Alpha Business Solutions
Philadelphia, Pennsylvania
Job Description Job Description Job Title: Cloud Security Analyst - GCP Location: Philadelphia, PA 19103 Hybrid onsite 3 days/week on Tues, Wed, Thurs Contract-to-Hire Will convert to full-time after 3 months of contract Pay rate: $68/HR-$70/HR on W2 We are seeking a passionate, adaptable Information Security Analyst who will serve as a subject matter expert (SME) for business areas and technical teams, and act as the customer interface for the Information Security Operations function. You will strengthen our security posture by evaluating, testing, documenting, and operationalizing security solutions and controls across on premises and cloud environments (Azure, AWS, GCP)-while enabling the business to innovate securely. Continuous learning is a requirement to stay ahead of adversaries. This includes tracking modern attack techniques, and applying rigor to protect confidentiality, integrity, and availability of valued information assets. Expect close collaboration with audit/exam teams, technology management, and business stakeholders, plus meaningful contributions to incident preparedness and response. Key Responsibilities: Cloud & Enterprise Security (SME) • Serve as SME on security fundamentals, techniques, and technologies across Azure, AWS, GCP, and on prem environments. • Guide cloud security architecture: IAM, encryption/key management, network controls, data protection, workload hardening. • Implement process improvements aligned to security frameworks (NIST CSF/, ISO 27001) and business needs; optimize technology to improve customer experience. Security Operations & Incident Response • Implement and monitor controls for unusual and suspicious activity across endpoints, networks, and cloud platforms. • Perform advanced monitoring, data/log analysis, threat hunting, and forensic investigations; contribute to SOC/IR workflows. • Plan, contribute to, and participate in incident plan exercises and tabletop scenarios. Governance, Risk & Compliance (GRC) • Draft or revise local policies, standards, guidelines, and procedures to supplement enterprise frameworks; identify and remediate gaps based upon NIST standards. • Interface with internal/external auditors and examiners; maintain vendor management standards, questionnaires, and regulatory documentation (HITRUST, PCI, NIST, HIPAA, SOC2). • Review contracts and provide security guidance; support project scoping, costing, and cost-benefit analyses. Stakeholder Engagement & Communication • Act as a liaison for the security team; clearly communicate business risk as it relates to information security. • Create technical documentation (reports, white papers, technical notes, implementation/configuration guides). • Use visual aids to convey complex topics to large, diverse audiences; communicate clearly in high pressure, high visibility situations. Continuous Improvement • Recommend new security solutions and improvements that do not impede innovation. • Stay current with the evolving threat landscape; consistently learn and grow to remain a step ahead of attackers. Technical Expertise Cloud Security (Azure, AWS, GCP) • Azure: Defender for Cloud, Microsoft Sentinel, Entra ID (Azure AD), Conditional Access, Key Vault, NSGs/Azure Firewall, storage encryption, Defender for Endpoint integration. • AWS: IAM roles/policies, Security Hub, GuardDuty, KMS, CloudTrail/CloudWatch, VPC security controls, AWS WAF, Secrets Manager. • GCP: IAM, Security Command Center, Cloud Audit Logs, VPC Service Controls, CMEK/KMS, Cloud Armor, Workload Identity; container security (GKE). Additional Technologies • Operating Systems: Linux, Windows Server, Windows Desktop; hardening, patching, CIS Benchmarks. • Forensics & eDiscovery: Symantec, Purview, Proofpoint; email/file discovery; incident response. • Network & Perimeter: Palo Alto firewalls, URL filtering, DNS blackhole/geo filtering, WildFire; F5 AWAF. • SIEM & Logging: MS Sentinel, MDE, Elastic; Endpoint management/log forwarding. Microsoft Data Lake, CRIBL • Vulnerability & AppSec: Qualys, NexusIQ; OWASP aligned testing and remediation. • Endpoint: Microsoft Defender, Microsoft ATP/Defender for Endpoint. • Identity & MFA: Okta, Microsoft (Entra ID MFA). • Core Services: DNS zone management; network micro segmentation; zero trust aligned controls. • Secure Productivity: Securing Microsoft 365 (Exchange Online, SharePoint/OneDrive, Teams, Purview). Qualifications : Required • 5-8 years of relevant information security experience (or 3-5 years in IT systems administration with strong security responsibilities). • Expertise in incident response, system monitoring/analysis, and risk assessments aligned with compliance and privacy laws. • Knowledge with compliance requirements: HITRUST, PCI, NIST, HIPAA, SOC2. • Knowledge across multiple platforms: Windows, Linux/Unix, macOS; networks and endpoints. • Experience with vulnerability assessment and penetration testing engagements. • Experience with change management and project management. • Excellent technical writing and presentation skills; ability to translate technical risk to business impact. Preferred • CCSP preferred; other certs: AZ 500, AWS Security Specialty, GCP Professional Cloud Security Engineer. • Experience securing Azure, AWS, GCP in enterprise/hybrid environments. • Familiarity with NIST CSF, ISO 27001, CIS Benchmarks, MITRE ATT&CK. Please apply with your interest. You may also reach out to me at Thank you, Ashu We provide a comprehensive package which includes. Benefits Medical for full time employees Dental, and Vision Insurance Life Insurance, Short-Term Disability, Long-Term Disability, etc.
