> Markdown version of [/jobs/ext/2712083-network-security-engineer](https://www.wearedevelopers.com/jobs/ext/2712083-network-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Network security Engineer - **Company:** LTD Global - **Location:** Englewood, CO, United States - **Experience:** Expert - **Salary:** $132,000.0 - $135,000.0 - **Contract:** Permanent contract - **Skills:** Microsoft Access, Apple IOS, Software System Penetration Testing, Border Gateway Protocol, Cisco Routers, Cloud Computing, Cyber Security, Computer Networks, Data Centers, Networking Hardware, Information Systems Security Architecture Professional, Network Security, Network Monitoring, Routing, Network Service, Open Shortest Path First (OSPF), PCI Data Security Standards, Remote Access Technology, Zero Trust Network Access, Wide Area Networks, Wireless Access Point, Wireless Networks, Data Logging, Identity Services Engine, Nx-os, Software Security, Firewalls (Computer Science), Information Technology, SolarWinds (Software), Palo Alto Networks, Cisco - **Published:** September 4, 2026 - **Apply:** https://www.techcareers.com/job.asp?id=3376843807&tx=FR10804LFU&pt=1&aff=0B19D771-A501-4A5E-8338-2A822B784D54&utm_source=Job%20Feed&utm_medium=textkernel&utm_campaign=DE&utm_term=0B19D771-A501-4A5E-8338-2A822B784D54 ## About the Role Education, Licensing, and Certification * Bachelor's degree in Computer Science, Information Security, Network Engineering, or a related field, or equivalent combination of education and relevant experience. * Preferred certifications include CISSP, PCNSE, CCNP Security, CCNP Enterprise, Cisco CyberOps, or comparable network and security credentials. Experience * Ten or more years of hands-on enterprise networking experience, including routing, switching, firewalls, and network security controls. * Demonstrated experience operating in structured, change-controlled enterprise environments. * Experience supporting security architecture, technical assessments, hardening, remediation, and incident response in a regulated or mission-critical environment. Required Technical Knowledge * Cisco routers and switches, including IOS and NX-OS. * Cisco Identity Services Engine (ISE) and Cisco Application Centric Infrastructure (ACI). * Palo Alto Networks Next-Generation Firewalls and Panorama. * Meraki access points and MX firewalls. * BGP and OSPF routing protocols. * Network appliance hardening, access control, segmentation, logging, and security control implementation. * Network security monitoring and troubleshooting using enterprise network and security telemetry. Preferred Knowledge and Experience * Palo Alto ION, Prisma Access, SD-WAN, Zero Trust Network Access, or SASE architectures. * SolarWinds or comparable network monitoring and management platforms. * NIST CSF, NIST 800-53, NIST 800-171, PCI DSS, HIPAA, and related security or compliance frameworks. * Security assessments, penetration testing remediation, architecture review, or regulated healthcare and emergency services environments.. Measurable alignment of network security controls with GMR standards and applicable security frameworks ## Description The Cybersecurity Network Security Engineer is a hands-on security engineering role responsible for the design, hardening, oversight, and continuous improvement of GMR's enterprise network security architecture. This position partners closely with Cybersecurity Architecture & Engineering, Network Engineering, Infrastructure, Cloud, the Security Operations Center, and other technology teams to ensure network services are secure, resilient, supportable, and aligned with organizational risk standards. The engineer assesses current-state controls, translates security requirements into practical design and remediation recommendations, supports approved implementation and operational response, and helps establish repeatable security patterns across data center, campus, WAN, cloud edge, wireless, and remote-access environments. Success requires strong technical depth, disciplined change control, clear documentation, and effective cross-functional collaboration., * Review network security configurations and recommend improvements aligned with GMR standards, NIST guidance, and industry best practices. * Harden routers, switches, firewalls, wireless infrastructure, and network appliances to reduce attack surface and enforce secure configuration baselines. * Administer and optimize Palo Alto Networks Next-Generation Firewalls and Panorama, including policy review, rule management, security profiles, logging, and configuration governance. * Partner with Network Engineering to advance enterprise segmentation, including microsegmentation, zone design, access control, and path isolation. * Provide security guidance for BGP and OSPF routing designs and help address routing-related threats, exposure, and resilience concerns. * Assess network configurations for misconfiguration, policy drift, visibility gaps, compliance concerns, and opportunities to strengthen preventive and detective controls. * Develop actionable remediation recommendations and support implementation through approved change management processes, including risk articulation, validation criteria, rollback considerations, and documentation. * Provide subject matter expertise during incidents and investigations involving firewalls, network traffic, routing, remote access, or network security technologies. * Collaborate with Networking, Infrastructure, Cloud, SOC, GRC, Applications, and Architecture teams on secure deployment of new technologies and services. * Contribute to architecture and technology evaluations involving SD-WAN, Palo Alto ION, Prisma Access, Zero Trust Network Access, and SASE-aligned capabilities. * Support audit and assessment readiness activities, including remediation related to PCI DSS, NIST CSF, NIST 800-53, and NIST 800-171. * Maintain clear technical documentation, secure design patterns, standards, procedures, and decision records for network security controls. * Develop and report meaningful measures for configuration conformance, policy review, remediation progress, and network security maturity. * Maintain current knowledge of network threats, vendor capabilities, vulnerabilities, and security practices across Cisco, Palo Alto Networks, Meraki, and related ecosystems. ## Related Videos - [How Cisco embraced a DevOps culture within its network engineering team](https://www.wearedevelopers.com/videos/99-how-cisco-embraced-a-devops-culture-within-its-network-engineering-team) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Creating a routing app with Google Maps API from scratch](https://www.wearedevelopers.com/videos/831-creating-a-routing-app-with-google-maps-api-from-scratch) - [Your Infrastructure Is Not a Playground: AI Agents for Infra Done Right](https://www.wearedevelopers.com/videos/2084-your-infrastructure-is-not-a-playground-ai-agents-for-infra-done-right) - [Computer Vision from the Edge to the Cloud done easy](https://www.wearedevelopers.com/videos/263-computer-vision-from-the-edge-to-the-cloud-done-easy) - [A Technical Introduction to Bitcoin's 2nd Layer- The Lightning Network](https://www.wearedevelopers.com/videos/15-a-technical-introduction-to-bitcoin-s-2nd-layer-the-lightning-network) ## Related Articles - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [Everything a Developer Needs to Know About MCP with Neo4j](https://www.wearedevelopers.com/magazine/604-everything-a-developer-needs-to-know-about-mcp-with-neo4j) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again)