> Markdown version of [/jobs/ext/3434613-senior-network-firewall-engineer-houston-tx](https://www.wearedevelopers.com/jobs/ext/3434613-senior-network-firewall-engineer-houston-tx). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Senior Network / Firewall Engineer - Houston, TX - **Company:** Zedcor Security Solutions (USA), LLC - **Location:** Houston, TX, United States - **Experience:** Expert - **Salary:** $110,000.0 - $135,000.0 - **Contract:** Permanent contract - **Skills:** Audit Trail, Microsoft Azure, Border Gateway Protocol, Cloud Computing, Cyber Security, Dynamic Host Configuration Protocol, Network Address Translation, Disaster Recovery, Internet Protocol Security (IP SEC), Virtual Private Networks (VPN), Network Security, Uptime, Network Planning and Design, Routing, Public Key Infrastructure, Remote Access Technology, Runbook, Data Streaming, Software Vulnerability Management, Wi-Fi Technology, Data Logging, Network Routers, Dynamic Routing, Transport Layer Security, Load Balancing, System Availability, Firewalls (Computer Science), Microsoft InTune, Palo Alto Networks, Microsoft Sentinel, Fortinet, Firewall Services Module, Big Ip, Cisco, SSL VPN - **Published:** September 3, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=7a587ba2f71ad9ec ## About the Role The Senior Network / Firewall Engineer to design, build, secure, and maintain a large-scale hybrid network environment. This is not an entry-level role. The successful candidate must be able to solve complex technical problems under pressure and operate with cybersecurity, uptime, encryption, monitoring, and compliance in mind. The environment includes Azure VPN Gateway, Azure Networking, Sophos firewalls, Cradlepoint routers, switches, Wi-Fi, F5 BIG-IP, Azure WAF, Azure Application Gateway, Azure Front Door, centralized logging, centralized monitoring, and internal PKI., * 5+ years of hands-on network engineering, firewall engineering, or network security engineering experience. * Strong Azure Networking experience, including Azure VPN Gateway, virtual networks, routing, NSGs, private connectivity, and hybrid networking. * Strong knowledge of IPsec VPNs, SSL VPNs, routing, switching, segmentation, firewall policies, NAT, high availability, and secure remote access. * Solid understanding of DNS and DHCP design, troubleshooting, and security best practices. * Strong understanding of encryption, PKI, certificate-based authentication, secure management access, and network security best practices. * Ability to work full-time on-site in Houston, Texas. * Ability to troubleshoot complex production issues under pressure. * Understanding of why DNS and DHCP should not be hosted directly on firewalls, including separation of duties, availability, scalability, logging, auditability, and change-control risks. * Hands-on experience with BGP and dynamic routing. * Strong experience with Sophos or another major enterprise firewall platform such as Fortinet, Palo Alto, Cisco, or Check Point. * Local Houston-area candidate able to work in office 5 days per week. Preferred Qualifications * Sophos firewall experience. * F5 BIG-IP, WAF, load-balancing, Azure WAF, Azure Application Gateway, or Azure Front Door experience. * Enterprise PKI and certificate lifecycle experience. * Certifications such as CCNP, CCNA, NSE, PCNSE, Sophos, Azure Network Engineer Associate, Security+, CISSP, or equivalent practical experience. * Azure Monitor, Microsoft Sentinel, Defender for Cloud, Intune, or similar monitoring/security tooling experience. * Cradlepoint or large-scale cellular router experience. ## Description * Design, build, maintain, and troubleshoot IPsec and SSL VPN networks.· Manage and support a Cradlepoint environment of 20,000+ devices.· Manage Sophos firewalls or become proficient with Sophos within the first 30 days if experienced with another major firewall platform. * Ensure DNS and DHCP are centrally managed, monitored, logged, secured, and not hosted directly on firewalls.· Patch, monitor, log, audit, and secure network infrastructure. * Ensure network links, management access, VPNs, and sensitive data flows are encrypted.· Document network designs, firewall rules, routing policies, VPN configurations, standards, and runbooks. * Support incident response, change management, vulnerability remediation, disaster recovery, SOC 2, FedRAMP, and StateRAMP readiness. * Use Zedcor's internal PKI solution for device identity, certificates, authentication, encryption, and secure management. * Maintain centralized logging, centralized audit logging, centralized authentication, centralized monitoring, and alerting. * Ensure firewalls are used as security enforcement points, not as core infrastructure service providers. * Support F5 BIG-IP, Azure WAF, Azure Application Gateway, and Azure Front Door. * Configure and troubleshoot dynamic routing, including internal BGP. * Support Azure VPN Gateway, Azure Networking, Sophos firewalls, Cradlepoint, switches, Wi-Fi, WAF, and load-balancing platforms., * Design, build, maintain, and troubleshoot IPsec and SSL VPN networks.· Manage and support a Cradlepoint environment of 20,000+ devices. * Manage Sophos firewalls or become proficient with Sophos within the first 30 days if experienced with another major firewall platform. * Ensure DNS and DHCP are centrally managed, monitored, logged, secured, and not hosted directly on firewalls. * Patch, monitor, log, audit, and secure network infrastructure. * Ensure network links, management access, VPNs, and sensitive data flows are encrypted. * Document network designs, firewall rules, routing policies, VPN configurations, standards, and runbooks. * Support incident response, change management, vulnerability remediation, disaster recovery, SOC 2, FedRAMP, and StateRAMP readiness. * Use Zedcor's internal PKI solution for device identity, certificates, authentication, encryption, and secure management. * Maintain centralized logging, centralized audit logging, centralized authentication, centralized monitoring, and alerting. * Ensure firewalls are used as security enforcement points, not as core infrastructure service providers. * Support F5 BIG-IP, Azure WAF, Azure Application Gateway, and Azure Front Door. * Configure and troubleshoot dynamic routing, including internal BGP. * Support Azure VPN Gateway, Azure Networking, Sophos firewalls, Cradlepoint, switches, Wi-Fi, WAF, and load-balancing platforms. ## Related Videos - [How Cisco embraced a DevOps culture within its network engineering team](https://www.wearedevelopers.com/videos/99-how-cisco-embraced-a-devops-culture-within-its-network-engineering-team) - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [DevOps at Netflix](https://www.wearedevelopers.com/videos/270-devops-at-netflix) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Leading with Reliability: Applying SRE Principles to Build Stronger Engineering Organizations](https://www.wearedevelopers.com/videos/100185-leading-with-reliability-applying-sre-principles-to-build-stronger-engineering-organizations) - [Computer Vision from the Edge to the Cloud done easy](https://www.wearedevelopers.com/videos/263-computer-vision-from-the-edge-to-the-cloud-done-easy) ## Related Articles - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [The Best Job Search Websites of 2025](https://www.wearedevelopers.com/magazine/368-the-best-job-search-websites-of-2025) - [Finding Jobs in Germany](https://www.wearedevelopers.com/magazine/375-finding-jobs-in-germany)