11/11/2026
Full time
Job Description Job Description Job Title: Cloud Security Analyst - GCP Location: Philadelphia, PA 19103 Hybrid onsite 3 days/week on Tues, Wed, Thurs Contract-to-Hire Will convert to full-time after 3 months of contract Pay rate: $68/HR-$70/HR on W2 We are seeking a passionate, adaptable Information Security Analyst who will serve as a subject matter expert (SME) for business areas and technical teams, and act as the customer interface for the Information Security Operations function. You will strengthen our security posture by evaluating, testing, documenting, and operationalizing security solutions and controls across on premises and cloud environments (Azure, AWS, GCP)-while enabling the business to innovate securely. Continuous learning is a requirement to stay ahead of adversaries. This includes tracking modern attack techniques, and applying rigor to protect confidentiality, integrity, and availability of valued information assets. Expect close collaboration with audit/exam teams, technology management, and business stakeholders, plus meaningful contributions to incident preparedness and response. Key Responsibilities: Cloud & Enterprise Security (SME) • Serve as SME on security fundamentals, techniques, and technologies across Azure, AWS, GCP, and on prem environments. • Guide cloud security architecture: IAM, encryption/key management, network controls, data protection, workload hardening. • Implement process improvements aligned to security frameworks (NIST CSF/, ISO 27001) and business needs; optimize technology to improve customer experience. Security Operations & Incident Response • Implement and monitor controls for unusual and suspicious activity across endpoints, networks, and cloud platforms. • Perform advanced monitoring, data/log analysis, threat hunting, and forensic investigations; contribute to SOC/IR workflows. • Plan, contribute to, and participate in incident plan exercises and tabletop scenarios. Governance, Risk & Compliance (GRC) • Draft or revise local policies, standards, guidelines, and procedures to supplement enterprise frameworks; identify and remediate gaps based upon NIST standards. • Interface with internal/external auditors and examiners; maintain vendor management standards, questionnaires, and regulatory documentation (HITRUST, PCI, NIST, HIPAA, SOC2). • Review contracts and provide security guidance; support project scoping, costing, and cost-benefit analyses. Stakeholder Engagement & Communication • Act as a liaison for the security team; clearly communicate business risk as it relates to information security. • Create technical documentation (reports, white papers, technical notes, implementation/configuration guides). • Use visual aids to convey complex topics to large, diverse audiences; communicate clearly in high pressure, high visibility situations. Continuous Improvement • Recommend new security solutions and improvements that do not impede innovation. • Stay current with the evolving threat landscape; consistently learn and grow to remain a step ahead of attackers. Technical Expertise Cloud Security (Azure, AWS, GCP) • Azure: Defender for Cloud, Microsoft Sentinel, Entra ID (Azure AD), Conditional Access, Key Vault, NSGs/Azure Firewall, storage encryption, Defender for Endpoint integration. • AWS: IAM roles/policies, Security Hub, GuardDuty, KMS, CloudTrail/CloudWatch, VPC security controls, AWS WAF, Secrets Manager. • GCP: IAM, Security Command Center, Cloud Audit Logs, VPC Service Controls, CMEK/KMS, Cloud Armor, Workload Identity; container security (GKE). Additional Technologies • Operating Systems: Linux, Windows Server, Windows Desktop; hardening, patching, CIS Benchmarks. • Forensics & eDiscovery: Symantec, Purview, Proofpoint; email/file discovery; incident response. • Network & Perimeter: Palo Alto firewalls, URL filtering, DNS blackhole/geo filtering, WildFire; F5 AWAF. • SIEM & Logging: MS Sentinel, MDE, Elastic; Endpoint management/log forwarding. Microsoft Data Lake, CRIBL • Vulnerability & AppSec: Qualys, NexusIQ; OWASP aligned testing and remediation. • Endpoint: Microsoft Defender, Microsoft ATP/Defender for Endpoint. • Identity & MFA: Okta, Microsoft (Entra ID MFA). • Core Services: DNS zone management; network micro segmentation; zero trust aligned controls. • Secure Productivity: Securing Microsoft 365 (Exchange Online, SharePoint/OneDrive, Teams, Purview). Qualifications : Required • 5-8 years of relevant information security experience (or 3-5 years in IT systems administration with strong security responsibilities). • Expertise in incident response, system monitoring/analysis, and risk assessments aligned with compliance and privacy laws. • Knowledge with compliance requirements: HITRUST, PCI, NIST, HIPAA, SOC2. • Knowledge across multiple platforms: Windows, Linux/Unix, macOS; networks and endpoints. • Experience with vulnerability assessment and penetration testing engagements. • Experience with change management and project management. • Excellent technical writing and presentation skills; ability to translate technical risk to business impact. Preferred • CCSP preferred; other certs: AZ 500, AWS Security Specialty, GCP Professional Cloud Security Engineer. • Experience securing Azure, AWS, GCP in enterprise/hybrid environments. • Familiarity with NIST CSF, ISO 27001, CIS Benchmarks, MITRE ATT&CK. Please apply with your interest. You may also reach out to me at Thank you, Ashu We provide a comprehensive package which includes. Benefits Medical for full time employees Dental, and Vision Insurance Life Insurance, Short-Term Disability, Long-Term Disability, etc.
Job Description Job Description HonorVet Technologies is a Service Disable Veteran-Owned IT staffing firm, ISO 9001, and ISO 27001 certified, working with federal agencies, state governments, and Fortune 500 enterprise clients across the US. What makes us different isn't a tagline; it's the way we work. We don't forward resumes and hope for the best. We take the time to understand where a professional like you are headed and only reach out when we genuinely believe there's a fit worth exploring. I came across your profile, and something stood out. Title: Network Architect Location: Vacaville, CA - 95688 (Local to the Bay Area. Travel will be as needed, depending on projects and/or issues.) Duration: 6 Months Position Type: Onsite Objective & Deliverables: The solution, outcome, output, performance, or result Supplier will produce for State Fund is:(Provide a clear and definitive statement of what the Supplier will produce for State Fund.) This position will act as a primary technical principal and is responsible for delivery of network solutions at an enterprise level. Expertise with network infrastructure technologies such as AWS Cloud, Azure Cloud, LAN, WAN, Wireless, Security, VoIP, Video and Data Center. Ideal candidates will have Data Center experience. Candidates for this position must be able to, from day one, roll up their sleeves and hit the ground running, and bring their experience to the team to make the project deployments much smoother. Core Competencies: Act with integrity Use sound judgement Commitment to quality Demonstrate adaptability Innovate Think strategically Communicate effectively and influence others Work well both independently and as part of a team Deliverables or Tasks: Oversee planning, design, implementation, and operation of network infrastructure projects and participate in the specification of business requirements and implementation plans for technically advanced internetworking solutions. Manage implementation of network infrastructure projects, from both technical and communication aspects. Review network design for network security and other risks during course of projects. Serve as a liaison to vendors and/or third-party providers as assigned. Provide on-site and remote technical assistance to other resources and to customers. Build and document new Infrastructure environments following industry best practices and internal security policies and standards. Provide infrastructure design, implementation planning, deployment