Palo Alto Networks

Palo Alto Networks Cybersecurity Jobs

35 jobs found

Today

Senior Network Security Engineer

TECKpert Tallahassee, FL

Tallahassee, FL

Today

$85+/hr Contract Senior Cloud Platforms Cybersecurity Tools

Apply Now

Job Description

This Senior Network Security Engineer position supports a state government agency in Tallahassee, Florida as part of the Office of Information Technology integration services team. The role focuses on owning and administering network security infrastructure, leading migrations across firewall platforms, and conducting incident investigations.

Location and Job Type

Location: Tallahassee, FL (onsite)
Schedule: Monday through Friday, onsite
Employment: Contract

Role Summary

The Senior Network Security Engineer will manage firewall, VPN, and broader network security infrastructure. Key activities include migrating Palo Alto and Check Point next generation firewalls, administering access rule environments across platforms (including GlobalProtect VPN), and leading root cause analysis for complex network and security incidents.

Key Responsibilities

Perform security administration to configure and document firewall access rules across Palo Alto, Check Point, and GlobalProtect VPN environments
Lead firewall deployments, rule migrations, and conversion of existing rule-based policies onto new platforms
Administer core network security infrastructure, including next generation firewalls, VPNs, log collectors, and monitoring tools
Configure firewall and security policies for cloud network infrastructure and monitor network traffic
Design and support enterprise network infrastructure such as LAN/WAN, routing and switching, wireless, segmentation, and Internet and cloud connectivity, including data center networks
Develop segmentation strategies that limit lateral movement and assess east-west and north-south traffic flows for security risk
Monitor, analyze, and respond to security events; lead root cause analysis using logging, packet analysis, and monitoring tools
Conduct security risk assessments and provide executive-level status reporting, security metrics, and recommendations
Maintain NIST aligned documentation including network diagrams, IP addressing, VLANs, firewall rules, security configurations, and disaster recovery procedures
Provide technical leadership, establish network engineering standards, and mentor network and security staff

Required Qualifications

Experience: 5 to 10 years of combined IT and information security experience
NIST-aligned tool experience: 3 to 5 years with information security tools based on NIST standards
Hands-on administration of next generation firewalls, preferably Palo Alto Networks or Check Point
Firewall rule migrations and policy conversion between platforms
VPN technologies, including GlobalProtect or similar remote access solutions
Routing and switching, LAN/WAN, network segmentation, and wireless infrastructure
Cloud network security, including firewall and security policy configuration in cloud environments
Security monitoring, incident response, packet analysis, and vulnerability management
Network diagramming with Visio or similar schematic tools
Ability to work onsite Monday through Friday in Tallahassee, FL

Technologies

Palo Alto Networks
Check Point
GlobalProtect
NIST
Visio
LAN/WAN
Routing and switching
VLANs
Cloud network infrastructure

Compensation and Term

Pay: USD 85 per hour (commensurate with experience) or USD 176,800 per year
Term: Full-time contract position with possible extensions

Benefits

Medical, dental, vision and life insurance available after 30 days of hire

Preferred Qualifications (Not Required)

Palo Alto Networks Certified Network Security Engineer (PCNSE)
CISSP, CCNP, or CCIE certification
Check Point certification (CCSA or CCSE)
Azure or AWS network security experience
Experience in state or local government IT environments
Bachelor’s degree in Computer Science, Information Systems, or related field, or equivalent work experience

Application and Screening Process

If selected, you will be contacted for a skills assessment and a short prescreen video call
You will also be contacted for future roles your profile matches

Application Notice

Resume formatting: Ensure your resume is clearly formatted and includes all relevant details. Applications with poorly formatted resumes or missing critical information will be rejected without review.
Verification information: Include a link to your LinkedIn profile, GitHub repository (for technical roles), or other professional profiles to substantiate experience and verify identity.
Fraudulent submissions: Submitting fraudulent information, fake resumes, or any attempt to deceive will result in immediate disqualification.

Recruiting Safety Notice

All official communications from the hiring team will come exclusively from a @teckpert.com email address.
TECKpert will never ask for sensitive personal information or financial details during the initial interview phase.
If you are unsure about the authenticity of outreach, contact the team through the official website.

View full job page →

1d ago

Security Engineer- On-site

Gulf Capital Bank Houston, TX

Houston, TX

1d ago

$100k - $130k/yr Full time Cybersecurity Tools Data Security Engineer

Apply Now

Job Description

Gulf Capital Bank is hiring a Security Engineer (On-site) in Houston, TX to help administer and continuously improve the Bank’s technical security controls. In this role, you’ll provide primary ownership of Palo Alto Networks firewall infrastructure and related network security technologies, while also supporting key Microsoft security tools and security monitoring, incident response, and audit activities. Health coverage, paid time off, and retirement benefits are included.

