Network Security Engineer

Position Overview

We are seeking a Network Security Engineer to support enterprise network security operations, with a focus on firewall administration, monitoring, and incident response.

This role will work extensively with Palo Alto and Cisco security technologies, supporting secure connectivity across enterprise environments including data centers, cloud platforms, and manufacturing sites.

Key Responsibilities

Firewall & Network Security Administration

• Configure, manage, and maintain Palo Alto NGFW including policies, NAT rules, IDS/IPS, App ID, User ID, and threat prevention profiles
• Administer and troubleshoot Cisco ASA, Firepower, and FTD devices including VPNs and ACLs
• Perform firewall rule reviews, cleanup, and optimization

Security Operations & Monitoring

• Monitor network traffic, security alerts, and firewall logs using tools such as Panorama, Cisco FMC, and SIEM platforms
• Investigate and remediate network-based security incidents
• Perform event correlation and escalate issues based on established procedures

Network Infrastructure Support

• Support secure connectivity across data centers, cloud environments, and remote access solutions
• Troubleshoot networking issues related to routing, switching, VLANs, VPN tunnels, and connectivity
• Assist in deploying secure architectures for network builds and migrations

Compliance & Documentation

• Maintain firewall configurations, network diagrams, and operational documentation
• Support compliance efforts aligned with NIST, ISO 27001, CIS, and PCI-DSS frameworks
• Contribute to security hardening standards and best practices

Operational Support

• Participate in on-call rotation and support production environments as needed
• Support after-hours and weekend activities for system changes and incident resolution

Required Qualifications

• 5–9 years of experience in network security operations or firewall engineering
• Hands-on experience with Palo Alto NGFW (Panorama, GlobalProtect)
• Experience with Cisco ASA, Firepower, FMC, and VPN technologies
• Strong understanding of networking fundamentals (TCP/IP, routing, switching, VLANs, NAT, BGP, OSPF)
• Experience with log analysis, packet capture tools (e.g., Wireshark), and troubleshooting
• Knowledge of threat prevention technologies (IDS/IPS, URL filtering, DNS security)
• Strong analytical, troubleshooting, and communication skills

Preferred Qualifications

• Certifications such as PCNSE, PCNSA, CCNP Security, CCNA Security, Security+, CySA+, CEH, or GSEC
• Experience with SIEM tools (Splunk, Sentinel, QRadar)
• Experience with cloud security (AWS, Azure, GCP)
• Scripting experience (Python, PowerShell, Ansible)
• 3+ years of Big 4 consulting experience
• Stable work history within large enterprise organizations