10 jobs found

Required Education -Bachelor's Degree Required Experience -10+ years of hands-on experience deploying, migrating, managing, and supporting complex enterprise and data center networks Preferred Certification -CCNP-level knowledge is strongly preferred -Relevant Cisco certifications are a plus Required Skills -Data Center Networking: Expert-level hands-on Cisco Nexus and Catalyst routing/switching; BGP, OSPF, L2/L3 design, resiliency, segmentation -Enterprise WAN & SD-WAN: Design, deployment, migration, routing integration, policy, branch connectivity, path selection, troubleshooting - Prisma SD-WAN strongly preferred -Cisco Data Center Platforms: Nexus, Catalyst, fabric management - NDFC strongly preferred; Catalyst Center a plus -Cloud Connectivity: Azure ExpressRoute and/or AWS Direct Connect (BGP routing, route advertisement, redundancy, cloud team collaboration) -Complex Migrations: Dependency management, testing, change control, rollback planning, post-implementation validation -Hands-On Implementation Leadership: Assess environment, develop approach, execute production work, validate, resolve with minimal direction -Network Security & Adjacent Services (preferred): Enterprise firewalls, DNS/DHCP/IPAM, load balancing - Palo Alto, Infoblox, F5 particularly valuable -Automation Awareness: Terraform, Ansible, Python, GitHub, GitHub Actions, IaC, GitOps (concepts desired; coding preferred, not required) -Observability & Troubleshooting: Packet analysis, telemetry, monitoring tools across hybrid environments -Communication & Collaboration: Strong written/verbal/interpersonal skills across Architecture, Cloud, Security, Operations, vendors, and global teams -Soft Skills: Self-starter, sound engineering judgment, strong ownership, continuous improvement Job Description -Senior hands-on engineer with deep expertise in data center routing/switching, enterprise WAN and SD-WAN, and hybrid cloud connectivity -Primarily focused on engineering execution: personally implementing, migrating, troubleshooting, and supporting production infrastructure -Contributes practical input to network designs and architecture decisions -Delivers and supports infrastructure across global private data centers, colocation facilities, cloud connectivity environments, and enterprise sites -Owns complex tasks with minimal direction; collaborates with Architecture, Cloud, Security, Operations, and application teams -Transitions completed solutions into stable operational support -Data Center Routing & Switching: Implement, migrate, optimize, troubleshoot Nexus/Catalyst environments (L2/L3, BGP, OSPF, redundancy, segmentation, HA) -Data Center Network Management: Deploy/operate fabrics and management platforms (NDFC or comparable) -SD-WAN & Enterprise WAN: Design, deploy, migrate, support SD-WAN/WAN services (Prisma SD-WAN preferred) -Cloud Connectivity: Implement/troubleshoot private connectivity (ExpressRoute / Direct Connect); collaborate with Cloud Engineering -Global Network Deployments: Lead hands-on deployments and complex migrations (planning, testing, cutover, rollback, validation) -Tier 3 Technical Support: Senior escalation point; independently diagnose/resolve complex production issues -Network Services Collaboration: Work across firewalls, DNS/DHCP/IPAM, load balancing (Palo Alto, Infoblox, F5 preferred) -Network Design: Contribute implementation expertise to architecture/design reviews (readiness, supportability, risk, feasibility) -Automation: Work in an automation/IaC environment (Terraform, Ansible, Python, GitHub, GitOps) -Documentation & Knowledge Transfer: Maintain designs, implementation plans, MOPs, test/rollback plans, diagrams, config standards, handoff docs

Required Education -Bachelor's Degree Required Experience -10+ years of hands-on experience deploying, migrating, managing, and supporting complex enterprise and data center networks Preferred Certification -CCNP-level knowledge is strongly preferred -Relevant Cisco certifications are a plus Required Skills -Data Center Networking: Expert-level hands-on Cisco Nexus and Catalyst routing/switching; BGP, OSPF, L2/L3 design, resiliency, segmentation -Enterprise WAN & SD-WAN: Design, deployment, migration, routing integration, policy, branch connectivity, path selection, troubleshooting - Prisma SD-WAN strongly preferred -Cisco Data Center Platforms: Nexus, Catalyst, fabric management - NDFC strongly preferred; Catalyst Center a plus -Cloud Connectivity: Azure ExpressRoute and/or AWS Direct Connect (BGP routing, route advertisement, redundancy, cloud team collaboration) -Complex Migrations: Dependency management, testing, change control, rollback planning, post-implementation validation -Hands-On Implementation Leadership: Assess environment, develop approach, execute production work, validate, resolve with minimal direction -Network Security & Adjacent Services (preferred): Enterprise firewalls, DNS/DHCP/IPAM, load balancing - Palo Alto, Infoblox, F5 particularly valuable -Automation Awareness: Terraform, Ansible, Python, GitHub, GitHub Actions, IaC, GitOps (concepts desired; coding preferred, not required) -Observability & Troubleshooting: Packet analysis, telemetry, monitoring tools across hybrid environments -Communication & Collaboration: Strong written/verbal/interpersonal skills across Architecture, Cloud, Security, Operations, vendors, and global teams -Soft Skills: Self-starter, sound engineering judgment, strong ownership, continuous improvement Job Description -Senior hands-on engineer with deep expertise in data center routing/switching, enterprise WAN and SD-WAN, and hybrid cloud connectivity -Primarily focused on engineering execution: personally implementing, migrating, troubleshooting, and supporting production infrastructure -Contributes practical input to network designs and architecture decisions -Delivers and supports infrastructure across global private data centers, colocation facilities, cloud connectivity environments, and enterprise sites -Owns complex tasks with minimal direction; collaborates with Architecture, Cloud, Security, Operations, and application teams -Transitions completed solutions into stable operational support -Data Center Routing & Switching: Implement, migrate, optimize, troubleshoot Nexus/Catalyst environments (L2/L3, BGP, OSPF, redundancy, segmentation, HA) -Data Center Network Management: Deploy/operate fabrics and management platforms (NDFC or comparable) -SD-WAN & Enterprise WAN: Design, deploy, migrate, support SD-WAN/WAN services (Prisma SD-WAN preferred) -Cloud Connectivity: Implement/troubleshoot private connectivity (ExpressRoute / Direct Connect); collaborate with Cloud Engineering -Global Network Deployments: Lead hands-on deployments and complex migrations (planning, testing, cutover, rollback, validation) -Tier 3 Technical Support: Senior escalation point; independently diagnose/resolve complex production issues -Network Services Collaboration: Work across firewalls, DNS/DHCP/IPAM, load balancing (Palo Alto, Infoblox, F5 preferred) -Network Design: Contribute implementation expertise to architecture/design reviews (readiness, supportability, risk, feasibility) -Automation: Work in an automation/IaC environment (Terraform, Ansible, Python, GitHub, GitOps) -Documentation & Knowledge Transfer: Maintain designs, implementation plans, MOPs, test/rollback plans, diagrams, config standards, handoff docs

Job Description Job Description Benefits: 401(k) 401(k) matching Dental insurance Health insurance Paid time off Profit sharing Tuition assistance Vision insurance SarelaTech is seeking a highly skilled and experienced Senior Network Architect to lead the design, implementation, and optimization of our enterprise application delivery and DDI (DNS, DHCP, and IPAM) infrastructure. The ideal candidate will have deep, hands-on expertise with F5 technologies and Infoblox, ensuring highly available, secure, and scalable application delivery models across the enterprise network in support of critical mission requirements that enhance the reliability and security of Department of War (DoW) networks and systems. Acting as the technical lead for this initiative, you will architect and deploy network solutions utilizing F5 and Infoblox technologies in concert to provide intelligent and scalable global server load balancing (GSLB), secure DNS solutions, and enterprise IP address management across our customer's rapidly evolving hybrid multi-cloud environment. Primary Responsibilities: Application Delivery Architecture - Design, deploy, and manage advanced application delivery models ensuring high availability, optimal performance, and security for mission-critical enterprise applications. F5 Infrastructure Management - Architect and maintain F5 BIG-IP solutions, with a heavy focus on Local Traffic Manager (LTM) and Global Traffic Manager (GTM) for intelligent local and global load balancing. Enterprise DDI Administration - Lead the engineering, deployment, and administration of enterprise-class DDI infrastructure utilizing Infoblox technology (DNS, DHCP, and IP Address Management). Cross-Functional Collaboration - Work closely with application developers, cybersecurity teams, and systems engineers to translate application requirements into resilient, highly available network architectures. Troubleshooting & Optimization - Perform advanced network troubleshooting, traffic analysis, packet capture, and performance tuning for complex application delivery workflows. Documentation & Standards - Develop and maintain comprehensive architectural documentation, standard operating procedures, and technical blueprints. Compliance & Documentation: Ensure all tools comply with DoW STIGs and IL5/IL6/IL7 protocols; develop and maintain architectural documentation and compliance traceability. Required Qualifications: Security Clearance: Active Top Secret / Sensitive Compartmented Information (TS/SCI) required at time of hire. Education: Bachelor's degree in computer science, Information Technology, or a related technical discipline & 12+ years' experience. Certification: Active IAT Level II certification (e.g., Security+ CE, CySA+, GSEC, or SSCP) required. Cisco CCNA Certification (CCNP or CCIE Preferred). Citizenship: United States Citizenship is required. Experience Level: Minimum of 8-10 years of progressive experience in network engineering and architecture, with a dedicated focus on application delivery networks (ADN). F5 Expertise: Deep, demonstrable expertise in F5 BIG-IP platforms, specifically configuring, upgrading, and migrating LTM and GTM/F5 DNS environments. Infoblox / DDI Mastery: Extensive experience designing and operating enterprise-class Infoblox DDI environments, including Grid architecture and seamless IPAM integration. Core Networking: Mastery of OSI model layers 2-7, TCP/IP, routing protocols (e.g., BGP, OSPF), and solid experience with SSL/TLS offloading and certificate management. Leadership: Experience leading technical working groups and directing the efforts of adjacent infrastructure and development teams. Operational Experience: Prior experience working within a DoW/DoD Operations Center (NOC/SOC) or supporting mission-critical systems and networks. Communication: Must be able to present designs, plans, and analyses of alternatives to technical leadership boards for approvals. Desired Qualifications: Automation Skills Experience with network automation and orchestration tools (e.g., Ansible, Python, Terraform, or F5 AS3) is highly desired. Certifications: F5 Certified Technology Specialist (F5-CTS) or Solution Expert (F5-CSE), and Infoblox Core DDI certifications are strongly preferred.

Job Description Network Security Engineer - Senior Cisco Identity Services Engine (ISE) Engineer Location: Washington, DC (Onsite) Type: Full-Time Required Experience 10-15 years of Network/Security Engineering experience. Strong hands-on experience with Cisco ISE 3.x in large enterprise environments. Experience with Cisco ISE upgrades, patching, troubleshooting, administration, and multi-node deployments . Strong knowledge of 802.1X, RADIUS, EAP/EAP-TLS, NAC, AAA, Authentication & Authorization Policies . Experience with Active Directory integration, Security Groups, and Identity Sources . Strong understanding of PKI and Certificate Management , including server certificates, CA chains, certificate renewals, thumbprints, and certificate-based authentication. Experience with Cisco ISE vulnerability remediation, security patching, and production support . Hands-on experience with packet captures, ISE logs, authentication troubleshooting, and root cause analysis . Experience integrating Cisco ISE with: Cisco Catalyst Meraki Firewalls F5 DNS Splunk/SIEM platforms ServiceNow & Change Management Experience creating and managing ServiceNow Change Requests . Ability to write implementation, validation, rollback, and risk assessment plans. Experience executing: ISE upgrades and patching Certificate renewals DNS changes Policy updates Security group changes New integrations Infrastructure migrations Incident & Support Experience Strong troubleshooting experience across: Endpoint Switch/AP ISE Active Directory Authorization Policy Network Access Experience with major incidents, RCA, and Cisco TAC case management. Ability to diagnose authentication, authorization, certificate, and connectivity issues. Infrastructure & Automation Experience with: Cisco ISE migrations and node deployments High Availability (HA) environments Splunk monitoring and alerting ServiceNow integrations Preferred experience with: Python Ansible Terraform REST APIs CI/CD Automation Preferred Qualifications CCNP Enterprise / CCNP Security or equivalent. Experience with Cisco Catalyst, Meraki, Enterprise Wireless, Active Directory, PKI, Splunk, and ServiceNow. Experience in highly regulated enterprise environments.

