> Markdown version of [/jobs/ext/1946059-network-security-engineer](https://www.wearedevelopers.com/jobs/ext/1946059-network-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Network Security Engineer

- **Company:** L.L.Bean
- **Location:** Freeport, ME, United States
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Microsoft Access, Link Aggregation (Ethernet), Border Gateway Protocol, Dynamic Host Configuration Protocol, Linux, Domain Name System (DNS), Enhanced Interior Gateway Routing Protocol, Hot Standby Router Protocol, HTTP Secure, Virtual Private Networks (VPN), Multi-protocol Systems, Network Security, Windows Servers, Cisco Nexus Switches, Open Shortest Path First (OSPF), Ansible, Zero Trust Network Access, Software Deployment, TCP/IP, Virtual Local Area Networks, Network Routing, Integrated Service Routers, Transport Layer Security, Load Balancing, Firewalls (Computer Science), Infrastructure Automation Frameworks, Information Technology, Terraform, Splunk, Cisco
- **Published:** August 6, 2026
- **Apply:** https://www.juju.com/job/00000000glsgho

## About the Role

Candidates must be authorized to work in the United States. We are unable to sponsor employment visas for this position., + Strong network security engineering background with emphasis on cloud-delivered security and zero-trust access

 + Palo Alto NGFW, Palo Alto Panorama, Palo Alto Expedition

 + Zscaler ZIA/ZPA design, administration, troubleshooting, and policy management

 + VPN, NAT, Subinterfaces, LACP, DHCP relay, Virtual routers, PBF

 + Infrastructure as Code and automation using tools such as Ansible, Terraform, or similar frameworks for secure, repeatable network and security deployments

 + F5 Load balancers/Application Delivery

 + Nexus NXOSVPC, LACP, L2/3 VLANs, OSPF, VRF, HSRP, PBR

 + Campus switchingL2 VLANs, DHCP snooping, DAI, RSTP, RadiusRoutingASR IOS-XE, ISR, EIGRP, OSPF, VRF, PBR, Subinterfaces, VLANsMerakiVPN, SDWAN, MX (firewalls), MS, MR, Wireless, You should have Bachelor's degree in Computer Science, or related areas, a minimum of 7+ years of experience, and hands-on technical knowledge of networking and security. Arista, Cisco, Palo Alto, and Zscaler certificationsare all preferred. You should bring advanced knowledge of internet protocols such as HTTP(S), TCP/IP, DNS, SSL, DHCP, BGP, OSPF, MPLS, wireless (802.11*), network routing, firewalls, secure access, and switching. Solid proficiency with, Palo Alto, Zscaler, Infoblox, ExtraHop, Splunk, Meraki, Netdisco, and F5 Network is expected. A strong understanding of system management and automation tools such as Ansible, Terraform, Arista CloudVisionis highly desirable, along with experience applying Infrastructure as Code practices to network and security environments. Nice to have knowledge in Windows Server and Linux operating systems. Customer service focused, excellent communication skills, and the ability to work in a team-oriented environment are

## Description

In this critical role you will work with a dedicated team of professionals to design, engineer, and support firewalls, Zscaler Internet Access (ZIA), Zscaler Private Access (ZPA), and routed and switched networks. You will support advanced problem analysis and isolate highly complex issues, develop effective working relationships with technology and business stakeholders, and maximize network performance and security through ongoing monitoring, troubleshooting, and continuous improvement. This role also includes helping define and maintain secure, repeatable infrastructure through automation and Infrastructure as Code practices, while providing technical leadership and coaching to other members of the team. This role will participate in an on-call rotation and on-site work is required.


## Related Videos

- [How Cisco embraced a DevOps culture within its network engineering team](https://www.wearedevelopers.com/videos/99-how-cisco-embraced-a-devops-culture-within-its-network-engineering-team)
- [Our journey with Spring Boot in a microservice architecture](https://www.wearedevelopers.com/videos/511-our-journey-with-spring-boot-in-a-microservice-architecture)
- [Docker network without Docker](https://www.wearedevelopers.com/videos/1418-docker-network-without-docker)
- [Small, Secure, Interconnected: The next Internet Protocol](https://www.wearedevelopers.com/videos/100062-small-secure-interconnected-the-next-internet-protocol)
- [Your Infrastructure Is Not a Playground: AI Agents for Infra Done Right](https://www.wearedevelopers.com/videos/2084-your-infrastructure-is-not-a-playground-ai-agents-for-infra-done-right)
- [Docker exec without Docker](https://www.wearedevelopers.com/videos/1094-docker-exec-without-docker)

## Related Articles

- [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)