Network Security Engineer

VDOT is seeking a Senior Network Security Engineer with 7+ years of experience in enterprise network security and cybersecurity engineering. The candidate will secure and support a large hybrid network environment across approximately 300 locations., * Design, implement, and maintain enterprise network security architecture.

• Manage Palo Alto firewalls, policies, NAT, VPN, and access controls.
• Support Azure networking, ExpressRoute, and hybrid cloud connectivity.
• Implement and manage WAF technologies.
• Monitor security events using Splunk SIEM.
• Perform threat hunting, incident response, vulnerability remediation, and security assessments.
• Support SD-WAN infrastructure and geographically distributed networks.
• Analyze firewall, network, and SIEM logs to identify threats.
• Maintain network diagrams, topology, IP schemes, firewall rules, and security documentation.
• Collaborate with Infrastructure, Cloud, and Information Security teams.

• 7+ years Network Security/Cybersecurity Engineering
• Palo Alto Firewalls - strong hands-on experience
• Azure Networking + ExpressRoute
• WAF
• Splunk SIEM
• SD-WAN
• TCP/IP, DNS, DHCP, Routing, Switching, VPN
• Threat Hunting & Incident Response
• Vulnerability Management & Penetration Testing
• Network Security Architecture and Documentation