Job Description Job Description In Person Only interview. This job is Hybrid Mechanicsville, VA 23116. Our direct client has an opening for an Senior Network Security Engineer (807471) This position is up to 12 months, with the option of extension, 9120 Lockwood Boulevard Mechanicsville, VA 23116. Please send rates and a resume. Corp to Corp or w2 allowed. Enterprise Networking (Required 8 Years) Enterprise Security (Required 5 Years) Azure Networking (Required 3 Years) WAF/NGFW (Required 3 Years) Supporting environments with 300+ Network Devices (Desired 3 Years) Candidate must have experience in the following areas: Incident response, Security investigations, Log analysis, Threat intelligence, Security monitor (Required) Candidate must have experience with the SIEM products (e.g. Splunk, Microsoft Sentinel) (Required) Candidate must have experience in vulnerability management and remediation tracking as well as vulnerability scanning tools (e.g. Nessus, Tenable, Def Required. Candidate must have experience in the following areas: Active Directory, MFA, Conditional Access, Certificates Required. Candidate must have experience with; SEC530, CIS Benchmarks, NIST CSF, NIST 800-53, Zero Trust principles (Required) Candidate must have experience with the following: Cisco ISE, NAC, 802.1X, RADIUS, TACACS Required. Candidate must have experience with the following products: Palo Alto, F5 Distributed Cloud, Azure WAF, Cisco VPN, Global Protect, F5 BIG-IP (Required) Candidate must have experience working in highly regulated environments and leading technical troubleshooting during outages. (Required) Candidate must have ability to communicate technical issues to technical and executive audiences and an ability to mentor junior engineers. (Required) Candidate should have achieved or ability to achieve the following certifications: Azure Security Engineer (AZ-500), Azure Network Engineer (AZ-700).(Required)

Job Description Job Description In Person Only interview. This job is Hybrid Mechanicsville, VA 23116 Our direct client has an opening for an Senior Network Security Engineer (807471). This position is up to 12 months, with the option of extension, 9120 Lockwood Boulevard Mechanicsville, VA 23116. Please send rates and a resume. Corp to Corp or w2 allowed. Requirements: Enterprise Networking - Required 8 Years. Enterprise Security - Required 5 Years. Azure Networking - Required 3 Years. WAF/NGFW - Required 3 Years. Supporting environments with 300+ Network Devices - Desired 3 Years. Candidate must have experience in the following areas: Incident response, Security investigations, Log analysis, Threat intelligence, Security monitor - Required. Candidate must have experience with the SIEM products (e.g. Splunk, Microsoft Sentinel) - Required. Candidate must have experience in vulnerability management and remediation tracking as well as vulnerability scanning tools (e.g. Nessus, Tenable, Def - Required. Candidate must have experience in the following areas: Active Directory, MFA, Conditional Access, Certificates - Required. Candidate must have experience with; SEC530, CIS Benchmarks, NIST CSF, NIST 800-53, Zero Trust principles - Required. Candidate must have experience with the following: Cisco ISE, NAC, 802.1X, RADIUS, TACACS - Required. Candidate must have experience with the following products: Palo Alto, F5 Distributed Cloud, Azure WAF, Cisco VPN, Global Protect, F5 BIG-IP - Required. Candidate must have experience working in highly regulated environments and leading technical troubleshooting during outages - Required. Candidate must have ability to communicate technical issues to technical and executive audiences and an ability to mentor junior engineers - Required. Candidate should have achieved or ability to achieve the following certifications: Azure Security Engineer (AZ-500), Azure Network Engineer (AZ-700) - Required.

Job Description Job Description In Person Only interview. This job is Hybrid Mechanicsville, VA 23116 Our direct client has an opening for an Senior Network Security Engineer (807471) This position is up to 12 months, with the option of extension, 9120 Lockwood Boulevard Mechanicsville, VA 23116 Please send rates and a resume. Corp to Corp or w2 allowed. Enterprise Networking Required 8 Years Enterprise Security Required 5 Years Azure Networking Required 3 Years WAF/NGFW Required 3 Years Supporting environments with 300+ Network Devices Desired 3 Years Candidate must have experience in the following areas: Incident response, Security investigations, Log analysis, Threat intelligence, Security monitor Required Candidate must have experience with the SIEM products (e.g. Splunk, Microsoft Sentinel) Required Candidate must have experience in vulnerability management and remediation tracking as well as vulnerability scanning tools (e.g. Nessus, Tenable, Def Required Candidate must have experience in the following areas: Active Directory, MFA, Conditional Access, Certificates Required Candidate must have experience with; SEC530, CIS Benchmarks, NIST CSF, NIST 800-53, Zero Trust principles Required Candidate must have experience with the following: Cisco ISE, NAC, 802.1X, RADIUS, TACACS Required Candidate must have experience with the following products: Palo Alto, F5 Distributed Cloud, Azure WAF, Cisco VPN, Global Protect, F5 BIG-IP Required Candidate must have experience working in highly regulated environments and leading technical troubleshooting during outages Required Candidate must have ability to communicate technical issues to technical and executive audiences and an ability to mentor junior engineers. Required Candidate should have achieved or ability to achieve the following certifications: Azure Security Engineer (AZ-500), Azure Network Engineer (AZ-700), Required

Job Description Job Description About Us: NPO Torino is a specialized Digital Transformation company, recently acquired by the Fondo Italiano d'Investimento (Italian Investment Fund). With our headquarters in Turin and an operational presence in the United States and Brazil, we support companies in their technological evolution journey by combining consulting expertise with advanced IT solutions. We offer services in cloud computing, cybersecurity, AI for business, FinOps, system integration, and IT governance, featuring a customized and results-driven approach. Our mission is to simplify digital complexity and transform it into strategic value for enterprises. Backed by the Fondo Italiano d'Investimento , NPO Torino is accelerating its growth as a partner of choice for companies looking to tackle innovation challenges with vision, pragmatism, and sustainability. Salary range $80K to $92K. Work is partially remote with occasional travel to USA, and in Canada. Role Description: We are looking for a highly qualified Senior Network Security Engineer to join our Network & Security Business Unit. The professional will be responsible for the design, implementation, maintenance, and troubleshooting of complex network security infrastructures. The ideal candidate has deep, vertical expertise with leading security vendors (Fortinet, Palo Alto Networks, Cisco, F5) and a proven track record of managing modern architectures, including SASE solutions. Key Responsibilities: Design and manage security architectures based on Next-Generation Firewalls (NGFW). Implement and manage SASE (Secure Access Service Edge) solutions for distributed environments. Perform configuration , policy management, and advanced troubleshooting on multi-vendor equipment. Manage perimeter and internal security within Enterprise environments. Conduct log analysis, incident management, and system hardening. Provide technical mentoring for junior team members (optional, if required). Fundamental Technical Requirements (Must-Have) The candidate must demonstrate practical, in-depth, hands-on experience with the following technologies: Palo Alto Networks: Advanced configuration and management of NGFW (PA Series). Solid experience with Panorama for centralized management. Proven experience with SASE solutions (Prisma Access) and GlobalProtect. Fortinet: Advanced management of FortiGate (including VDOM, SD-WAN, SSL Inspection). Experience with the wider Fortinet ecosystem (FortiManager, FortiAnalyzer). Cisco Security: Experience with Cisco Security solutions (Firepower/FTD, ASA). Knowledge of Cisco ISE (Identity Services Engine) and TrustSec architectures is a strong plus. F5 Networks: Implementation and management of F5 BIG-IP solutions. Strong configuration and troubleshooting skills on LTM (Local Traffic Manager) and/or APM (Access Policy Manager) / AWAF modules. Soft Skills & Additional Requirements: Minimum of 5+ years of experience in Network Security Engineering roles. Excellent troubleshooting and problem-solving skills under pressure. Preferred Certifications (Nice-to-Have): Palo Alto: PCNSE (Palo Alto Networks Certified Network Security Engineer). Fortinet: NSE 4 / NSE 7. Cisco: CCNP Security or CCIE Security. F5: F5 Certified Administrator (F5-CA) or Technology Specialist (F5-CTS). Introduce Yourself (Screening Questions): "Do you have direct implementation experience with Prisma Access? Can you briefly describe a SASE architecture you have managed?" "Have you ever managed migrations between these vendors (e.g., from Cisco to Fortinet or vice versa)?" What We Offer: Salary commensurate with experience. Structured training and certification plans. Corporate benefits: Welfare Plan, Smart Working.

