Next Generation Firewalls

Next Generation Firewalls Cybersecurity Jobs

4 jobs found

1mo ago

Senior Network Security Engineer

HCA Healthcare Nashville, TN

Nashville, TN

1mo ago Closed

Full time Senior Computer Network Defense Cyber Security

This position is no longer accepting applications (closed Oct 31, 2026).

Job Description

HCA Healthcare is hiring a Senior Network Security Engineer in Nashville, TN (onsite) to lead and improve enterprise network security controls and risk reduction initiatives.

Responsibilities

Lead implementation, modernization, standardization, and enhancement of network security controls to protect a Fortune 100 enterprise infrastructure, patients, and data from evolving risk and threats.
Perform and oversee reviews and assessments of security policies to identify risk, vulnerabilities, and hardening opportunities; provide remediation recommendations, designs, and solutions.
Implement configuration changes supporting continuous security control maturity and ongoing risk reduction.
Partner with other IT teams to apply risk management practices, optimize technology solutions, monitor infrastructure, and align with current and future needs.
Ensure compliance with regulatory requirements and support long-term security posture and control maturity planning.
Evaluate, recommend, and implement security measures including next-generation firewall capabilities, IDS/IPS, VPN, network segmentation and zero trust, and multifactor access control mechanisms.
Conduct firewall rule reviews, security audits, baseline and best-practice compliance checks, and forensic network investigations to support data transmission adherence.
Support and manage network security solutions aligned to regulatory and industry requirements such as PCI DSS, SOX, NIST, ISO 27000, and HIPAA.
Assess vulnerability findings, penetration test results, security metrics, and audit outcomes to identify hardening needs and provide remediation recommendations.
Recommend and implement complex solutions and enterprise-wide configuration changes to improve continuous security control maturity.
Participate in incident response activities and disaster recovery planning and testing.
Collaborate across IT teams to ensure network security controls integrate with other systems and applications and meet security standards.
Routinely run audits and control tests on deployed technologies; collect and consolidate performance indicators, risks, and trends; provide recommendations and baseline/regulatory compliance ratings.
Manage relationships with vendors and contractors to ensure timely delivery of security services in alignment with security policies.
Contribute to development and documentation of security policies and procedures; support training and awareness efforts.
Provide guidance and training to peers on compliance requirements and best practices.
Research security design enhancements and identify automated solutions or best-of-breed technologies; support vendor integration tests.
Stay current on threats, vulnerabilities, regulations, and industry best practices; implement recommendations to strengthen security posture and control maturity.

Requirements

Bachelor’s degree preferred
5+ years of experience required
Extensive experience with security technologies including next-generation firewalls, intrusion detection/prevention systems, VPN, network segmentation, access control mechanisms, and network security design, management, best practices, and policy standards in large 1000+ firewall environments
Expertise with Checkpoint Firewall and related platforms: CMA, Provider-1, Maestro, VSX/VSLS, CloudGuard
Cisco Network Security products and technologies such as Firepower, ASA, VPN, WSA, ISE, Stealthwatch
Strong understanding of network protocols, topologies, tools, subnetting, and architectures
Experience with network security policy management tools (Algosec, Tufin) and/or conducting risk assessments, firewall rule review, and security audits
Strong knowledge of enterprise security technologies and processes including Zscaler, advanced threat detection tools, Antibot, antimalware, threat emulation, SIEM, IDS/IPS, network packet analysis, Netflow
Experience designing solutions for security standards and frameworks including HIPAA, SOX, PCI DSS, HITECH, ISO/IEC 27001, and the NIST Cybersecurity Framework
Network security management tools/technologies such as Splunk, Trustsec, segmentation, and syslog
Excellent verbal and written communication, interpersonal, analytical, and problem-solving skills
Demonstrated leadership and mentorship skills, including ability to guide and train junior engineers
Ability to work independently and as part of a team
Relevant certifications from ISC2 (CISSP), GIAC (GISP), ISACA (CISA), Cisco Security, or CompTIA are a plus