support, software strategy, system troubleshooting, performance engineering and optimization, maintenance strategy. Provide technical guidance, knowledge transfer and mentorship to State Fund internal engineering peers as required and lead technical staff responsibilities. Establish networking environment by designing system configuration; directing system installation; defining, documenting, and enforcing system standards. Maximize network performance by monitoring performance; troubleshoot network problems and outages; schedule upgrades; collaborate with other teams on network optimization. Secure network and server systems by establishing and enforcing policies; define and monitor access. Accomplish information systems and organization mission by completing related results as needed. Provide 24 by 7 support. Report network operational status by gathering, prioritizing information. Participate in capacity planning and demand forecasting, software performance analysis and network tuning. Collaborate with cross-functional teams to ensure timely delivery of solutions which drive successful business outcomes. Technical Knowledge and Skills: Expert knowledge of Palo Alto Network Firewall, CloudFlare and, Prisma Cloud and Cisco ASA. Expert knowledge of F5 Load Balancers LTM. GTM, WAF, and AWS ELB. Advanced OSI layer 2 knowledge and practical experience, including various flavors of STP, ARP, QOS, etc. Comprehensive knowledge of OSI layer 3 networks and protocols, including broadcast, multicast, anycast concepts, routing, etc. Expert knowledge of various routing protocols (BGP, OSPF, EIGRP) and multi-homing Internet circuit configuration Proficient knowledge of network security methodologies as a whole, including but not limited to ACLs, Stateful firewalls, VPNs (tunneling, IPsec, SSL, etc.) Fluency with common network admin and monitoring tools such as Rancid, OpenNMS, Nagios, OpManager, Wireshark, Nmap, Nessus, NetFlow, SFlow etc. Administrative scripting skills (Perl, UNIX shell scripting) Advanced knowledge of Cisco IOS, NX-OS, both Cisco Nexus 1K, 2K, 5K 7K, 9K and non-Nexus series switches, Cisco routers and other Cisco networking gear. Working knowledge of data center related technology and collocation environment. Advanced knowledge of MPLS network. Working knowledge of Nexus 9K and VPC Advanced knowledge of Forcepoint configuration Advanced knowledge and experience with Routing Protocols (BGP, RIP, OSPF, etc) Working knowledge of Palo Alto Global Protect VPN Advanced knowledge and hands-on experience on Cisco Network Devices automation Working knowledge of Ansible or Python scripting for Network automation Deep domain expertise in networking, network security and public/private clouds Working knowledge deploying and maintaining wireless networks Expert knowledge of AWS services i.e. EC2, ELB, RDS, S3, Route53, VPC, Cloud formation, SSM and Transit gateway Working knowledge of deploying and maintaining Microsoft Team PBX VOIP deployments (network side, not telecom), SIP Trunking and Five 9 Content Center Working knowledge of deploying and maintaining wireless networks Working knowledge of managing network services and similar support providers in a client/vendor relationship Preferred Skills: Advance hands-on experience in Palo Alto firewall, F5 LTM, GTM and WAF Advance hands-on experience in AWS cloud Extensive hands-on experience in automation with Ansible, CloudFormation or Terraform AWS solution architect certification and CCNP certification required Deep knowledge in Forcepoint Professional Skills: Project Management skills Ability to think and operate as a team player. Extremely strong communication skills, both written and verbal Ability to operate independently or as part of collaborative effort. Demonstrate strong project leadership and ability to develop strong working relationships with customer technical personnel. Strong troubleshooting skills and ability to apply them during business impacting incidents. Ability to mentor others and lead by example. Desired Qualifications and Certifications: Bachelor's degree in a technical field (e.g. Computer Science, IT, or similar disciplines). Equivalent work experience implementing and operating enterprise level data center and/or office networks. Experience operating in a modern cloud environment such as AWS, GCP, or Azure or large-scale data centers is a plus CCNP is the very minimum requirement. CCIE R&S, or CCIE data center certifications and AWS certified solutions architect is a big plus. Must Haves: Advance hands-on experience in Palo Alto firewall, F5 LTM, GTM and WAF Advance hands-on experience in AWS cloud Extensive hands-on experience in automation with Ansible, CloudFormation or Terraform AWS solution architect certification and CCNP certification required Deep knowledge in Forcepoint
11/06/2026
Full time
Job Description Job Description HonorVet Technologies is a Service Disable Veteran-Owned IT staffing firm, ISO 9001, and ISO 27001 certified, working with federal agencies, state governments, and Fortune 500 enterprise clients across the US. What makes us different isn't a tagline; it's the way we work. We don't forward resumes and hope for the best. We take the time to understand where a professional like you are headed and only reach out when we genuinely believe there's a fit worth exploring. I came across your profile, and something stood out. Title: Network Architect Location: Vacaville, CA - 95688 (Local to the Bay Area. Travel will be as needed, depending on projects and/or issues.) Duration: 6 Months Position Type: Onsite Objective & Deliverables: The solution, outcome, output, performance, or result Supplier will produce for State Fund is:(Provide a clear and definitive statement of what the Supplier will produce for State Fund.) This position will act as a primary technical principal and is responsible for delivery of network solutions at an enterprise level. Expertise with network infrastructure technologies such as AWS Cloud, Azure Cloud, LAN, WAN, Wireless, Security, VoIP, Video and Data Center. Ideal candidates will have Data Center experience. Candidates for this position must be able to, from day one, roll up their sleeves and hit the ground running, and bring their experience to the team to make the project deployments much smoother. Core Competencies: Act with integrity Use sound judgement Commitment to quality Demonstrate adaptability Innovate Think strategically Communicate effectively and influence others Work well both independently and as part of a team Deliverables or Tasks: Oversee planning, design, implementation, and operation of network infrastructure projects and participate in the specification of business requirements and implementation plans for technically advanced internetworking solutions. Manage implementation of network infrastructure projects, from both technical and communication aspects. Review network design for network security and other risks during course of projects. Serve as a liaison to vendors and/or third-party providers as assigned. Provide on-site and remote technical assistance to other resources and to customers. Build and document new Infrastructure environments following industry best practices and internal security policies and standards. Provide infrastructure design, implementation planning, deployment support, software strategy, system troubleshooting, performance engineering and optimization, maintenance strategy. Provide technical guidance, knowledge transfer and mentorship to State Fund internal engineering peers as required and lead technical staff responsibilities. Establish networking environment by designing system configuration; directing system installation; defining, documenting, and enforcing system standards. Maximize network performance by monitoring performance; troubleshoot network problems and outages; schedule upgrades; collaborate with other teams on network optimization. Secure network and server systems by establishing and enforcing policies; define and monitor access. Accomplish information systems and organization mission by completing related results as needed. Provide 24 by 7 support. Report network operational status by gathering, prioritizing information. Participate in capacity planning and demand forecasting, software performance analysis and network tuning. Collaborate with cross-functional teams to ensure timely delivery of solutions which drive successful business outcomes. Technical Knowledge and Skills: Expert knowledge of Palo Alto Network Firewall, CloudFlare and, Prisma Cloud and Cisco ASA. Expert knowledge of F5 Load Balancers LTM. GTM, WAF, and AWS ELB. Advanced OSI layer 2 knowledge and practical experience, including various flavors of STP, ARP, QOS, etc. Comprehensive knowledge of OSI layer 3 networks and protocols, including broadcast, multicast, anycast concepts, routing, etc. Expert knowledge of various routing protocols (BGP, OSPF, EIGRP) and multi-homing Internet circuit configuration Proficient knowledge of network security methodologies as a whole, including but not limited to ACLs, Stateful firewalls, VPNs (tunneling, IPsec, SSL, etc.) Fluency with common network admin and monitoring tools such as Rancid, OpenNMS, Nagios, OpManager, Wireshark, Nmap, Nessus, NetFlow, SFlow etc. Administrative scripting skills (Perl, UNIX shell scripting) Advanced knowledge of Cisco IOS, NX-OS, both Cisco Nexus 1K, 2K, 5K 7K, 9K and non-Nexus series switches, Cisco routers and other Cisco networking gear. Working knowledge of data center related technology and collocation environment. Advanced knowledge of MPLS network. Working knowledge of Nexus 9K and VPC Advanced knowledge of Forcepoint configuration Advanced knowledge and experience with Routing Protocols (BGP, RIP, OSPF, etc) Working knowledge of Palo Alto Global Protect VPN Advanced knowledge and hands-on experience on Cisco Network Devices automation Working knowledge of Ansible or Python scripting for Network automation Deep domain expertise in networking, network security and public/private clouds Working knowledge deploying and maintaining wireless networks Expert knowledge of AWS services i.e. EC2, ELB, RDS, S3, Route53, VPC, Cloud formation, SSM and Transit gateway Working knowledge of deploying and maintaining Microsoft Team PBX VOIP deployments (network side, not telecom), SIP Trunking and Five 9 Content Center Working knowledge of deploying and maintaining wireless networks Working knowledge of managing network services and similar support providers in a client/vendor relationship Preferred Skills: Advance hands-on experience in Palo Alto firewall, F5 LTM, GTM and WAF Advance hands-on experience in AWS cloud Extensive hands-on experience in automation with Ansible, CloudFormation or Terraform AWS solution architect certification and CCNP certification required Deep knowledge in Forcepoint Professional Skills: Project Management skills Ability to think and operate as a team player. Extremely strong communication skills, both written and verbal Ability to operate independently or as part of collaborative effort. Demonstrate strong project leadership and ability to develop strong working relationships with customer technical personnel. Strong troubleshooting skills and ability to apply them during business impacting incidents. Ability to mentor others and lead by example. Desired Qualifications and Certifications: Bachelor's degree in a technical field (e.g. Computer Science, IT, or similar disciplines). Equivalent work experience implementing and operating enterprise level data center and/or office networks. Experience operating in a modern cloud environment such as AWS, GCP, or Azure or large-scale data centers is a plus CCNP is the very minimum requirement. CCIE R&S, or CCIE data center certifications and AWS certified solutions architect is a big plus. Must Haves: Advance hands-on experience in Palo Alto firewall, F5 LTM, GTM and WAF Advance hands-on experience in AWS cloud Extensive hands-on experience in automation with Ansible, CloudFormation or Terraform AWS solution architect certification and CCNP certification required Deep knowledge in Forcepoint
Job Description Job Description Job Title: Web Application Firewall Engineer (Akamai/F5) Duration- Fulltime Permanent Location: Charlotte, NC (Onsite From Day 1) Job Description: Must Have Technical/Functional Skills:- Minimum 8 years knowledge and experience with deployment and maintenance of enterprise web application firewall products: Akamai Kona, F5 ASM/AWAF, Salt API Protection. Primary responsibility is support of our security infrastructure and security projects with potential to take on responsibilities for other network security technologies such as Network Access Control, Firewall etc Must have good working knowledge of troubleshooting techniques: performing and analyzing the results of packet captures, CLI commands, familiarity with network protocols Understand application layer TCP/IP Layer 7 security fundamentals Ability to analyze application logs and work with developers to ensure secure coding practices are in use Bachelor's degree in information systems or relevant field of study Excellent communications skills (verbal and written) are required. Ability to interact with personnel at all levels across the organization and to comprehend business imperatives. A strong customer/client focus with ability to manage expectations appropriately and provide superior customer/client experience and build long-term relationships. Willing to have a flexible work schedule and be on call for incident resolution Coding/Scripting experience such as Python or PowerShell to automate tasks is a bonus. Roles & Responsibilities:- Operations and monitoring and day to day troubleshooting for web application firewalls (F5 and Akamai) across the enterprise. Provide expert level troubleshooting for supported technologies. Perform architecture and engineering responsibilities in support of existing technologies and new security projects Perform regular health checks and user activity audits . Author and vigilantly maintain documents related to the design, purpose, operation, and management of security applications.
11/06/2026
Full time
Job Description Job Description Job Title: Web Application Firewall Engineer (Akamai/F5) Duration- Fulltime Permanent Location: Charlotte, NC (Onsite From Day 1) Job Description: Must Have Technical/Functional Skills:- Minimum 8 years knowledge and experience with deployment and maintenance of enterprise web application firewall products: Akamai Kona, F5 ASM/AWAF, Salt API Protection. Primary responsibility is support of our security infrastructure and security projects with potential to take on responsibilities for other network security technologies such as Network Access Control, Firewall etc Must have good working knowledge of troubleshooting techniques: performing and analyzing the results of packet captures, CLI commands, familiarity with network protocols Understand application layer TCP/IP Layer 7 security fundamentals Ability to analyze application logs and work with developers to ensure secure coding practices are in use Bachelor's degree in information systems or relevant field of study Excellent communications skills (verbal and written) are required. Ability to interact with personnel at all levels across the organization and to comprehend business imperatives. A strong customer/client focus with ability to manage expectations appropriately and provide superior customer/client experience and build long-term relationships. Willing to have a flexible work schedule and be on call for incident resolution Coding/Scripting experience such as Python or PowerShell to automate tasks is a bonus. Roles & Responsibilities:- Operations and monitoring and day to day troubleshooting for web application firewalls (F5 and Akamai) across the enterprise. Provide expert level troubleshooting for supported technologies. Perform architecture and engineering responsibilities in support of existing technologies and new security projects Perform regular health checks and user activity audits . Author and vigilantly maintain documents related to the design, purpose, operation, and management of security applications.
Job Description Job Description Responsibilities: Act as Escalation Point of Contact: Serve as the primary Level 3 escalation point for resolving complex network infrastructure, routing, and security configuration issues across both on-premise Data Centers and AWS environments. Maintain Multi-Vendor Security & Perimeter Solutions: Responsible for the configuration, maintenance, and optimization of FortiGate Firewalls (On-Prem & AWS), Cisco ASA Firewalls, and Akamai WAF / Anti-DDoS solutions protecting core endpoints. Manage Core Network & Infrastructure Services: Identify and resolve network issues, bottlenecks, and vulnerabilities across Arista core/access switches, Cisco routers, F5 Load Balancers (LTM/GTM), and Infoblox (DNS/DHCP). Develop & Maintain Architecture Documentation: Develop and maintain comprehensive documentation on network topology, hybrid cloud designs, system security configurations, and operational SOPs. Bridge Infrastructure and DevOps (IaC): Bridge the gap between development and operations by embracing "Infrastructure as Code" (IaC) in close collaboration with DevOps teams to automate network deployments and security workflows. Integrate AI & Network Task Automation: Research and leverage automation/AI tools (e.g., Tines, n8n, Dify) for Security Orchestration or network task automation to improve operational efficiency. Provide Support During Non-Office Hours: Provide non-office hour escalation support whenever needed during major live cutovers or critical network emergencies. Requirements: Relevant education in Computer Science, Information Systems, or a related technical discipline, or equivalent practical experience. Hands-on experience operating and troubleshooting production networks across on-premises data centers and AWS environments. Experience with firewall configuration, routing, switching, network security, and incident response. Working knowledge of relevant networking protocols, including BGP, OSPF, IPsec, HSRP, and QoS. Experience with hybrid-cloud networking, including AWS VPC networking and AWS Direct Connect. Ability to work independently, prioritize incidents effectively, and communicate clearly during operational issues. Preferred qualifications: Experience with one or more of the following security and edge technologies: FortiGate, Cisco ASA, Akamai WAF, or anti-DDoS solutions. Experience with one or more of the following infrastructure technologies: Arista switches, Cisco routers, F5 LTM/GTM, or Infoblox DNS/DHCP. CCNP, CCIE, AWS Certified Advanced Networking, CISSP, or equivalent practical experience. Experience with Infrastructure as Code and network automation. Experience with security-orchestration or workflow-automation tools such as Tines, n8n, or Dify. Experience executing or supporting live data-center-to-AWS migration cutovers. Empowered to think big. Try new opportunities while working with a talented, ambitious and supportive team. Transformational and proactive working environment. Empower employees to find thoughtful and innovative solutions. Growth from within. We help to develop new skill-sets that would impact the shaping of your personal and professional growth. Work Culture. Our colleagues are some of the best in the industry; we are all here to help and support one another. One cohesive team. Engage stakeholders to achieve our ultimate goal - Cryptocurrency in every wallet. Work Flexibility Adoption. Flexi-work hour and hybrid set-up Aspire career alternatives through us - our internal mobility program offers employees a new scope. Are you ready to kickstart your future with us? Benefits Competitive salary Attractive annual leave entitlement including: birthday, work anniversary 401(k) plan with employer match Eligible for company-sponsored group health, dental, vision, and life/disability insurance Work Flexibility Adoption. Flexi-work hour and hybrid set-up Aspire career alternatives through us. Our internal mobility program can offer employees a diverse scope. Our benefits packages vary depending on region requirements, you can learn more from our talent acquisition team. About : Founded in 2016, serves more than 150 million customers and is the world's fastest growing global cryptocurrency platform. Our vision is simple: Cryptocurrency in Every Wallet . Built on a foundation of security, privacy, and compliance, is committed to accelerating the adoption of cryptocurrency through innovation and empowering the next generation of builders, creators, and entrepreneurs to develop a fairer and more equitable digital ecosystem. Learn more at . is an equal opportunities employer and we are committed to creating an environment where opportunities are presented to everyone in a fair and transparent way. values diversity and inclusion, seeking candidates with a variety of backgrounds, perspectives, and skills that complement and strengthen our team. Personal data provided by applicants will be used for recruitment purposes only. Please note that only shortlisted candidates will be contacted. We may use artificial intelligence tools to analyze the content of your Resume/CV against the specific requirements for the position. The purpose is to support our recruitment team in reviewing applications more effectively. These tools assist our recruitment team in their evaluation of your application by providing recommendations, but they do not replace human judgment. Final hiring decisions are ultimately made by humans who consider the insights generated by the tools along with other relevant information. If you would like more details about how your personal information is processed, please contact us.
11/05/2026
Full time
Job Description Job Description Responsibilities: Act as Escalation Point of Contact: Serve as the primary Level 3 escalation point for resolving complex network infrastructure, routing, and security configuration issues across both on-premise Data Centers and AWS environments. Maintain Multi-Vendor Security & Perimeter Solutions: Responsible for the configuration, maintenance, and optimization of FortiGate Firewalls (On-Prem & AWS), Cisco ASA Firewalls, and Akamai WAF / Anti-DDoS solutions protecting core endpoints. Manage Core Network & Infrastructure Services: Identify and resolve network issues, bottlenecks, and vulnerabilities across Arista core/access switches, Cisco routers, F5 Load Balancers (LTM/GTM), and Infoblox (DNS/DHCP). Develop & Maintain Architecture Documentation: Develop and maintain comprehensive documentation on network topology, hybrid cloud designs, system security configurations, and operational SOPs. Bridge Infrastructure and DevOps (IaC): Bridge the gap between development and operations by embracing "Infrastructure as Code" (IaC) in close collaboration with DevOps teams to automate network deployments and security workflows. Integrate AI & Network Task Automation: Research and leverage automation/AI tools (e.g., Tines, n8n, Dify) for Security Orchestration or network task automation to improve operational efficiency. Provide Support During Non-Office Hours: Provide non-office hour escalation support whenever needed during major live cutovers or critical network emergencies. Requirements: Relevant education in Computer Science, Information Systems, or a related technical discipline, or equivalent practical experience. Hands-on experience operating and troubleshooting production networks across on-premises data centers and AWS environments. Experience with firewall configuration, routing, switching, network security, and incident response. Working knowledge of relevant networking protocols, including BGP, OSPF, IPsec, HSRP, and QoS. Experience with hybrid-cloud networking, including AWS VPC networking and AWS Direct Connect. Ability to work independently, prioritize incidents effectively, and communicate clearly during operational issues. Preferred qualifications: Experience with one or more of the following security and edge technologies: FortiGate, Cisco ASA, Akamai WAF, or anti-DDoS solutions. Experience with one or more of the following infrastructure technologies: Arista switches, Cisco routers, F5 LTM/GTM, or Infoblox DNS/DHCP. CCNP, CCIE, AWS Certified Advanced Networking, CISSP, or equivalent practical experience. Experience with Infrastructure as Code and network automation. Experience with security-orchestration or workflow-automation tools such as Tines, n8n, or Dify. Experience executing or supporting live data-center-to-AWS migration cutovers. Empowered to think big. Try new opportunities while working with a talented, ambitious and supportive team. Transformational and proactive working environment. Empower employees to find thoughtful and innovative solutions. Growth from within. We help to develop new skill-sets that would impact the shaping of your personal and professional growth. Work Culture. Our colleagues are some of the best in the industry; we are all here to help and support one another. One cohesive team. Engage stakeholders to achieve our ultimate goal - Cryptocurrency in every wallet. Work Flexibility Adoption. Flexi-work hour and hybrid set-up Aspire career alternatives through us - our internal mobility program offers employees a new scope. Are you ready to kickstart your future with us? Benefits Competitive salary Attractive annual leave entitlement including: birthday, work anniversary 401(k) plan with employer match Eligible for company-sponsored group health, dental, vision, and life/disability insurance Work Flexibility Adoption. Flexi-work hour and hybrid set-up Aspire career alternatives through us. Our internal mobility program can offer employees a diverse scope. Our benefits packages vary depending on region requirements, you can learn more from our talent acquisition team. About : Founded in 2016, serves more than 150 million customers and is the world's fastest growing global cryptocurrency platform. Our vision is simple: Cryptocurrency in Every Wallet . Built on a foundation of security, privacy, and compliance, is committed to accelerating the adoption of cryptocurrency through innovation and empowering the next generation of builders, creators, and entrepreneurs to develop a fairer and more equitable digital ecosystem. Learn more at . is an equal opportunities employer and we are committed to creating an environment where opportunities are presented to everyone in a fair and transparent way. values diversity and inclusion, seeking candidates with a variety of backgrounds, perspectives, and skills that complement and strengthen our team. Personal data provided by applicants will be used for recruitment purposes only. Please note that only shortlisted candidates will be contacted. We may use artificial intelligence tools to analyze the content of your Resume/CV against the specific requirements for the position. The purpose is to support our recruitment team in reviewing applications more effectively. These tools assist our recruitment team in their evaluation of your application by providing recommendations, but they do not replace human judgment. Final hiring decisions are ultimately made by humans who consider the insights generated by the tools along with other relevant information. If you would like more details about how your personal information is processed, please contact us.
