Job Description Job Description In Person Only interview. This job is Hybrid Mechanicsville, VA 23116 Our direct client has an opening for an Senior Network Security Engineer (807471). This position is up to 12 months, with the option of extension, 9120 Lockwood Boulevard Mechanicsville, VA 23116. Please send rates and a resume. Corp to Corp or w2 allowed. Requirements: Enterprise Networking - Required 8 Years. Enterprise Security - Required 5 Years. Azure Networking - Required 3 Years. WAF/NGFW - Required 3 Years. Supporting environments with 300+ Network Devices - Desired 3 Years. Candidate must have experience in the following areas: Incident response, Security investigations, Log analysis, Threat intelligence, Security monitor - Required. Candidate must have experience with the SIEM products (e.g. Splunk, Microsoft Sentinel) - Required. Candidate must have experience in vulnerability management and remediation tracking as well as vulnerability scanning tools (e.g. Nessus, Tenable, Def - Required. Candidate must have experience in the following areas: Active Directory, MFA, Conditional Access, Certificates - Required. Candidate must have experience with; SEC530, CIS Benchmarks, NIST CSF, NIST 800-53, Zero Trust principles - Required. Candidate must have experience with the following: Cisco ISE, NAC, 802.1X, RADIUS, TACACS - Required. Candidate must have experience with the following products: Palo Alto, F5 Distributed Cloud, Azure WAF, Cisco VPN, Global Protect, F5 BIG-IP - Required. Candidate must have experience working in highly regulated environments and leading technical troubleshooting during outages - Required. Candidate must have ability to communicate technical issues to technical and executive audiences and an ability to mentor junior engineers - Required. Candidate should have achieved or ability to achieve the following certifications: Azure Security Engineer (AZ-500), Azure Network Engineer (AZ-700) - Required.
10/22/2026
Full time
Job Description Job Description In Person Only interview. This job is Hybrid Mechanicsville, VA 23116 Our direct client has an opening for an Senior Network Security Engineer (807471). This position is up to 12 months, with the option of extension, 9120 Lockwood Boulevard Mechanicsville, VA 23116. Please send rates and a resume. Corp to Corp or w2 allowed. Requirements: Enterprise Networking - Required 8 Years. Enterprise Security - Required 5 Years. Azure Networking - Required 3 Years. WAF/NGFW - Required 3 Years. Supporting environments with 300+ Network Devices - Desired 3 Years. Candidate must have experience in the following areas: Incident response, Security investigations, Log analysis, Threat intelligence, Security monitor - Required. Candidate must have experience with the SIEM products (e.g. Splunk, Microsoft Sentinel) - Required. Candidate must have experience in vulnerability management and remediation tracking as well as vulnerability scanning tools (e.g. Nessus, Tenable, Def - Required. Candidate must have experience in the following areas: Active Directory, MFA, Conditional Access, Certificates - Required. Candidate must have experience with; SEC530, CIS Benchmarks, NIST CSF, NIST 800-53, Zero Trust principles - Required. Candidate must have experience with the following: Cisco ISE, NAC, 802.1X, RADIUS, TACACS - Required. Candidate must have experience with the following products: Palo Alto, F5 Distributed Cloud, Azure WAF, Cisco VPN, Global Protect, F5 BIG-IP - Required. Candidate must have experience working in highly regulated environments and leading technical troubleshooting during outages - Required. Candidate must have ability to communicate technical issues to technical and executive audiences and an ability to mentor junior engineers - Required. Candidate should have achieved or ability to achieve the following certifications: Azure Security Engineer (AZ-500), Azure Network Engineer (AZ-700) - Required.
Job Description Job Description In Person Only interview. This job is Hybrid Mechanicsville, VA 23116 Our direct client has an opening for an Senior Network Security Engineer (807471) This position is up to 12 months, with the option of extension, 9120 Lockwood Boulevard Mechanicsville, VA 23116 Please send rates and a resume. Corp to Corp or w2 allowed. Enterprise Networking Required 8 Years Enterprise Security Required 5 Years Azure Networking Required 3 Years WAF/NGFW Required 3 Years Supporting environments with 300+ Network Devices Desired 3 Years Candidate must have experience in the following areas: Incident response, Security investigations, Log analysis, Threat intelligence, Security monitor Required Candidate must have experience with the SIEM products (e.g. Splunk, Microsoft Sentinel) Required Candidate must have experience in vulnerability management and remediation tracking as well as vulnerability scanning tools (e.g. Nessus, Tenable, Def Required Candidate must have experience in the following areas: Active Directory, MFA, Conditional Access, Certificates Required Candidate must have experience with; SEC530, CIS Benchmarks, NIST CSF, NIST 800-53, Zero Trust principles Required Candidate must have experience with the following: Cisco ISE, NAC, 802.1X, RADIUS, TACACS Required Candidate must have experience with the following products: Palo Alto, F5 Distributed Cloud, Azure WAF, Cisco VPN, Global Protect, F5 BIG-IP Required Candidate must have experience working in highly regulated environments and leading technical troubleshooting during outages Required Candidate must have ability to communicate technical issues to technical and executive audiences and an ability to mentor junior engineers. Required Candidate should have achieved or ability to achieve the following certifications: Azure Security Engineer (AZ-500), Azure Network Engineer (AZ-700), Required
10/20/2026
Full time
Job Description Job Description In Person Only interview. This job is Hybrid Mechanicsville, VA 23116 Our direct client has an opening for an Senior Network Security Engineer (807471) This position is up to 12 months, with the option of extension, 9120 Lockwood Boulevard Mechanicsville, VA 23116 Please send rates and a resume. Corp to Corp or w2 allowed. Enterprise Networking Required 8 Years Enterprise Security Required 5 Years Azure Networking Required 3 Years WAF/NGFW Required 3 Years Supporting environments with 300+ Network Devices Desired 3 Years Candidate must have experience in the following areas: Incident response, Security investigations, Log analysis, Threat intelligence, Security monitor Required Candidate must have experience with the SIEM products (e.g. Splunk, Microsoft Sentinel) Required Candidate must have experience in vulnerability management and remediation tracking as well as vulnerability scanning tools (e.g. Nessus, Tenable, Def Required Candidate must have experience in the following areas: Active Directory, MFA, Conditional Access, Certificates Required Candidate must have experience with; SEC530, CIS Benchmarks, NIST CSF, NIST 800-53, Zero Trust principles Required Candidate must have experience with the following: Cisco ISE, NAC, 802.1X, RADIUS, TACACS Required Candidate must have experience with the following products: Palo Alto, F5 Distributed Cloud, Azure WAF, Cisco VPN, Global Protect, F5 BIG-IP Required Candidate must have experience working in highly regulated environments and leading technical troubleshooting during outages Required Candidate must have ability to communicate technical issues to technical and executive audiences and an ability to mentor junior engineers. Required Candidate should have achieved or ability to achieve the following certifications: Azure Security Engineer (AZ-500), Azure Network Engineer (AZ-700), Required
Job Description Job Description About Us: NPO Torino is a specialized Digital Transformation company, recently acquired by the Fondo Italiano d'Investimento (Italian Investment Fund). With our headquarters in Turin and an operational presence in the United States and Brazil, we support companies in their technological evolution journey by combining consulting expertise with advanced IT solutions. We offer services in cloud computing, cybersecurity, AI for business, FinOps, system integration, and IT governance, featuring a customized and results-driven approach. Our mission is to simplify digital complexity and transform it into strategic value for enterprises. Backed by the Fondo Italiano d'Investimento , NPO Torino is accelerating its growth as a partner of choice for companies looking to tackle innovation challenges with vision, pragmatism, and sustainability. Salary range $80K to $92K. Work is partially remote with occasional travel to USA, and in Canada. Role Description: We are looking for a highly qualified Senior Network Security Engineer to join our Network & Security Business Unit. The professional will be responsible for the design, implementation, maintenance, and troubleshooting of complex network security infrastructures. The ideal candidate has deep, vertical expertise with leading security vendors (Fortinet, Palo Alto Networks, Cisco, F5) and a proven track record of managing modern architectures, including SASE solutions. Key Responsibilities: Design and manage security architectures based on Next-Generation Firewalls (NGFW). Implement and manage SASE (Secure Access Service Edge) solutions for distributed environments. Perform configuration , policy management, and advanced troubleshooting on multi-vendor equipment. Manage perimeter and internal security within Enterprise environments. Conduct log analysis, incident management, and system hardening. Provide technical mentoring for junior team members (optional, if required). Fundamental Technical Requirements (Must-Have) The candidate must demonstrate practical, in-depth, hands-on experience with the following technologies: Palo Alto Networks: Advanced configuration and management of NGFW (PA Series). Solid experience with Panorama for centralized management. Proven experience with SASE solutions (Prisma Access) and GlobalProtect. Fortinet: Advanced management of FortiGate (including VDOM, SD-WAN, SSL Inspection). Experience with the wider Fortinet ecosystem (FortiManager, FortiAnalyzer). Cisco Security: Experience with Cisco Security solutions (Firepower/FTD, ASA). Knowledge of Cisco ISE (Identity Services Engine) and TrustSec architectures is a strong plus. F5 Networks: Implementation and management of F5 BIG-IP solutions. Strong configuration and troubleshooting skills on LTM (Local Traffic Manager) and/or APM (Access Policy Manager) / AWAF modules. Soft Skills & Additional Requirements: Minimum of 5+ years of experience in Network Security Engineering roles. Excellent troubleshooting and problem-solving skills under pressure. Preferred Certifications (Nice-to-Have): Palo Alto: PCNSE (Palo Alto Networks Certified Network Security Engineer). Fortinet: NSE 4 / NSE 7. Cisco: CCNP Security or CCIE Security. F5: F5 Certified Administrator (F5-CA) or Technology Specialist (F5-CTS). Introduce Yourself (Screening Questions): "Do you have direct implementation experience with Prisma Access? Can you briefly describe a SASE architecture you have managed?" "Have you ever managed migrations between these vendors (e.g., from Cisco to Fortinet or vice versa)?" What We Offer: Salary commensurate with experience. Structured training and certification plans. Corporate benefits: Welfare Plan, Smart Working.
10/20/2026
Full time
Job Description Job Description About Us: NPO Torino is a specialized Digital Transformation company, recently acquired by the Fondo Italiano d'Investimento (Italian Investment Fund). With our headquarters in Turin and an operational presence in the United States and Brazil, we support companies in their technological evolution journey by combining consulting expertise with advanced IT solutions. We offer services in cloud computing, cybersecurity, AI for business, FinOps, system integration, and IT governance, featuring a customized and results-driven approach. Our mission is to simplify digital complexity and transform it into strategic value for enterprises. Backed by the Fondo Italiano d'Investimento , NPO Torino is accelerating its growth as a partner of choice for companies looking to tackle innovation challenges with vision, pragmatism, and sustainability. Salary range $80K to $92K. Work is partially remote with occasional travel to USA, and in Canada. Role Description: We are looking for a highly qualified Senior Network Security Engineer to join our Network & Security Business Unit. The professional will be responsible for the design, implementation, maintenance, and troubleshooting of complex network security infrastructures. The ideal candidate has deep, vertical expertise with leading security vendors (Fortinet, Palo Alto Networks, Cisco, F5) and a proven track record of managing modern architectures, including SASE solutions. Key Responsibilities: Design and manage security architectures based on Next-Generation Firewalls (NGFW). Implement and manage SASE (Secure Access Service Edge) solutions for distributed environments. Perform configuration , policy management, and advanced troubleshooting on multi-vendor equipment. Manage perimeter and internal security within Enterprise environments. Conduct log analysis, incident management, and system hardening. Provide technical mentoring for junior team members (optional, if required). Fundamental Technical Requirements (Must-Have) The candidate must demonstrate practical, in-depth, hands-on experience with the following technologies: Palo Alto Networks: Advanced configuration and management of NGFW (PA Series). Solid experience with Panorama for centralized management. Proven experience with SASE solutions (Prisma Access) and GlobalProtect. Fortinet: Advanced management of FortiGate (including VDOM, SD-WAN, SSL Inspection). Experience with the wider Fortinet ecosystem (FortiManager, FortiAnalyzer). Cisco Security: Experience with Cisco Security solutions (Firepower/FTD, ASA). Knowledge of Cisco ISE (Identity Services Engine) and TrustSec architectures is a strong plus. F5 Networks: Implementation and management of F5 BIG-IP solutions. Strong configuration and troubleshooting skills on LTM (Local Traffic Manager) and/or APM (Access Policy Manager) / AWAF modules. Soft Skills & Additional Requirements: Minimum of 5+ years of experience in Network Security Engineering roles. Excellent troubleshooting and problem-solving skills under pressure. Preferred Certifications (Nice-to-Have): Palo Alto: PCNSE (Palo Alto Networks Certified Network Security Engineer). Fortinet: NSE 4 / NSE 7. Cisco: CCNP Security or CCIE Security. F5: F5 Certified Administrator (F5-CA) or Technology Specialist (F5-CTS). Introduce Yourself (Screening Questions): "Do you have direct implementation experience with Prisma Access? Can you briefly describe a SASE architecture you have managed?" "Have you ever managed migrations between these vendors (e.g., from Cisco to Fortinet or vice versa)?" What We Offer: Salary commensurate with experience. Structured training and certification plans. Corporate benefits: Welfare Plan, Smart Working.