Technologies

Next-generation firewalls
Intrusion detection/prevention systems (IDS/IPS)
VPN
Network segmentation/zero trust
Multifactor and access control mechanisms
PCI DSS, SOX, NIST, ISO 27000, HIPAA
Checkpoint Firewall, CMA, Provider-1, Maestro, VSX/VSLS, CloudGuard
Cisco security technologies: Firepower, ASA, WSA, ISE, Stealthwatch
Algosec, Tufin
Zscaler
Advanced Threat Detection Tools, Antibot, Antimalware, Threat Emulation
SIEM
Network Packet Analysis, Netflow
HITECH, ISO/IEC 27001, NIST Cybersecurity Framework
Splunk, Trustsec, segmentation, syslog
Incident response and disaster recovery planning and testing

Benefits

Comprehensive benefits for medical, prescription drug, dental, vision, behavioral health, and telemedicine services
Wellbeing support including free counseling and referral services
Time away from work programs: paid time off, paid family leave, long- and short-term disability coverage, and leaves of absence
401(k) Plan with a 100% match on 3% to 9% of pay (based on years of service), Employee Stock Purchase Plan, flexible spending accounts, preferred banking partnerships, retirement readiness tools, rollover support, and financial wellbeing counseling
Education support including tuition assistance, student loan assistance, certification support, dependent scholarships, and a partnership with Galen College of Nursing
Additional benefits for fertility and family building, adoption assistance, life insurance, supplemental health protection plans, auto and home insurance, legal counseling, identity theft protection, and consumer discounts

Physical Demands / Working Conditions

Minimal supervision required based on design, service, and support knowledge/skills
May require periodic after-hours work and light travel at times with little notice
Sitting for extended periods is required

View full job page →

1mo ago

Senior Network Security Engineer

TECKpert Tallahassee, FL

Tallahassee, FL

1mo ago Closed

$85+/hr Contract Senior Cloud Platforms Cybersecurity Tools

This position is no longer accepting applications (closed Oct 31, 2026).

Job Description

This Senior Network Security Engineer position supports a state government agency in Tallahassee, Florida as part of the Office of Information Technology integration services team. The role focuses on owning and administering network security infrastructure, leading migrations across firewall platforms, and conducting incident investigations.

Location and Job Type

Location: Tallahassee, FL (onsite)
Schedule: Monday through Friday, onsite
Employment: Contract

Role Summary

The Senior Network Security Engineer will manage firewall, VPN, and broader network security infrastructure. Key activities include migrating Palo Alto and Check Point next generation firewalls, administering access rule environments across platforms (including GlobalProtect VPN), and leading root cause analysis for complex network and security incidents.

Key Responsibilities

Perform security administration to configure and document firewall access rules across Palo Alto, Check Point, and GlobalProtect VPN environments
Lead firewall deployments, rule migrations, and conversion of existing rule-based policies onto new platforms
Administer core network security infrastructure, including next generation firewalls, VPNs, log collectors, and monitoring tools
Configure firewall and security policies for cloud network infrastructure and monitor network traffic
Design and support enterprise network infrastructure such as LAN/WAN, routing and switching, wireless, segmentation, and Internet and cloud connectivity, including data center networks
Develop segmentation strategies that limit lateral movement and assess east-west and north-south traffic flows for security risk
Monitor, analyze, and respond to security events; lead root cause analysis using logging, packet analysis, and monitoring tools
Conduct security risk assessments and provide executive-level status reporting, security metrics, and recommendations
Maintain NIST aligned documentation including network diagrams, IP addressing, VLANs, firewall rules, security configurations, and disaster recovery procedures
Provide technical leadership, establish network engineering standards, and mentor network and security staff