Job Description Job Description In Person Only interview. This job is Hybrid Mechanicsville, VA 23116. Our direct client has an opening for an Senior Network Security Engineer (807471) This position is up to 12 months, with the option of extension, 9120 Lockwood Boulevard Mechanicsville, VA 23116. Please send rates and a resume. Corp to Corp or w2 allowed. Enterprise Networking (Required 8 Years) Enterprise Security (Required 5 Years) Azure Networking (Required 3 Years) WAF/NGFW (Required 3 Years) Supporting environments with 300+ Network Devices (Desired 3 Years) Candidate must have experience in the following areas: Incident response, Security investigations, Log analysis, Threat intelligence, Security monitor (Required) Candidate must have experience with the SIEM products (e.g. Splunk, Microsoft Sentinel) (Required) Candidate must have experience in vulnerability management and remediation tracking as well as vulnerability scanning tools (e.g. Nessus, Tenable, Def Required. Candidate must have experience in the following areas: Active Directory, MFA, Conditional Access, Certificates Required. Candidate must have experience with; SEC530, CIS Benchmarks, NIST CSF, NIST 800-53, Zero Trust principles (Required) Candidate must have experience with the following: Cisco ISE, NAC, 802.1X, RADIUS, TACACS Required. Candidate must have experience with the following products: Palo Alto, F5 Distributed Cloud, Azure WAF, Cisco VPN, Global Protect, F5 BIG-IP (Required) Candidate must have experience working in highly regulated environments and leading technical troubleshooting during outages. (Required) Candidate must have ability to communicate technical issues to technical and executive audiences and an ability to mentor junior engineers. (Required) Candidate should have achieved or ability to achieve the following certifications: Azure Security Engineer (AZ-500), Azure Network Engineer (AZ-700).(Required)
10/07/2026
Full time
Job Description Job Description In Person Only interview. This job is Hybrid Mechanicsville, VA 23116. Our direct client has an opening for an Senior Network Security Engineer (807471) This position is up to 12 months, with the option of extension, 9120 Lockwood Boulevard Mechanicsville, VA 23116. Please send rates and a resume. Corp to Corp or w2 allowed. Enterprise Networking (Required 8 Years) Enterprise Security (Required 5 Years) Azure Networking (Required 3 Years) WAF/NGFW (Required 3 Years) Supporting environments with 300+ Network Devices (Desired 3 Years) Candidate must have experience in the following areas: Incident response, Security investigations, Log analysis, Threat intelligence, Security monitor (Required) Candidate must have experience with the SIEM products (e.g. Splunk, Microsoft Sentinel) (Required) Candidate must have experience in vulnerability management and remediation tracking as well as vulnerability scanning tools (e.g. Nessus, Tenable, Def Required. Candidate must have experience in the following areas: Active Directory, MFA, Conditional Access, Certificates Required. Candidate must have experience with; SEC530, CIS Benchmarks, NIST CSF, NIST 800-53, Zero Trust principles (Required) Candidate must have experience with the following: Cisco ISE, NAC, 802.1X, RADIUS, TACACS Required. Candidate must have experience with the following products: Palo Alto, F5 Distributed Cloud, Azure WAF, Cisco VPN, Global Protect, F5 BIG-IP (Required) Candidate must have experience working in highly regulated environments and leading technical troubleshooting during outages. (Required) Candidate must have ability to communicate technical issues to technical and executive audiences and an ability to mentor junior engineers. (Required) Candidate should have achieved or ability to achieve the following certifications: Azure Security Engineer (AZ-500), Azure Network Engineer (AZ-700).(Required)
Job Description Job Description In Person Only interview. This job is Hybrid Mechanicsville, VA 23116 Our direct client has an opening for an Senior Network Security Engineer (807471). This position is up to 12 months, with the option of extension, 9120 Lockwood Boulevard Mechanicsville, VA 23116. Please send rates and a resume. Corp to Corp or w2 allowed. Requirements: Enterprise Networking - Required 8 Years. Enterprise Security - Required 5 Years. Azure Networking - Required 3 Years. WAF/NGFW - Required 3 Years. Supporting environments with 300+ Network Devices - Desired 3 Years. Candidate must have experience in the following areas: Incident response, Security investigations, Log analysis, Threat intelligence, Security monitor - Required. Candidate must have experience with the SIEM products (e.g. Splunk, Microsoft Sentinel) - Required. Candidate must have experience in vulnerability management and remediation tracking as well as vulnerability scanning tools (e.g. Nessus, Tenable, Def - Required. Candidate must have experience in the following areas: Active Directory, MFA, Conditional Access, Certificates - Required. Candidate must have experience with; SEC530, CIS Benchmarks, NIST CSF, NIST 800-53, Zero Trust principles - Required. Candidate must have experience with the following: Cisco ISE, NAC, 802.1X, RADIUS, TACACS - Required. Candidate must have experience with the following products: Palo Alto, F5 Distributed Cloud, Azure WAF, Cisco VPN, Global Protect, F5 BIG-IP - Required. Candidate must have experience working in highly regulated environments and leading technical troubleshooting during outages - Required. Candidate must have ability to communicate technical issues to technical and executive audiences and an ability to mentor junior engineers - Required. Candidate should have achieved or ability to achieve the following certifications: Azure Security Engineer (AZ-500), Azure Network Engineer (AZ-700) - Required.
09/30/2026
Full time
Job Description Job Description In Person Only interview. This job is Hybrid Mechanicsville, VA 23116 Our direct client has an opening for an Senior Network Security Engineer (807471). This position is up to 12 months, with the option of extension, 9120 Lockwood Boulevard Mechanicsville, VA 23116. Please send rates and a resume. Corp to Corp or w2 allowed. Requirements: Enterprise Networking - Required 8 Years. Enterprise Security - Required 5 Years. Azure Networking - Required 3 Years. WAF/NGFW - Required 3 Years. Supporting environments with 300+ Network Devices - Desired 3 Years. Candidate must have experience in the following areas: Incident response, Security investigations, Log analysis, Threat intelligence, Security monitor - Required. Candidate must have experience with the SIEM products (e.g. Splunk, Microsoft Sentinel) - Required. Candidate must have experience in vulnerability management and remediation tracking as well as vulnerability scanning tools (e.g. Nessus, Tenable, Def - Required. Candidate must have experience in the following areas: Active Directory, MFA, Conditional Access, Certificates - Required. Candidate must have experience with; SEC530, CIS Benchmarks, NIST CSF, NIST 800-53, Zero Trust principles - Required. Candidate must have experience with the following: Cisco ISE, NAC, 802.1X, RADIUS, TACACS - Required. Candidate must have experience with the following products: Palo Alto, F5 Distributed Cloud, Azure WAF, Cisco VPN, Global Protect, F5 BIG-IP - Required. Candidate must have experience working in highly regulated environments and leading technical troubleshooting during outages - Required. Candidate must have ability to communicate technical issues to technical and executive audiences and an ability to mentor junior engineers - Required. Candidate should have achieved or ability to achieve the following certifications: Azure Security Engineer (AZ-500), Azure Network Engineer (AZ-700) - Required.