Job Description Job Description Global Software Firm seeks a Sr Network Security Engineer. We're looking for an engineer with strong Palo Alto, F5, and WAF experience. Experience in threat hunting and pen testing would be a plus. This is a permanent direct hire opportunity. Hybrid schedule with potential for fully remote if the hired candidate doesn't live within a reasonable commute of the data center. Compensation is competitive including: base, bonus, equity, 401k, unlimited pto, tuition reimbursement and much more! Role: The Network Security Engineer will help identify, research and evaluate security solutions and emerging technologies that align with the company's strategic direction. This person should have a strong knowledge of security, including HTTP compliance, application level security, and end-point protections. The engineer will be tasked with deploying new security technologies as well as maintaining current security infrastructure. A strong troubleshooting background is needed, as well as knowledge in APIs. Candidates should also have a strong ability to interface with other parts of the business and be able to coordinate work with multiple teams. Skills: Network routing and switching Firewall concepts and functions WAF and IPS F5: ASM, DNS, APM, AFM. Knowledge of iRules. Proxy and user access VPN access, both site-to-site and end user. GSLB, and server load balancing TLS knowledge and experience Knowledge of HTTP protocol Tier 3 operational support Preferred Experience: Routing: BGP, OSPF and EIGRP Firewall: ASA, PaloAlto and Juniper SRX Router and Switch: Cisco CCNP level knowledge Experience in reverse proxy solutions (Kemp/NGINX/HA Proxy) Experience in user proxy technologies Experience with Cloud Based DDoS and WAF solutions. Experience with NAC implementations (ClearPass, ISE) Familiarity with REST APIs and automation Anticipated base salary in the 150-180k range, + bonus
10/20/2026
Full time
Job Description Job Description Global Software Firm seeks a Sr Network Security Engineer. We're looking for an engineer with strong Palo Alto, F5, and WAF experience. Experience in threat hunting and pen testing would be a plus. This is a permanent direct hire opportunity. Hybrid schedule with potential for fully remote if the hired candidate doesn't live within a reasonable commute of the data center. Compensation is competitive including: base, bonus, equity, 401k, unlimited pto, tuition reimbursement and much more! Role: The Network Security Engineer will help identify, research and evaluate security solutions and emerging technologies that align with the company's strategic direction. This person should have a strong knowledge of security, including HTTP compliance, application level security, and end-point protections. The engineer will be tasked with deploying new security technologies as well as maintaining current security infrastructure. A strong troubleshooting background is needed, as well as knowledge in APIs. Candidates should also have a strong ability to interface with other parts of the business and be able to coordinate work with multiple teams. Skills: Network routing and switching Firewall concepts and functions WAF and IPS F5: ASM, DNS, APM, AFM. Knowledge of iRules. Proxy and user access VPN access, both site-to-site and end user. GSLB, and server load balancing TLS knowledge and experience Knowledge of HTTP protocol Tier 3 operational support Preferred Experience: Routing: BGP, OSPF and EIGRP Firewall: ASA, PaloAlto and Juniper SRX Router and Switch: Cisco CCNP level knowledge Experience in reverse proxy solutions (Kemp/NGINX/HA Proxy) Experience in user proxy technologies Experience with Cloud Based DDoS and WAF solutions. Experience with NAC implementations (ClearPass, ISE) Familiarity with REST APIs and automation Anticipated base salary in the 150-180k range, + bonus
Job Description Job Description Responsibilities: Act as Escalation Point of Contact: Serve as the primary Level 3 escalation point for resolving complex network infrastructure, routing, and security configuration issues across both on-premise Data Centers and AWS environments. Maintain Multi-Vendor Security & Perimeter Solutions: Responsible for the configuration, maintenance, and optimization of FortiGate Firewalls (On-Prem & AWS), Cisco ASA Firewalls, and Akamai WAF / Anti-DDoS solutions protecting core endpoints. Manage Core Network & Infrastructure Services: Identify and resolve network issues, bottlenecks, and vulnerabilities across Arista core/access switches, Cisco routers, F5 Load Balancers (LTM/GTM), and Infoblox (DNS/DHCP). Develop & Maintain Architecture Documentation: Develop and maintain comprehensive documentation on network topology, hybrid cloud designs, system security configurations, and operational SOPs. Bridge Infrastructure and DevOps (IaC): Bridge the gap between development and operations by embracing "Infrastructure as Code" (IaC) in close collaboration with DevOps teams to automate network deployments and security workflows. Integrate AI & Network Task Automation: Research and leverage automation/AI tools (e.g., Tines, n8n, Dify) for Security Orchestration or network task automation to improve operational efficiency. Provide Support During Non-Office Hours: Provide non-office hour escalation support whenever needed during major live cutovers or critical network emergencies. Requirements: Relevant education in Computer Science, Information Systems, or a related technical discipline, or equivalent practical experience. Hands-on experience operating and troubleshooting production networks across on-premises data centers and AWS environments. Experience with firewall configuration, routing, switching, network security, and incident response. Working knowledge of relevant networking protocols, including BGP, OSPF, IPsec, HSRP, and QoS. Experience with hybrid-cloud networking, including AWS VPC networking and AWS Direct Connect. Ability to work independently, prioritize incidents effectively, and communicate clearly during operational issues. Preferred qualifications: Experience with one or more of the following security and edge technologies: FortiGate, Cisco ASA, Akamai WAF, or anti-DDoS solutions. Experience with one or more of the following infrastructure technologies: Arista switches, Cisco routers, F5 LTM/GTM, or Infoblox DNS/DHCP. CCNP, CCIE, AWS Certified Advanced Networking, CISSP, or equivalent practical experience. Experience with Infrastructure as Code and network automation. Experience with security-orchestration or workflow-automation tools such as Tines, n8n, or Dify. Experience executing or supporting live data-center-to-AWS migration cutovers. Empowered to think big. Try new opportunities while working with a talented, ambitious and supportive team. Transformational and proactive working environment. Empower employees to find thoughtful and innovative solutions. Growth from within. We help to develop new skill-sets that would impact the shaping of your personal and professional growth. Work Culture. Our colleagues are some of the best in the industry; we are all here to help and support one another. One cohesive team. Engage stakeholders to achieve our ultimate goal - Cryptocurrency in every wallet. Work Flexibility Adoption. Flexi-work hour and hybrid set-up Aspire career alternatives through us - our internal mobility program offers employees a new scope. Are you ready to kickstart your future with us? Benefits Competitive salary Attractive annual leave entitlement including: birthday, work anniversary 401(k) plan with employer match Eligible for company-sponsored group health, dental, vision, and life/disability insurance Work Flexibility Adoption. Flexi-work hour and hybrid set-up Aspire career alternatives through us. Our internal mobility program can offer employees a diverse scope. Our benefits packages vary depending on region requirements, you can learn more from our talent acquisition team. About : Founded in 2016, serves more than 150 million customers and is the world's fastest growing global cryptocurrency platform. Our vision is simple: Cryptocurrency in Every Wallet . Built on a foundation of security, privacy, and compliance, is committed to accelerating the adoption of cryptocurrency through innovation and empowering the next generation of builders, creators, and entrepreneurs to develop a fairer and more equitable digital ecosystem. Learn more at . is an equal opportunities employer and we are committed to creating an environment where opportunities are presented to everyone in a fair and transparent way. values diversity and inclusion, seeking candidates with a variety of backgrounds, perspectives, and skills that complement and strengthen our team. Personal data provided by applicants will be used for recruitment purposes only. Please note that only shortlisted candidates will be contacted. We may use artificial intelligence tools to analyze the content of your Resume/CV against the specific requirements for the position. The purpose is to support our recruitment team in reviewing applications more effectively. These tools assist our recruitment team in their evaluation of your application by providing recommendations, but they do not replace human judgment. Final hiring decisions are ultimately made by humans who consider the insights generated by the tools along with other relevant information. If you would like more details about how your personal information is processed, please contact us.
10/20/2026
Full time
Job Description Job Description Responsibilities: Act as Escalation Point of Contact: Serve as the primary Level 3 escalation point for resolving complex network infrastructure, routing, and security configuration issues across both on-premise Data Centers and AWS environments. Maintain Multi-Vendor Security & Perimeter Solutions: Responsible for the configuration, maintenance, and optimization of FortiGate Firewalls (On-Prem & AWS), Cisco ASA Firewalls, and Akamai WAF / Anti-DDoS solutions protecting core endpoints. Manage Core Network & Infrastructure Services: Identify and resolve network issues, bottlenecks, and vulnerabilities across Arista core/access switches, Cisco routers, F5 Load Balancers (LTM/GTM), and Infoblox (DNS/DHCP). Develop & Maintain Architecture Documentation: Develop and maintain comprehensive documentation on network topology, hybrid cloud designs, system security configurations, and operational SOPs. Bridge Infrastructure and DevOps (IaC): Bridge the gap between development and operations by embracing "Infrastructure as Code" (IaC) in close collaboration with DevOps teams to automate network deployments and security workflows. Integrate AI & Network Task Automation: Research and leverage automation/AI tools (e.g., Tines, n8n, Dify) for Security Orchestration or network task automation to improve operational efficiency. Provide Support During Non-Office Hours: Provide non-office hour escalation support whenever needed during major live cutovers or critical network emergencies. Requirements: Relevant education in Computer Science, Information Systems, or a related technical discipline, or equivalent practical experience. Hands-on experience operating and troubleshooting production networks across on-premises data centers and AWS environments. Experience with firewall configuration, routing, switching, network security, and incident response. Working knowledge of relevant networking protocols, including BGP, OSPF, IPsec, HSRP, and QoS. Experience with hybrid-cloud networking, including AWS VPC networking and AWS Direct Connect. Ability to work independently, prioritize incidents effectively, and communicate clearly during operational issues. Preferred qualifications: Experience with one or more of the following security and edge technologies: FortiGate, Cisco ASA, Akamai WAF, or anti-DDoS solutions. Experience with one or more of the following infrastructure technologies: Arista switches, Cisco routers, F5 LTM/GTM, or Infoblox DNS/DHCP. CCNP, CCIE, AWS Certified Advanced Networking, CISSP, or equivalent practical experience. Experience with Infrastructure as Code and network automation. Experience with security-orchestration or workflow-automation tools such as Tines, n8n, or Dify. Experience executing or supporting live data-center-to-AWS migration cutovers. Empowered to think big. Try new opportunities while working with a talented, ambitious and supportive team. Transformational and proactive working environment. Empower employees to find thoughtful and innovative solutions. Growth from within. We help to develop new skill-sets that would impact the shaping of your personal and professional growth. Work Culture. Our colleagues are some of the best in the industry; we are all here to help and support one another. One cohesive team. Engage stakeholders to achieve our ultimate goal - Cryptocurrency in every wallet. Work Flexibility Adoption. Flexi-work hour and hybrid set-up Aspire career alternatives through us - our internal mobility program offers employees a new scope. Are you ready to kickstart your future with us? Benefits Competitive salary Attractive annual leave entitlement including: birthday, work anniversary 401(k) plan with employer match Eligible for company-sponsored group health, dental, vision, and life/disability insurance Work Flexibility Adoption. Flexi-work hour and hybrid set-up Aspire career alternatives through us. Our internal mobility program can offer employees a diverse scope. Our benefits packages vary depending on region requirements, you can learn more from our talent acquisition team. About : Founded in 2016, serves more than 150 million customers and is the world's fastest growing global cryptocurrency platform. Our vision is simple: Cryptocurrency in Every Wallet . Built on a foundation of security, privacy, and compliance, is committed to accelerating the adoption of cryptocurrency through innovation and empowering the next generation of builders, creators, and entrepreneurs to develop a fairer and more equitable digital ecosystem. Learn more at . is an equal opportunities employer and we are committed to creating an environment where opportunities are presented to everyone in a fair and transparent way. values diversity and inclusion, seeking candidates with a variety of backgrounds, perspectives, and skills that complement and strengthen our team. Personal data provided by applicants will be used for recruitment purposes only. Please note that only shortlisted candidates will be contacted. We may use artificial intelligence tools to analyze the content of your Resume/CV against the specific requirements for the position. The purpose is to support our recruitment team in reviewing applications more effectively. These tools assist our recruitment team in their evaluation of your application by providing recommendations, but they do not replace human judgment. Final hiring decisions are ultimately made by humans who consider the insights generated by the tools along with other relevant information. If you would like more details about how your personal information is processed, please contact us.
Job Description Job Description Responsibilities: Act as Escalation Point of Contact: Serve as the primary Level 3 escalation point for resolving complex network infrastructure, routing, and security configuration issues across both on-premise Data Centers and AWS environments. Maintain Multi-Vendor Security & Perimeter Solutions: Responsible for the configuration, maintenance, and optimization of FortiGate Firewalls (On-Prem & AWS), Cisco ASA Firewalls, and Akamai WAF / Anti-DDoS solutions protecting core endpoints. Manage Core Network & Infrastructure Services: Identify and resolve network issues, bottlenecks, and vulnerabilities across Arista core/access switches, Cisco routers, F5 Load Balancers (LTM/GTM), and Infoblox (DNS/DHCP). Develop & Maintain Architecture Documentation: Develop and maintain comprehensive documentation on network topology, hybrid cloud designs, system security configurations, and operational SOPs. Bridge Infrastructure and DevOps (IaC): Bridge the gap between development and operations by embracing "Infrastructure as Code" (IaC) in close collaboration with DevOps teams to automate network deployments and security workflows. Integrate AI & Network Task Automation: Research and leverage automation/AI tools (e.g., Tines, n8n, Dify) for Security Orchestration or network task automation to improve operational efficiency. Provide Support During Non-Office Hours: Provide non-office hour escalation support whenever needed during major live cutovers or critical network emergencies. Requirements: Relevant education in Computer Science, Information Systems, or a related technical discipline, or equivalent practical experience. Hands-on experience operating and troubleshooting production networks across on-premises data centers and AWS environments. Experience with firewall configuration, routing, switching, network security, and incident response. Working knowledge of relevant networking protocols, including BGP, OSPF, IPsec, HSRP, and QoS. Experience with hybrid-cloud networking, including AWS VPC networking and AWS Direct Connect. Ability to work independently, prioritize incidents effectively, and communicate clearly during operational issues. Preferred qualifications: Experience with one or more of the following security and edge technologies: FortiGate, Cisco ASA, Akamai WAF, or anti-DDoS solutions. Experience with one or more of the following infrastructure technologies: Arista switches, Cisco routers, F5 LTM/GTM, or Infoblox DNS/DHCP. CCNP, CCIE, AWS Certified Advanced Networking, CISSP, or equivalent practical experience. Experience with Infrastructure as Code and network automation. Experience with security-orchestration or workflow-automation tools such as Tines, n8n, or Dify. Experience executing or supporting live data-center-to-AWS migration cutovers. Empowered to think big. Try new opportunities while working with a talented, ambitious and supportive team. Transformational and proactive working environment. Empower employees to find thoughtful and innovative solutions. Growth from within. We help to develop new skill-sets that would impact the shaping of your personal and professional growth. Work Culture. Our colleagues are some of the best in the industry; we are all here to help and support one another. One cohesive team. Engage stakeholders to achieve our ultimate goal - Cryptocurrency in every wallet. Work Flexibility Adoption. Flexi-work hour and hybrid set-up Aspire career alternatives through us - our internal mobility program offers employees a new scope. Are you ready to kickstart your future with us? Benefits Competitive salary Attractive annual leave entitlement including: birthday, work anniversary 401(k) plan with employer match Eligible for company-sponsored group health, dental, vision, and life/disability insurance Work Flexibility Adoption. Flexi-work hour and hybrid set-up Aspire career alternatives through us. Our internal mobility program can offer employees a diverse scope. Our benefits packages vary depending on region requirements, you can learn more from our talent acquisition team. About : Founded in 2016, serves more than 150 million customers and is the world's fastest growing global cryptocurrency platform. Our vision is simple: Cryptocurrency in Every Wallet . Built on a foundation of security, privacy, and compliance, is committed to accelerating the adoption of cryptocurrency through innovation and empowering the next generation of builders, creators, and entrepreneurs to develop a fairer and more equitable digital ecosystem. Learn more at . is an equal opportunities employer and we are committed to creating an environment where opportunities are presented to everyone in a fair and transparent way. values diversity and inclusion, seeking candidates with a variety of backgrounds, perspectives, and skills that complement and strengthen our team. Personal data provided by applicants will be used for recruitment purposes only. Please note that only shortlisted candidates will be contacted. We may use artificial intelligence tools to analyze the content of your Resume/CV against the specific requirements for the position. The purpose is to support our recruitment team in reviewing applications more effectively. These tools assist our recruitment team in their evaluation of your application by providing recommendations, but they do not replace human judgment. Final hiring decisions are ultimately made by humans who consider the insights generated by the tools along with other relevant information. If you would like more details about how your personal information is processed, please contact us.
10/20/2026
Full time
Job Description Job Description Responsibilities: Act as Escalation Point of Contact: Serve as the primary Level 3 escalation point for resolving complex network infrastructure, routing, and security configuration issues across both on-premise Data Centers and AWS environments. Maintain Multi-Vendor Security & Perimeter Solutions: Responsible for the configuration, maintenance, and optimization of FortiGate Firewalls (On-Prem & AWS), Cisco ASA Firewalls, and Akamai WAF / Anti-DDoS solutions protecting core endpoints. Manage Core Network & Infrastructure Services: Identify and resolve network issues, bottlenecks, and vulnerabilities across Arista core/access switches, Cisco routers, F5 Load Balancers (LTM/GTM), and Infoblox (DNS/DHCP). Develop & Maintain Architecture Documentation: Develop and maintain comprehensive documentation on network topology, hybrid cloud designs, system security configurations, and operational SOPs. Bridge Infrastructure and DevOps (IaC): Bridge the gap between development and operations by embracing "Infrastructure as Code" (IaC) in close collaboration with DevOps teams to automate network deployments and security workflows. Integrate AI & Network Task Automation: Research and leverage automation/AI tools (e.g., Tines, n8n, Dify) for Security Orchestration or network task automation to improve operational efficiency. Provide Support During Non-Office Hours: Provide non-office hour escalation support whenever needed during major live cutovers or critical network emergencies. Requirements: Relevant education in Computer Science, Information Systems, or a related technical discipline, or equivalent practical experience. Hands-on experience operating and troubleshooting production networks across on-premises data centers and AWS environments. Experience with firewall configuration, routing, switching, network security, and incident response. Working knowledge of relevant networking protocols, including BGP, OSPF, IPsec, HSRP, and QoS. Experience with hybrid-cloud networking, including AWS VPC networking and AWS Direct Connect. Ability to work independently, prioritize incidents effectively, and communicate clearly during operational issues. Preferred qualifications: Experience with one or more of the following security and edge technologies: FortiGate, Cisco ASA, Akamai WAF, or anti-DDoS solutions. Experience with one or more of the following infrastructure technologies: Arista switches, Cisco routers, F5 LTM/GTM, or Infoblox DNS/DHCP. CCNP, CCIE, AWS Certified Advanced Networking, CISSP, or equivalent practical experience. Experience with Infrastructure as Code and network automation. Experience with security-orchestration or workflow-automation tools such as Tines, n8n, or Dify. Experience executing or supporting live data-center-to-AWS migration cutovers. Empowered to think big. Try new opportunities while working with a talented, ambitious and supportive team. Transformational and proactive working environment. Empower employees to find thoughtful and innovative solutions. Growth from within. We help to develop new skill-sets that would impact the shaping of your personal and professional growth. Work Culture. Our colleagues are some of the best in the industry; we are all here to help and support one another. One cohesive team. Engage stakeholders to achieve our ultimate goal - Cryptocurrency in every wallet. Work Flexibility Adoption. Flexi-work hour and hybrid set-up Aspire career alternatives through us - our internal mobility program offers employees a new scope. Are you ready to kickstart your future with us? Benefits Competitive salary Attractive annual leave entitlement including: birthday, work anniversary 401(k) plan with employer match Eligible for company-sponsored group health, dental, vision, and life/disability insurance Work Flexibility Adoption. Flexi-work hour and hybrid set-up Aspire career alternatives through us. Our internal mobility program can offer employees a diverse scope. Our benefits packages vary depending on region requirements, you can learn more from our talent acquisition team. About : Founded in 2016, serves more than 150 million customers and is the world's fastest growing global cryptocurrency platform. Our vision is simple: Cryptocurrency in Every Wallet . Built on a foundation of security, privacy, and compliance, is committed to accelerating the adoption of cryptocurrency through innovation and empowering the next generation of builders, creators, and entrepreneurs to develop a fairer and more equitable digital ecosystem. Learn more at . is an equal opportunities employer and we are committed to creating an environment where opportunities are presented to everyone in a fair and transparent way. values diversity and inclusion, seeking candidates with a variety of backgrounds, perspectives, and skills that complement and strengthen our team. Personal data provided by applicants will be used for recruitment purposes only. Please note that only shortlisted candidates will be contacted. We may use artificial intelligence tools to analyze the content of your Resume/CV against the specific requirements for the position. The purpose is to support our recruitment team in reviewing applications more effectively. These tools assist our recruitment team in their evaluation of your application by providing recommendations, but they do not replace human judgment. Final hiring decisions are ultimately made by humans who consider the insights generated by the tools along with other relevant information. If you would like more details about how your personal information is processed, please contact us.
