> Markdown version of [/jobs/ext/668083-cybersecurity-engineer](https://www.wearedevelopers.com/jobs/ext/668083-cybersecurity-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Cybersecurity Engineer - **Company:** Kimley Horn - **Location:** Phoenix, AZ, United States - **Experience:** Experienced - **Contract:** Permanent contract - **Skills:** Access Network, Application Firewall, Cloud Computing, Cyber Security, Dynamic Host Configuration Protocol, Domain Name System (DNS), Intrusion Detection Systems, Virtual Private Networks (VPN), Network Security, Logical Security, Networking Basics, Routing, Performance Tuning, TCP/IP, Computer Networking Systems, Identity Services Engine, Computer Network Operations, Cloud Platform System, Firewalls (Computer Science), Low Latency, Firewall Services Module - **Published:** June 27, 2026 - **Apply:** https://www.juju.com/job/00000000gb6yjs ## About the Role + Bachelor's degree in Information Security, Cybersecurity, or a related field + 4+ years of experience in **network security engineering or related roles within enterprise environments** + **Strong hands-on experience with firewall design, implementation, and management** (required) + Direct experience with **Palo Alto firewalls and Panorama** + Experience with **firewall architectures across internal, perimeter, and cloud environments** + Experience administering **Web Application Firewalls (WAFs)** + Experience with **Cisco ISE** or similar identity-based network access platforms + Solid understanding of **networking fundamentals** (routing, switching, TCP/IP, DNS, DHCP) + Experience with **change management practices and operational processes** + Strong problem-solving skills and ability to perform under pressure + Excellent communication skills with the ability to explain technical concepts to non-technical stakeholders Preferred Certifications: Security+, Network+, CCNP Security, AZ-700/AZ-500, CISSP, or similar, Applicants must be legally authorized to work for Kimley-Horn in the U.S. without employer sponsorship. We do not typically sponsor H1-B or any other work visa petitions. ## Description Kimley-Horn is seeking a Cybersecurity Engineer to help lead and mature our network security function, with a primary focus on enterprise firewall architecture and operations. This is a foundational role within our Information Security team, where you'll take ownership of a growing firewall environment, influence security strategy, and help define the future of network security across a rapidly expanding, multi-site organization. If you have a strong networking background and deep hands-on firewall experience-especially in Palo Alto environments-this is an opportunity to truly own and evolve a critical security domain. _This is not a remote position. Applicants must be legally authorized to work for Kimley-Horn in the U.S. without employer sponsorship. We do not typically sponsor H1-B or other work visa petitions._ Responsibilities Firewall Ownership & Network Security (Primary Focus) + Serve as the **primary owner of Kimley-Horn's enterprise firewall environment** , including design, implementation, and ongoing optimization + Create, review, and maintain **firewall policies and rules** across on-prem and cloud environments + Lead **firewall strategy decisions** , including policy standardization, segmentation, and performance tuning + Administer and optimize **Palo Alto firewalls and Panorama** + Manage and enhance **GlobalProtect policies and secure remote access configurations** + Analyze and implement **ACLs, rule bases, and logical security controls** across a multi-vendor environment + Drive continuous improvement in firewall posture, balancing **security and user experience**, + Implement and maintain **network security controls** , including firewalls, VPNs, IDS/IPS, and access controls + Troubleshoot **complex networking and security issues** across cloud and hybrid environments + Monitor and resolve **network performance issues** (latency, throughput, utilization, system slowness) + Partner with Network Operations and Cloud teams to review designs and provide a **security-first perspective** Emerging Security Capabilities + Assist in evaluating and implementing **Network Detection & Response (NDR) solutions** + Support the transition and ongoing ownership of **Cisco ISE capabilities** + Contribute to **security tooling decisions, standards, and long-term strategy** Collaboration & Leadership (Non-People Management) + Coordinate and guide work across **matrixed IT partners** + Provide **technical guidance, training, and mentorship** on network security best practices + Participate in **incident response, change management, and after-hours maintenance** for critical events ## Related Videos - [An Applied Introduction to eBPF with Go](https://www.wearedevelopers.com/videos/1075-an-applied-introduction-to-ebpf-with-go) - [Swapping Low Latency Data Storage Under High Load](https://www.wearedevelopers.com/videos/746-swapping-low-latency-data-storage-under-high-load) - [Creating a routing app with Google Maps API from scratch](https://www.wearedevelopers.com/videos/831-creating-a-routing-app-with-google-maps-api-from-scratch) - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [Unleash the power of 5G in your code: transform your apps](https://www.wearedevelopers.com/videos/1567-unleash-the-power-of-5g-in-your-code-transform-your-apps) - [A Technical Introduction to Bitcoin's 2nd Layer- The Lightning Network](https://www.wearedevelopers.com/videos/15-a-technical-introduction-to-bitcoin-s-2nd-layer-the-lightning-network) ## Related Articles - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated) - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology) - [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers)