> Markdown version of [/jobs/ext/2029051-lead-network-security-engineer](https://www.wearedevelopers.com/jobs/ext/2029051-lead-network-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Lead Network Security Engineer - **Company:** Palo Alto, Inc. - **Location:** United States - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Artificial Intelligence, Application Firewall, Bash Shell, Border Gateway Protocol, Cyber Security, System Configuration, Dynamic Host Configuration Protocol, Network Address Translation, Domain Name System (DNS), Internet Protocol Security (IP SEC), Intrusion Detection and Prevention, Intrusion Detection Systems, Virtual Private Networks (VPN), Python (Programming Language), Network Security, Log Analysis, Network Architecture, Network Diagrams, Network Monitoring, Routing, Network Protocols, Open Shortest Path First (OSPF), Public Key Infrastructure, Remote Access Technology, Ansible, Security Information and Event Management, Simple Network Management Protocols, TCP/IP, Virtual Local Area Networks, SSL Certificate Management, Scripting, Transport Layer Security, Load Balancing, In-Plane Switching (IPS), Firewall Services Module, Vulnerability Analysis - **Published:** August 11, 2026 - **Apply:** https://www.dice.com/job-detail/4e8f7212-82f7-488d-b5ba-1bc65664de33 ## About the Role * 10+ years of experience in Network Security Engineering. * 7+ years of strong experience in Palo Alto Firewall administration. * Hands-on experience with certificate management is required; experience with Venafi is preferred. * Experience managing digital certificates, PKI infrastructure, certificate lifecycle management, and certificate-related security controls. * Experience in log analysis, incident response, and security monitoring. * Hands-on with VPNs (SSL/IPSec), NAT, IDS/IPS, Threat Prevention, and URL Filtering. * In-depth knowledge of TCP/IP, routing, VLANs, NAT, VPN, IPS, IDS, and general network architecture. * Understanding of network protocols (TCP/IP, BGP, OSPF, VLANs, DHCP, DNS, NAT, SNMP, IPsec, GRE, VXLAN). * Must have excellent understanding of security architecture and integration. * Strong proficiency in scripting (Python, Bash) and automation (Ansible) * Experience with change management and ITIL-based processes. * Strong troubleshooting and analytical skills. * Any experience with AI will be a huge plus. * Excellent communication and documentation skills. * Able to participate in oncall rotation schedule. One week for every 5 weeks. Monday 7AM to Monday 7AM. * Nice to have: Certifications such as PCNSE, PCNSA, CISSP, or CCNP. ## Description * Design and implement Palo Alto firewall policies, NAT rules, VPN configurations, and security zones. * Deploy, configure, and manage Palo Alto firewalls including policies, NAT, VPN, IPS, and threat prevention features. * Demonstrate expertise in deploying, configuring, and managing Palo Alto firewall and VPN solutions across on-premises, cloud, and remote access environments, ensuring seamless integration and security. * Define, configure, and optimize firewall policies and rules. * Perform troubleshooting and root cause analysis for network security incidents and firewall-related issues. * Manage security zones, access control policies, and URL filtering. * Manage and support enterprise certificate lifecycle processes, including certificate issuance, renewal, revocation, and compliance monitoring, preferably using Venafi. * Plan and execute firewall upgrades, patches, and migrations with minimal downtime. * Monitor and respond to security events and incidents related to firewalls and network devices. * Perform regular firewall rule reviews to optimize security and ensure compliance with security best practices while ensuring business continuity. * Ensure security of routing protocols (BGP, OSPF), VLANs, and load balancing across the network. * Involve in security audits, vulnerability assessments, and incident response to ensure network security compliance. * Monitor network performance and proactively address bottlenecks, latency issues, and security breaches. * Maintain detailed documentation for firewall configurations, security policies, network diagrams, and certificate management processes. * Oncall rotation one week, every 5 weeks. Oncall schedule: Monday 7AM to Monday 7AM. * Weekend support as needed for weekend deployments. ## Related Videos - [Small, Secure, Interconnected: The next Internet Protocol](https://www.wearedevelopers.com/videos/100062-small-secure-interconnected-the-next-internet-protocol) - [Dev & Test in the Cloud? Deploy your cloud environments with Ansible & Terraform](https://www.wearedevelopers.com/videos/1607-dev-test-in-the-cloud-deploy-your-cloud-environments-with-ansible-terraform) - [An Applied Introduction to eBPF with Go](https://www.wearedevelopers.com/videos/1075-an-applied-introduction-to-ebpf-with-go) - [Creating a routing app with Google Maps API from scratch](https://www.wearedevelopers.com/videos/831-creating-a-routing-app-with-google-maps-api-from-scratch) - [Embracing the Hybrid Cloud: Unlocking Success with Ansible](https://www.wearedevelopers.com/videos/932-embracing-the-hybrid-cloud-unlocking-success-with-ansible) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) ## Related Articles - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy) - [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers) - [Everything a Developer Needs to Know About MCP with Neo4j](https://www.wearedevelopers.com/magazine/604-everything-a-developer-needs-to-know-about-mcp-with-neo4j)