Tufin Engineer

Job title: Tufin engineer

Fully remote - only U.S based

Compensation range: $55 - $70 per hour

Candidates must have hands-on experience deploying, configuring, and operating Tufin, along with strong client-facing communication skills.

Role overview

We are seeking a Tufin Engineer to improve firewall policy visibility, governance, and automation across complex environments. This hands-on role focuses on optimizing Tufin SecureTrack and SecureChange, strengthening policy hygiene, and helping teams adopt reliable workflows.

Responsibilities

• Assess and optimize Tufin SecureTrack and SecureChange configuration, health, and policy visibility.

• Onboard firewalls and security devices, troubleshoot policy ingestion, and validate topology and rule visibility.

• Analyze unused, redundant, shadowed, and overly permissive rules and guide policy cleanup.

• Design and validate SecureChange workflows for access requests, policy changes, risk reviews, and rule lifecycle management.

• Configure policy governance, compliance reporting, and operational dashboards.

• Document recommended practices and train engineering and operations teams on Tufin administration.

Required qualifications

• Hands-on experience administering and optimizing Tufin SecureTrack and SecureChange.

• Experience onboarding security devices into Tufin and troubleshooting firewall policy collection.

• Strong understanding of firewall policy analysis, rule lifecycle management, and security governance.

• Experience configuring policy change workflows, automation, and reporting in Tufin.

• Ability to document technical recommendations and train operational teams.

System One, and its subsidiaries including Mountain Ltd., are leaders in delivering outsourced services and workforce solutions across North America. We help clients get work done more efficiently and economically, without compromising quality. System One not only serves as a valued partner for our clients, but we offer eligible employees health and welfare benefits coverage options including medical, dental, vision, spending accounts, life insurance, voluntary plans, as well as participation in a 401(k) plan.

System One is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, age, national origin, disability, family care or medical leave status, genetic information, veteran status, marital status, or any other characteristic protected by applicable federal, state, or local law.

Ref: #404-IT Pittsburgh

System One, and its subsidiaries including Joulé, ALTA IT Services, CM Access, TPGS, and MOUNTAIN, LTD., are leaders in delivering workforce solutions and integrated services across North America. We help clients get work done more efficiently and economically, without compromising quality. System One not only serves as a valued partner for our clients, but we offer eligible full-time employees health and welfare benefits coverage options including medical, dental, vision, spending accounts, life insurance, voluntary plans, as well as participation in a 401(k) plan.

System One is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, age, national origin, disability, family care or medical leave status, genetic information, veteran status, marital status, or any other characteristic protected by applicable federal, state, or local law.