Required Qualifications

Experience: 5 to 10 years of combined IT and information security experience
NIST-aligned tool experience: 3 to 5 years with information security tools based on NIST standards
Hands-on administration of next generation firewalls, preferably Palo Alto Networks or Check Point
Firewall rule migrations and policy conversion between platforms
VPN technologies, including GlobalProtect or similar remote access solutions
Routing and switching, LAN/WAN, network segmentation, and wireless infrastructure
Cloud network security, including firewall and security policy configuration in cloud environments
Security monitoring, incident response, packet analysis, and vulnerability management
Network diagramming with Visio or similar schematic tools
Ability to work onsite Monday through Friday in Tallahassee, FL

Technologies

Palo Alto Networks
Check Point
GlobalProtect
NIST
Visio
LAN/WAN
Routing and switching
VLANs
Cloud network infrastructure

Compensation and Term

Pay: USD 85 per hour (commensurate with experience) or USD 176,800 per year
Term: Full-time contract position with possible extensions

Benefits

Medical, dental, vision and life insurance available after 30 days of hire

Preferred Qualifications (Not Required)

Palo Alto Networks Certified Network Security Engineer (PCNSE)
CISSP, CCNP, or CCIE certification
Check Point certification (CCSA or CCSE)
Azure or AWS network security experience
Experience in state or local government IT environments
Bachelor’s degree in Computer Science, Information Systems, or related field, or equivalent work experience

Application and Screening Process

If selected, you will be contacted for a skills assessment and a short prescreen video call
You will also be contacted for future roles your profile matches

Application Notice

Resume formatting: Ensure your resume is clearly formatted and includes all relevant details. Applications with poorly formatted resumes or missing critical information will be rejected without review.
Verification information: Include a link to your LinkedIn profile, GitHub repository (for technical roles), or other professional profiles to substantiate experience and verify identity.
Fraudulent submissions: Submitting fraudulent information, fake resumes, or any attempt to deceive will result in immediate disqualification.

Recruiting Safety Notice

All official communications from the hiring team will come exclusively from a @teckpert.com email address.
TECKpert will never ask for sensitive personal information or financial details during the initial interview phase.
If you are unsure about the authenticity of outreach, contact the team through the official website.

View full job page →

1mo ago

Lead Network Security Engineer Firewalls & Policy

Verizon Ashburn, VA

Ashburn, VA

1mo ago Closed

$121k - $231k/yr Full time Cybersecurity Tools Data Security Engineer

This position is no longer accepting applications (closed Oct 27, 2026).

Job Description

Verizon is seeking a Lead Network Security Engineer to help shape network security architecture across the Transport Security Policy & Audit (TSPA) team. In this hybrid role based in Ashburn, VA, you will design and operationalize firewall and access control strategies, partner with Planning and Design teams on security policy architecture, and drive automation and reliability improvements across the Verizon network.

What you’ll do

Translate complex requirements into scalable architectural designs and implementation roadmaps, aligning technical solutions with business objectives.
Design fault-tolerant platform architectures to support long-term growth and system reliability at scale.
Lead access control design for major projects by collaborating with application owners, evaluating policy approaches for efficiency, anticipating design impact, and minimizing deployment risk.
Serve as a cross-functional technical authority in Network Security by setting engineering standards, leading enterprise-wide knowledge sharing, and evolving workflows for better collaboration and accountability.
Oversee deployment strategies and hardware and software lifecycle management, and architect a resilient 24x7 support model supported by automation and observability.
Define and track KPIs and SLOs to measure platform performance and scalability.
Evaluate new platforms and lead internal investigations and RFOs for access control incidents, extracting lessons learned and managing vendor evaluations.

Required qualifications

Bachelor’s degree or four or more years of work experience.
Six or more years of relevant experience, demonstrated through one or a combination of work and/or military experience, or specialized training.
Experience in Network and Security Operations.
Hands-on experience with firewall engineering (F5, Juniper, Palo Alto, Checkpoint, Cisco, Fortinet, etc.), plus networking and routing protocols such as TCP/IP and VPN, and network security fundamentals and best practices.
Strong troubleshooting skills for network connections, resolving complex network access and routing issues, participating in technical discussions, and handling on-call duties.
Proven ability to work independently and collaboratively with minimal supervision, lead complex projects, mentor junior engineers, and maintain high standards of accountability and work ethics.