Job Description Job Description We are seeking a Senior Network Security Engineer for an operations-first role supporting enterprise network security infrastructure across on-premises, remote-access, hybrid-cloud, and cloud-connected environments. This is not primarily an architecture/design role. The priority is a hands-on engineer who can administer, configure, maintain, troubleshoot, patch, upgrade, back up, validate, document, and operate production security platforms with minimal ramp-up. Firewall operations: hands-on Cisco and Palo Alto firewall administration, rule changes, NAT, troubleshooting, policy cleanup, upgrades, backups, logging, and production support. VPN / remote access: support for remote-access VPN, site-to-site VPN, user connectivity issues, certificates, authentication flows, and after-hours troubleshooting. RSA / MFA administration: RSA SecurID or equivalent MFA operations, token support, server administration, user troubleshooting, VPN integration, certificates, patching, backups, logs, and monitoring. Day-to-day operations: ticket resolution, monitoring alerts, health checks, change requests, incident support, maintenance windows, operational reporting, and customer support. Configuration and administration: installing, configuring, maintaining, patching, upgrading, backing up, validating, and troubleshooting assigned security platforms. Production troubleshooting: strong TCP/IP, DNS, routing, firewall logs, packet captures, VPN authentication, certificate, and connectivity troubleshooting. Documentation and process discipline: SOPs, runbooks, diagrams, change records, rollback plans, evidence collection, knowledge transfer, and formal change management. Federal/customer environment maturity: Public Trust eligibility, regulated-environment documentation, customer support, cross-team coordination, and comfort working with government stakeholders. The best candidate can credibly say: "I have operated enterprise Cisco and Palo Alto firewalls in production, handled firewall rule changes and troubleshooting, supported VPN users and site-to-site tunnels, administered or supported RSA/MFA tied to VPN access, followed formal change-management processes, maintained documentation and backups, and can step into daily operational support with minimal ramp-up." Scope and Role Boundaries Primary platforms include Cisco ASA/Firepower/FTD/FMC, Palo Alto NGFW/Panorama/GlobalProtect, remote-access and site-to-site VPN, RSA SecurID Authentication Manager or comparable MFA, monitoring/logging/SIEM integrations, and related network security controls. Coordinate with SOC/NOC, cloud, identity/directory, wireless/LAN, server, endpoint, system owner, application, governance, and vendor teams during changes, incidents, troubleshooting, compliance, and audit support. Cloudflare, Cisco ISE/NAC, secure web/email gateways, packet visibility tools, SD-WAN/SASE/ZTNA, AWS/Azure security, and F5/application-delivery awareness are useful where they intersect with assigned operational support, but the core need is firewall, VPN, RSA/MFA, and production operations. Key Responsibilities Provide daily, weekly, monthly, and annual operational support for assigned security systems, including tickets, alerts, health checks, email/phone support, metrics, status reporting, and operational validation. Administer and troubleshoot enterprise firewalls, including rule bases, NAT, segmentation, high availability, threat prevention, VPN integration, logging, secure baselines, rule reviews, recertification, cleanup, and decommissioning. Install, configure, maintain, patch, upgrade, back up, and validate firewall, VPN, MFA, and related network security systems in production environments. Support remote-access VPN, site-to-site VPN, partner connectivity, cloud connectivity, mobile/remote users, certificates, authentication policies, availability, utilization, and user access issues. Maintain and troubleshoot RSA SecurID Authentication Manager or equivalent MFA services, including servers/appliances, agents, certificates, HA, backups, logs, monitoring, directory integration, VPN authentication, and token lifecycle support. Respond to incidents, vulnerability notices, urgent requests, vendor advisories, PSIRT notices, system alerts, and emergency troubleshooting while minimizing service disruption. Use firewall logs, VPN logs, packet captures, SIEM data, monitoring tools, DNS/routing checks, and standard diagnostics to resolve complex connectivity, authentication, TLS/certificate, and application-flow issues. Create and maintain topology diagrams, equipment inventories, configurations, SOPs, runbooks, implementation plans, rollback plans, build/upgrade procedures, troubleshooting notes, and knowledge articles. Follow approved change, release, incident, problem, and configuration-management processes; prepare change records, peer-review materials, validation evidence, root-cause analysis, metrics, and audit artifacts. Support vulnerability remediation, POA&M tracking, continuous monitoring, compliance reviews, audit evidence collection, and coordination with ISSO, system owner, and security governance teams. Requirements 7+ years of experience in network security engineering, network infrastructure, cybersecurity infrastructure, or a closely related role. 5+ years of hands-on experience administering, maintaining, and troubleshooting enterprise firewall platforms in production environments. Hands-on experience with Cisco security technologies such as Cisco ASA, Firepower, FTD, FMC, AnyConnect/Secure Client, or equivalent Cisco firewall/VPN platforms. Hands-on experience with Palo Alto Networks technologies such as NGFW, Panorama, GlobalProtect, security profiles, App-ID/User-ID, logging, and policy optimization. Experience administering or supporting RSA SecurID Authentication Manager or comparable enterprise MFA/two-factor authentication platforms, including token support, server operations, patching/upgrades, backups, certificates, monitoring, and directory/VPN integration. Strong knowledge of firewall policy, NAT, VPNs, routing, DNS, DHCP, BGP, TLS/certificates, packet captures, log analysis, segmentation, high availability, and common network diagnostic tools. Experience with enterprise monitoring, logging, SIEM, alerting, vulnerability management, incident response, formal change management, and regulated-environment documentation. Ability to create clear technical documentation, support customers and stakeholders, prioritize operational work, communicate clearly, and coordinate across technical teams. Ability to obtain and maintain a Public Trust background investigation. Desired Certifications Relevant certifications are helpful but should not replace demonstrated hands-on experience. Examples include CCNP Security, CCIE Security, PCNSE, PCCSE, CISSP, CCSP, AWS Certified Security - Specialty, AWS Advanced Networking - Specialty, Microsoft Certified: Azure Security Engineer Associate, Microsoft Certified: Azure Network Engineer Associate, CompTIA Security+, CompTIA CySA+, GIAC certifications, or equivalent vendor/cloud certifications. Core Competencies Enterprise firewall engineering and policy lifecycle management VPN, remote access, RSA/MFA, and token lifecycle operations Cloudflare, edge security, secure access, and Zero Trust support Content filtering, secure web/email gateway, and NAC operations Hybrid-cloud network security and secure connectivity Monitoring, logging, SIEM integration, and incident response support Security visibility, packet analysis, and advanced troubleshooting Vulnerability remediation, compliance evidence, and POA&M support Change management, documentation, reporting, and operational metrics Technical leadership, customer support, and cross-team collaboration Benefits 401(k) 401(k) matching Dental insurance Flexible schedule Flexible spending account Health insurance Health savings account Life insurance Paid time off Professional development assistance Referral program Retirement plan Tuition reimbursement Vision insurance
10/20/2026
Full time
Job Description Job Description We are seeking a Senior Network Security Engineer for an operations-first role supporting enterprise network security infrastructure across on-premises, remote-access, hybrid-cloud, and cloud-connected environments. This is not primarily an architecture/design role. The priority is a hands-on engineer who can administer, configure, maintain, troubleshoot, patch, upgrade, back up, validate, document, and operate production security platforms with minimal ramp-up. Firewall operations: hands-on Cisco and Palo Alto firewall administration, rule changes, NAT, troubleshooting, policy cleanup, upgrades, backups, logging, and production support. VPN / remote access: support for remote-access VPN, site-to-site VPN, user connectivity issues, certificates, authentication flows, and after-hours troubleshooting. RSA / MFA administration: RSA SecurID or equivalent MFA operations, token support, server administration, user troubleshooting, VPN integration, certificates, patching, backups, logs, and monitoring. Day-to-day operations: ticket resolution, monitoring alerts, health checks, change requests, incident support, maintenance windows, operational reporting, and customer support. Configuration and administration: installing, configuring, maintaining, patching, upgrading, backing up, validating, and troubleshooting assigned security platforms. Production troubleshooting: strong TCP/IP, DNS, routing, firewall logs, packet captures, VPN authentication, certificate, and connectivity troubleshooting. Documentation and process discipline: SOPs, runbooks, diagrams, change records, rollback plans, evidence collection, knowledge transfer, and formal change management. Federal/customer environment maturity: Public Trust eligibility, regulated-environment documentation, customer support, cross-team coordination, and comfort working with government stakeholders. The best candidate can credibly say: "I have operated enterprise Cisco and Palo Alto firewalls in production, handled firewall rule changes and troubleshooting, supported VPN users and site-to-site tunnels, administered or supported RSA/MFA tied to VPN access, followed formal change-management processes, maintained documentation and backups, and can step into daily operational support with minimal ramp-up." Scope and Role Boundaries Primary platforms include Cisco ASA/Firepower/FTD/FMC, Palo Alto NGFW/Panorama/GlobalProtect, remote-access and site-to-site VPN, RSA SecurID Authentication Manager or comparable MFA, monitoring/logging/SIEM integrations, and related network security controls. Coordinate with SOC/NOC, cloud, identity/directory, wireless/LAN, server, endpoint, system owner, application, governance, and vendor teams during changes, incidents, troubleshooting, compliance, and audit support. Cloudflare, Cisco ISE/NAC, secure web/email gateways, packet visibility tools, SD-WAN/SASE/ZTNA, AWS/Azure security, and F5/application-delivery awareness are useful where they intersect with assigned operational support, but the core need is firewall, VPN, RSA/MFA, and production operations. Key Responsibilities Provide daily, weekly, monthly, and annual operational support for assigned security systems, including tickets, alerts, health checks, email/phone support, metrics, status reporting, and operational validation. Administer and troubleshoot enterprise firewalls, including rule bases, NAT, segmentation, high availability, threat prevention, VPN integration, logging, secure baselines, rule reviews, recertification, cleanup, and decommissioning. Install, configure, maintain, patch, upgrade, back up, and validate firewall, VPN, MFA, and related network security systems in production environments. Support remote-access VPN, site-to-site VPN, partner connectivity, cloud connectivity, mobile/remote users, certificates, authentication policies, availability, utilization, and user access issues. Maintain and troubleshoot RSA SecurID Authentication Manager or equivalent MFA services, including servers/appliances, agents, certificates, HA, backups, logs, monitoring, directory integration, VPN authentication, and token lifecycle support. Respond to incidents, vulnerability notices, urgent requests, vendor advisories, PSIRT notices, system alerts, and emergency troubleshooting while minimizing service disruption. Use firewall logs, VPN logs, packet captures, SIEM data, monitoring tools, DNS/routing checks, and standard diagnostics to resolve complex connectivity, authentication, TLS/certificate, and application-flow issues. Create and maintain topology diagrams, equipment inventories, configurations, SOPs, runbooks, implementation plans, rollback plans, build/upgrade procedures, troubleshooting notes, and knowledge articles. Follow approved change, release, incident, problem, and configuration-management processes; prepare change records, peer-review materials, validation evidence, root-cause analysis, metrics, and audit artifacts. Support vulnerability remediation, POA&M tracking, continuous monitoring, compliance reviews, audit evidence collection, and coordination with ISSO, system owner, and security governance teams. Requirements 7+ years of experience in network security engineering, network infrastructure, cybersecurity infrastructure, or a closely related role. 5+ years of hands-on experience administering, maintaining, and troubleshooting enterprise firewall platforms in production environments. Hands-on experience with Cisco security technologies such as Cisco ASA, Firepower, FTD, FMC, AnyConnect/Secure Client, or equivalent Cisco firewall/VPN platforms. Hands-on experience with Palo Alto Networks technologies such as NGFW, Panorama, GlobalProtect, security profiles, App-ID/User-ID, logging, and policy optimization. Experience administering or supporting RSA SecurID Authentication Manager or comparable enterprise MFA/two-factor authentication platforms, including token support, server operations, patching/upgrades, backups, certificates, monitoring, and directory/VPN integration. Strong knowledge of firewall policy, NAT, VPNs, routing, DNS, DHCP, BGP, TLS/certificates, packet captures, log analysis, segmentation, high availability, and common network diagnostic tools. Experience with enterprise monitoring, logging, SIEM, alerting, vulnerability management, incident response, formal change management, and regulated-environment documentation. Ability to create clear technical documentation, support customers and stakeholders, prioritize operational work, communicate clearly, and coordinate across technical teams. Ability to obtain and maintain a Public Trust background investigation. Desired Certifications Relevant certifications are helpful but should not replace demonstrated hands-on experience. Examples include CCNP Security, CCIE Security, PCNSE, PCCSE, CISSP, CCSP, AWS Certified Security - Specialty, AWS Advanced Networking - Specialty, Microsoft Certified: Azure Security Engineer Associate, Microsoft Certified: Azure Network Engineer Associate, CompTIA Security+, CompTIA CySA+, GIAC certifications, or equivalent vendor/cloud certifications. Core Competencies Enterprise firewall engineering and policy lifecycle management VPN, remote access, RSA/MFA, and token lifecycle operations Cloudflare, edge security, secure access, and Zero Trust support Content filtering, secure web/email gateway, and NAC operations Hybrid-cloud network security and secure connectivity Monitoring, logging, SIEM integration, and incident response support Security visibility, packet analysis, and advanced troubleshooting Vulnerability remediation, compliance evidence, and POA&M support Change management, documentation, reporting, and operational metrics Technical leadership, customer support, and cross-team collaboration Benefits 401(k) 401(k) matching Dental insurance Flexible schedule Flexible spending account Health insurance Health savings account Life insurance Paid time off Professional development assistance Referral program Retirement plan Tuition reimbursement Vision insurance
Job Description Job Description This position is for a 12 month contract located in Columbia SC. The position offers a Hybrid work schedule (2 days in office, 3 days remote). Candidate MUST be a NC, GA, SC resident and willing to relocate to SC prior to starting the role at their own expense. Scope of the project: The Sr. Palo Alto Cloud Engineer will collaborate with Product Owners, Applications Owners, Network and Security teams to design and deliver optimal solutions for large-scale app and infrastructure cloud solutions. Candidates should possess proficiency in both public and hybrid cloud models. Exceptional consulting skills and the ability to clearly derive desired states from customer requests are essential. The role also requires the ability to work with delivery teams. Importantly, this role is hands-on in delivery, requiring active involvement in the implementation and execution of security solutions. This is not a developer role. This position requires demonstrated proficiency in Palo Alto cloud firewalls with a similar level of expertise in cloud architecture and design. Daily Duties / Responsibilities: Design and deploy highly available, scalable, and secure cloud infrastructure with a focus on AWS and Azure Cloud. Manage and deploy VM-Series Palo Alto firewalls in Azure and AWS cloud. Manage and deploy F5 BIG-IP LTM and ASM in Azure and AWS cloud. Analyze and resolve configuration issues in development, test, and production environments. Familiar with major security compliance frameworks and building effective monitoring, logging, and auditing of production systems to ensure compliance with mandated compliance policies (e.g., ARC-AMP (formerly known as MARS-E), NIST, HIPAA, PII, SOX, PCI, CMMC, CUI, etc.). Experience implementing secure (zero trust) infrastructure in cloud. Security experience with state and local government customers Required Skills (rank in order of Importance): 10 years' experience in Network Security and Engineering Minimum 5 years hands-on experience designing, deploying, scaling, upgrading, troubleshooting, and optimizing palo alto VM-Series Firewalls in both AWS and azure cloud environments. Experience with Panorama Management, security policy design, threat prevention tuning, and log analysis required. must demonstrate ability to architect zero-trust controls using Palo Alto Technology. 5 years' experience in deploying, configuring and maintaining BIG-IP F5 LTM Preferred Skills (rank in order of Importance): Palo Alto Firewalls F5 LTM F5 ASM F5 I-Rules INFOBLOX DDI Forescout OPSWAT METADEFENDER/ICAP Big-IP F5 XC Prisma Cloud Cisco Umbrella Preferred Certifications: PCNSA, PCNSE SC100 - Microsoft Cybersecurity Architect AWS Certified Cloud Solutions Architect ADDITIONAL SKILLS/DUTIES: Excellent communication skills, both written and verbal. Self-starter explicit experience in panorama templates and device groups, global protect in cloud, and high availability VPN/Traffic routing on VM-series Experience designing and maintaining infrastructure in AWS/AZURE Cloud Security design, operations, and automation experience Documentation of security tools, deployment configuration, incident reports, etc. Required Education: College degree or 10+ years of equivalent experience as a palo alto cloud engineer Must hold Palo alto, AWS, or azure certification If a candidate falsely lies on a resume regarding actual skillset (work experience); then the candidate will be disqualified immediately upon discovery of such dishonesty. Also, if a candidate is selected for an interview and it is determined that the candidate is using an AI tool during the process, the interviewer reserves the right to cancel the interview immediately.
