> Markdown version of [/jobs/ext/1863299-senior-network-security-engineer](https://www.wearedevelopers.com/jobs/ext/1863299-senior-network-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Senior Network Security Engineer - **Company:** County of Maricopa - **Location:** United States - **Experience:** Expert - **Salary:** $97,250.0 - $142,500.0 - **Contract:** Permanent contract - **Skills:** Access Network, Active Directory, Application Programming Interfaces (APIs), Application Firewall, Cloud Computing, Configuration Management, Complex Networks, Cyber Security, System Configuration, Data Centers, Domain Name System (DNS), Multi-Factor Authentication, Identity and Access Management, Intrusion Detection and Prevention, Virtual Private Networks (VPN), Information Systems Security Architecture Professional, Python (Programming Language), Network Security, Network Architecture, Network Segmentation, Network Service, OAuth, OpenID, Performance Tuning, Public Key Infrastructure, Remote Access Technology, Azure Active Directory, Ansible, Zero Trust Network Access, Security Assertion Markup Language (SAML), Single Sign-On, Systems Integration, Wide Area Networks, Wireless Networks, Scripting, Enterprise Software Applications, Computer Network Operations, Cloud Platform System, Okta, Firewalls (Computer Science), Infrastructure Automation Frameworks, Information Technology, Palo Alto Networks, Firewall Services Module, Restful APIs, Open Network Automation Platform, Workday, Cisco - **Published:** July 2, 2026 - **Apply:** https://diversityjobs.com/main/sendform/8/8/28176/1/17453355?backUrl=%2Fcareer%2F17453355%2FSenior-Network-Security-Engineer-Arizona-Phoenix ## About the Role * Five years of progressively responsible experience in network operations and engineering within enterprise or large-scale environments * Bachelor's degree in Computer Science, Information Technology, or a closely related field * A combination of post-secondary education and/or job-related experience may substitute for the minimum qualifications on a year-for-year basis. Other Requirements * Successful candidates must currently possess, or have the ability to obtain, a valid Arizona Driver's license by the time of hire We Also Value * Okta Certified Professional / Okta Certified Administrator * Cisco Certified Network Professional (CCNP) Enterprise or higher * Palo Alto Networks Certified Network Security Engineer (PCNSE) * Certified Information Systems Security Professional (CISSP) * Experience in designing, implementing, and managing enterprise network infrastructure, including on-premises, cloud, and hybrid solutions * Experience with enterprise LAN/WAN architecture and wireless networking, including planning, deployment, and troubleshooting across campus and remote locations ## Description As a Senior Network Security Engineer, you will provide expert-level engineering and operational support for the organization's enterprise network and security infrastructure. You will play a lead role in the planning, design, implementation, and ongoing maintenance of secure network solutions across campus, data center, remote offices, cloud environments, and third-party connectivity. This includes core services such as firewall management, networking, VPNs, directory services, identity management, PKI, Web Application Firewalls (WAF), and virtual networks., In this role, you will focus on implementing and optimizing secure connectivity and access solutions, assisting with the deployment of Zero Trust Network Access (ZTNA), and managing firewall policies, VPNs, and segmentation strategies. You will collaborate with cross-functional teams to deliver secure, resilient, and high-performing network services that meet business and regulatory requirements. As a senior engineer, you will also mentor junior staff and ensure adherence to security best practices and operational standards., * Experience deploying and configuring Multi-Factor Authentication (MFA) policies using tools such as Microsoft Entra ID, Okta, or Duo to enhance access security * Experience supporting the design and troubleshooting of Single Sign-On (SSO) integrations using SAML, OIDC, and OAuth protocols across enterprise applications * Experience configuring, managing, and troubleshoting Next-Generation Firewalls (NGFW)-such as Palo Alto Networks -including security policies, application control, threat prevention, URL filtering, and VPN services * Experience implementing and supporting VPN solutions, including site-to-site and remote access configurations, with a focus on performance and security * Proficiency in network automation and scripting (e.g., Python, Ansible, or REST APIs) to streamline configuration management and operational tasks Job Contributions * Design, architect, and govern enterprise network security frameworks and secure connectivity models, establishing standards for firewall policy design, segmentation architecture, and secure access across on-premises, cloud, and hybrid environments; ensure solutions align with enterprise risk tolerance, cybersecurity frameworks, and long-term infrastructure strategy * Engineer and enforce