> Markdown version of [/jobs/ext/3456143-senior-network-security-engineer](https://www.wearedevelopers.com/jobs/ext/3456143-senior-network-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Senior Network Security Engineer

- **Company:** Valar Atomics
- **Location:** Long Beach, CA, United States
- **Experience:** Expert
- **Salary:** $160,000.0 - $180,000.0
- **Contract:** Permanent contract
- **Skills:** IEEE 802.1X, Access Network, Amazon Web Services, Application Firewall, Microsoft Azure, Software as a Service, Configuration Management, Cyber Security, System Configuration, Network Address Translation, Intrusion Detection and Prevention, Virtual Private Networks (VPN), Network Security, IP Cameras, Routing, Public Key Infrastructure, Remote Access Technology, Ansible, Virtual Local Area Networks, Wireless Access Point, Wireless Networks, Wi-Fi Technology, Network Access Control, Saltstack, HybridCloud, Firewalls (Computer Science), Palo Alto Networks, Hardware Infrastructure, Terraform, Prisma Cloud Platform
- **Published:** September 2, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=325083245864c190

## About the Role

* Proven hands-on experience with Palo Alto Networks firewalls (policy creation, NAT, routing, troubleshooting)
 * Experience configuring and supporting GlobalProtect VPN
 * Experience building site-to-site VPN tunnels with Azure and AWS
 * Working knowledge of 802.1X authentication (wired/wireless) and certificate-based network access
 * Experience with Ruckus switch configuration and routing
 * Strong understanding of enterprise routing concepts (static routing, VLANs, inter-VLAN routing)
 * Solid troubleshooting skills across firewall, VPN, and switching layers
 * Performed root-cause analysis on wireless access point failures, adjusted AP placement and power/range settings to optimize coverage, and resolved intermittent Wi-Fi connectivity issues.
 * Skilled in wireless access point diagnostics, RF coverage tuning, and troubleshooting client connectivity and signal degradation issues.

Preferred Skills and Experience

 * Experience with Prisma Access and/or Prisma Cloud
 * Experience with CMMC2
 * Prior military service in US Airforce or Navy, particularly in communications, networking, cybersecurity, IT, or other technical fields, is highly valued. Relevant military training and operational experience will be considered alongside civilian industry experience.
 * Experience with Palo Alto CASB
 * Experience with EZPKI / EZRadius or similar Azure-based SaaS RADIUS/PKI/TLS certificate services
 * Experience deploying TLS/802.1X authentication for IoT devices and IP cameras
 * Relevant certifications such as PCNSE (Palo Alto Certified Network Security Engineer), CCNP\CCNP Security, or similar
 * Light automation such ansible, Terraform, Saltstack, Applicants must be legally authorized to work in the United States as a U.S. citizen or lawful permanent resident (green card holder).

## Description

Valar Atomics is seeking a hands-on Senior Network Security Engineer to design, implement, and maintain our enterprise network security infrastructure. This role focuses heavily on Palo Alto Networks firewall administration, secure remote access via GlobalProtect VPN, cloud connectivity across Azure and AWS, and network access control for wired, wireless, and IoT devices. The ideal candidate combines deep firewall/routing expertise with practical experience securing endpoints, cameras, and IoT devices through certificate-based (TLS/802.1X) authentication. This position is fully on-site at our Torrance, CA location. Relocation assistance is not available., Firewall & Network Security

 * Configure and manage Palo Alto Networks firewall security policies, NAT rules, and threat prevention profiles
 * Design and implement Palo Alto Firewall routing (static, dynamic, and policy-based routing)
 * Monitor, troubleshoot, and optimize firewall performance and rule sets

VPN & Cloud Connectivity

 * Build, configure, and maintain GlobalProtect VPN for secure remote access
 * Create and manage site-to-site VPN tunnels between on-premises infrastructure and Azure and AWS environments
 * Troubleshoot VPN connectivity, tunnel stability, and routing issues across hybrid cloud environments

Identity, Certificates & Access Control

 * Integrate and manage EZPKI and EZRadius (Azure-based SaaS RADIUS and SaaS TLS/PKI services) for certificate-based network authentication
 * Deploy and support TLS-based 802.1X authentication for IP cameras and other IoT devices
 * Configure 802.1X network access control policies across wired and wireless infrastructure
 * Integrate and manage AWS CA and AWS PKI infrastructure

Switching & LAN Infrastructure

 * Configure and maintain routing on Ruckus switches
 * Support VLAN segmentation, inter-VLAN routing, and network access policies for IoT and camera device segments

Cross-Functional / Nice-to-Have

 * Support Prisma (Prisma Access / Prisma Cloud) initiatives as needed
 * Support Palo Alto CASB deployment and policy configuration as needed