Job Description Job Description In Person Only interview. This job is Hybrid Mechanicsville, VA 23116 Our direct client has an opening for an Senior Network Security Engineer (807471) This position is up to 12 months, with the option of extension, 9120 Lockwood Boulevard Mechanicsville, VA 23116 Please send rates and a resume. Corp to Corp or w2 allowed. Enterprise Networking Required 8 Years Enterprise Security Required 5 Years Azure Networking Required 3 Years WAF/NGFW Required 3 Years Supporting environments with 300+ Network Devices Desired 3 Years Candidate must have experience in the following areas: Incident response, Security investigations, Log analysis, Threat intelligence, Security monitor Required Candidate must have experience with the SIEM products (e.g. Splunk, Microsoft Sentinel) Required Candidate must have experience in vulnerability management and remediation tracking as well as vulnerability scanning tools (e.g. Nessus, Tenable, Def Required Candidate must have experience in the following areas: Active Directory, MFA, Conditional Access, Certificates Required Candidate must have experience with; SEC530, CIS Benchmarks, NIST CSF, NIST 800-53, Zero Trust principles Required Candidate must have experience with the following: Cisco ISE, NAC, 802.1X, RADIUS, TACACS Required Candidate must have experience with the following products: Palo Alto, F5 Distributed Cloud, Azure WAF, Cisco VPN, Global Protect, F5 BIG-IP Required Candidate must have experience working in highly regulated environments and leading technical troubleshooting during outages Required Candidate must have ability to communicate technical issues to technical and executive audiences and an ability to mentor junior engineers. Required Candidate should have achieved or ability to achieve the following certifications: Azure Security Engineer (AZ-500), Azure Network Engineer (AZ-700), Required
09/28/2026
Full time
Job Description Job Description In Person Only interview. This job is Hybrid Mechanicsville, VA 23116 Our direct client has an opening for an Senior Network Security Engineer (807471) This position is up to 12 months, with the option of extension, 9120 Lockwood Boulevard Mechanicsville, VA 23116 Please send rates and a resume. Corp to Corp or w2 allowed. Enterprise Networking Required 8 Years Enterprise Security Required 5 Years Azure Networking Required 3 Years WAF/NGFW Required 3 Years Supporting environments with 300+ Network Devices Desired 3 Years Candidate must have experience in the following areas: Incident response, Security investigations, Log analysis, Threat intelligence, Security monitor Required Candidate must have experience with the SIEM products (e.g. Splunk, Microsoft Sentinel) Required Candidate must have experience in vulnerability management and remediation tracking as well as vulnerability scanning tools (e.g. Nessus, Tenable, Def Required Candidate must have experience in the following areas: Active Directory, MFA, Conditional Access, Certificates Required Candidate must have experience with; SEC530, CIS Benchmarks, NIST CSF, NIST 800-53, Zero Trust principles Required Candidate must have experience with the following: Cisco ISE, NAC, 802.1X, RADIUS, TACACS Required Candidate must have experience with the following products: Palo Alto, F5 Distributed Cloud, Azure WAF, Cisco VPN, Global Protect, F5 BIG-IP Required Candidate must have experience working in highly regulated environments and leading technical troubleshooting during outages Required Candidate must have ability to communicate technical issues to technical and executive audiences and an ability to mentor junior engineers. Required Candidate should have achieved or ability to achieve the following certifications: Azure Security Engineer (AZ-500), Azure Network Engineer (AZ-700), Required
Job Description Job Description About Us: NPO Torino is a specialized Digital Transformation company, recently acquired by the Fondo Italiano d'Investimento (Italian Investment Fund). With our headquarters in Turin and an operational presence in the United States and Brazil, we support companies in their technological evolution journey by combining consulting expertise with advanced IT solutions. We offer services in cloud computing, cybersecurity, AI for business, FinOps, system integration, and IT governance, featuring a customized and results-driven approach. Our mission is to simplify digital complexity and transform it into strategic value for enterprises. Backed by the Fondo Italiano d'Investimento , NPO Torino is accelerating its growth as a partner of choice for companies looking to tackle innovation challenges with vision, pragmatism, and sustainability. Salary range $80K to $92K. Work is partially remote with occasional travel to USA, and in Canada. Role Description: We are looking for a highly qualified Senior Network Security Engineer to join our Network & Security Business Unit. The professional will be responsible for the design, implementation, maintenance, and troubleshooting of complex network security infrastructures. The ideal candidate has deep, vertical expertise with leading security vendors (Fortinet, Palo Alto Networks, Cisco, F5) and a proven track record of managing modern architectures, including SASE solutions. Key Responsibilities: Design and manage security architectures based on Next-Generation Firewalls (NGFW). Implement and manage SASE (Secure Access Service Edge) solutions for distributed environments. Perform configuration , policy management, and advanced troubleshooting on multi-vendor equipment. Manage perimeter and internal security within Enterprise environments. Conduct log analysis, incident management, and system hardening. Provide technical mentoring for junior team members (optional, if required). Fundamental Technical Requirements (Must-Have) The candidate must demonstrate practical, in-depth, hands-on experience with the following technologies: Palo Alto Networks: Advanced configuration and management of NGFW (PA Series). Solid experience with Panorama for centralized management. Proven experience with SASE solutions (Prisma Access) and GlobalProtect. Fortinet: Advanced management of FortiGate (including VDOM, SD-WAN, SSL Inspection). Experience with the wider Fortinet ecosystem (FortiManager, FortiAnalyzer). Cisco Security: Experience with Cisco Security solutions (Firepower/FTD, ASA). Knowledge of Cisco ISE (Identity Services Engine) and TrustSec architectures is a strong plus. F5 Networks: Implementation and management of F5 BIG-IP solutions. Strong configuration and troubleshooting skills on LTM (Local Traffic Manager) and/or APM (Access Policy Manager) / AWAF modules. Soft Skills & Additional Requirements: Minimum of 5+ years of experience in Network Security Engineering roles. Excellent troubleshooting and problem-solving skills under pressure. Preferred Certifications (Nice-to-Have): Palo Alto: PCNSE (Palo Alto Networks Certified Network Security Engineer). Fortinet: NSE 4 / NSE 7. Cisco: CCNP Security or CCIE Security. F5: F5 Certified Administrator (F5-CA) or Technology Specialist (F5-CTS). Introduce Yourself (Screening Questions): "Do you have direct implementation experience with Prisma Access? Can you briefly describe a SASE architecture you have managed?" "Have you ever managed migrations between these vendors (e.g., from Cisco to Fortinet or vice versa)?" What We Offer: Salary commensurate with experience. Structured training and certification plans. Corporate benefits: Welfare Plan, Smart Working.