What you’ll do

Administer, maintain, and support Palo Alto Networks firewalls across all Bank environments.
Manage firewall policies, security rule requests, NAT configurations, and object administration.
Configure, maintain, and troubleshoot site-to-site VPN and remote-access VPN connectivity.
Monitor firewall health, performance, capacity, and availability.
Perform log analysis and traffic review to identify malicious activity, policy violations, and operational concerns.
Implement security policy changes in accordance with change management procedures.
Maintain network segmentation controls that support secure banking operations.
Configure and support Palo Alto security services including Threat Prevention and GlobalProtect.
Complete firewall software upgrades, content updates, and security patching activities.
Support network architecture reviews with security design recommendations.
Maintain firewall documentation, network diagrams, and configuration standards.
Participate in disaster recovery and business continuity testing related to network security infrastructure.
Provide secondary support for Microsoft security solutions, including Microsoft Defender and Microsoft Sentinel.
Monitor and investigate alerts generated through Microsoft Defender and Microsoft Sentinel.
Support Microsoft Entra ID security controls and identity protection initiatives, including Conditional Access policy administration and review.
Support Microsoft Secure Score recommendations and assist with security enhancements across Microsoft cloud services.
Assist with Microsoft 365 email security and anti-phishing technologies.
Participate in vulnerability management and remediation activities, and support security assessments and penetration testing.
Support incident response activities including analysis, containment, eradication, and recovery; collect and preserve evidence and document outcomes, findings, and corrective actions.
Assist with threat hunting and security monitoring; escalate significant security events according to established procedures.
Assist with phishing investigations and security awareness support.
Support regulatory examinations and internal/external audits, including remediation of audit findings and security recommendations.
Follow Bank security policies, standards, and procedures; support compliance with applicable regulatory and security requirements, and assist with vendor security reviews and third-party risk assessments.

What you bring

Bachelor’s degree in Information Technology, Cybersecurity, Computer Science, or related field, or equivalent combination of education and experience.
3 to 5 years of information technology or cybersecurity experience.
2+ years of hands-on firewall administration experience.
Experience troubleshooting enterprise networking and security technologies.
Working knowledge of Windows Server and Active Directory environments.
Strong understanding of TCP/IP networking concepts.
Knowledge of Palo Alto Networks firewall administration, VPN technologies and troubleshooting, and network routing and switching fundamentals.
Security logging and event analysis, network segmentation and security policy management, and vulnerability management concepts.
Windows administration fundamentals, Microsoft 365 administration fundamentals, and security incident investigation and response.

Preferred qualifications

Palo Alto PCNSA and/or Palo Alto PCNSE certification.
CompTIA Security+ certification.
Experience with Microsoft Defender, Microsoft Sentinel, Microsoft Entra ID, and Microsoft Azure.
Experience within a financial services or regulated environment.
PowerShell scripting experience.

Tools you’ll work with

Palo Alto Networks firewalls, Palo Alto Threat Prevention, GlobalProtect
Site-to-site VPN, remote-access VPN
Microsoft Defender, Microsoft Sentinel, Microsoft Entra ID
Conditional Access, Microsoft Secure Score, Microsoft 365 (including email security and anti-phishing technologies)
Windows Server, Active Directory, TCP/IP, PowerShell

Benefits

Health insurance
Dental insurance
Vision insurance
Paid time off
401(k)
401(k) matching

Physical requirements

Ability to sit for extended periods while working on computer systems.
Ability to occasionally lift and move equipment weighing up to 25 pounds.
Ability to travel occasionally between Bank locations and vendor sites as needed.

View full job page →

7d ago

IT Statewide Infosec Associate Analyst 1, 2

Nunez Community College Baton Rouge, LA

Baton Rouge, LA

7d ago

Full time Crowdstrike Cybersecurity Tools Incident Response

Apply Now

Job Description

At Nunez Community College, the Office of Technology Services (OTS) Information Security Team needs an associate analyst to help monitor and respond to cyber threats across the enterprise. In this onsite role in Baton Rouge, you will support centralized security alert triage, help coordinate incident response activities, and provide technical support across computer systems, applications, and networks.

