Senior Network Engineer - Network Security

We are seeking an experienced Senior Network Engineer - Network Security to support enterprise network infrastructure and cybersecurity initiatives. The ideal candidate will have strong hands-on experience with network security, firewall administration, VPN, network architecture, cloud networking, security monitoring, and enterprise infrastructure., * Design, implement, and manage enterprise network and security solutions.

• Administer and maintain Palo Alto and Check Point Next-Generation Firewalls.
• Configure firewall policies, access rules, NAT, security profiles, and related security controls.
• Perform firewall deployments, migrations, upgrades, and rule-base conversions.
• Configure and support GlobalProtect VPN and enterprise remote-access solutions.
• Design and implement network segmentation and security controls for critical systems and sensitive workloads.
• Configure and manage security controls within cloud network environments.
• Monitor network traffic, security events, logs, alerts, and security violations.
• Investigate and resolve complex network and cybersecurity incidents.
• Perform packet analysis, network troubleshooting, root-cause analysis, and corrective actions.
• Conduct network and infrastructure security risk assessments.
• Develop risk-based remediation strategies for vulnerabilities and security issues.
• Develop and maintain enterprise security policies, standards, procedures, and technical controls.
• Align network and security practices with NIST guidelines and applicable security standards.
• Design secure network architectures covering LAN/WAN, routing, switching, wireless, VPN, Internet connectivity, data centers, and cloud environments.
• Develop and maintain network segmentation strategies to help limit lateral movement and unauthorized access.
• Analyze north-south and east-west network traffic and recommend appropriate security controls.
• Establish network performance and security metrics, dashboards, KPIs, and management reports.
• Maintain accurate network diagrams, IP addressing documentation, VLAN information, firewall rules, configurations, and operational procedures.
• Participate in technology evaluations, proof-of-concept activities, and implementation of emerging networking and cybersecurity technologies.
• Provide advanced technical support and consultation for complex network and security issues.
• Support projects through requirements gathering, architecture, design, implementation, testing, deployment, and operational phases.
• Collaborate with cybersecurity, cloud, infrastructure, systems, database, application, architecture, and telecommunications teams.
• Provide technical leadership, guidance, and mentoring to network and security team members.
• Support disaster recovery, business continuity, high availability, and network resilience initiatives.

• Bachelor’s degree in Computer Science, Information Systems, Cybersecurity, or a related field, or equivalent professional experience.
• 5-10+ years of experience in IT network engineering, cybersecurity, or related technical environments.
• 3-5+ years of experience working with information security tools and practices aligned with NIST standards.
• Strong knowledge of enterprise network architecture and cybersecurity.
• Hands-on experience with Palo Alto and/or Check Point firewalls.
• Experience with GlobalProtect VPN or comparable enterprise VPN technologies.
• Strong experience with firewall administration, security policies, rules, and rule migrations.
• Experience with network segmentation, access controls, secure network architecture, and security controls.
• Experience with cloud networking and cloud security.
• Strong understanding of routing, switching, LAN/WAN, wireless, VPN, Internet, and data center networking.
• Experience troubleshooting complex network and security incidents.
• Experience with network monitoring, security monitoring, logging, and traffic analysis.
• Experience creating network/infrastructure diagrams using diagramming or schematic tools.
• Strong technical documentation and communication skills.
• Ability to work independently and manage multiple projects or technical initiatives.

Preferred Certifications

• PCNSE - Palo Alto Networks Certified Network Security Engineer
• CISSP
• CCNP
• CCIE