Technologies you’ll work with

F5, Juniper, Palo Alto, Checkpoint, Cisco, Fortinet
TCP/IP, VPN
CISSP, CCNP, FortiGate

Schedule and location

Location: Ashburn, VA (hybrid)
Work pattern: Defined work location with working from home and a minimum of three days per week in the office, set by your manager. Employees are responsible for maintaining compliance with hybrid work policies.
Schedule: 40 hours per week
Additional note: This role can be located in any US-based Verizon hub location.

Compensation and benefits

Salary: USD 120,500 - 231,000 per year. The salary range varies by location and confirmed job-related skills and experience. This is an incentive-based position with potential to earn more.

Health and wellness benefit options: medical, dental, vision
Short and long term disability
Basic life insurance, supplemental life insurance, and AD&D insurance
Identity theft protection
Pet insurance
Group home & auto insurance
Matched 401(k) savings plan
Up to 8 company paid holidays per year; up to 6 personal days per year
Paid parental leave; adoption assistance
Tuition assistance
Potential to receive compensation such as premium pay (overtime, shift differential, holiday pay, allowances, etc.)
Newly hired employees receive up to 15 days of vacation per year, which grows with additional service

Even better if you have

High level understanding of access control design impact on a large and complex production network
Understanding of the VCP Core, Edge and Far Edge networks, end-to-end
CISSP, CCNP, Palo Alto, Juniper, FortiGate, F5 certifications
Experience training and mentoring junior engineers

View full job page →

1mo ago

IT Network Security Engineer

City of Bryan Bryan, TX

Bryan, TX

1mo ago Closed

Full time Azure Virtual Network Cjis Cyber Security

This position is no longer accepting applications (closed Oct 27, 2026).

Job Description

Design, implement, and operate network security controls to protect organizational infrastructure from cyber threats and unauthorized access.

Responsibilities

Review security management reports and coordinate third-party security functions.
Identify gaps in network design and assess control operating effectiveness; recommend opportunities for continuous improvement.
Stay current on industry trends and evaluate new network security technologies.
Configure and manage secure network architectures across on-premises, cloud, and hybrid environments.
Architect and deploy secure network solutions including Next-Gen Firewalls (NGFW), VPNs, IDS/IPS, and Web Content Filters.
Serve as a technical lead during security breaches or network outages; perform root cause analysis and rapid remediation.
Conduct regular network scans and penetration tests to identify weaknesses; oversee hardening of network devices.
Use SIEM tools to monitor traffic patterns and automate response.
Ensure network infrastructure meets industry standards including NERC CIP, CJIS, PCI, etc.
Understand and apply information security administration, management, governance, and compliance requirements; respond to auditor and regulator comments and mitigate identified risks.
Provide guidance and technical support to IT staff and end users on security-related matters.
Perform related duties as required.

