need that requires accommodation, please let us know.

Singapore
Job Closed