10/20/2026
Full time
Job Description Job Description This position is for a 12 month contract located in Columbia SC. The position offers a Hybrid work schedule (2 days in office, 3 days remote). Candidate MUST be a NC, GA, SC resident and willing to relocate to SC prior to starting the role at their own expense. Scope of the project: The Sr. Palo Alto Cloud Engineer will collaborate with Product Owners, Applications Owners, Network and Security teams to design and deliver optimal solutions for large-scale app and infrastructure cloud solutions. Candidates should possess proficiency in both public and hybrid cloud models. Exceptional consulting skills and the ability to clearly derive desired states from customer requests are essential. The role also requires the ability to work with delivery teams. Importantly, this role is hands-on in delivery, requiring active involvement in the implementation and execution of security solutions. This is not a developer role. This position requires demonstrated proficiency in Palo Alto cloud firewalls with a similar level of expertise in cloud architecture and design. Daily Duties / Responsibilities: Design and deploy highly available, scalable, and secure cloud infrastructure with a focus on AWS and Azure Cloud. Manage and deploy VM-Series Palo Alto firewalls in Azure and AWS cloud. Manage and deploy F5 BIG-IP LTM and ASM in Azure and AWS cloud. Analyze and resolve configuration issues in development, test, and production environments. Familiar with major security compliance frameworks and building effective monitoring, logging, and auditing of production systems to ensure compliance with mandated compliance policies (e.g., ARC-AMP (formerly known as MARS-E), NIST, HIPAA, PII, SOX, PCI, CMMC, CUI, etc.). Experience implementing secure (zero trust) infrastructure in cloud. Security experience with state and local government customers Required Skills (rank in order of Importance): 10 years' experience in Network Security and Engineering Minimum 5 years hands-on experience designing, deploying, scaling, upgrading, troubleshooting, and optimizing palo alto VM-Series Firewalls in both AWS and azure cloud environments. Experience with Panorama Management, security policy design, threat prevention tuning, and log analysis required. must demonstrate ability to architect zero-trust controls using Palo Alto Technology. 5 years' experience in deploying, configuring and maintaining BIG-IP F5 LTM Preferred Skills (rank in order of Importance): Palo Alto Firewalls F5 LTM F5 ASM F5 I-Rules INFOBLOX DDI Forescout OPSWAT METADEFENDER/ICAP Big-IP F5 XC Prisma Cloud Cisco Umbrella Preferred Certifications: PCNSA, PCNSE SC100 - Microsoft Cybersecurity Architect AWS Certified Cloud Solutions Architect ADDITIONAL SKILLS/DUTIES: Excellent communication skills, both written and verbal. Self-starter explicit experience in panorama templates and device groups, global protect in cloud, and high availability VPN/Traffic routing on VM-series Experience designing and maintaining infrastructure in AWS/AZURE Cloud Security design, operations, and automation experience Documentation of security tools, deployment configuration, incident reports, etc. Required Education: College degree or 10+ years of equivalent experience as a palo alto cloud engineer Must hold Palo alto, AWS, or azure certification If a candidate falsely lies on a resume regarding actual skillset (work experience); then the candidate will be disqualified immediately upon discovery of such dishonesty. Also, if a candidate is selected for an interview and it is determined that the candidate is using an AI tool during the process, the interviewer reserves the right to cancel the interview immediately.
Job Description Job Description Grow, innovate, and generate progress: Harness your expertise to solve challenges and celebrate success! Job Summary JCS Solutions is seeking a highly skilled and experienced Senior Network Architect to lead the design, implementation, and optimization of our enterprise application delivery and DDI (DNS, DHCP, and IPAM) infrastructure. The ideal candidate will have deep, hands-on expertise with F5 technologies and Infoblox, ensuring highly available, secure, and scalable application delivery models across the enterprise network in support of critical mission requirements that enhance the reliability and security of Department of War (DoW) networks and systems. Acting as the technical lead for this initiative, you will architect and deploy network solutions utilizing F5 and Infoblox technologies in concert to provide intelligent and scalable global server load balancing (GSLB), secure DNS solutions, and enterprise IP address management across our customer's rapidly evolving hybrid multi-cloud environment. What's in it for you: Join a premier technology firm specializing in innovative solutions. Be part of a collaborative, inclusive, and innovative work culture. Enjoy tremendous growth potential in a high-performing team environment. A robust benefits package: Health, dental, and vision insurance Life insurance Short-and-long term disability Paid time off (PTO) 401k retirement plan with employer match Annual Professional Development Reimbursement Program And more! What you will do: Application Delivery Architecture - Design, deploy, and manage advanced application delivery models ensuring high availability, optimal performance, and security for mission-critical enterprise applications. F5 Infrastructure Management - Architect and maintain F5 BIG-IP solutions, with a heavy focus on Local Traffic Manager (LTM) and Global Traffic Manager (GTM) for intelligent local and global load balancing. Enterprise DDI Administration - Lead the engineering, deployment, and administration of enterprise-class DDI infrastructure utilizing Infoblox technology (DNS, DHCP, and IP Address Management). Cross-Functional Collaboration - Work closely with application developers, cybersecurity teams, and systems engineers to translate application requirements into resilient, highly available network architectures Troubleshooting & Optimization - Perform advanced network troubleshooting, traffic analysis, packet capture, and performance tuning for complex application delivery workflows. Documentation & Standards - Develop and maintain comprehensive architectural documentation, standard operating procedures, and technical blueprints. Compliance & Documentation: Ensure all tools comply with DoW STIGs and IL5/IL6/IL7 protocols; develop and maintain architectural documentation and compliance traceability. What you will bring: Bachelor's degree in Computer Science, Information Technology, or a related technical discipline & 12+ years' experience. Active IAT Level II certification (e.g., Security+ CE, CySA+, GSEC, or SSCP) required. Cisco CCNA Certification (CCNP or CCIE Preferred). Minimum of 8-10 years of progressive experience in network engineering and architecture, with a dedicated focus on application delivery networks (ADN). Deep, demonstrable expertise in F5 BIG-IP platforms, specifically configuring, upgrading, and migrating LTM and GTM/F5 DNS environments. Infoblox / DDI Mastery: Extensive experience designing and operating enterprise-class Infoblox DDI environments, including Grid architecture and seamless IPAM integration. Core Networking: Mastery of OSI model layers 2-7, TCP/IP, routing protocols (e.g., BGP, OSPF), and solid experience with SSL/TLS offloading and certificate management. Experience leading technical working groups and directing the efforts of adjacent infrastructure and development teams. Prior experience working within a DoW/DoD Operations Center (NOC/SOC) or supporting mission-critical systems and networks. Must be able to present designs, plans, and analyses of alternatives to technical leadership boards for approvals. United States Citizenship is required. Security Clearance: Active Top Secret / Sensitive Compartmented Information (TS/SCI) required at time of hire. How you will wow us: Automation Skills Experience with network automation and orchestration tools (e.g., Ansible, Python, Terraform, or F5 AS3) is highly desired. Certifications: F5 Certified Technology Specialist (F5-CTS) or Solution Expert (F5-CSE), and Infoblox Core DDI certifications are strongly preferred. JCS Solutions (JCS) is a premier technology firm providing innovative solutions and high-quality services in defense, national security, and civilian sectors. JCS offers enterprise-wide solutions including cloud computing, software development, cybersecurity, digital modernization, and management consulting for the federal government. At JCS, we elevate our customers' mission through the application of technology and professional services. Our commitment to investing in our workforce drives innovation and progress for our clients, employees, and communities. JCS is both a Great Place to Work and a Top Places to Work certified company. Our employees embody our core values, and we are looking for others who do too! Customer Experience: Strive for excellence and delight our clients Innovation: Embrace creative thinking to enable continual growth and powerful solutions Accountability: Take ownership of and pride in our actions and service delivery Inspire: Be inspired to be your best self and have fun in the process Integrity: Do the right thing, the right way, every time! Stewardship: The careful and responsible management of something entrusted to our care. At JCS Solutions, compensation is based on a number of factors such as location, qualifications, and applicable contract terms. The general salary range for this position is as follows: $135,000.00 - $173,000.00 Commitment to Non-Discrimination All qualified applicants will receive consideration for employment without regard to any protected status protected by applicable federal, state, or local laws. NOTICE : Please be aware that all JCS Solutions communications related to job interviews and offers from our recruiting team will only come We want to emphasize that we do not conduct any interviews over Discord, Slack, Skype, Zoom, or any chat app. Powered by JazzHR PGIkdaeuSJ
10/19/2026
Full time
Job Description Job Description Grow, innovate, and generate progress: Harness your expertise to solve challenges and celebrate success! Job Summary JCS Solutions is seeking a highly skilled and experienced Senior Network Architect to lead the design, implementation, and optimization of our enterprise application delivery and DDI (DNS, DHCP, and IPAM) infrastructure. The ideal candidate will have deep, hands-on expertise with F5 technologies and Infoblox, ensuring highly available, secure, and scalable application delivery models across the enterprise network in support of critical mission requirements that enhance the reliability and security of Department of War (DoW) networks and systems. Acting as the technical lead for this initiative, you will architect and deploy network solutions utilizing F5 and Infoblox technologies in concert to provide intelligent and scalable global server load balancing (GSLB), secure DNS solutions, and enterprise IP address management across our customer's rapidly evolving hybrid multi-cloud environment. What's in it for you: Join a premier technology firm specializing in innovative solutions. Be part of a collaborative, inclusive, and innovative work culture. Enjoy tremendous growth potential in a high-performing team environment. A robust benefits package: Health, dental, and vision insurance Life insurance Short-and-long term disability Paid time off (PTO) 401k retirement plan with employer match Annual Professional Development Reimbursement Program And more! What you will do: Application Delivery Architecture - Design, deploy, and manage advanced application delivery models ensuring high availability, optimal performance, and security for mission-critical enterprise applications. F5 Infrastructure Management - Architect and maintain F5 BIG-IP solutions, with a heavy focus on Local Traffic Manager (LTM) and Global Traffic Manager (GTM) for intelligent local and global load balancing. Enterprise DDI Administration - Lead the engineering, deployment, and administration of enterprise-class DDI infrastructure utilizing Infoblox technology (DNS, DHCP, and IP Address Management). Cross-Functional Collaboration - Work closely with application developers, cybersecurity teams, and systems engineers to translate application requirements into resilient, highly available network architectures Troubleshooting & Optimization - Perform advanced network troubleshooting, traffic analysis, packet capture, and performance tuning for complex application delivery workflows. Documentation & Standards - Develop and maintain comprehensive architectural documentation, standard operating procedures, and technical blueprints. Compliance & Documentation: Ensure all tools comply with DoW STIGs and IL5/IL6/IL7 protocols; develop and maintain architectural documentation and compliance traceability. What you will bring: Bachelor's degree in Computer Science, Information Technology, or a related technical discipline & 12+ years' experience. Active IAT Level II certification (e.g., Security+ CE, CySA+, GSEC, or SSCP) required. Cisco CCNA Certification (CCNP or CCIE Preferred). Minimum of 8-10 years of progressive experience in network engineering and architecture, with a dedicated focus on application delivery networks (ADN). Deep, demonstrable expertise in F5 BIG-IP platforms, specifically configuring, upgrading, and migrating LTM and GTM/F5 DNS environments. Infoblox / DDI Mastery: Extensive experience designing and operating enterprise-class Infoblox DDI environments, including Grid architecture and seamless IPAM integration. Core Networking: Mastery of OSI model layers 2-7, TCP/IP, routing protocols (e.g., BGP, OSPF), and solid experience with SSL/TLS offloading and certificate management. Experience leading technical working groups and directing the efforts of adjacent infrastructure and development teams. Prior experience working within a DoW/DoD Operations Center (NOC/SOC) or supporting mission-critical systems and networks. Must be able to present designs, plans, and analyses of alternatives to technical leadership boards for approvals. United States Citizenship is required. Security Clearance: Active Top Secret / Sensitive Compartmented Information (TS/SCI) required at time of hire. How you will wow us: Automation Skills Experience with network automation and orchestration tools (e.g., Ansible, Python, Terraform, or F5 AS3) is highly desired. Certifications: F5 Certified Technology Specialist (F5-CTS) or Solution Expert (F5-CSE), and Infoblox Core DDI certifications are strongly preferred. JCS Solutions (JCS) is a premier technology firm providing innovative solutions and high-quality services in defense, national security, and civilian sectors. JCS offers enterprise-wide solutions including cloud computing, software development, cybersecurity, digital modernization, and management consulting for the federal government. At JCS, we elevate our customers' mission through the application of technology and professional services. Our commitment to investing in our workforce drives innovation and progress for our clients, employees, and communities. JCS is both a Great Place to Work and a Top Places to Work certified company. Our employees embody our core values, and we are looking for others who do too! Customer Experience: Strive for excellence and delight our clients Innovation: Embrace creative thinking to enable continual growth and powerful solutions Accountability: Take ownership of and pride in our actions and service delivery Inspire: Be inspired to be your best self and have fun in the process Integrity: Do the right thing, the right way, every time! Stewardship: The careful and responsible management of something entrusted to our care. At JCS Solutions, compensation is based on a number of factors such as location, qualifications, and applicable contract terms. The general salary range for this position is as follows: $135,000.00 - $173,000.00 Commitment to Non-Discrimination All qualified applicants will receive consideration for employment without regard to any protected status protected by applicable federal, state, or local laws. NOTICE : Please be aware that all JCS Solutions communications related to job interviews and offers from our recruiting team will only come We want to emphasize that we do not conduct any interviews over Discord, Slack, Skype, Zoom, or any chat app. Powered by JazzHR PGIkdaeuSJ
Job Description Job Description Benefits: 401(k) 401(k) matching Competitive salary Dental insurance Health insurance Paid time off Profit sharing Tuition assistance Vision insurance SarelaTech is seeking a highly skilled and experienced Senior Network Architect to lead the design, implementation, and optimization of our enterprise application delivery and DDI (DNS, DHCP, and IPAM) infrastructure. The ideal candidate will have deep, hands-on expertise with F5 technologies and Infoblox, ensuring highly available, secure, and scalable application delivery models across the enterprise network in support of critical mission requirements that enhance the reliability and security of Department of War (DoW) networks and systems. Acting as the technical lead for this initiative, you will architect and deploy network solutions utilizing F5 and Infoblox technologies in concert to provide intelligent and scalable global server load balancing (GSLB), secure DNS solutions, and enterprise IP address management across our customer's rapidly evolving hybrid multi-cloud environment. Primary Responsibilities: Application Delivery Architecture - Design, deploy, and manage advanced application delivery models ensuring high availability, optimal performance, and security for mission-critical enterprise applications. F5 Infrastructure Management - Architect and maintain F5 BIG-IP solutions, with a heavy focus on Local Traffic Manager (LTM) and Global Traffic Manager (GTM) for intelligent local and global load balancing. Enterprise DDI Administration - Lead the engineering, deployment, and administration of enterprise-class DDI infrastructure utilizing Infoblox technology (DNS, DHCP, and IP Address Management). Cross-Functional Collaboration - Work closely with application developers, cybersecurity teams, and systems engineers to translate application requirements into resilient, highly available network architectures. Troubleshooting & Optimization - Perform advanced network troubleshooting, traffic analysis, packet capture, and performance tuning for complex application delivery workflows. Documentation & Standards - Develop and maintain comprehensive architectural documentation, standard operating procedures, and technical blueprints. Compliance & Documentation: Ensure all tools comply with DoW STIGs and IL5/IL6/IL7 protocols; develop and maintain architectural documentation and compliance traceability. Required Qualifications: Security Clearance: Active Top Secret / Sensitive Compartmented Information (TS/SCI) required at time of hire. Education: Bachelor's degree in Computer Science, Information Technology, or a related technical discipline & 12+ years' experience. Certification: Active IAT Level II certification (e.g., Security+ CE, CySA+, GSEC, or SSCP) required. Cisco CCNA Certification (CCNP or CCIE Preferred). Citizenship: United States Citizenship is required. Experience Level: Minimum of 8-10 years of progressive experience in network engineering and architecture, with a dedicated focus on application delivery networks (ADN). F5 Expertise: Deep, demonstrable expertise in F5 BIG-IP platforms, specifically configuring, upgrading, and migrating LTM and GTM/F5 DNS environments. Infoblox / DDI Mastery: Extensive experience designing and operating enterprise-class Infoblox DDI environments, including Grid architecture and seamless IPAM integration. Core Networking: Mastery of OSI model layers 2-7, TCP/IP, routing protocols (e.g., BGP, OSPF), and solid experience with SSL/TLS offloading and certificate management. Leadership: Experience leading technical working groups and directing the efforts of adjacent infrastructure and development teams. Operational Experience: Prior experience working within a DoW/DoD Operations Center (NOC/SOC) or supporting mission-critical systems and networks. Communication: Must be able to present designs, plans, and analyses of alternatives to technical leadership boards for approvals. Desired Qualifications: Automation Skills Experience with network automation and orchestration tools (e.g., Ansible, Python, Terraform, or F5 AS3) is highly desired. Certifications: F5 Certified Technology Specialist (F5-CTS) or Solution Expert (F5-CSE), and Infoblox Core DDI certifications are strongly preferred.