09/28/2026
Full time
Job Description Job Description About Us: NPO Torino is a specialized Digital Transformation company, recently acquired by the Fondo Italiano d'Investimento (Italian Investment Fund). With our headquarters in Turin and an operational presence in the United States and Brazil, we support companies in their technological evolution journey by combining consulting expertise with advanced IT solutions. We offer services in cloud computing, cybersecurity, AI for business, FinOps, system integration, and IT governance, featuring a customized and results-driven approach. Our mission is to simplify digital complexity and transform it into strategic value for enterprises. Backed by the Fondo Italiano d'Investimento , NPO Torino is accelerating its growth as a partner of choice for companies looking to tackle innovation challenges with vision, pragmatism, and sustainability. Salary range $80K to $92K. Work is partially remote with occasional travel to USA, and in Canada. Role Description: We are looking for a highly qualified Senior Network Security Engineer to join our Network & Security Business Unit. The professional will be responsible for the design, implementation, maintenance, and troubleshooting of complex network security infrastructures. The ideal candidate has deep, vertical expertise with leading security vendors (Fortinet, Palo Alto Networks, Cisco, F5) and a proven track record of managing modern architectures, including SASE solutions. Key Responsibilities: Design and manage security architectures based on Next-Generation Firewalls (NGFW). Implement and manage SASE (Secure Access Service Edge) solutions for distributed environments. Perform configuration , policy management, and advanced troubleshooting on multi-vendor equipment. Manage perimeter and internal security within Enterprise environments. Conduct log analysis, incident management, and system hardening. Provide technical mentoring for junior team members (optional, if required). Fundamental Technical Requirements (Must-Have) The candidate must demonstrate practical, in-depth, hands-on experience with the following technologies: Palo Alto Networks: Advanced configuration and management of NGFW (PA Series). Solid experience with Panorama for centralized management. Proven experience with SASE solutions (Prisma Access) and GlobalProtect. Fortinet: Advanced management of FortiGate (including VDOM, SD-WAN, SSL Inspection). Experience with the wider Fortinet ecosystem (FortiManager, FortiAnalyzer). Cisco Security: Experience with Cisco Security solutions (Firepower/FTD, ASA). Knowledge of Cisco ISE (Identity Services Engine) and TrustSec architectures is a strong plus. F5 Networks: Implementation and management of F5 BIG-IP solutions. Strong configuration and troubleshooting skills on LTM (Local Traffic Manager) and/or APM (Access Policy Manager) / AWAF modules. Soft Skills & Additional Requirements: Minimum of 5+ years of experience in Network Security Engineering roles. Excellent troubleshooting and problem-solving skills under pressure. Preferred Certifications (Nice-to-Have): Palo Alto: PCNSE (Palo Alto Networks Certified Network Security Engineer). Fortinet: NSE 4 / NSE 7. Cisco: CCNP Security or CCIE Security. F5: F5 Certified Administrator (F5-CA) or Technology Specialist (F5-CTS). Introduce Yourself (Screening Questions): "Do you have direct implementation experience with Prisma Access? Can you briefly describe a SASE architecture you have managed?" "Have you ever managed migrations between these vendors (e.g., from Cisco to Fortinet or vice versa)?" What We Offer: Salary commensurate with experience. Structured training and certification plans. Corporate benefits: Welfare Plan, Smart Working.
Job Description Job Description Global Software Firm seeks a Sr Network Security Engineer. We're looking for an engineer with strong Palo Alto, F5, and WAF experience. Experience in threat hunting and pen testing would be a plus. This is a permanent direct hire opportunity. Hybrid schedule with potential for fully remote if the hired candidate doesn't live within a reasonable commute of the data center. Compensation is competitive including: base, bonus, equity, 401k, unlimited pto, tuition reimbursement and much more! Role: The Network Security Engineer will help identify, research and evaluate security solutions and emerging technologies that align with the company's strategic direction. This person should have a strong knowledge of security, including HTTP compliance, application level security, and end-point protections. The engineer will be tasked with deploying new security technologies as well as maintaining current security infrastructure. A strong troubleshooting background is needed, as well as knowledge in APIs. Candidates should also have a strong ability to interface with other parts of the business and be able to coordinate work with multiple teams. Skills: Network routing and switching Firewall concepts and functions WAF and IPS F5: ASM, DNS, APM, AFM. Knowledge of iRules. Proxy and user access VPN access, both site-to-site and end user. GSLB, and server load balancing TLS knowledge and experience Knowledge of HTTP protocol Tier 3 operational support Preferred Experience: Routing: BGP, OSPF and EIGRP Firewall: ASA, PaloAlto and Juniper SRX Router and Switch: Cisco CCNP level knowledge Experience in reverse proxy solutions (Kemp/NGINX/HA Proxy) Experience in user proxy technologies Experience with Cloud Based DDoS and WAF solutions. Experience with NAC implementations (ClearPass, ISE) Familiarity with REST APIs and automation Anticipated base salary in the 150-180k range, + bonus
09/28/2026
Full time
Job Description Job Description Global Software Firm seeks a Sr Network Security Engineer. We're looking for an engineer with strong Palo Alto, F5, and WAF experience. Experience in threat hunting and pen testing would be a plus. This is a permanent direct hire opportunity. Hybrid schedule with potential for fully remote if the hired candidate doesn't live within a reasonable commute of the data center. Compensation is competitive including: base, bonus, equity, 401k, unlimited pto, tuition reimbursement and much more! Role: The Network Security Engineer will help identify, research and evaluate security solutions and emerging technologies that align with the company's strategic direction. This person should have a strong knowledge of security, including HTTP compliance, application level security, and end-point protections. The engineer will be tasked with deploying new security technologies as well as maintaining current security infrastructure. A strong troubleshooting background is needed, as well as knowledge in APIs. Candidates should also have a strong ability to interface with other parts of the business and be able to coordinate work with multiple teams. Skills: Network routing and switching Firewall concepts and functions WAF and IPS F5: ASM, DNS, APM, AFM. Knowledge of iRules. Proxy and user access VPN access, both site-to-site and end user. GSLB, and server load balancing TLS knowledge and experience Knowledge of HTTP protocol Tier 3 operational support Preferred Experience: Routing: BGP, OSPF and EIGRP Firewall: ASA, PaloAlto and Juniper SRX Router and Switch: Cisco CCNP level knowledge Experience in reverse proxy solutions (Kemp/NGINX/HA Proxy) Experience in user proxy technologies Experience with Cloud Based DDoS and WAF solutions. Experience with NAC implementations (ClearPass, ISE) Familiarity with REST APIs and automation Anticipated base salary in the 150-180k range, + bonus