Zebra Technologies
Lincolnshire, Illinois
Job Description Overview: At Zebra, we are a community of innovators who come together to create new ways of working. United by curiosity and a culture of caring, we develop smart solutions that anticipate our customer's and partner's needs and solve their challenges. Being part of Zebra Nation means you are seen, heard, valued, and respected. Drawing from our unique perspectives, we collaborate to deliver on our purpose. Here you are part of a team pushing boundaries today to redefine the work of tomorrow for organizations, their employees, and those they serve. You'll have opportunities to learn and lead in a forward-thinking environment, defining your path to a fulfilling career while channeling your skills toward causes you care about-locally and globally. Come make an impact every day at Zebra. What We're Looking For: The Cloud AI Engineer, Lead plays a critical role in driving innovation across Zebra's IT Platform Engineering, Cloud Security, and Artificial Intelligence initiatives. Acting as a hands-on technical architect and strategic trailblazer, you will partner with key stakeholders to identify opportunities, translate ideas into actionable solutions, and deliver value through rapid proofs of concept. This role focuses heavily on designing, building, and scaling our next-generation cloud-native AI platforms, AI-powered log intelligence (AIOps), and semantic developer tooling. Location: This is a hybrid position requiring a minimum of three days per week on-site at either our Lincolnshire, IL, or Holtsville, NY office. Essential Duties/Responsabilities: Identify and evaluate emerging innovation opportunities across Platform Engineering and Cloud Infrastructure functions, matching business needs with cutting-edge technology solutions. Conduct comprehensive business and systems analyses, translating complex technical findings into clear user stories, system requirements, and actionable solution concepts. Coordinate and execute Proof of Concepts (PoCs) and hands-on delivery activities to rapidly validate and advance cloud and platform innovation initiatives. Research, analyze, and report on disruptive technologies-such as Generative AI, Machine Learning (ML), Robotic Process Automation (RPA), and Virtual Agents-providing strategic recommendations for corporate adoption. Act as the primary IT Cloud Innovation Liaison, driving cross-functional collaboration and alignment with other innovation and product teams across Zebra. Plan, coordinate, and facilitate structured ideation workshops, fostering a culture of collaborative brainstorming and innovative problem-solving. Serve as an active Innovation Evangelist within IT and the broader enterprise, promoting modern engineering methodologies and pushing the boundaries of cloud-native possibilities. Track, analyze, and report key performance indicators (KPIs), ensuring leadership has complete visibility into the progress, and business outcomes of all innovation initiatives. Establish and maintain a repeatable operating model for cloud-native AI/ML deployment, ensuring all initiatives consistently address pipeline architecture, performance metrics, and compliance guidelines across GCP and Azure. Lead and mentor a high-performing team of cloud and AI platform engineers, guiding their professional evolution toward predictive log analytics, automation (AIOps), and robust cloud data readiness. Translate complex AI governance, cloud security guardrails, and regulatory requirements into practical technical specifications, partnering directly with systems engineers to integrate PII masking and RBAC into automated CI/CD pipelines. Manage roadmap alignment within assigned technology portfolios. Minimum Qualifications: Bachelor's degree in Computer Science, Electronic Engineering, Computer Engineering, or related field. 5+ years experience working on an operations style team (NOC, SOC, MOC, etc.) and troubleshooting networking, service desk, operations center and/or supporting cloud based Infrastructure. Hands-on Google Gemini Enterprise Expertise: Demonstrated experience working with Google Gemini Enterprise, with a proven ability to build and deploy custom agents using the Agent Development Kit (ADK). Multi-Cloud & GenAI Platform Proficiency: Deep familiarity with leading cloud platforms and generative AI solution providers, including Google Cloud Platform (GCP), Azure, OpenAI, and Anthropic. Experience working in a global, heterogeneous, cloud and on-prem environment. Practical knowledge of, or deep technical curiosity to develop, hands-on solutions involving Large Language Models (LLMs), Retrieval-Augmented Generation (RAG) architectures, and agentic AI patterns (including Model Context Protocol MCP , tool calling, and orchestration frameworks). Expertise in scripting or programming languages (e.g., Python) for automation or testing is a plus; software development background is welcomed. Proven track record of deploying containerized AI solutions using Kubernetes (GKE/AKS), Docker, and robust CI/CD pipelines, backed by verifiable metrics such as high availability, latency reduction, and infrastructure cost optimization. Comprehensive understanding of enterprise cloud security, application/API security, and fine-grained identity systems, with experience integrating PII masking and complex Role-Based Access Control (RBAC) frameworks. Strong software development background with advanced scripting capabilities in Python (or similar languages) to drive automation, infrastructure provisioning (IaC), and automated testing. Active professional-level cloud certifications are highly preferred, such as Google Cloud Professional Cloud Architect, Google Cloud Professional Machine Learning Engineer or AI Engineer Preferred Qualifications Some exposure to AI/ML systems, application security, or API security is a plus. Travel up to 10% Equal Opportunity Employer: Zebra is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability and protected veteran status, or any other basis prohibited by law. If you are an individual with a disability and need assistance in applying for a position, please contact us at . Know Your Rights: - 10/EEOC_KnowYourRights_screen_reader_10_20.pdf Conozca sus Derechos: -_EEOC_KnowYourRightsSp_10_20.pdf We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation at . Pay Range: $96,800.00 - $145,200.00 Annual Incentive Compensation: In addition to base pay, Zebra offers this role the opportunity to earn a performance-based annual cash incentive, at a target equal to 10% of base pay, in accordance with the terms of the applicable incentive plan. Zebra Total Rewards: Zebra Total Rewards includes more than just pay and is structured to meet the needs of our changing global business and evolving talent. We are committed to providing our employees with a benefits program that is comprehensive and competitive - including healthcare, wellness, inclusion networks, and continued learning and development offerings. We offer community service days, in addition to the traditional insurances, compensation, parental leave, employee assistance program and paid time off offerings depending on the country where you work. Salary offered will vary depending on your location, job-related skills, knowledge, and experience. Additionally, all Zebra roles are eligible for cash incentive programs. For example, sales roles have additional opportunity to earn substantial variable compensation tied to quota achievement. In most other roles, the Zebra annual cash incentive program links Company and individual performance together. Some roles may also be eligible for long-term incentive equity awards. Benefits: We understand the importance of work-life balance and wellbeing, which is why we offer flexibility for our teams including: hybrid work, adaptable hours, Summer Flex Fridays, Focus Fridays, and an annual companywide well-being day to promote revitalization and success. Job Posting Statement: To protect candidates from falling victim to online fraudulent activity involving fake job postings and employment offers, please be aware our recruiters will always connect with you email accounts. Applications are only accepted through our applicant tracking system and only accept personal identifying information through that system. Our Talent Acquisition team will not ask for you to provide personal identifying information via e-mail or outside of the system. If you are a victim of identity theft contact your local police department. AI Technology Statement: Zebra Technologies leverages AI technology to evaluate job applications using objective, job-relevant criteria. This approach enhances efficiency and promotes fairness in the hiring process. However . click apply for full job details
Job Description Overview: At Zebra, we are a community of innovators who come together to create new ways of working. United by curiosity and a culture of caring, we develop smart solutions that anticipate our customer's and partner's needs and solve their challenges. Being part of Zebra Nation means you are seen, heard, valued, and respected. Drawing from our unique perspectives, we collaborate to deliver on our purpose. Here you are part of a team pushing boundaries today to redefine the work of tomorrow for organizations, their employees, and those they serve. You'll have opportunities to learn and lead in a forward-thinking environment, defining your path to a fulfilling career while channeling your skills toward causes you care about-locally and globally. Come make an impact every day at Zebra. What We're Looking For: The Cloud AI Engineer, Lead plays a critical role in driving innovation across Zebra's IT Platform Engineering, Cloud Security, and Artificial Intelligence initiatives. Acting as a hands-on technical architect and strategic trailblazer, you will partner with key stakeholders to identify opportunities, translate ideas into actionable solutions, and deliver value through rapid proofs of concept. This role focuses heavily on designing, building, and scaling our next-generation cloud-native AI platforms, AI-powered log intelligence (AIOps), and semantic developer tooling. Location: This is a hybrid position requiring a minimum of three days per week on-site at either our Lincolnshire, IL, or Holtsville, NY office. Essential Duties/Responsabilities: Identify and evaluate emerging innovation opportunities across Platform Engineering and Cloud Infrastructure functions, matching business needs with cutting-edge technology solutions. Conduct comprehensive business and systems analyses, translating complex technical findings into clear user stories, system requirements, and actionable solution concepts. Coordinate and execute Proof of Concepts (PoCs) and hands-on delivery activities to rapidly validate and advance cloud and platform innovation initiatives. Research, analyze, and report on disruptive technologies-such as Generative AI, Machine Learning (ML), Robotic Process Automation (RPA), and Virtual Agents-providing strategic recommendations for corporate adoption. Act as the primary IT Cloud Innovation Liaison, driving cross-functional collaboration and alignment with other innovation and product teams across Zebra. Plan, coordinate, and facilitate structured ideation workshops, fostering a culture of collaborative brainstorming and innovative problem-solving. Serve as an active Innovation Evangelist within IT and the broader enterprise, promoting modern engineering methodologies and pushing the boundaries of cloud-native possibilities. Track, analyze, and report key performance indicators (KPIs), ensuring leadership has complete visibility into the progress, and business outcomes of all innovation initiatives. Establish and maintain a repeatable operating model for cloud-native AI/ML deployment, ensuring all initiatives consistently address pipeline architecture, performance metrics, and compliance guidelines across GCP and Azure. Lead and mentor a high-performing team of cloud and AI platform engineers, guiding their professional evolution toward predictive log analytics, automation (AIOps), and robust cloud data readiness. Translate complex AI governance, cloud security guardrails, and regulatory requirements into practical technical specifications, partnering directly with systems engineers to integrate PII masking and RBAC into automated CI/CD pipelines. Manage roadmap alignment within assigned technology portfolios. Minimum Qualifications: Bachelor's degree in Computer Science, Electronic Engineering, Computer Engineering, or related field. 5+ years experience working on an operations style team (NOC, SOC, MOC, etc.) and troubleshooting networking, service desk, operations center and/or supporting cloud based Infrastructure. Hands-on Google Gemini Enterprise Expertise: Demonstrated experience working with Google Gemini Enterprise, with a proven ability to build and deploy custom agents using the Agent Development Kit (ADK). Multi-Cloud & GenAI Platform Proficiency: Deep familiarity with leading cloud platforms and generative AI solution providers, including Google Cloud Platform (GCP), Azure, OpenAI, and Anthropic. Experience working in a global, heterogeneous, cloud and on-prem environment. Practical knowledge of, or deep technical curiosity to develop, hands-on solutions involving Large Language Models (LLMs), Retrieval-Augmented Generation (RAG) architectures, and agentic AI patterns (including Model Context Protocol MCP , tool calling, and orchestration frameworks). Expertise in scripting or programming languages (e.g., Python) for automation or testing is a plus; software development background is welcomed. Proven track record of deploying containerized AI solutions using Kubernetes (GKE/AKS), Docker, and robust CI/CD pipelines, backed by verifiable metrics such as high availability, latency reduction, and infrastructure cost optimization. Comprehensive understanding of enterprise cloud security, application/API security, and fine-grained identity systems, with experience integrating PII masking and complex Role-Based Access Control (RBAC) frameworks. Strong software development background with advanced scripting capabilities in Python (or similar languages) to drive automation, infrastructure provisioning (IaC), and automated testing. Active professional-level cloud certifications are highly preferred, such as Google Cloud Professional Cloud Architect, Google Cloud Professional Machine Learning Engineer or AI Engineer Preferred Qualifications Some exposure to AI/ML systems, application security, or API security is a plus. Travel up to 10% Equal Opportunity Employer: Zebra is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability and protected veteran status, or any other basis prohibited by law. If you are an individual with a disability and need assistance in applying for a position, please contact us at . Know Your Rights: - 10/EEOC_KnowYourRights_screen_reader_10_20.pdf Conozca sus Derechos: -_EEOC_KnowYourRightsSp_10_20.pdf We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation at . Pay Range: $96,800.00 - $145,200.00 Annual Incentive Compensation: In addition to base pay, Zebra offers this role the opportunity to earn a performance-based annual cash incentive, at a target equal to 10% of base pay, in accordance with the terms of the applicable incentive plan. Zebra Total Rewards: Zebra Total Rewards includes more than just pay and is structured to meet the needs of our changing global business and evolving talent. We are committed to providing our employees with a benefits program that is comprehensive and competitive - including healthcare, wellness, inclusion networks, and continued learning and development offerings. We offer community service days, in addition to the traditional insurances, compensation, parental leave, employee assistance program and paid time off offerings depending on the country where you work. Salary offered will vary depending on your location, job-related skills, knowledge, and experience. Additionally, all Zebra roles are eligible for cash incentive programs. For example, sales roles have additional opportunity to earn substantial variable compensation tied to quota achievement. In most other roles, the Zebra annual cash incentive program links Company and individual performance together. Some roles may also be eligible for long-term incentive equity awards. Benefits: We understand the importance of work-life balance and wellbeing, which is why we offer flexibility for our teams including: hybrid work, adaptable hours, Summer Flex Fridays, Focus Fridays, and an annual companywide well-being day to promote revitalization and success. Job Posting Statement: To protect candidates from falling victim to online fraudulent activity involving fake job postings and employment offers, please be aware our recruiters will always connect with you email accounts. Applications are only accepted through our applicant tracking system and only accept personal identifying information through that system. Our Talent Acquisition team will not ask for you to provide personal identifying information via e-mail or outside of the system. If you are a victim of identity theft contact your local police department. AI Technology Statement: Zebra Technologies leverages AI technology to evaluate job applications using objective, job-relevant criteria. This approach enhances efficiency and promotes fairness in the hiring process. However . click apply for full job details
Ignite IT
Job Description Job Description We are seeking a Senior Network Security Engineer for an operations-first role supporting enterprise network security infrastructure across on-premises, remote-access, hybrid-cloud, and cloud-connected environments. This is not primarily an architecture/design role. The priority is a hands-on engineer who can administer, configure, maintain, troubleshoot, patch, upgrade, back up, validate, document, and operate production security platforms with minimal ramp-up. Firewall operations: hands-on Cisco and Palo Alto firewall administration, rule changes, NAT, troubleshooting, policy cleanup, upgrades, backups, logging, and production support. VPN / remote access: support for remote-access VPN, site-to-site VPN, user connectivity issues, certificates, authentication flows, and after-hours troubleshooting. RSA / MFA administration: RSA SecurID or equivalent MFA operations, token support, server administration, user troubleshooting, VPN integration, certificates, patching, backups, logs, and monitoring. Day-to-day operations: ticket resolution, monitoring alerts, health checks, change requests, incident support, maintenance windows, operational reporting, and customer support. Configuration and administration: installing, configuring, maintaining, patching, upgrading, backing up, validating, and troubleshooting assigned security platforms. Production troubleshooting: strong TCP/IP, DNS, routing, firewall logs, packet captures, VPN authentication, certificate, and connectivity troubleshooting. Documentation and process discipline: SOPs, runbooks, diagrams, change records, rollback plans, evidence collection, knowledge transfer, and formal change management. Federal/customer environment maturity: Public Trust eligibility, regulated-environment documentation, customer support, cross-team coordination, and comfort working with government stakeholders. The best candidate can credibly say: "I have operated enterprise Cisco and Palo Alto firewalls in production, handled firewall rule changes and troubleshooting, supported VPN users and site-to-site tunnels, administered or supported RSA/MFA tied to VPN access, followed formal change-management processes, maintained documentation and backups, and can step into daily operational support with minimal ramp-up." Scope and Role Boundaries Primary platforms include Cisco ASA/Firepower/FTD/FMC, Palo Alto NGFW/Panorama/GlobalProtect, remote-access and site-to-site VPN, RSA SecurID Authentication Manager or comparable MFA, monitoring/logging/SIEM integrations, and related network security controls. Coordinate with SOC/NOC, cloud, identity/directory, wireless/LAN, server, endpoint, system owner, application, governance, and vendor teams during changes, incidents, troubleshooting, compliance, and audit support. Cloudflare, Cisco ISE/NAC, secure web/email gateways, packet visibility tools, SD-WAN/SASE/ZTNA, AWS/Azure security, and F5/application-delivery awareness are useful where they intersect with assigned operational support, but the core need is firewall, VPN, RSA/MFA, and production operations. Key Responsibilities Provide daily, weekly, monthly, and annual operational support for assigned security systems, including tickets, alerts, health checks, email/phone support, metrics, status reporting, and operational validation. Administer and troubleshoot enterprise firewalls, including rule bases, NAT, segmentation, high availability, threat prevention, VPN integration, logging, secure baselines, rule reviews, recertification, cleanup, and decommissioning. Install, configure, maintain, patch, upgrade, back up, and validate firewall, VPN, MFA, and related network security systems in production environments. Support remote-access VPN, site-to-site VPN, partner connectivity, cloud connectivity, mobile/remote users, certificates, authentication policies, availability, utilization, and user access issues. Maintain and troubleshoot RSA SecurID Authentication Manager or equivalent MFA services, including servers/appliances, agents, certificates, HA, backups, logs, monitoring, directory integration, VPN authentication, and token lifecycle support. Respond to incidents, vulnerability notices, urgent requests, vendor advisories, PSIRT notices, system alerts, and emergency troubleshooting while minimizing service disruption. Use firewall logs, VPN logs, packet captures, SIEM data, monitoring tools, DNS/routing checks, and standard diagnostics to resolve complex connectivity, authentication, TLS/certificate, and application-flow issues. Create and maintain topology diagrams, equipment inventories, configurations, SOPs, runbooks, implementation plans, rollback plans, build/upgrade procedures, troubleshooting notes, and knowledge articles. Follow approved change, release, incident, problem, and configuration-management processes; prepare change records, peer-review materials, validation evidence, root-cause analysis, metrics, and audit artifacts. Support vulnerability remediation, POA&M tracking, continuous monitoring, compliance reviews, audit evidence collection, and coordination with ISSO, system owner, and security governance teams. Requirements 7+ years of experience in network security engineering, network infrastructure, cybersecurity infrastructure, or a closely related role. 5+ years of hands-on experience administering, maintaining, and troubleshooting enterprise firewall platforms in production environments. Hands-on experience with Cisco security technologies such as Cisco ASA, Firepower, FTD, FMC, AnyConnect/Secure Client, or equivalent Cisco firewall/VPN platforms. Hands-on experience with Palo Alto Networks technologies such as NGFW, Panorama, GlobalProtect, security profiles, App-ID/User-ID, logging, and policy optimization. Experience administering or supporting RSA SecurID Authentication Manager or comparable enterprise MFA/two-factor authentication platforms, including token support, server operations, patching/upgrades, backups, certificates, monitoring, and directory/VPN integration. Strong knowledge of firewall policy, NAT, VPNs, routing, DNS, DHCP, BGP, TLS/certificates, packet captures, log analysis, segmentation, high availability, and common network diagnostic tools. Experience with enterprise monitoring, logging, SIEM, alerting, vulnerability management, incident response, formal change management, and regulated-environment documentation. Ability to create clear technical documentation, support customers and stakeholders, prioritize operational work, communicate clearly, and coordinate across technical teams. Ability to obtain and maintain a Public Trust background investigation. Desired Certifications Relevant certifications are helpful but should not replace demonstrated hands-on experience. Examples include CCNP Security, CCIE Security, PCNSE, PCCSE, CISSP, CCSP, AWS Certified Security - Specialty, AWS Advanced Networking - Specialty, Microsoft Certified: Azure Security Engineer Associate, Microsoft Certified: Azure Network Engineer Associate, CompTIA Security+, CompTIA CySA+, GIAC certifications, or equivalent vendor/cloud certifications. Core Competencies Enterprise firewall engineering and policy lifecycle management VPN, remote access, RSA/MFA, and token lifecycle operations Cloudflare, edge security, secure access, and Zero Trust support Content filtering, secure web/email gateway, and NAC operations Hybrid-cloud network security and secure connectivity Monitoring, logging, SIEM integration, and incident response support Security visibility, packet analysis, and advanced troubleshooting Vulnerability remediation, compliance evidence, and POA&M support Change management, documentation, reporting, and operational metrics Technical leadership, customer support, and cross-team collaboration Benefits 401(k) 401(k) matching Dental insurance Flexible schedule Flexible spending account Health insurance Health savings account Life insurance Paid time off Professional development assistance Referral program Retirement plan Tuition reimbursement Vision insurance
Job Description Job Description We are seeking a Senior Network Security Engineer for an operations-first role supporting enterprise network security infrastructure across on-premises, remote-access, hybrid-cloud, and cloud-connected environments. This is not primarily an architecture/design role. The priority is a hands-on engineer who can administer, configure, maintain, troubleshoot, patch, upgrade, back up, validate, document, and operate production security platforms with minimal ramp-up. Firewall operations: hands-on Cisco and Palo Alto firewall administration, rule changes, NAT, troubleshooting, policy cleanup, upgrades, backups, logging, and production support. VPN / remote access: support for remote-access VPN, site-to-site VPN, user connectivity issues, certificates, authentication flows, and after-hours troubleshooting. RSA / MFA administration: RSA SecurID or equivalent MFA operations, token support, server administration, user troubleshooting, VPN integration, certificates, patching, backups, logs, and monitoring. Day-to-day operations: ticket resolution, monitoring alerts, health checks, change requests, incident support, maintenance windows, operational reporting, and customer support. Configuration and administration: installing, configuring, maintaining, patching, upgrading, backing up, validating, and troubleshooting assigned security platforms. Production troubleshooting: strong TCP/IP, DNS, routing, firewall logs, packet captures, VPN authentication, certificate, and connectivity troubleshooting. Documentation and process discipline: SOPs, runbooks, diagrams, change records, rollback plans, evidence collection, knowledge transfer, and formal change management. Federal/customer environment maturity: Public Trust eligibility, regulated-environment documentation, customer support, cross-team coordination, and comfort working with government stakeholders. The best candidate can credibly say: "I have operated enterprise Cisco and Palo Alto firewalls in production, handled firewall rule changes and troubleshooting, supported VPN users and site-to-site tunnels, administered or supported RSA/MFA tied to VPN access, followed formal change-management processes, maintained documentation and backups, and can step into daily operational support with minimal ramp-up." Scope and Role Boundaries Primary platforms include Cisco ASA/Firepower/FTD/FMC, Palo Alto NGFW/Panorama/GlobalProtect, remote-access and site-to-site VPN, RSA SecurID Authentication Manager or comparable MFA, monitoring/logging/SIEM integrations, and related network security controls. Coordinate with SOC/NOC, cloud, identity/directory, wireless/LAN, server, endpoint, system owner, application, governance, and vendor teams during changes, incidents, troubleshooting, compliance, and audit support. Cloudflare, Cisco ISE/NAC, secure web/email gateways, packet visibility tools, SD-WAN/SASE/ZTNA, AWS/Azure security, and F5/application-delivery awareness are useful where they intersect with assigned operational support, but the core need is firewall, VPN, RSA/MFA, and production operations. Key Responsibilities Provide daily, weekly, monthly, and annual operational support for assigned security systems, including tickets, alerts, health checks, email/phone support, metrics, status reporting, and operational validation. Administer and troubleshoot enterprise firewalls, including rule bases, NAT, segmentation, high availability, threat prevention, VPN integration, logging, secure baselines, rule reviews, recertification, cleanup, and decommissioning. Install, configure, maintain, patch, upgrade, back up, and validate firewall, VPN, MFA, and related network security systems in production environments. Support remote-access VPN, site-to-site VPN, partner connectivity, cloud connectivity, mobile/remote users, certificates, authentication policies, availability, utilization, and user access issues. Maintain and troubleshoot RSA SecurID Authentication Manager or equivalent MFA services, including servers/appliances, agents, certificates, HA, backups, logs, monitoring, directory integration, VPN authentication, and token lifecycle support. Respond to incidents, vulnerability notices, urgent requests, vendor advisories, PSIRT notices, system alerts, and emergency troubleshooting while minimizing service disruption. Use firewall logs, VPN logs, packet captures, SIEM data, monitoring tools, DNS/routing checks, and standard diagnostics to resolve complex connectivity, authentication, TLS/certificate, and application-flow issues. Create and maintain topology diagrams, equipment inventories, configurations, SOPs, runbooks, implementation plans, rollback plans, build/upgrade procedures, troubleshooting notes, and knowledge articles. Follow approved change, release, incident, problem, and configuration-management processes; prepare change records, peer-review materials, validation evidence, root-cause analysis, metrics, and audit artifacts. Support vulnerability remediation, POA&M tracking, continuous monitoring, compliance reviews, audit evidence collection, and coordination with ISSO, system owner, and security governance teams. Requirements 7+ years of experience in network security engineering, network infrastructure, cybersecurity infrastructure, or a closely related role. 5+ years of hands-on experience administering, maintaining, and troubleshooting enterprise firewall platforms in production environments. Hands-on experience with Cisco security technologies such as Cisco ASA, Firepower, FTD, FMC, AnyConnect/Secure Client, or equivalent Cisco firewall/VPN platforms. Hands-on experience with Palo Alto Networks technologies such as NGFW, Panorama, GlobalProtect, security profiles, App-ID/User-ID, logging, and policy optimization. Experience administering or supporting RSA SecurID Authentication Manager or comparable enterprise MFA/two-factor authentication platforms, including token support, server operations, patching/upgrades, backups, certificates, monitoring, and directory/VPN integration. Strong knowledge of firewall policy, NAT, VPNs, routing, DNS, DHCP, BGP, TLS/certificates, packet captures, log analysis, segmentation, high availability, and common network diagnostic tools. Experience with enterprise monitoring, logging, SIEM, alerting, vulnerability management, incident response, formal change management, and regulated-environment documentation. Ability to create clear technical documentation, support customers and stakeholders, prioritize operational work, communicate clearly, and coordinate across technical teams. Ability to obtain and maintain a Public Trust background investigation. Desired Certifications Relevant certifications are helpful but should not replace demonstrated hands-on experience. Examples include CCNP Security, CCIE Security, PCNSE, PCCSE, CISSP, CCSP, AWS Certified Security - Specialty, AWS Advanced Networking - Specialty, Microsoft Certified: Azure Security Engineer Associate, Microsoft Certified: Azure Network Engineer Associate, CompTIA Security+, CompTIA CySA+, GIAC certifications, or equivalent vendor/cloud certifications. Core Competencies Enterprise firewall engineering and policy lifecycle management VPN, remote access, RSA/MFA, and token lifecycle operations Cloudflare, edge security, secure access, and Zero Trust support Content filtering, secure web/email gateway, and NAC operations Hybrid-cloud network security and secure connectivity Monitoring, logging, SIEM integration, and incident response support Security visibility, packet analysis, and advanced troubleshooting Vulnerability remediation, compliance evidence, and POA&M support Change management, documentation, reporting, and operational metrics Technical leadership, customer support, and cross-team collaboration Benefits 401(k) 401(k) matching Dental insurance Flexible schedule Flexible spending account Health insurance Health savings account Life insurance Paid time off Professional development assistance Referral program Retirement plan Tuition reimbursement Vision insurance