Job Description Job Description We are seeking a Senior Network Security Engineer for an operations-first role supporting enterprise network security infrastructure across on-premises, remote-access, hybrid-cloud, and cloud-connected environments. This is not primarily an architecture/design role. The priority is a hands-on engineer who can administer, configure, maintain, troubleshoot, patch, upgrade, back up, validate, document, and operate production security platforms with minimal ramp-up. Firewall operations: hands-on Cisco and Palo Alto firewall administration, rule changes, NAT, troubleshooting, policy cleanup, upgrades, backups, logging, and production support. VPN / remote access: support for remote-access VPN, site-to-site VPN, user connectivity issues, certificates, authentication flows, and after-hours troubleshooting. RSA / MFA administration: RSA SecurID or equivalent MFA operations, token support, server administration, user troubleshooting, VPN integration, certificates, patching, backups, logs, and monitoring. Day-to-day operations: ticket resolution, monitoring alerts, health checks, change requests, incident support, maintenance windows, operational reporting, and customer support. Configuration and administration: installing, configuring, maintaining, patching, upgrading, backing up, validating, and troubleshooting assigned security platforms. Production troubleshooting: strong TCP/IP, DNS, routing, firewall logs, packet captures, VPN authentication, certificate, and connectivity troubleshooting. Documentation and process discipline: SOPs, runbooks, diagrams, change records, rollback plans, evidence collection, knowledge transfer, and formal change management. Federal/customer environment maturity: Public Trust eligibility, regulated-environment documentation, customer support, cross-team coordination, and comfort working with government stakeholders. The best candidate can credibly say: "I have operated enterprise Cisco and Palo Alto firewalls in production, handled firewall rule changes and troubleshooting, supported VPN users and site-to-site tunnels, administered or supported RSA/MFA tied to VPN access, followed formal change-management processes, maintained documentation and backups, and can step into daily operational support with minimal ramp-up." Scope and Role Boundaries Primary platforms include Cisco ASA/Firepower/FTD/FMC, Palo Alto NGFW/Panorama/GlobalProtect, remote-access and site-to-site VPN, RSA SecurID Authentication Manager or comparable MFA, monitoring/logging/SIEM integrations, and related network security controls. Coordinate with SOC/NOC, cloud, identity/directory, wireless/LAN, server, endpoint, system owner, application, governance, and vendor teams during changes, incidents, troubleshooting, compliance, and audit support. Cloudflare, Cisco ISE/NAC, secure web/email gateways, packet visibility tools, SD-WAN/SASE/ZTNA, AWS/Azure security, and F5/application-delivery awareness are useful where they intersect with assigned operational support, but the core need is firewall, VPN, RSA/MFA, and production operations. Key Responsibilities Provide daily, weekly, monthly, and annual operational support for assigned security systems, including tickets, alerts, health checks, email/phone support, metrics, status reporting, and operational validation. Administer and troubleshoot enterprise firewalls, including rule bases, NAT, segmentation, high availability, threat prevention, VPN integration, logging, secure baselines, rule reviews, recertification, cleanup, and decommissioning. Install, configure, maintain, patch, upgrade, back up, and validate firewall, VPN, MFA, and related network security systems in production environments. Support remote-access VPN, site-to-site VPN, partner connectivity, cloud connectivity, mobile/remote users, certificates, authentication policies, availability, utilization, and user access issues. Maintain and troubleshoot RSA SecurID Authentication Manager or equivalent MFA services, including servers/appliances, agents, certificates, HA, backups, logs, monitoring, directory integration, VPN authentication, and token lifecycle support. Respond to incidents, vulnerability notices, urgent requests, vendor advisories, PSIRT notices, system alerts, and emergency troubleshooting while minimizing service disruption. Use firewall logs, VPN logs, packet captures, SIEM data, monitoring tools, DNS/routing checks, and standard diagnostics to resolve complex connectivity, authentication, TLS/certificate, and application-flow issues. Create and maintain topology diagrams, equipment inventories, configurations, SOPs, runbooks, implementation plans, rollback plans, build/upgrade procedures, troubleshooting notes, and knowledge articles. Follow approved change, release, incident, problem, and configuration-management processes; prepare change records, peer-review materials, validation evidence, root-cause analysis, metrics, and audit artifacts. Support vulnerability