10/19/2026
Full time
Job Description Job Description Benefits: 401(k) 401(k) matching Competitive salary Dental insurance Health insurance Paid time off Profit sharing Tuition assistance Vision insurance SarelaTech is seeking a highly skilled and experienced Senior Network Architect to lead the design, implementation, and optimization of our enterprise application delivery and DDI (DNS, DHCP, and IPAM) infrastructure. The ideal candidate will have deep, hands-on expertise with F5 technologies and Infoblox, ensuring highly available, secure, and scalable application delivery models across the enterprise network in support of critical mission requirements that enhance the reliability and security of Department of War (DoW) networks and systems. Acting as the technical lead for this initiative, you will architect and deploy network solutions utilizing F5 and Infoblox technologies in concert to provide intelligent and scalable global server load balancing (GSLB), secure DNS solutions, and enterprise IP address management across our customer's rapidly evolving hybrid multi-cloud environment. Primary Responsibilities: Application Delivery Architecture - Design, deploy, and manage advanced application delivery models ensuring high availability, optimal performance, and security for mission-critical enterprise applications. F5 Infrastructure Management - Architect and maintain F5 BIG-IP solutions, with a heavy focus on Local Traffic Manager (LTM) and Global Traffic Manager (GTM) for intelligent local and global load balancing. Enterprise DDI Administration - Lead the engineering, deployment, and administration of enterprise-class DDI infrastructure utilizing Infoblox technology (DNS, DHCP, and IP Address Management). Cross-Functional Collaboration - Work closely with application developers, cybersecurity teams, and systems engineers to translate application requirements into resilient, highly available network architectures. Troubleshooting & Optimization - Perform advanced network troubleshooting, traffic analysis, packet capture, and performance tuning for complex application delivery workflows. Documentation & Standards - Develop and maintain comprehensive architectural documentation, standard operating procedures, and technical blueprints. Compliance & Documentation: Ensure all tools comply with DoW STIGs and IL5/IL6/IL7 protocols; develop and maintain architectural documentation and compliance traceability. Required Qualifications: Security Clearance: Active Top Secret / Sensitive Compartmented Information (TS/SCI) required at time of hire. Education: Bachelor's degree in Computer Science, Information Technology, or a related technical discipline & 12+ years' experience. Certification: Active IAT Level II certification (e.g., Security+ CE, CySA+, GSEC, or SSCP) required. Cisco CCNA Certification (CCNP or CCIE Preferred). Citizenship: United States Citizenship is required. Experience Level: Minimum of 8-10 years of progressive experience in network engineering and architecture, with a dedicated focus on application delivery networks (ADN). F5 Expertise: Deep, demonstrable expertise in F5 BIG-IP platforms, specifically configuring, upgrading, and migrating LTM and GTM/F5 DNS environments. Infoblox / DDI Mastery: Extensive experience designing and operating enterprise-class Infoblox DDI environments, including Grid architecture and seamless IPAM integration. Core Networking: Mastery of OSI model layers 2-7, TCP/IP, routing protocols (e.g., BGP, OSPF), and solid experience with SSL/TLS offloading and certificate management. Leadership: Experience leading technical working groups and directing the efforts of adjacent infrastructure and development teams. Operational Experience: Prior experience working within a DoW/DoD Operations Center (NOC/SOC) or supporting mission-critical systems and networks. Communication: Must be able to present designs, plans, and analyses of alternatives to technical leadership boards for approvals. Desired Qualifications: Automation Skills Experience with network automation and orchestration tools (e.g., Ansible, Python, Terraform, or F5 AS3) is highly desired. Certifications: F5 Certified Technology Specialist (F5-CTS) or Solution Expert (F5-CSE), and Infoblox Core DDI certifications are strongly preferred.
Assistant Director, IT Operations Pitt IT Operations - Pennsylvania-Pittsburgh - () Pitt Digital is seeking an Assistant Director, IT Operations to lead the systems engineering and operations organization responsible for the infrastructure the University runs on - data center & server hosting, virtualization, enterprise storage, backup & recovery, patching & platform lifecycle, identity & login services, 24x7x365 monitoring operations. Together with the Operations network team, the systems & operations team is responsible for the infrastructure that supports the Oakland & Regional Campuses, services that support on premise & cloud systems for the enterprise, University schools & departments. Successful candidate brings operational discipline to keep a large production environment healthy & technical credibility to lead senior engineers through significant change. Required qualifications: Five years of progressively responsible experience in enterprise infrastructure or IT operations Demonstrated supervisory or team leadership experience Hands-on experience administering enterprise Windows Server &/or Linux environments at scale Working knowledge of enterprise virtualization, backup & recovery, patch management, & infrastructure monitoring practices Demonstrated experience with formal change management and incident management processes in a production environment Preferred qualifications: (Experience with or in ) leading a team of managers or senior technical staff in a multi-service operations organization public cloud delivery (AWS, Azure, or Google Cloud) in a hybrid enterprise environment supporting research computing, high-performance computing, or secure research enclaves subject to sponsor security requirements. higher ed or academic medical environments, incl support for restricted data classifications HIPAA, GLBA, FERPA, PII, controlled unclassified information. managing 24x7 operations or network operations center, including shift coverage & Tier 1 escalation models managed service provider transitions & ongoing vendor performance oversight ITSM tooling & practices (TeamDynamix or comparable) and ITIL-aligned service management The University offers a robust retirement savings plan with 100% employer match, 150% after vesting. 11 Paid Holidays. Paid Vac, Sick, Personal. Add'l Winter Recess Paid Time Off. Paid Parental Leave. Above-average Employer Contribution toward Medical, Prescription Drug, Dental, Vision, Life, and more. Education benefits for staff, spouses/ partners, dependents. Student loan assistance. Free transit pass. - Join the team responsible for strategy, implementation, and maintenance of technology at the University of Pittsburgh-ranked by Forbes among Amazon, CDW, Cisco Systems, Google, LinkedIn, and Microsoft as one of "America's Best Large Employers." - Applicants must include complete employment history on application and attach a current resume specifically to this requisition #. Applicants should include salary requirements in cover letter. Job Summary Supports the technology department and ensures systems are functional and adhere to all standards. Enlists vision to determine technological opportunities. Supervises departmental projects; assists in budgetary matters. Essential Functions Working with PC related hardware equipment, software applications and telephony video conferencing systems. Written and verbal communication. Interpersonal relations. Analyzing and organizing information. Project planning and leading project teams. Proficient knowledge of IT and networking. Supervision of employees. Physical Effort Generally sedentary desk work with computer-keyboard video phone other than traveling to other buildings on campus for meetings/events on occasion. Must be able to sit or stand for prolonged periods of time. Assignment Category: Full-time regular Job Classification: Staff.Assistant Director - Information Technology Job Family: Information Technology Job Sub Family: Systems Administration Campus: Pittsburgh Minimum Education Level Required: Bachelor's Degree Minimum Years of Experience Required: 5 Will this position accept substitution in lieu of education or experience: Combination of education and relevant experience will be considered in lieu of education and/ or experience requirement. Work Schedule: M-F bus hrs EST. Evening and weekend work may be necessary depending on business load, project timeline requirements, urgent support, or scheduled downtime changes. Will be responsible for manning an escalation/ on-call phone number. Work Arrangement: Hybrid: Combination of On-Campus and Remote work as determined by the department. Hiring Range: TBD Based Upon Qualifications Relocation_Offered: No Visa Sponsorship Provided: No Background Check: For position finalists, employment with the University will require successful completion of a background check Child Protection Clearances: The following PA Act 153 clearances and background checks are required prior to commencement of employment and as a condition of continued employment: PA State Police Criminal Record Check, FBI Criminal Record Check, PA Child Abuse History Clearance. Required Documents: Resume Optional Documents: Cover Letter PIdf5-
10/19/2026
Full time
Assistant Director, IT Operations Pitt IT Operations - Pennsylvania-Pittsburgh - () Pitt Digital is seeking an Assistant Director, IT Operations to lead the systems engineering and operations organization responsible for the infrastructure the University runs on - data center & server hosting, virtualization, enterprise storage, backup & recovery, patching & platform lifecycle, identity & login services, 24x7x365 monitoring operations. Together with the Operations network team, the systems & operations team is responsible for the infrastructure that supports the Oakland & Regional Campuses, services that support on premise & cloud systems for the enterprise, University schools & departments. Successful candidate brings operational discipline to keep a large production environment healthy & technical credibility to lead senior engineers through significant change. Required qualifications: Five years of progressively responsible experience in enterprise infrastructure or IT operations Demonstrated supervisory or team leadership experience Hands-on experience administering enterprise Windows Server &/or Linux environments at scale Working knowledge of enterprise virtualization, backup & recovery, patch management, & infrastructure monitoring practices Demonstrated experience with formal change management and incident management processes in a production environment Preferred qualifications: (Experience with or in ) leading a team of managers or senior technical staff in a multi-service operations organization public cloud delivery (AWS, Azure, or Google Cloud) in a hybrid enterprise environment supporting research computing, high-performance computing, or secure research enclaves subject to sponsor security requirements. higher ed or academic medical environments, incl support for restricted data classifications HIPAA, GLBA, FERPA, PII, controlled unclassified information. managing 24x7 operations or network operations center, including shift coverage & Tier 1 escalation models managed service provider transitions & ongoing vendor performance oversight ITSM tooling & practices (TeamDynamix or comparable) and ITIL-aligned service management The University offers a robust retirement savings plan with 100% employer match, 150% after vesting. 11 Paid Holidays. Paid Vac, Sick, Personal. Add'l Winter Recess Paid Time Off. Paid Parental Leave. Above-average Employer Contribution toward Medical, Prescription Drug, Dental, Vision, Life, and more. Education benefits for staff, spouses/ partners, dependents. Student loan assistance. Free transit pass. - Join the team responsible for strategy, implementation, and maintenance of technology at the University of Pittsburgh-ranked by Forbes among Amazon, CDW, Cisco Systems, Google, LinkedIn, and Microsoft as one of "America's Best Large Employers." - Applicants must include complete employment history on application and attach a current resume specifically to this requisition #. Applicants should include salary requirements in cover letter. Job Summary Supports the technology department and ensures systems are functional and adhere to all standards. Enlists vision to determine technological opportunities. Supervises departmental projects; assists in budgetary matters. Essential Functions Working with PC related hardware equipment, software applications and telephony video conferencing systems. Written and verbal communication. Interpersonal relations. Analyzing and organizing information. Project planning and leading project teams. Proficient knowledge of IT and networking. Supervision of employees. Physical Effort Generally sedentary desk work with computer-keyboard video phone other than traveling to other buildings on campus for meetings/events on occasion. Must be able to sit or stand for prolonged periods of time. Assignment Category: Full-time regular Job Classification: Staff.Assistant Director - Information Technology Job Family: Information Technology Job Sub Family: Systems Administration Campus: Pittsburgh Minimum Education Level Required: Bachelor's Degree Minimum Years of Experience Required: 5 Will this position accept substitution in lieu of education or experience: Combination of education and relevant experience will be considered in lieu of education and/ or experience requirement. Work Schedule: M-F bus hrs EST. Evening and weekend work may be necessary depending on business load, project timeline requirements, urgent support, or scheduled downtime changes. Will be responsible for manning an escalation/ on-call phone number. Work Arrangement: Hybrid: Combination of On-Campus and Remote work as determined by the department. Hiring Range: TBD Based Upon Qualifications Relocation_Offered: No Visa Sponsorship Provided: No Background Check: For position finalists, employment with the University will require successful completion of a background check Child Protection Clearances: The following PA Act 153 clearances and background checks are required prior to commencement of employment and as a condition of continued employment: PA State Police Criminal Record Check, FBI Criminal Record Check, PA Child Abuse History Clearance. Required Documents: Resume Optional Documents: Cover Letter PIdf5-
Senior Electrical/Controls Engineer Cleburne TX R26_1878 Full time Who We Are Johns Manville is a leading manufacturer and marketer of premium-quality insulation and commercial roofing, along with glass fibers and nonwovens for commercial, industrial and residential applications. Our products are used in a wide variety of industries including building products, aerospace, automotive and transportation, filtration, commercial interiors, waterproofing and wind energy. A proud member of the Berkshire Hathaway family of companies, we serve customers in more than 80 countries around the globe. We are committed to delivering positive and powerful experiences, because we are successful only when our employees and customers thrive. We are passionate, we care about people, we perform at a superior level, and we protect others and our environments. Pay Range $121,000.00-$181,600.00 Annual This is the base salary pay range that an applicant can expect to make upon hire. Pay within this range will vary based upon relevant experience, skills, and education among other factors. In addition, this position is eligible for an incentive bonus. The Senior Electrical and Controls Engineer provides medium voltage and Electrical Controls Engineering support for the Cleburne, TX Plant. The position will have a wide range of roles including day-to-day troubleshooting on electrical systems and hands-on project leader in implementing electrical control projects. This role will be responsible for developing, scoping, coordinating, justifying, implementing, and managing from start to finish a broad range of industrial electrical and control system manufacturing projects, including scope documents, engineering calculations and designs, specifications, cost estimates, schedules, project justifications, and project training and documentation. Your Day to Day: Ability to perform power, electrical control systems engineering for all aspects of projects. Prepares and reviews technical electrical specifications for equipment and processes projects. Assist the Corporate Electrical Group in review and implementation of Corporate Specifications and Standards. Assist facility with manufacturing operations as well as execution of electrical safety initiatives. Provide project management and oversight for all aspects and phases for multiple project assignments concurrently and driving projects to completion. Ensure compliance with technical specifications and contracts for equipment and services for all aspects of projects. Maintain good communication with management and project customers regarding project status, problems, and changes. Coordinate, review, provide oversight, and manage supplier and contractor activities for all aspects of the project on and off site, including the commissioning, startup, and training for plant personnel. Develop bid request documentation, supplier lists, bid evaluations and make recommendations for purchasing. Manage overall project budget, forecasts, schedule, scope, deliverables, execution, and reporting to provide the expected benefits of the project to the organization. Coordinate, review, provide oversight, and manage external engineering resources and consultants as needed. Provides support for the Cleburne facility to determine root cause failure analysis and development of corrective action plans. Could provide support for other JM facilities. May provide direction and mentoring to more junior engineers. What You Bring to the Team: Bachelor's degree in engineering, science or relevant technical field (electrical engineering or electrical engineering technology preferred) with a minimum of 5 years of experience in electrical/control systems engineering in a continuous and/or discrete manufacturing environment. Demonstrated electrical and control system engineering capabilities. Demonstrated ability to provide complex and innovative solutions to project and process engineering problems. Proficiency with Allen-Bradley PLC and HMI applications (including programming) along with communications within enterprise and control networked systems. Demonstrated project management skills Demonstrated knowledge in the application of the NFPA 70E Standard for Electrical Safety in the Workplace - arc flash energy and shock hazards. Ability to manage and support multiple projects simultaneously Demonstrated success managing projects from $150k - $2M Must have the ability to work with and influence a multi-discipline team and management with a demonstrated capability to implement plans and follow through with sustained execution, meeting project milestones in a timely manner. Demonstrated capabilities in working collaboratively with internal and external engineering resources. Must possess good analytical and problem-solving skills. Demonstrated drive and initiative to complete assigned tasks and investigate and seek out improvement opportunities. Travel 5-10% Preferred Requirements: Demonstrated experience in the engineering and implementation of 480V (Switchgear, Power Distribution Panel, Motor Control Center) and 4160V Power Distribution Systems. Please Keep in Mind If you do not meet 100% of these requirements, we at JM still want to hear from you. So, if you are interested in the role, we encourage you to apply