identity-integrated network access controls, developing and implementing authentication and authorization models that align network infrastructure with IAM platforms (e.g., Okta, Microsoft Entra ID, Active Directory), enabling Zero Trust Network Access (ZTNA) and ensuring secure, policy-driven access across users, devices, and applications * Lead and govern the enterprise firewall policy lifecycle, including the evaluation, risk-based approval, and continuous optimization of firewall rules and access controls; assess business needs against security risk, ensuring compliance with regulatory requirements and minimizing exposure to unauthorized access or lateral movement within the network * Design and oversee SD-WAN architecture and advanced network segmentation strategies, ensuring secure and resilient connectivity across geographically dispersed environments while enforcing traffic isolation, performance optimization, and alignment with enterprise security and compliance requirements * Design and oversee SD-WAN architecture and advanced network segmentation strategies, ensuring secure and resilient connectivity across geographically dispersed environments while enforcing traffic isolation, performance optimization, and alignment with enterprise security and compliance requirements * Develop and implement advanced automation and orchestration solutions using scripting, APIs, and configuration management tools to enforce standardized configurations, reduce manual intervention, and ensure consistent application of security policies across complex network environments * Develop, maintain, and govern comprehensive technical and architectural documentation, including network security standards, system designs, configurations, and procedures, ensuring alignment with audit requirements, operational continuity, and enterprise governance practice * Establish and enforce domain registration and external DNS governance controls, including lifecycle management, security monitoring, and protection mechanisms to prevent unauthorized changes, domain hijacking, and exposure to external threat vectors * Serve as the senior technical authority and escalation point for complex and high-risk network security issues, conducting deep technical analysis, guiding remediation efforts, and making informed decisions that directly impact enterprise security posture and operational continuity * Collaborate with cross-functional technical teams and stakeholders to integrate secure network and access control solutions into new and existing systems, ensuring that architecture, implementations, and configurations align with enterprise standards, security frameworks, and business requirements * Continuously assess and enhance the organization's network security posture by evaluating emerging threats, technologies, and industry best practices, translating findings into strategic engineering improvements and actionable recommendations * Support and lead technical components of audit, compliance, and regulatory initiatives (e.g., CJIS, HIPAA, NIST), including designing and validating controls, responding to audit findings, and ensuring network security architecture meets evolving compliance and governance expectations Working Conditions * Exerting up to 10 lbs. occasionally or negligible weights frequently; sitting most of the time * Position is typically office or administrative work and is not substantially exposed to adverse environmental conditions Selection Procedure * Consideration will only be given to candidates who submit online applications * Candidates will be contacted primarily through email and their Workday online application profile * Must pass a pre-employment background and/or fingerprint investigation as required by statute or policy, including drug and alcohol testing requirements for positions designated as safety-sensitive ## Related Videos - [How Cisco embraced a DevOps culture within its network engineering team](https://www.wearedevelopers.com/videos/99-how-cisco-embraced-a-devops-culture-within-its-network-engineering-team) - [Keeping applications secure by evolving OAuth 2.0 and OpenID Connect](https://www.wearedevelopers.com/videos/100152-keeping-applications-secure-by-evolving-oauth-2-0-and-openid-connect) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Computer Vision from the Edge to the Cloud done easy](https://www.wearedevelopers.com/videos/263-computer-vision-from-the-edge-to-the-cloud-done-easy) - [Delay the AI Overlords: How OAuth and OpenFGA Can Keep Your AI Agents from Going Rogue](https://www.wearedevelopers.com/videos/1637-delay-the-ai-overlords-how-oauth-and-openfga-can-keep-your-ai-agents-from-going-rogue) - [Small, Secure, Interconnected: The next Internet Protocol](https://www.wearedevelopers.com/videos/100062-small-secure-interconnected-the-next-internet-protocol) ## Related Articles - [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology) - [7 Important Tips That Every Software Developer Should Know](https://www.wearedevelopers.com/magazine/101-7-important-tips-that-every-software-developer-should-know) - [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers)