Globalprotect

Globalprotect Cybersecurity Jobs

2 jobs found

1mo ago

Senior Network Security Engineer

TECKpert Tallahassee, FL

Tallahassee, FL

1mo ago Closed

$85+/hr Contract Senior Cloud Platforms Cybersecurity Tools

This position is no longer accepting applications (closed Oct 31, 2026).

Job Description

This Senior Network Security Engineer position supports a state government agency in Tallahassee, Florida as part of the Office of Information Technology integration services team. The role focuses on owning and administering network security infrastructure, leading migrations across firewall platforms, and conducting incident investigations.

Location and Job Type

Location: Tallahassee, FL (onsite)
Schedule: Monday through Friday, onsite
Employment: Contract

Role Summary

The Senior Network Security Engineer will manage firewall, VPN, and broader network security infrastructure. Key activities include migrating Palo Alto and Check Point next generation firewalls, administering access rule environments across platforms (including GlobalProtect VPN), and leading root cause analysis for complex network and security incidents.

Key Responsibilities

Perform security administration to configure and document firewall access rules across Palo Alto, Check Point, and GlobalProtect VPN environments
Lead firewall deployments, rule migrations, and conversion of existing rule-based policies onto new platforms
Administer core network security infrastructure, including next generation firewalls, VPNs, log collectors, and monitoring tools
Configure firewall and security policies for cloud network infrastructure and monitor network traffic
Design and support enterprise network infrastructure such as LAN/WAN, routing and switching, wireless, segmentation, and Internet and cloud connectivity, including data center networks
Develop segmentation strategies that limit lateral movement and assess east-west and north-south traffic flows for security risk
Monitor, analyze, and respond to security events; lead root cause analysis using logging, packet analysis, and monitoring tools
Conduct security risk assessments and provide executive-level status reporting, security metrics, and recommendations
Maintain NIST aligned documentation including network diagrams, IP addressing, VLANs, firewall rules, security configurations, and disaster recovery procedures
Provide technical leadership, establish network engineering standards, and mentor network and security staff

Required Qualifications

Experience: 5 to 10 years of combined IT and information security experience
NIST-aligned tool experience: 3 to 5 years with information security tools based on NIST standards
Hands-on administration of next generation firewalls, preferably Palo Alto Networks or Check Point
Firewall rule migrations and policy conversion between platforms
VPN technologies, including GlobalProtect or similar remote access solutions
Routing and switching, LAN/WAN, network segmentation, and wireless infrastructure
Cloud network security, including firewall and security policy configuration in cloud environments
Security monitoring, incident response, packet analysis, and vulnerability management
Network diagramming with Visio or similar schematic tools
Ability to work onsite Monday through Friday in Tallahassee, FL

Technologies

Palo Alto Networks
Check Point
GlobalProtect
NIST
Visio
LAN/WAN
Routing and switching
VLANs
Cloud network infrastructure

Compensation and Term

Pay: USD 85 per hour (commensurate with experience) or USD 176,800 per year
Term: Full-time contract position with possible extensions

Benefits

Medical, dental, vision and life insurance available after 30 days of hire

Preferred Qualifications (Not Required)

Palo Alto Networks Certified Network Security Engineer (PCNSE)
CISSP, CCNP, or CCIE certification
Check Point certification (CCSA or CCSE)
Azure or AWS network security experience
Experience in state or local government IT environments
Bachelor’s degree in Computer Science, Information Systems, or related field, or equivalent work experience

Application and Screening Process

If selected, you will be contacted for a skills assessment and a short prescreen video call
You will also be contacted for future roles your profile matches

Application Notice

Resume formatting: Ensure your resume is clearly formatted and includes all relevant details. Applications with poorly formatted resumes or missing critical information will be rejected without review.
Verification information: Include a link to your LinkedIn profile, GitHub repository (for technical roles), or other professional profiles to substantiate experience and verify identity.
Fraudulent submissions: Submitting fraudulent information, fake resumes, or any attempt to deceive will result in immediate disqualification.

Recruiting Safety Notice

All official communications from the hiring team will come exclusively from a @teckpert.com email address.
TECKpert will never ask for sensitive personal information or financial details during the initial interview phase.
If you are unsure about the authenticity of outreach, contact the team through the official website.

View full job page →

1mo ago

Senior Network Security Engineer

Govcio LLC Remote 🇺🇸 Remote

Remote

1mo ago Closed

$120k - $140k/yr Full time Senior Engineer Firewall

This position is no longer accepting applications (closed Oct 18, 2026).

Job Description

GovCIO LLC is seeking a Senior Network & Security Engineer to lead enterprise network security infrastructure design, operations, troubleshooting, and continuous improvement.

Responsibilities

Design, deploy, administer, and manage the lifecycle of Palo Alto Networks NGFW environments running PAN-OS.
Own centralized firewall management with Palo Alto Panorama including device groups, templates, template stacks, policy inheritance, upgrades, configuration backups, log monitoring, and firewall onboarding.
Design and govern security policies using zero-trust, least-privilege, application-aware, and risk-based principles.
Configure and troubleshoot security zones, NAT, virtual routers, static and dynamic routing, IPsec VPN, GlobalProtect, decryption, URL Filtering, Threat Prevention, WildFire, DNS Security, and App-ID policies.
Lead enterprise network segmentation and microsegmentation using security zones, VLANs, subinterfaces, virtual routers, routing controls, and application-based security policies.
Develop secure controls for traffic across users, servers, applications, management networks, guest networks, IoT/OT devices, data-center workloads, and cloud resources.
Architect, configure, test, and troubleshoot Palo Alto High Availability deployments including Active/Passive and Active/Active designs.
Resolve complex HA failures across HA1 control links, HA2 session and state synchronization, HA3 packet forwarding, peer communications, configuration synchronization, monitoring failures, split-brain prevention, and failover recovery.
Plan and execute HA failover testing, PAN-OS upgrades, disaster-recovery exercises, and maintenance procedures while minimizing service impact.
Troubleshoot HA infrastructure dependencies including cables, transceivers, switch ports, port channels, VLANs, routing, MTU, latency, packet loss, and redundant-path failures.
Lead configuration support and troubleshooting of Cisco Catalyst and Nexus switching environments.
Design and support VLANs, trunking, STP/RSTP/MST, EtherChannel/port channels, HSRP/VRRP, Layer 2/Layer 3 switching, ACLs, QoS, switch security, routing, and access-control technologies.
Diagnose complex connectivity and performance issues using firewall logs, session inspection, packet captures, CLI diagnostics, switch counters, flow data, and network-monitoring platforms.
Analyze TCP/IP behavior including handshake failures, SYN/SYN-ACK/ACK flows, retransmissions, resets, timeouts, asymmetric routing, MTU/MSS issues, fragmentation, latency, packet loss, and NAT translation problems.
Verify packet flow end-to-end across firewall policy, App-ID, routing, NAT, decryption, threat prevention, VPN, switching, and server/application layers.
Monitor firewall management-plane and dataplane health including CPU, memory, session capacity, packet buffers, throughput, logging, and interface performance.
Integrate NGFWs and Panorama with Strata Logging Service and Cortex XSIAM.
Ensure reliable firewall log forwarding, cloud logging, log ingestion, data normalization, event availability, retention, and telemetry quality.
Use Cortex XSIAM and XQL Search to investigate, correlate, and respond to firewall, endpoint, identity, cloud, and third-party security events.
Partner with SOC teams to tune detections, investigate alerts, develop response procedures, improve visibility, and support incident containment and remediation.
Lead root-cause analyses for major network or security incidents and deliver corrective and preventive action plans.
Develop and maintain network diagrams, firewall-policy documentation, HA designs, runbooks, change plans, architecture standards, and operational procedures.
Mentor junior engineers and provide technical leadership during projects, production incidents, and security reviews.

Requirements

Bachelor’s degree with 8+ years (or commensurate experience).
7+ years progressive experience in network engineering, network security, firewall administration, or security infrastructure operations.
5+ years hands-on Palo Alto Networks firewall experience in a production enterprise environment.
Advanced operational experience with Palo Alto Panorama including multi-device policy management, templates, device groups, upgrades, configuration management, and troubleshooting.
Strong hands-on experience designing, maintaining, and troubleshooting Palo Alto High Availability environments.
Advanced understanding of HA1, HA2, HA3, configuration synchronization, session synchronization, failover behavior, link monitoring, path monitoring, peer health, and recovery processes.
Strong expertise in TCP/IP, IPv4/IPv6, DNS, DHCP, ARP, routing, NAT, VPNs, and packet-level troubleshooting.
Demonstrated ability to investigate TCP handshakes, resets, retransmissions, MTU/MSS issues, asymmetric routing, connection timeouts, and firewall session behavior.
Extensive experience with Cisco Catalyst and/or Nexus switching technologies.
Strong knowledge of enterprise switching and routing including VLANs, trunking, STP/RSTP/MST, EtherChannel, HSRP/VRRP, routing protocols, ACLs, QoS, and switch-security controls.
Proven experience designing or implementing network segmentation and microsegmentation solutions.
Working knowledge of Cortex XSIAM, Strata Logging Service, security-event correlation, alert investigation, XQL Search, and firewall log ingestion.
Ability to lead technical design discussions, independently manage complex workstreams, and communicate risks and recommendations to technical and nontechnical stakeholders.
Strong documentation, change-management, incident-management, and root-cause-analysis skills.
Must be able to attain and maintain AOUSC Public Trust.

Technologies

Palo Alto Networks NGFW, PAN-OS, Palo Alto Panorama
Cortex XSIAM, Strata Logging Service, Cortex XQL Search, XQL Search
Cisco Catalyst, Cisco Nexus
IPsec VPN, GlobalProtect, URL Filtering, Threat Prevention, WildFire, DNS Security, App-ID
High Availability (Active/Passive and Active/Active)
TCP/IP, NAT, STP/RSTP/MST, EtherChannel/port channels, HSRP/VRRP, VLANs

Role Location

Remote within the United States

Compensation

USD 120,000 - 140,000 per year

Preferred Skills and Education

Master’s degree in Cybersecurity, Information Technology, Computer Science, Engineering, or a related field (preferred).
Palo Alto Networks certifications: PCNSA, PCNSE, PCCSE, or equivalent enterprise-level experience.
Cisco certifications: CCNP Enterprise, CCNP Security, CCIE Enterprise Infrastructure, CCIE Security, or comparable expertise.
Experience with Palo Alto Prisma Access, Prisma Cloud, Cortex XDR, Cortex XSOAR, or cloud-delivered security services.
Experience with Cortex XSIAM alert triage, XQL queries, data-source integrations, detection tuning, dashboards, reporting, and response automation.
Experience with Cisco ISE, Cisco ACI, SD-Access, or enterprise network-access-control solutions.
Familiarity with Fortinet Security Fabric, FortiGate, FortiManager, and FortiAnalyzer.
Experience with AWS, Azure, Google Cloud Platform, hybrid-cloud network design, and cloud-security controls.
Familiarity with SIEM, SOAR, EDR/XDR, vulnerability-management, NDR, network-monitoring, and ticketing platforms.
Automation skills using Python, Ansible, Terraform, REST APIs, or related infrastructure-as-code and orchestration tools.
Experience supporting 24x7 environments, participating in an on-call rotation, leading critical incidents, and executing emergency changes.

View full job page →

Globalprotect Cybersecurity Jobs

Senior Network Security Engineer

Senior Network Security Engineer

Get Globalprotect Cybersecurity Jobs alerts