so we can learn how your skills and talents can contribute to our team. Benefits Johns Manville (JM) offers a wide range of benefits to employees. Some are subsidized by the company and others are fully employee-paid. Health benefits include a choice of comprehensive medical plans, a dental plan, vision plan, wellness program and critical illness insurance. JM sponsors a 401(k) plan which includes a sizeable company match. JM offers paid vacation and also provides paid sick and parental leave for eligible employees. Additionally, Johns Manville provides basic life Insurance, short-term and long-term disability coverage, an employee assistance program, and business travel accident coverage. Supplemental life insurance and accidental death and dismemberment insurance are available as well. The company also offers a variety of tax saving accounts; health spending account, traditional flexible spending account, and a dependent care spending account. JM also offers a tuition reimbursement program for undergraduate and certain graduate programs. Johns Manville supports employee growth with vast educational opportunities and a company-wide mentoring program. This program pairs employees and leaders to grow skills, build stronger internal networks and strengthen the company's succession planning process. Johns Manville also offers soft and hard skills training facilitated by internal and external presenters. Our talent management team prioritizes the holistic growth of our workforce. Diversity & Inclusion Johns Manville believes diversity and inclusion in our workplace is critical for the long-term success of our company. We are committed to retaining, developing and attracting a diverse workforce that fosters an inclusive work environment in which all employees are treated with dignity and respect. This is the right thing to do for our employees, our company and our communities. Incumbent must be physically able to perform essential job functions. Reasonable accommodations may be made to enable individuals with disabilities to perform essential job functions. We are proud to be an Equal Opportunity/Affirmative Action employer. We maintain a drug-free workplace and perform pre-employment substance abuse testing. About Us Johns Manville is a proud member of the Berkshire Hathaway family of companies, serving customers in more than 80 countries, supplying innovative products to the construction, aerospace, automotive, filtration and energy industries. With a more than 160-year legacy, we understand that our story continues to grow only with the right people saying, thinking and doing the right things. Make your story our story. Johns Manville believes diversity and inclusion in our workplace is critical for the long-term success of our company. We are committed to retaining, developing and attracting a diverse workforce that fosters an inclusive work environment in which all employees are treated with dignity and respect. This is the right thing to do for our employees, our company and our communities. Compensation details: 00 Yearly Salary PIcdedf55f7ef0-6428
10/16/2026
Full time
Senior Electrical/Controls Engineer Cleburne TX R26_1878 Full time Who We Are Johns Manville is a leading manufacturer and marketer of premium-quality insulation and commercial roofing, along with glass fibers and nonwovens for commercial, industrial and residential applications. Our products are used in a wide variety of industries including building products, aerospace, automotive and transportation, filtration, commercial interiors, waterproofing and wind energy. A proud member of the Berkshire Hathaway family of companies, we serve customers in more than 80 countries around the globe. We are committed to delivering positive and powerful experiences, because we are successful only when our employees and customers thrive. We are passionate, we care about people, we perform at a superior level, and we protect others and our environments. Pay Range $121,000.00-$181,600.00 Annual This is the base salary pay range that an applicant can expect to make upon hire. Pay within this range will vary based upon relevant experience, skills, and education among other factors. In addition, this position is eligible for an incentive bonus. The Senior Electrical and Controls Engineer provides medium voltage and Electrical Controls Engineering support for the Cleburne, TX Plant. The position will have a wide range of roles including day-to-day troubleshooting on electrical systems and hands-on project leader in implementing electrical control projects. This role will be responsible for developing, scoping, coordinating, justifying, implementing, and managing from start to finish a broad range of industrial electrical and control system manufacturing projects, including scope documents, engineering calculations and designs, specifications, cost estimates, schedules, project justifications, and project training and documentation. Your Day to Day: Ability to perform power, electrical control systems engineering for all aspects of projects. Prepares and reviews technical electrical specifications for equipment and processes projects. Assist the Corporate Electrical Group in review and implementation of Corporate Specifications and Standards. Assist facility with manufacturing operations as well as execution of electrical safety initiatives. Provide project management and oversight for all aspects and phases for multiple project assignments concurrently and driving projects to completion. Ensure compliance with technical specifications and contracts for equipment and services for all aspects of projects. Maintain good communication with management and project customers regarding project status, problems, and changes. Coordinate, review, provide oversight, and manage supplier and contractor activities for all aspects of the project on and off site, including the commissioning, startup, and training for plant personnel. Develop bid request documentation, supplier lists, bid evaluations and make recommendations for purchasing. Manage overall project budget, forecasts, schedule, scope, deliverables, execution, and reporting to provide the expected benefits of the project to the organization. Coordinate, review, provide oversight, and manage external engineering resources and consultants as needed. Provides support for the Cleburne facility to determine root cause failure analysis and development of corrective action plans. Could provide support for other JM facilities. May provide direction and mentoring to more junior engineers. What You Bring to the Team: Bachelor's degree in engineering, science or relevant technical field (electrical engineering or electrical engineering technology preferred) with a minimum of 5 years of experience in electrical/control systems engineering in a continuous and/or discrete manufacturing environment. Demonstrated electrical and control system engineering capabilities. Demonstrated ability to provide complex and innovative solutions to project and process engineering problems. Proficiency with Allen-Bradley PLC and HMI applications (including programming) along with communications within enterprise and control networked systems. Demonstrated project management skills Demonstrated knowledge in the application of the NFPA 70E Standard for Electrical Safety in the Workplace - arc flash energy and shock hazards. Ability to manage and support multiple projects simultaneously Demonstrated success managing projects from $150k - $2M Must have the ability to work with and influence a multi-discipline team and management with a demonstrated capability to implement plans and follow through with sustained execution, meeting project milestones in a timely manner. Demonstrated capabilities in working collaboratively with internal and external engineering resources. Must possess good analytical and problem-solving skills. Demonstrated drive and initiative to complete assigned tasks and investigate and seek out improvement opportunities. Travel 5-10% Preferred Requirements: Demonstrated experience in the engineering and implementation of 480V (Switchgear, Power Distribution Panel, Motor Control Center) and 4160V Power Distribution Systems. Please Keep in Mind If you do not meet 100% of these requirements, we at JM still want to hear from you. So, if you are interested in the role, we encourage you to apply so we can learn how your skills and talents can contribute to our team. Benefits Johns Manville (JM) offers a wide range of benefits to employees. Some are subsidized by the company and others are fully employee-paid. Health benefits include a choice of comprehensive medical plans, a dental plan, vision plan, wellness program and critical illness insurance. JM sponsors a 401(k) plan which includes a sizeable company match. JM offers paid vacation and also provides paid sick and parental leave for eligible employees. Additionally, Johns Manville provides basic life Insurance, short-term and long-term disability coverage, an employee assistance program, and business travel accident coverage. Supplemental life insurance and accidental death and dismemberment insurance are available as well. The company also offers a variety of tax saving accounts; health spending account, traditional flexible spending account, and a dependent care spending account. JM also offers a tuition reimbursement program for undergraduate and certain graduate programs. Johns Manville supports employee growth with vast educational opportunities and a company-wide mentoring program. This program pairs employees and leaders to grow skills, build stronger internal networks and strengthen the company's succession planning process. Johns Manville also offers soft and hard skills training facilitated by internal and external presenters. Our talent management team prioritizes the holistic growth of our workforce. Diversity & Inclusion Johns Manville believes diversity and inclusion in our workplace is critical for the long-term success of our company. We are committed to retaining, developing and attracting a diverse workforce that fosters an inclusive work environment in which all employees are treated with dignity and respect. This is the right thing to do for our employees, our company and our communities. Incumbent must be physically able to perform essential job functions. Reasonable accommodations may be made to enable individuals with disabilities to perform essential job functions. We are proud to be an Equal Opportunity/Affirmative Action employer. We maintain a drug-free workplace and perform pre-employment substance abuse testing. About Us Johns Manville is a proud member of the Berkshire Hathaway family of companies, serving customers in more than 80 countries, supplying innovative products to the construction, aerospace, automotive, filtration and energy industries. With a more than 160-year legacy, we understand that our story continues to grow only with the right people saying, thinking and doing the right things. Make your story our story. Johns Manville believes diversity and inclusion in our workplace is critical for the long-term success of our company. We are committed to retaining, developing and attracting a diverse workforce that fosters an inclusive work environment in which all employees are treated with dignity and respect. This is the right thing to do for our employees, our company and our communities. Compensation details: 00 Yearly Salary PIcdedf55f7ef0-6428
Job Description Job Description Benefits: 401(k) 401(k) matching Dental insurance Health insurance Paid time off Profit sharing Tuition assistance Vision insurance SarelaTech is seeking a highly skilled and experienced Senior Network Architect to lead the design, implementation, and optimization of our enterprise application delivery and DDI (DNS, DHCP, and IPAM) infrastructure. The ideal candidate will have deep, hands-on expertise with F5 technologies and Infoblox, ensuring highly available, secure, and scalable application delivery models across the enterprise network in support of critical mission requirements that enhance the reliability and security of Department of War (DoW) networks and systems. Acting as the technical lead for this initiative, you will architect and deploy network solutions utilizing F5 and Infoblox technologies in concert to provide intelligent and scalable global server load balancing (GSLB), secure DNS solutions, and enterprise IP address management across our customer's rapidly evolving hybrid multi-cloud environment. Primary Responsibilities: Application Delivery Architecture - Design, deploy, and manage advanced application delivery models ensuring high availability, optimal performance, and security for mission-critical enterprise applications. F5 Infrastructure Management - Architect and maintain F5 BIG-IP solutions, with a heavy focus on Local Traffic Manager (LTM) and Global Traffic Manager (GTM) for intelligent local and global load balancing. Enterprise DDI Administration - Lead the engineering, deployment, and administration of enterprise-class DDI infrastructure utilizing Infoblox technology (DNS, DHCP, and IP Address Management). Cross-Functional Collaboration - Work closely with application developers, cybersecurity teams, and systems engineers to translate application requirements into resilient, highly available network architectures. Troubleshooting & Optimization - Perform advanced network troubleshooting, traffic analysis, packet capture, and performance tuning for complex application delivery workflows. Documentation & Standards - Develop and maintain comprehensive architectural documentation, standard operating procedures, and technical blueprints. Compliance & Documentation: Ensure all tools comply with DoW STIGs and IL5/IL6/IL7 protocols; develop and maintain architectural documentation and compliance traceability. Required Qualifications: Security Clearance: Active Top Secret / Sensitive Compartmented Information (TS/SCI) required at time of hire. Education: Bachelor's degree in computer science, Information Technology, or a related technical discipline & 12+ years' experience. Certification: Active IAT Level II certification (e.g., Security+ CE, CySA+, GSEC, or SSCP) required. Cisco CCNA Certification (CCNP or CCIE Preferred). Citizenship: United States Citizenship is required. Experience Level: Minimum of 8-10 years of progressive experience in network engineering and architecture, with a dedicated focus on application delivery networks (ADN). F5 Expertise: Deep, demonstrable expertise in F5 BIG-IP platforms, specifically configuring, upgrading, and migrating LTM and GTM/F5 DNS environments. Infoblox / DDI Mastery: Extensive experience designing and operating enterprise-class Infoblox DDI environments, including Grid architecture and seamless IPAM integration. Core Networking: Mastery of OSI model layers 2-7, TCP/IP, routing protocols (e.g., BGP, OSPF), and solid experience with SSL/TLS offloading and certificate management. Leadership: Experience leading technical working groups and directing the efforts of adjacent infrastructure and development teams. Operational Experience: Prior experience working within a DoW/DoD Operations Center (NOC/SOC) or supporting mission-critical systems and networks. Communication: Must be able to present designs, plans, and analyses of alternatives to technical leadership boards for approvals. Desired Qualifications: Automation Skills Experience with network automation and orchestration tools (e.g., Ansible, Python, Terraform, or F5 AS3) is highly desired. Certifications: F5 Certified Technology Specialist (F5-CTS) or Solution Expert (F5-CSE), and Infoblox Core DDI certifications are strongly preferred.
10/16/2026
Full time
Job Description Job Description Benefits: 401(k) 401(k) matching Dental insurance Health insurance Paid time off Profit sharing Tuition assistance Vision insurance SarelaTech is seeking a highly skilled and experienced Senior Network Architect to lead the design, implementation, and optimization of our enterprise application delivery and DDI (DNS, DHCP, and IPAM) infrastructure. The ideal candidate will have deep, hands-on expertise with F5 technologies and Infoblox, ensuring highly available, secure, and scalable application delivery models across the enterprise network in support of critical mission requirements that enhance the reliability and security of Department of War (DoW) networks and systems. Acting as the technical lead for this initiative, you will architect and deploy network solutions utilizing F5 and Infoblox technologies in concert to provide intelligent and scalable global server load balancing (GSLB), secure DNS solutions, and enterprise IP address management across our customer's rapidly evolving hybrid multi-cloud environment. Primary Responsibilities: Application Delivery Architecture - Design, deploy, and manage advanced application delivery models ensuring high availability, optimal performance, and security for mission-critical enterprise applications. F5 Infrastructure Management - Architect and maintain F5 BIG-IP solutions, with a heavy focus on Local Traffic Manager (LTM) and Global Traffic Manager (GTM) for intelligent local and global load balancing. Enterprise DDI Administration - Lead the engineering, deployment, and administration of enterprise-class DDI infrastructure utilizing Infoblox technology (DNS, DHCP, and IP Address Management). Cross-Functional Collaboration - Work closely with application developers, cybersecurity teams, and systems engineers to translate application requirements into resilient, highly available network architectures. Troubleshooting & Optimization - Perform advanced network troubleshooting, traffic analysis, packet capture, and performance tuning for complex application delivery workflows. Documentation & Standards - Develop and maintain comprehensive architectural documentation, standard operating procedures, and technical blueprints. Compliance & Documentation: Ensure all tools comply with DoW STIGs and IL5/IL6/IL7 protocols; develop and maintain architectural documentation and compliance traceability. Required Qualifications: Security Clearance: Active Top Secret / Sensitive Compartmented Information (TS/SCI) required at time of hire. Education: Bachelor's degree in computer science, Information Technology, or a related technical discipline & 12+ years' experience. Certification: Active IAT Level II certification (e.g., Security+ CE, CySA+, GSEC, or SSCP) required. Cisco CCNA Certification (CCNP or CCIE Preferred). Citizenship: United States Citizenship is required. Experience Level: Minimum of 8-10 years of progressive experience in network engineering and architecture, with a dedicated focus on application delivery networks (ADN). F5 Expertise: Deep, demonstrable expertise in F5 BIG-IP platforms, specifically configuring, upgrading, and migrating LTM and GTM/F5 DNS environments. Infoblox / DDI Mastery: Extensive experience designing and operating enterprise-class Infoblox DDI environments, including Grid architecture and seamless IPAM integration. Core Networking: Mastery of OSI model layers 2-7, TCP/IP, routing protocols (e.g., BGP, OSPF), and solid experience with SSL/TLS offloading and certificate management. Leadership: Experience leading technical working groups and directing the efforts of adjacent infrastructure and development teams. Operational Experience: Prior experience working within a DoW/DoD Operations Center (NOC/SOC) or supporting mission-critical systems and networks. Communication: Must be able to present designs, plans, and analyses of alternatives to technical leadership boards for approvals. Desired Qualifications: Automation Skills Experience with network automation and orchestration tools (e.g., Ansible, Python, Terraform, or F5 AS3) is highly desired. Certifications: F5 Certified Technology Specialist (F5-CTS) or Solution Expert (F5-CSE), and Infoblox Core DDI certifications are strongly preferred.
