Network Security Engineer/Architect

An employer l is looking for an experienced Network Security Engineer to support a large enterprise environment. This individual will be responsible for designing, implementing, and maintaining network security solutions across the organization, with a strong focus on Palo Alto, Cisco Firepower/FMC, and Cisco ISE. This person will provide hands-on support for firewall configuration and troubleshooting, network segmentation, access control, vulnerability remediation, and overall security architecture. They will also partner with infrastructure, cloud, application, and security teams to improve the organization’s overall network security posture.

Day-to-Day * Design and implement enterprise network security solutions * Configure, troubleshoot, and optimize Palo Alto and Cisco firewalls * Manage firewall rules, segmentation, access controls, and security policies * Administer and support Cisco ISE/NAC * Conduct security assessments and firewall rule reviews * Identify and remediate vulnerabilities and security gaps * Troubleshoot network security incidents and perform root cause analysis * Maintain architecture diagrams, runbooks, policies, and change documentation * Partner with network, infrastructure, cloud, and application teams on security initiatives * Evaluate new security technologies and recommend improvements * Support junior team members and participate in knowledge sharing * Assist leadership with security roadmaps and project priorities

7+ years in network security engineering or architecture. Must be a hands-on architect who designs solutions and also builds and configures them. Palo Alto expert: deep hands-on knowledge of PAN-OS architecture, design and configuration. Has built VM-Series and next-generation firewalls in a virtual environment and manages them through Panorama. 5+ years in production supporting Cisco ASA/Firepower (FTD) and FMC, including migrating from FTD to next-generation firewalls. Security audits and gap analysis: has run security audits across Palo Alto, Cisco ASA and FTD (working alongside the wireless engineer on this role). Can find and close gaps in architecture, monitoring, process and security. Cisco ISE: 802.1X, RADIUS, TACACS+, device profiling and policy enforcement. Strong networking and security fundamentals: firewall rule management, segmentation and micro-segmentation, VPN (IPSec/SSL), IDS/IPS, DMZ, Zero Trust, BGP, OSPF, EIGRP, spanning tree, QoS and SD-WAN. PCNSE, CCNP Security, CCIE Security or PCSAE Python, Ansible or Terraform automation; Cisco ISE API integration Splunk, QRadar or SOAR; SolarWinds NPM/NCM; Blue Coat Proxy Cloud security (Azure, AWS or GCP) NIST, ISO 27001, PCI-DSS or SOC 2