> Markdown version of [/jobs/ext/1336206-senior-network-protection-engineer-consultant](https://www.wearedevelopers.com/jobs/ext/1336206-senior-network-protection-engineer-consultant). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Senior Network Protection Engineer / Consultant - **Company:** TESTUDO CORP - **Location:** San Jose, CA, United States - **Experience:** Expert - **Salary:** $187,200.0 - $228,800.0 - **Contract:** Temporary contract - **Skills:** Microsoft Word, Java (Programming Language), Amazon Web Services, Microsoft Azure, Cisco PIX, Complex Networks, Cyber Security, Computer Networks, System Configuration, Data Centers, Dynamic Multipoint Virtual Private Networks, Domain Name System (DNS), Perl (Programming Language), Ethernet, IT Management, Networking Hardware, Internet Protocol Security (IP SEC), IPv4, IPv6, Intrusion Detection and Prevention, Intrusion Detection Systems, Virtual Private Networks (VPN), Multi-protocol Systems, Python (Programming Language), Network Service, Packet Analyzer, Network Time Protocols, Windows PowerShell, Trend Micro, SAP Sales and Distribution, Security Information and Event Management, Transmission Control Protocol (TCP), Virtual Local Area Networks, Virtualization Technology, Wide Area Networks, Cisco Anyconnect, Layer 2 Tunneling Protocol, Network Routers, Scripting, Transport Layer Security, File Transfer Protocol (FTP), Load Balancing, Firewalls (Computer Science), Juniper, Palo Alto Networks, Ddos, Cisco, Vmware - **Published:** July 18, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=35b335a797c3f995 ## About the Role To be considered for this role, you must meet the following baseline requirements: * Minimum of 7 years of dedicated Network Protection experience. * Active Certification: Must hold a TippingPoint Intrusion Prevention System Expert Certification. * Protocol Expertise: Strong configuration and troubleshooting skills in Ethernet, VLAN, L2TP, CDP, MPLS, RIPv2, BGPv4, IPv4, IPv6, IPsec, SFTP, TCP, TLS, NTP, and DNS. * Hardware/Software Proficiency: Extensive experience with Cisco, Juniper, Palo Alto, F5, and Ciena equipment (routers, switches, firewalls, and load balancers). * Virtualization: Hands-on experience with VMware NSX in a data center context. * Appliance Security: Direct experience with Cisco ASA, Juniper SRX, Palo Alto firewalls, and F5. * Advanced Threat Protection: Solid understanding of F5 ASM/WAF, Trend TippingPoint, and Distributed Denial of Service (DDoS) technologies. * VPN & SD-WAN: Proficiency with IPsec, 3DES, AES, IKE, DMVPN, Cisco AnyConnect, Full/Split-Tunnel client VPNs, Site-to-Site VPNs, and SD-WAN. Preferred Qualifications (Desirable) * 12+ years of network protection experience. * Experience with AWS and/or Azure cloud networking services. * Strong experience writing complex network designs, change logs, and troubleshooting documentation. * Experience in sniffer packet capture and protocol analysis. * Basic scripting experience (Python, Perl, PowerShell, Java, etc.). * Familiarity with NIST 800-53 v4 security controls. * Experience using Security Information and Event Management (SIEM) tools., * Network Protection: 7 years (Required) License/Certification: * TippingPoint Intrusion Prevention System Expert Cert (Required) Work Location: Hybrid remote in San Jose, CA 95139 ## Description We are seeking an experienced Senior Network Protection Engineer to support the California Department of Technology (CDT) Enterprise Network - Network Threat Protection Unit. In this role, you will work closely with state IT management to secure, configure, and maintain vital security infrastructure across data centers and wide area networks., * Review, evaluate, and optimize security configurations on network hardware and software throughout data center and wide area networks. * Install, configure, troubleshoot, and monitor critical security equipment, including firewalls, routers, switches, and load balancers. * Manage and configure Intrusion Detection/Prevention Systems (IDS/IPS), specifically Trend Micro TippingPoint. * Evaluate and document security practices for firewalls, IPS, and DDoS prevention services. * Configure and troubleshoot encryption, IPsec VPNs, and content load balancing. * Provide detailed written documentation, troubleshooting procedures, and knowledge transfer/training to state staff. * Submit weekly written contract status reports in MS Word format tracking completed tasks, project risks, and hours. ## Related Videos - [IP Authentication: A Tale of Performance Pitfalls and Challenges in Prod](https://www.wearedevelopers.com/videos/1413-ip-authentication-a-tale-of-performance-pitfalls-and-challenges-in-prod) - [IoT: The road to sustainability](https://www.wearedevelopers.com/videos/557-iot-the-road-to-sustainability) - [WeAreDevelopers LIVE - Chrome for Sale? Comet - the upcoming perplexity browser Stealing and leaking](https://www.wearedevelopers.com/videos/1331-wearedevelopers-live-chrome-for-sale-comet-the-upcoming-perplexity-browser-stealing-and-leaking) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see) - [Micro-frontends anti-patterns](https://www.wearedevelopers.com/videos/299-micro-frontends-anti-patterns) ## Related Articles - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated) - [The 8 Best Code Testing Tools](https://www.wearedevelopers.com/magazine/402-the-8-best-code-testing-tools) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)