Job Description Job Description In Person Only interview. This job is Hybrid Mechanicsville, VA 23116. Our direct client has an opening for an Senior Network Security Engineer (807471) This position is up to 12 months, with the option of extension, 9120 Lockwood Boulevard Mechanicsville, VA 23116. Please send rates and a resume. Corp to Corp or w2 allowed. Enterprise Networking (Required 8 Years) Enterprise Security (Required 5 Years) Azure Networking (Required 3 Years) WAF/NGFW (Required 3 Years) Supporting environments with 300+ Network Devices (Desired 3 Years) Candidate must have experience in the following areas: Incident response, Security investigations, Log analysis, Threat intelligence, Security monitor (Required) Candidate must have experience with the SIEM products (e.g. Splunk, Microsoft Sentinel) (Required) Candidate must have experience in vulnerability management and remediation tracking as well as vulnerability scanning tools (e.g. Nessus, Tenable, Def Required. Candidate must have experience in the following areas: Active Directory, MFA, Conditional Access, Certificates Required. Candidate must have experience with; SEC530, CIS Benchmarks, NIST CSF, NIST 800-53, Zero Trust principles (Required) Candidate must have experience with the following: Cisco ISE, NAC, 802.1X, RADIUS, TACACS Required. Candidate must have experience with the following products: Palo Alto, F5 Distributed Cloud, Azure WAF, Cisco VPN, Global Protect, F5 BIG-IP (Required) Candidate must have experience working in highly regulated environments and leading technical troubleshooting during outages. (Required) Candidate must have ability to communicate technical issues to technical and executive audiences and an ability to mentor junior engineers. (Required) Candidate should have achieved or ability to achieve the following certifications: Azure Security Engineer (AZ-500), Azure Network Engineer (AZ-700).(Required)
10/07/2026
Full time
Job Description Job Description In Person Only interview. This job is Hybrid Mechanicsville, VA 23116. Our direct client has an opening for an Senior Network Security Engineer (807471) This position is up to 12 months, with the option of extension, 9120 Lockwood Boulevard Mechanicsville, VA 23116. Please send rates and a resume. Corp to Corp or w2 allowed. Enterprise Networking (Required 8 Years) Enterprise Security (Required 5 Years) Azure Networking (Required 3 Years) WAF/NGFW (Required 3 Years) Supporting environments with 300+ Network Devices (Desired 3 Years) Candidate must have experience in the following areas: Incident response, Security investigations, Log analysis, Threat intelligence, Security monitor (Required) Candidate must have experience with the SIEM products (e.g. Splunk, Microsoft Sentinel) (Required) Candidate must have experience in vulnerability management and remediation tracking as well as vulnerability scanning tools (e.g. Nessus, Tenable, Def Required. Candidate must have experience in the following areas: Active Directory, MFA, Conditional Access, Certificates Required. Candidate must have experience with; SEC530, CIS Benchmarks, NIST CSF, NIST 800-53, Zero Trust principles (Required) Candidate must have experience with the following: Cisco ISE, NAC, 802.1X, RADIUS, TACACS Required. Candidate must have experience with the following products: Palo Alto, F5 Distributed Cloud, Azure WAF, Cisco VPN, Global Protect, F5 BIG-IP (Required) Candidate must have experience working in highly regulated environments and leading technical troubleshooting during outages. (Required) Candidate must have ability to communicate technical issues to technical and executive audiences and an ability to mentor junior engineers. (Required) Candidate should have achieved or ability to achieve the following certifications: Azure Security Engineer (AZ-500), Azure Network Engineer (AZ-700).(Required)
Job Description Job Description In Person Only interview. This job is Hybrid Mechanicsville, VA 23116 Our direct client has an opening for an Senior Network Security Engineer (807471). This position is up to 12 months, with the option of extension, 9120 Lockwood Boulevard Mechanicsville, VA 23116. Please send rates and a resume. Corp to Corp or w2 allowed. Requirements: Enterprise Networking - Required 8 Years. Enterprise Security - Required 5 Years. Azure Networking - Required 3 Years. WAF/NGFW - Required 3 Years. Supporting environments with 300+ Network Devices - Desired 3 Years. Candidate must have experience in the following areas: Incident response, Security investigations, Log analysis, Threat intelligence, Security monitor - Required. Candidate must have experience with the SIEM products (e.g. Splunk, Microsoft Sentinel) - Required. Candidate must have experience in vulnerability management and remediation tracking as well as vulnerability scanning tools (e.g. Nessus, Tenable, Def - Required. Candidate must have experience in the following areas: Active Directory, MFA, Conditional Access, Certificates - Required. Candidate must have experience with; SEC530, CIS Benchmarks, NIST CSF, NIST 800-53, Zero Trust principles - Required. Candidate must have experience with the following: Cisco ISE, NAC, 802.1X, RADIUS, TACACS - Required. Candidate must have experience with the following products: Palo Alto, F5 Distributed Cloud, Azure WAF, Cisco VPN, Global Protect, F5 BIG-IP - Required. Candidate must have experience working in highly regulated environments and leading technical troubleshooting during outages - Required. Candidate must have ability to communicate technical issues to technical and executive audiences and an ability to mentor junior engineers - Required. Candidate should have achieved or ability to achieve the following certifications: Azure Security Engineer (AZ-500), Azure Network Engineer (AZ-700) - Required.
09/30/2026
Full time
Job Description Job Description In Person Only interview. This job is Hybrid Mechanicsville, VA 23116 Our direct client has an opening for an Senior Network Security Engineer (807471). This position is up to 12 months, with the option of extension, 9120 Lockwood Boulevard Mechanicsville, VA 23116. Please send rates and a resume. Corp to Corp or w2 allowed. Requirements: Enterprise Networking - Required 8 Years. Enterprise Security - Required 5 Years. Azure Networking - Required 3 Years. WAF/NGFW - Required 3 Years. Supporting environments with 300+ Network Devices - Desired 3 Years. Candidate must have experience in the following areas: Incident response, Security investigations, Log analysis, Threat intelligence, Security monitor - Required. Candidate must have experience with the SIEM products (e.g. Splunk, Microsoft Sentinel) - Required. Candidate must have experience in vulnerability management and remediation tracking as well as vulnerability scanning tools (e.g. Nessus, Tenable, Def - Required. Candidate must have experience in the following areas: Active Directory, MFA, Conditional Access, Certificates - Required. Candidate must have experience with; SEC530, CIS Benchmarks, NIST CSF, NIST 800-53, Zero Trust principles - Required. Candidate must have experience with the following: Cisco ISE, NAC, 802.1X, RADIUS, TACACS - Required. Candidate must have experience with the following products: Palo Alto, F5 Distributed Cloud, Azure WAF, Cisco VPN, Global Protect, F5 BIG-IP - Required. Candidate must have experience working in highly regulated environments and leading technical troubleshooting during outages - Required. Candidate must have ability to communicate technical issues to technical and executive audiences and an ability to mentor junior engineers - Required. Candidate should have achieved or ability to achieve the following certifications: Azure Security Engineer (AZ-500), Azure Network Engineer (AZ-700) - Required.
Job Description Job Description In Person Only interview. This job is Hybrid Mechanicsville, VA 23116 Our direct client has an opening for an Senior Network Security Engineer (807471) This position is up to 12 months, with the option of extension, 9120 Lockwood Boulevard Mechanicsville, VA 23116 Please send rates and a resume. Corp to Corp or w2 allowed. Enterprise Networking Required 8 Years Enterprise Security Required 5 Years Azure Networking Required 3 Years WAF/NGFW Required 3 Years Supporting environments with 300+ Network Devices Desired 3 Years Candidate must have experience in the following areas: Incident response, Security investigations, Log analysis, Threat intelligence, Security monitor Required Candidate must have experience with the SIEM products (e.g. Splunk, Microsoft Sentinel) Required Candidate must have experience in vulnerability management and remediation tracking as well as vulnerability scanning tools (e.g. Nessus, Tenable, Def Required Candidate must have experience in the following areas: Active Directory, MFA, Conditional Access, Certificates Required Candidate must have experience with; SEC530, CIS Benchmarks, NIST CSF, NIST 800-53, Zero Trust principles Required Candidate must have experience with the following: Cisco ISE, NAC, 802.1X, RADIUS, TACACS Required Candidate must have experience with the following products: Palo Alto, F5 Distributed Cloud, Azure WAF, Cisco VPN, Global Protect, F5 BIG-IP Required Candidate must have experience working in highly regulated environments and leading technical troubleshooting during outages Required Candidate must have ability to communicate technical issues to technical and executive audiences and an ability to mentor junior engineers. Required Candidate should have achieved or ability to achieve the following certifications: Azure Security Engineer (AZ-500), Azure Network Engineer (AZ-700), Required
09/28/2026
Full time
Job Description Job Description In Person Only interview. This job is Hybrid Mechanicsville, VA 23116 Our direct client has an opening for an Senior Network Security Engineer (807471) This position is up to 12 months, with the option of extension, 9120 Lockwood Boulevard Mechanicsville, VA 23116 Please send rates and a resume. Corp to Corp or w2 allowed. Enterprise Networking Required 8 Years Enterprise Security Required 5 Years Azure Networking Required 3 Years WAF/NGFW Required 3 Years Supporting environments with 300+ Network Devices Desired 3 Years Candidate must have experience in the following areas: Incident response, Security investigations, Log analysis, Threat intelligence, Security monitor Required Candidate must have experience with the SIEM products (e.g. Splunk, Microsoft Sentinel) Required Candidate must have experience in vulnerability management and remediation tracking as well as vulnerability scanning tools (e.g. Nessus, Tenable, Def Required Candidate must have experience in the following areas: Active Directory, MFA, Conditional Access, Certificates Required Candidate must have experience with; SEC530, CIS Benchmarks, NIST CSF, NIST 800-53, Zero Trust principles Required Candidate must have experience with the following: Cisco ISE, NAC, 802.1X, RADIUS, TACACS Required Candidate must have experience with the following products: Palo Alto, F5 Distributed Cloud, Azure WAF, Cisco VPN, Global Protect, F5 BIG-IP Required Candidate must have experience working in highly regulated environments and leading technical troubleshooting during outages Required Candidate must have ability to communicate technical issues to technical and executive audiences and an ability to mentor junior engineers. Required Candidate should have achieved or ability to achieve the following certifications: Azure Security Engineer (AZ-500), Azure Network Engineer (AZ-700), Required
Job Description Job Description About Us: NPO Torino is a specialized Digital Transformation company, recently acquired by the Fondo Italiano d'Investimento (Italian Investment Fund). With our headquarters in Turin and an operational presence in the United States and Brazil, we support companies in their technological evolution journey by combining consulting expertise with advanced IT solutions. We offer services in cloud computing, cybersecurity, AI for business, FinOps, system integration, and IT governance, featuring a customized and results-driven approach. Our mission is to simplify digital complexity and transform it into strategic value for enterprises. Backed by the Fondo Italiano d'Investimento , NPO Torino is accelerating its growth as a partner of choice for companies looking to tackle innovation challenges with vision, pragmatism, and sustainability. Salary range $80K to $92K. Work is partially remote with occasional travel to USA, and in Canada. Role Description: We are looking for a highly qualified Senior Network Security Engineer to join our Network & Security Business Unit. The professional will be responsible for the design, implementation, maintenance, and troubleshooting of complex network security infrastructures. The ideal candidate has deep, vertical expertise with leading security vendors (Fortinet, Palo Alto Networks, Cisco, F5) and a proven track record of managing modern architectures, including SASE solutions. Key Responsibilities: Design and manage security architectures based on Next-Generation Firewalls (NGFW). Implement and manage SASE (Secure Access Service Edge) solutions for distributed environments. Perform configuration , policy management, and advanced troubleshooting on multi-vendor equipment. Manage perimeter and internal security within Enterprise environments. Conduct log analysis, incident management, and system hardening. Provide technical mentoring for junior team members (optional, if required). Fundamental Technical Requirements (Must-Have) The candidate must demonstrate practical, in-depth, hands-on experience with the following technologies: Palo Alto Networks: Advanced configuration and management of NGFW (PA Series). Solid experience with Panorama for centralized management. Proven experience with SASE solutions (Prisma Access) and GlobalProtect. Fortinet: Advanced management of FortiGate (including VDOM, SD-WAN, SSL Inspection). Experience with the wider Fortinet ecosystem (FortiManager, FortiAnalyzer). Cisco Security: Experience with Cisco Security solutions (Firepower/FTD, ASA). Knowledge of Cisco ISE (Identity Services Engine) and TrustSec architectures is a strong plus. F5 Networks: Implementation and management of F5 BIG-IP solutions. Strong configuration and troubleshooting skills on LTM (Local Traffic Manager) and/or APM (Access Policy Manager) / AWAF modules. Soft Skills & Additional Requirements: Minimum of 5+ years of experience in Network Security Engineering roles. Excellent troubleshooting and problem-solving skills under pressure. Preferred Certifications (Nice-to-Have): Palo Alto: PCNSE (Palo Alto Networks Certified Network Security Engineer). Fortinet: NSE 4 / NSE 7. Cisco: CCNP Security or CCIE Security. F5: F5 Certified Administrator (F5-CA) or Technology Specialist (F5-CTS). Introduce Yourself (Screening Questions): "Do you have direct implementation experience with Prisma Access? Can you briefly describe a SASE architecture you have managed?" "Have you ever managed migrations between these vendors (e.g., from Cisco to Fortinet or vice versa)?" What We Offer: Salary commensurate with experience. Structured training and certification plans. Corporate benefits: Welfare Plan, Smart Working.
09/28/2026
Full time
Job Description Job Description About Us: NPO Torino is a specialized Digital Transformation company, recently acquired by the Fondo Italiano d'Investimento (Italian Investment Fund). With our headquarters in Turin and an operational presence in the United States and Brazil, we support companies in their technological evolution journey by combining consulting expertise with advanced IT solutions. We offer services in cloud computing, cybersecurity, AI for business, FinOps, system integration, and IT governance, featuring a customized and results-driven approach. Our mission is to simplify digital complexity and transform it into strategic value for enterprises. Backed by the Fondo Italiano d'Investimento , NPO Torino is accelerating its growth as a partner of choice for companies looking to tackle innovation challenges with vision, pragmatism, and sustainability. Salary range $80K to $92K. Work is partially remote with occasional travel to USA, and in Canada. Role Description: We are looking for a highly qualified Senior Network Security Engineer to join our Network & Security Business Unit. The professional will be responsible for the design, implementation, maintenance, and troubleshooting of complex network security infrastructures. The ideal candidate has deep, vertical expertise with leading security vendors (Fortinet, Palo Alto Networks, Cisco, F5) and a proven track record of managing modern architectures, including SASE solutions. Key Responsibilities: Design and manage security architectures based on Next-Generation Firewalls (NGFW). Implement and manage SASE (Secure Access Service Edge) solutions for distributed environments. Perform configuration , policy management, and advanced troubleshooting on multi-vendor equipment. Manage perimeter and internal security within Enterprise environments. Conduct log analysis, incident management, and system hardening. Provide technical mentoring for junior team members (optional, if required). Fundamental Technical Requirements (Must-Have) The candidate must demonstrate practical, in-depth, hands-on experience with the following technologies: Palo Alto Networks: Advanced configuration and management of NGFW (PA Series). Solid experience with Panorama for centralized management. Proven experience with SASE solutions (Prisma Access) and GlobalProtect. Fortinet: Advanced management of FortiGate (including VDOM, SD-WAN, SSL Inspection). Experience with the wider Fortinet ecosystem (FortiManager, FortiAnalyzer). Cisco Security: Experience with Cisco Security solutions (Firepower/FTD, ASA). Knowledge of Cisco ISE (Identity Services Engine) and TrustSec architectures is a strong plus. F5 Networks: Implementation and management of F5 BIG-IP solutions. Strong configuration and troubleshooting skills on LTM (Local Traffic Manager) and/or APM (Access Policy Manager) / AWAF modules. Soft Skills & Additional Requirements: Minimum of 5+ years of experience in Network Security Engineering roles. Excellent troubleshooting and problem-solving skills under pressure. Preferred Certifications (Nice-to-Have): Palo Alto: PCNSE (Palo Alto Networks Certified Network Security Engineer). Fortinet: NSE 4 / NSE 7. Cisco: CCNP Security or CCIE Security. F5: F5 Certified Administrator (F5-CA) or Technology Specialist (F5-CTS). Introduce Yourself (Screening Questions): "Do you have direct implementation experience with Prisma Access? Can you briefly describe a SASE architecture you have managed?" "Have you ever managed migrations between these vendors (e.g., from Cisco to Fortinet or vice versa)?" What We Offer: Salary commensurate with experience. Structured training and certification plans. Corporate benefits: Welfare Plan, Smart Working.