remediation, POA&M tracking, continuous monitoring, compliance reviews, audit evidence collection, and coordination with ISSO, system owner, and security governance teams. Requirements 7+ years of experience in network security engineering, network infrastructure, cybersecurity infrastructure, or a closely related role. 5+ years of hands-on experience administering, maintaining, and troubleshooting enterprise firewall platforms in production environments. Hands-on experience with Cisco security technologies such as Cisco ASA, Firepower, FTD, FMC, AnyConnect/Secure Client, or equivalent Cisco firewall/VPN platforms. Hands-on experience with Palo Alto Networks technologies such as NGFW, Panorama, GlobalProtect, security profiles, App-ID/User-ID, logging, and policy optimization. Experience administering or supporting RSA SecurID Authentication Manager or comparable enterprise MFA/two-factor authentication platforms, including token support, server operations, patching/upgrades, backups, certificates, monitoring, and directory/VPN integration. Strong knowledge of firewall policy, NAT, VPNs, routing, DNS, DHCP, BGP, TLS/certificates, packet captures, log analysis, segmentation, high availability, and common network diagnostic tools. Experience with enterprise monitoring, logging, SIEM, alerting, vulnerability management, incident response, formal change management, and regulated-environment documentation. Ability to create clear technical documentation, support customers and stakeholders, prioritize operational work, communicate clearly, and coordinate across technical teams. Ability to obtain and maintain a Public Trust background investigation. Desired Certifications Relevant certifications are helpful but should not replace demonstrated hands-on experience. Examples include CCNP Security, CCIE Security, PCNSE, PCCSE, CISSP, CCSP, AWS Certified Security - Specialty, AWS Advanced Networking - Specialty, Microsoft Certified: Azure Security Engineer Associate, Microsoft Certified: Azure Network Engineer Associate, CompTIA Security+, CompTIA CySA+, GIAC certifications, or equivalent vendor/cloud certifications. Core Competencies Enterprise firewall engineering and policy lifecycle management VPN, remote access, RSA/MFA, and token lifecycle operations Cloudflare, edge security, secure access, and Zero Trust support Content filtering, secure web/email gateway, and NAC operations Hybrid-cloud network security and secure connectivity Monitoring, logging, SIEM integration, and incident response support Security visibility, packet analysis, and advanced troubleshooting Vulnerability remediation, compliance evidence, and POA&M support Change management, documentation, reporting, and operational metrics Technical leadership, customer support, and cross-team collaboration Benefits 401(k) 401(k) matching Dental insurance Flexible schedule Flexible spending account Health insurance Health savings account Life insurance Paid time off Professional development assistance Referral program Retirement plan Tuition reimbursement Vision insurance

Job Description Job Description Global Software Firm seeks a Sr Network Security Engineer. We're looking for an engineer with strong Palo Alto, F5, and WAF experience. Experience in threat hunting and pen testing would be a plus. This is a permanent direct hire opportunity. Hybrid schedule with potential for fully remote if the hired candidate doesn't live within a reasonable commute of the data center. Compensation is competitive including: base, bonus, equity, 401k, unlimited pto, tuition reimbursement and much more! Role: The Network Security Engineer will help identify, research and evaluate security solutions and emerging technologies that align with the company's strategic direction. This person should have a strong knowledge of security, including HTTP compliance, application level security, and end-point protections. The engineer will be tasked with deploying new security technologies as well as maintaining current security infrastructure. A strong troubleshooting background is needed, as well as knowledge in APIs. Candidates should also have a strong ability to interface with other parts of the business and be able to coordinate work with multiple teams. Skills: Network routing and switching Firewall concepts and functions WAF and IPS F5: ASM, DNS, APM, AFM. Knowledge of iRules. Proxy and user access VPN access, both site-to-site and end user. GSLB, and server load balancing TLS knowledge and experience Knowledge of HTTP protocol Tier 3 operational support Preferred Experience: Routing: BGP, OSPF and EIGRP Firewall: ASA, PaloAlto and Juniper SRX Router and Switch: Cisco CCNP level knowledge Experience in reverse proxy solutions (Kemp/NGINX/HA Proxy) Experience in user proxy technologies Experience with Cloud Based DDoS and WAF solutions. Experience with NAC implementations (ClearPass, ISE) Familiarity with REST APIs and automation Anticipated base salary in the 150-180k range, + bonus