> Markdown version of [/jobs/ext/3073604-senior-network-security-engineer](https://www.wearedevelopers.com/jobs/ext/3073604-senior-network-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Senior Network Security Engineer - **Company:** Covenant LLC - **Location:** Boston, MA, United States - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Artificial Intelligence, Application Firewall, Cloud Computing, Cyber Security, Dynamic Host Configuration Protocol, Network Address Translation, Domain Name System Security Extensions, Domain Name System (DNS), Firmware, Hypertext Transfer Protocols (HTTP), Intrusion Detection and Prevention, Subnetting, Virtual Private Networks (VPN), Network Security, Routing, Remote Access Technology, Security Information and Event Management, TCP/IP, Traffic Analysis, Data Logging, Transport Layer Security, Firewalls (Computer Science), Palo Alto Networks, Fortinet, Firewall Services Module - **Published:** September 25, 2026 - **Apply:** https://www.disabledperson.com/jobs/75489760-senior-network-security-engineer ## About the Role * 5-10 years of hands-on experience in network security, firewall administration, security operations engineering, network engineering, or a closely related role. * Deep hands-on Next-Gen Firewall experience, ideally with Palo Alto Networks, Check Point, and/or Fortinet, including firewall policies, NAT, security profiles, VPN, URL filtering, threat prevention, logging, and lifecycle management. * Strong enterprise networking fundamentals across TCP/IP, subnetting, routing, switching, DNS, DHCP, NAT, VPN, TLS, and HTTP/S, with the ability to troubleshoot Layer 3-7 issues. * Proven ability to independently own production network security issues through investigation and resolution, including firewall changes/upgrades, incident response, and scheduled after-hours maintenance. * Strong problem-solving skills with an adaptable mindset and willingness to learn new technologies. ## Description * Administer, maintain, troubleshoot, and continuously improve enterprise Next-Gen firewall infrastructure and associated security controls. * Manage firewall policies, NAT, security profiles, zones, interfaces, objects, routing configurations, management portals, and rule-base hygiene. * Configure and tune threat prevention, vulnerability protection, URL filtering, DNS security, sandboxing, decryption, and logging profiles. * Support secure remote connectivity and VPN operations, including authentication, client connectivity, configuration, and user-impacting incidents. * Troubleshoot complex Layer 3-7 network security issues using packet captures, traffic analysis, CLI/vendor tools, logs, and other diagnostic utilities. * Leverage SIEM and AI/AIOps capabilities to identify threats, analyze network and firewall activity, prioritize incidents, and identify opportunities to improve security controls. * Participate in firewall rule reviews, segmentation initiatives, access evaluations, control validation, and security cleanup activities. * Plan and execute firewall maintenance, firmware upgrades, content updates, high-availability validation, license checks, and capacity monitoring. * Partner closely with network engineering, infrastructure, cloud, identity, endpoint, application, and security teams. * Maintain clear operational documentation, diagrams, procedures, runbooks, change records, and audit/control evidence. * Take independent ownership of issues from initial investigation through escalation, resolution, and follow-up. * Participate in incident response and scheduled after-hours maintenance when required. ## Related Videos - [WeAreDevelopers LIVE - Back to CODE100](https://www.wearedevelopers.com/videos/1909-wearedevelopers-live-back-to-code100) - [Creating a routing app with Google Maps API from scratch](https://www.wearedevelopers.com/videos/831-creating-a-routing-app-with-google-maps-api-from-scratch) - [An Applied Introduction to eBPF with Go](https://www.wearedevelopers.com/videos/1075-an-applied-introduction-to-ebpf-with-go) - [Small, Secure, Interconnected: The next Internet Protocol](https://www.wearedevelopers.com/videos/100062-small-secure-interconnected-the-next-internet-protocol) - [A Technical Introduction to Bitcoin's 2nd Layer- The Lightning Network](https://www.wearedevelopers.com/videos/15-a-technical-introduction-to-bitcoin-s-2nd-layer-the-lightning-network) - [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data) ## Related Articles - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology) - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)