Job Description Job Description We are seeking a Senior Network Security Engineer for an operations-first role supporting enterprise network security infrastructure across on-premises, remote-access, hybrid-cloud, and cloud-connected environments. This is not primarily an architecture/design role. The priority is a hands-on engineer who can administer, configure, maintain, troubleshoot, patch, upgrade, back up, validate, document, and operate production security platforms with minimal ramp-up. Firewall operations: hands-on Cisco and Palo Alto firewall administration, rule changes, NAT, troubleshooting, policy cleanup, upgrades, backups, logging, and production support. VPN / remote access: support for remote-access VPN, site-to-site VPN, user connectivity issues, certificates, authentication flows, and after-hours troubleshooting. RSA / MFA administration: RSA SecurID or equivalent MFA operations, token support, server administration, user troubleshooting, VPN integration, certificates, patching, backups, logs, and monitoring. Day-to-day operations: ticket resolution, monitoring alerts, health checks, change requests, incident support, maintenance windows, operational reporting, and customer support. Configuration and administration: installing, configuring, maintaining, patching, upgrading, backing up, validating, and troubleshooting assigned security platforms. Production troubleshooting: strong TCP/IP, DNS, routing, firewall logs, packet captures, VPN authentication, certificate, and connectivity troubleshooting. Documentation and process discipline: SOPs, runbooks, diagrams, change records, rollback plans, evidence collection, knowledge transfer, and formal change management. Federal/customer environment maturity: Public Trust eligibility, regulated-environment documentation, customer support, cross-team coordination, and comfort working with government stakeholders. The best candidate can credibly say: "I have operated enterprise Cisco and Palo Alto firewalls in production, handled firewall rule changes and troubleshooting, supported VPN users and site-to-site tunnels, administered or supported RSA/MFA tied to VPN access, followed formal change-management processes, maintained documentation and backups, and can step into daily operational support with minimal ramp-up." Scope and Role Boundaries Primary platforms include Cisco ASA/Firepower/FTD/FMC, Palo Alto NGFW/Panorama/GlobalProtect, remote-access and site-to-site VPN, RSA SecurID Authentication Manager or comparable MFA, monitoring/logging/SIEM integrations, and related network security controls. Coordinate with SOC/NOC, cloud, identity/directory, wireless/LAN, server, endpoint, system owner, application, governance, and vendor teams during changes, incidents, troubleshooting, compliance, and audit support. Cloudflare, Cisco ISE/NAC, secure web/email gateways, packet visibility tools, SD-WAN/SASE/ZTNA, AWS/Azure security, and F5/application-delivery awareness are useful where they intersect with assigned operational support, but the core need is firewall, VPN, RSA/MFA, and production operations. Key Responsibilities Provide daily, weekly, monthly, and annual operational support for assigned security systems, including tickets, alerts, health checks, email/phone support, metrics, status reporting, and operational validation. Administer and troubleshoot enterprise firewalls, including rule bases, NAT, segmentation, high availability, threat prevention, VPN integration, logging, secure baselines, rule reviews, recertification, cleanup, and decommissioning. Install, configure, maintain, patch, upgrade, back up, and validate firewall, VPN, MFA, and related network security systems in production environments. Support remote-access VPN, site-to-site VPN, partner connectivity, cloud connectivity, mobile/remote users, certificates, authentication policies, availability, utilization, and user access issues. Maintain and troubleshoot RSA SecurID Authentication Manager or equivalent MFA services, including servers/appliances, agents, certificates, HA, backups, logs, monitoring, directory integration, VPN authentication, and token lifecycle support. Respond to incidents, vulnerability notices, urgent requests, vendor advisories, PSIRT notices, system alerts, and emergency troubleshooting while minimizing service disruption. Use firewall logs, VPN logs, packet captures, SIEM data, monitoring tools, DNS/routing checks, and standard diagnostics to resolve complex connectivity, authentication, TLS/certificate, and application-flow issues. Create and maintain topology diagrams, equipment inventories, configurations, SOPs, runbooks, implementation plans, rollback plans, build/upgrade procedures, troubleshooting notes, and knowledge articles. Follow approved change, release, incident, problem, and configuration-management processes; prepare change records, peer-review materials, validation evidence, root-cause analysis, metrics, and audit artifacts. Support vulnerability remediation, POA&M tracking, continuous monitoring, compliance reviews, audit evidence collection, and coordination with ISSO, system owner, and security governance teams. Requirements 7+ years of experience in network security engineering, network infrastructure, cybersecurity infrastructure, or a closely related role. 5+ years of hands-on experience administering, maintaining, and troubleshooting enterprise firewall platforms in production environments. Hands-on experience with Cisco security technologies such as Cisco ASA, Firepower, FTD, FMC, AnyConnect/Secure Client, or equivalent Cisco firewall/VPN platforms. Hands-on experience with Palo Alto Networks technologies such as NGFW, Panorama, GlobalProtect, security profiles, App-ID/User-ID, logging, and policy optimization. Experience administering or supporting RSA SecurID Authentication Manager or comparable enterprise MFA/two-factor authentication platforms, including token support, server operations, patching/upgrades, backups, certificates, monitoring, and directory/VPN integration. Strong knowledge of firewall policy, NAT, VPNs, routing, DNS, DHCP, BGP, TLS/certificates, packet captures, log analysis, segmentation, high availability, and common network diagnostic tools. Experience with enterprise monitoring, logging, SIEM, alerting, vulnerability management, incident response, formal change management, and regulated-environment documentation. Ability to create clear technical documentation, support customers and stakeholders, prioritize operational work, communicate clearly, and coordinate across technical teams. Ability to obtain and maintain a Public Trust background investigation. Desired Certifications Relevant certifications are helpful but should not replace demonstrated hands-on experience. Examples include CCNP Security, CCIE Security, PCNSE, PCCSE, CISSP, CCSP, AWS Certified Security - Specialty, AWS Advanced Networking - Specialty, Microsoft Certified: Azure Security Engineer Associate, Microsoft Certified: Azure Network Engineer Associate, CompTIA Security+, CompTIA CySA+, GIAC certifications, or equivalent vendor/cloud certifications. Core Competencies Enterprise firewall engineering and policy lifecycle management VPN, remote access, RSA/MFA, and token lifecycle operations Cloudflare, edge security, secure access, and Zero Trust support Content filtering, secure web/email gateway, and NAC operations Hybrid-cloud network security and secure connectivity Monitoring, logging, SIEM integration, and incident response support Security visibility, packet analysis, and advanced troubleshooting Vulnerability remediation, compliance evidence, and POA&M support Change management, documentation, reporting, and operational metrics Technical leadership, customer support, and cross-team collaboration Benefits 401(k) 401(k) matching Dental insurance Flexible schedule Flexible spending account Health insurance Health savings account Life insurance Paid time off Professional development assistance Referral program Retirement plan Tuition reimbursement Vision insurance
09/28/2026
Full time
Job Description Job Description We are seeking a Senior Network Security Engineer for an operations-first role supporting enterprise network security infrastructure across on-premises, remote-access, hybrid-cloud, and cloud-connected environments. This is not primarily an architecture/design role. The priority is a hands-on engineer who can administer, configure, maintain, troubleshoot, patch, upgrade, back up, validate, document, and operate production security platforms with minimal ramp-up. Firewall operations: hands-on Cisco and Palo Alto firewall administration, rule changes, NAT, troubleshooting, policy cleanup, upgrades, backups, logging, and production support. VPN / remote access: support for remote-access VPN, site-to-site VPN, user connectivity issues, certificates, authentication flows, and after-hours troubleshooting. RSA / MFA administration: RSA SecurID or equivalent MFA operations, token support, server administration, user troubleshooting, VPN integration, certificates, patching, backups, logs, and monitoring. Day-to-day operations: ticket resolution, monitoring alerts, health checks, change requests, incident support, maintenance windows, operational reporting, and customer support. Configuration and administration: installing, configuring, maintaining, patching, upgrading, backing up, validating, and troubleshooting assigned security platforms. Production troubleshooting: strong TCP/IP, DNS, routing, firewall logs, packet captures, VPN authentication, certificate, and connectivity troubleshooting. Documentation and process discipline: SOPs, runbooks, diagrams, change records, rollback plans, evidence collection, knowledge transfer, and formal change management. Federal/customer environment maturity: Public Trust eligibility, regulated-environment documentation, customer support, cross-team coordination, and comfort working with government stakeholders. The best candidate can credibly say: "I have operated enterprise Cisco and Palo Alto firewalls in production, handled firewall rule changes and troubleshooting, supported VPN users and site-to-site tunnels, administered or supported RSA/MFA tied to VPN access, followed formal change-management processes, maintained documentation and backups, and can step into daily operational support with minimal ramp-up." Scope and Role Boundaries Primary platforms include Cisco ASA/Firepower/FTD/FMC, Palo Alto NGFW/Panorama/GlobalProtect, remote-access and site-to-site VPN, RSA SecurID Authentication Manager or comparable MFA, monitoring/logging/SIEM integrations, and related network security controls. Coordinate with SOC/NOC, cloud, identity/directory, wireless/LAN, server, endpoint, system owner, application, governance, and vendor teams during changes, incidents, troubleshooting, compliance, and audit support. Cloudflare, Cisco ISE/NAC, secure web/email gateways, packet visibility tools, SD-WAN/SASE/ZTNA, AWS/Azure security, and F5/application-delivery awareness are useful where they intersect with assigned operational support, but the core need is firewall, VPN, RSA/MFA, and production operations. Key Responsibilities Provide daily, weekly, monthly, and annual operational support for assigned security systems, including tickets, alerts, health checks, email/phone support, metrics, status reporting, and operational validation. Administer and troubleshoot enterprise firewalls, including rule bases, NAT, segmentation, high availability, threat prevention, VPN integration, logging, secure baselines, rule reviews, recertification, cleanup, and decommissioning. Install, configure, maintain, patch, upgrade, back up, and validate firewall, VPN, MFA, and related network security systems in production environments. Support remote-access VPN, site-to-site VPN, partner connectivity, cloud connectivity, mobile/remote users, certificates, authentication policies, availability, utilization, and user access issues. Maintain and troubleshoot RSA SecurID Authentication Manager or equivalent MFA services, including servers/appliances, agents, certificates, HA, backups, logs, monitoring, directory integration, VPN authentication, and token lifecycle support. Respond to incidents, vulnerability notices, urgent requests, vendor advisories, PSIRT notices, system alerts, and emergency troubleshooting while minimizing service disruption. Use firewall logs, VPN logs, packet captures, SIEM data, monitoring tools, DNS/routing checks, and standard diagnostics to resolve complex connectivity, authentication, TLS/certificate, and application-flow issues. Create and maintain topology diagrams, equipment inventories, configurations, SOPs, runbooks, implementation plans, rollback plans, build/upgrade procedures, troubleshooting notes, and knowledge articles. Follow approved change, release, incident, problem, and configuration-management processes; prepare change records, peer-review materials, validation evidence, root-cause analysis, metrics, and audit artifacts. Support vulnerability remediation, POA&M tracking, continuous monitoring, compliance reviews, audit evidence collection, and coordination with ISSO, system owner, and security governance teams. Requirements 7+ years of experience in network security engineering, network infrastructure, cybersecurity infrastructure, or a closely related role. 5+ years of hands-on experience administering, maintaining, and troubleshooting enterprise firewall platforms in production environments. Hands-on experience with Cisco security technologies such as Cisco ASA, Firepower, FTD, FMC, AnyConnect/Secure Client, or equivalent Cisco firewall/VPN platforms. Hands-on experience with Palo Alto Networks technologies such as NGFW, Panorama, GlobalProtect, security profiles, App-ID/User-ID, logging, and policy optimization. Experience administering or supporting RSA SecurID Authentication Manager or comparable enterprise MFA/two-factor authentication platforms, including token support, server operations, patching/upgrades, backups, certificates, monitoring, and directory/VPN integration. Strong knowledge of firewall policy, NAT, VPNs, routing, DNS, DHCP, BGP, TLS/certificates, packet captures, log analysis, segmentation, high availability, and common network diagnostic tools. Experience with enterprise monitoring, logging, SIEM, alerting, vulnerability management, incident response, formal change management, and regulated-environment documentation. Ability to create clear technical documentation, support customers and stakeholders, prioritize operational work, communicate clearly, and coordinate across technical teams. Ability to obtain and maintain a Public Trust background investigation. Desired Certifications Relevant certifications are helpful but should not replace demonstrated hands-on experience. Examples include CCNP Security, CCIE Security, PCNSE, PCCSE, CISSP, CCSP, AWS Certified Security - Specialty, AWS Advanced Networking - Specialty, Microsoft Certified: Azure Security Engineer Associate, Microsoft Certified: Azure Network Engineer Associate, CompTIA Security+, CompTIA CySA+, GIAC certifications, or equivalent vendor/cloud certifications. Core Competencies Enterprise firewall engineering and policy lifecycle management VPN, remote access, RSA/MFA, and token lifecycle operations Cloudflare, edge security, secure access, and Zero Trust support Content filtering, secure web/email gateway, and NAC operations Hybrid-cloud network security and secure connectivity Monitoring, logging, SIEM integration, and incident response support Security visibility, packet analysis, and advanced troubleshooting Vulnerability remediation, compliance evidence, and POA&M support Change management, documentation, reporting, and operational metrics Technical leadership, customer support, and cross-team collaboration Benefits 401(k) 401(k) matching Dental insurance Flexible schedule Flexible spending account Health insurance Health savings account Life insurance Paid time off Professional development assistance Referral program Retirement plan Tuition reimbursement Vision insurance
Job Description Job Description Global Software Firm seeks a Sr Network Security Engineer. We're looking for an engineer with strong Palo Alto, F5, and WAF experience. Experience in threat hunting and pen testing would be a plus. This is a permanent direct hire opportunity. Hybrid schedule with potential for fully remote if the hired candidate doesn't live within a reasonable commute of the data center. Compensation is competitive including: base, bonus, equity, 401k, unlimited pto, tuition reimbursement and much more! Role: The Network Security Engineer will help identify, research and evaluate security solutions and emerging technologies that align with the company's strategic direction. This person should have a strong knowledge of security, including HTTP compliance, application level security, and end-point protections. The engineer will be tasked with deploying new security technologies as well as maintaining current security infrastructure. A strong troubleshooting background is needed, as well as knowledge in APIs. Candidates should also have a strong ability to interface with other parts of the business and be able to coordinate work with multiple teams. Skills: Network routing and switching Firewall concepts and functions WAF and IPS F5: ASM, DNS, APM, AFM. Knowledge of iRules. Proxy and user access VPN access, both site-to-site and end user. GSLB, and server load balancing TLS knowledge and experience Knowledge of HTTP protocol Tier 3 operational support Preferred Experience: Routing: BGP, OSPF and EIGRP Firewall: ASA, PaloAlto and Juniper SRX Router and Switch: Cisco CCNP level knowledge Experience in reverse proxy solutions (Kemp/NGINX/HA Proxy) Experience in user proxy technologies Experience with Cloud Based DDoS and WAF solutions. Experience with NAC implementations (ClearPass, ISE) Familiarity with REST APIs and automation Anticipated base salary in the 150-180k range, + bonus
09/28/2026
Full time
Job Description Job Description Global Software Firm seeks a Sr Network Security Engineer. We're looking for an engineer with strong Palo Alto, F5, and WAF experience. Experience in threat hunting and pen testing would be a plus. This is a permanent direct hire opportunity. Hybrid schedule with potential for fully remote if the hired candidate doesn't live within a reasonable commute of the data center. Compensation is competitive including: base, bonus, equity, 401k, unlimited pto, tuition reimbursement and much more! Role: The Network Security Engineer will help identify, research and evaluate security solutions and emerging technologies that align with the company's strategic direction. This person should have a strong knowledge of security, including HTTP compliance, application level security, and end-point protections. The engineer will be tasked with deploying new security technologies as well as maintaining current security infrastructure. A strong troubleshooting background is needed, as well as knowledge in APIs. Candidates should also have a strong ability to interface with other parts of the business and be able to coordinate work with multiple teams. Skills: Network routing and switching Firewall concepts and functions WAF and IPS F5: ASM, DNS, APM, AFM. Knowledge of iRules. Proxy and user access VPN access, both site-to-site and end user. GSLB, and server load balancing TLS knowledge and experience Knowledge of HTTP protocol Tier 3 operational support Preferred Experience: Routing: BGP, OSPF and EIGRP Firewall: ASA, PaloAlto and Juniper SRX Router and Switch: Cisco CCNP level knowledge Experience in reverse proxy solutions (Kemp/NGINX/HA Proxy) Experience in user proxy technologies Experience with Cloud Based DDoS and WAF solutions. Experience with NAC implementations (ClearPass, ISE) Familiarity with REST APIs and automation Anticipated base salary in the 150-180k range, + bonus