Requirements

Bachelor’s degree (preferably Computer Science, MIS, Information Technology, or similar) plus at least 4 years of related work experience; or Master’s degree plus at least 2 years of related work experience.
Familiarity with cloud security platforms such as Azure, AWS, or Google Cloud.
Preferred: experience supporting public sector, enterprise, or highly regulated environments.
Knowledge of applicable information security administration, management, governance, and compliance principles, practices, laws, rules, and regulations.
Knowledge of cybersecurity standard frameworks, controls, technology, and solutions.
Knowledge of IT systems and processes, network infrastructure, data architecture, data processes, and protocols.
Deep understanding of TCP/IP, BGP, OSPF, DNS, and TLS/SSL.
Hands-on experience with vendors such as Palo Alto Networks, Fortinet, Cisco ASA/Firepower, or Check Point.
Proficiency in securing hybrid environments (e.g., AWS VPCs, Azure VNETs, Google Cloud Armor).
Strong knowledge of IPsec, SSL VPNs, and PKI infrastructure.
Initiative to learn job tasks, broaden knowledge levels, accept new responsibilities, and attend training to advance skills.
Ability to work independently with limited direction and collaborate in a team environment.
Demonstrate collaborative, respectful, and productive work habits.
Identify and mitigate network vulnerabilities.
Prepare clear, concise, and complete reports and written materials.
Anticipate, identify, and resolve issues and problems effectively.
Take ownership of assigned tasks and projects, ensuring accurate and timely completion with minimal supervision.
Maintain absolute confidentiality of sensitive files, data, and materials accessed, discussed, or observed while working with City staff.
Be constantly alert to safe working practices and workplace hazards; take appropriate corrective action during sudden accidents or equipment failure.
Comply with all City and departmental policies and procedures; meet attendance and punctuality guidelines.
Provide management with clear, accurate, and constructive advice and information related to responsibilities and technical decisions.
Establish cooperative working relationships and communicate effectively with the public and other required entities.
Strong verbal and written communication skills.
Strong analytical, problem-solving, organizational, and time-management skills.
Ability to respond effectively under pressure during security incidents.
Attention to detail and commitment to security best practices.
Texas Class C driver’s license with a good driving record (per City evaluation system).
After-hours technical support may be required; must respond and escalate within posted time constraints.
Must be able to access Texas Criminal Justice Information Services (CJIS) System data; cannot possess a felony or Class A misdemeanor conviction, or a Class B misdemeanor conviction within the past 10 years.
Must be able to work in the United States without requiring visa sponsorship, now or in the future.
Additional certifications are a plus: CISSP, CISM, CEH, Security+, CCNP Security, or similar.

Technologies

SIEM tools
Next-Gen Firewalls (NGFW)
VPNs
IDS/IPS systems
Web Content Filters
NERC CIP, CJIS, PCI
TCP/IP, BGP, OSPF, DNS, TLS/SSL
Palo Alto Networks, Fortinet, Cisco ASA/Firepower, Check Point
AWS VPCs, Azure VNETs, Google Cloud Armor
IPsec, SSL VPNs, PKI infrastructure
CISSP, CISM, CEH, Security+, CCNP Security

Benefits

Certificate Pay Program (CPP) through the City of Bryan IT Department.
Up to $450/month in certification pay for qualifying certificates.
Reimbursement available for qualifying passed certificate exams while employed by the City of Bryan IT.

Position Information

Location: Bryan, TX (onsite)
Posting Number: 2026630
Position #: 9000219
FLSA Exempt
Classification Type: Professional
Department: Information Technology
Job Type: Full Time
Work Schedule: Monday-Friday; 8am-5pm
Hiring Pay Rate: Depends on qualifications
Posting Opening Date: 09/25/2026
Posting Closing Date: 10/09/2026

Licenses, Certifications & Special Requirements

Additional certifications such as CISSP, CISM, CEH, Security+, CCNP Security, or similar are a plus.
CPP eligibility: new employees eligible after the first 90 days of employment; must be in good standing.
CPP primary goal: develop technical skills of IT staff to improve or focus on the overall service level of IT support services.

Physical Demands

Sitting, talking, hearing, seeing, standing, walking, driving, bending, reaching, twisting, pushing, pulling.
Using hands and fingers to operate office equipment and machines.
Occasionally lift or move objects up to and including 25 pounds.

Working Conditions

Primarily office setting or a well-lighted, temperature-controlled working environment.

Equipment

Use tools and equipment approved by agencies and bodies with authority over design ranges/limitations; comply with those limits.
Equipment may include multi-line telephone, computers, computer peripherals, printers, fax machines, copiers, scanners, and vehicles.

Posting link: https://www.bryantxjobs.com/postings/5180

Notes: This job description is not exhaustive; City management can alter it at any time without notice. The document does not create an employment contract and reflects an at-will relationship.

View full job page →

Next Generation Firewalls Cybersecurity Jobs

Senior Network Security Engineer

Senior Network Security Engineer

Lead Network Security Engineer Firewalls & Policy

IT Network Security Engineer

Get Next Generation Firewalls Cybersecurity Jobs alerts