What you’ll do

Monitor, triage, and investigate real-time security alerts generated through Palo Alto Networks Cortex XSIAM and CrowdStrike Falcon Complete.
Validate high-priority threat notifications, evaluate context, and perform initial containment actions aligned to enterprise incident response playbooks.
Coordinate remediation workflows with the CrowdStrike Falcon Complete managed service team and relevant OTS technical verticals.
Document investigation findings, root cause analyses, and response actions in the centralized security incident log.
Assist in tuning detection logic, correlation rules, and automated response playbooks within Cortex XSIAM to reduce false positives.
Monitor and manage the ServiceNow ticketing queue for proxy-related issues, access requests, and categorized URL reclassification tickets.
Troubleshoot and resolve web filtering issues, SSL/TLS decryption exceptions, and SWG (secure web gateway) connection anomalies for enterprise users.
Analyze user traffic patterns against acceptable use policies to identify policy violations, unauthorized application usage, or potential evasion attempts.
Maintain operational documentation and standard operating procedures (SOPs) for enterprise proxy management and ticket workflows.
Investigate suspicious internal and perimeter network activity, protocol anomalies, and anomalous host behavior using network telemetry and log sources.
Conduct proactive threat hunting using threat intelligence indicators (IoCs) and behavioral analytics to identify potential adversary activity (TTPs).
Correlate disparate log sources (firewall, DNS, VPN, authentication, and endpoint logs) to reconstruct attack timelines and assess scope of impact.
Escalate confirmed intrusions or advanced persistent threats (APTs) to senior incident response personnel and OTS leadership.
Monitor identity provider signals and behavioral analytics for indicators of compromised credentials, impossible travel, and unauthorized account modifications.
Coordinate with the OTS Service Desk and identity teams to initiate account locks, password resets, session revocations, and MFA step-up authentication for compromised users.
Verify post-compromise cleanup actions, ensuring persistent access mechanisms (including malicious inbox forwarding rules and unauthorized OAuth applications) are identified and removed.
Advise agency points of contact and help desk personnel on best practices for user remediation and credential hygiene.
Perform other tasks, special projects, analysis, studies, and plans as directed by OTS Leadership.

Required experience and education

Two years of experience in information technology; OR
Six years of full-time work experience in any field; OR
An associate’s degree in information technology; OR
A bachelor’s degree.

A certification in an approved area may be substituted for the education and/or experience requirements at the time of hire or promotion, provided the appointment is made from a Certificate of Eligibles.

Additional minimum qualification rules: Every 30 semester hours earned from an accredited college or university will be credited as one year of experience toward the six years of full-time work experience requirement in any field. The maximum substitution allowed is 120 semester hours, substituting for a maximum of four years of experience. The note about approved certifications and a Certificate of Eligibles also applies for hiring or promotion.

Technologies you’ll work with

Palo Alto Networks Cortex XSIAM
CrowdStrike Falcon Complete
ServiceNow
SSL/TLS
Secure web gateway (SWG)
IoCs
TTPs
OAuth

Role details

Appointment type: Filled by new hire or by promotion of a current permanent status classified employee.
Career progression: Participates in a career progression group and may be filled from this recruitment as an IT Infosec Associate Analyst 1 or 2.

How to apply

No Civil Service test score is required for consideration.
Click the Apply link above and complete the electronic application.

Background checks and eligibility

Prior to a new hire, a background check including criminal record history will be conducted.
Prospective employees may be subject to pre-employment drug testing.
New hires will be subject to employment eligibility verification via the federal government’s E-Verify system.

The official job specifications for this role, as defined by the State Civil Service, can be found via the job specification link provided with the posting.

View full job page →

8d ago

Principal Cybersecurity - Network Security

AT&T Charlotte, NC

Charlotte, NC

8d ago

$155k - $261k/yr Full time Cybersecurity Tools Information Security InfoSec

Apply Now

Job Description

Design and govern enterprise network security for Palo Alto Networks platforms across AT&T’s organization.

Responsibilities

Develop and maintain enterprise security architectures for Palo Alto Networks technologies.
Define target-state architectures, technology standards, security patterns, and design principles.
Lead evaluation, proof-of-concept testing, and adoption of emerging security technologies.
Drive modernization initiatives focused on platform consolidation, automation, and operational efficiency.
Establish architectural guardrails, governance standards, and technology roadmaps.
Design resilient High Availability (HA) solutions and scalable policy frameworks.
Create deployment standards and best practices for large-scale firewall environments.
Guide migration strategies from legacy security technologies to Palo Alto platforms.
Define baseline security controls and enforcement models.
Support PCI, NIST, ISO 27001, SOC, and other regulatory requirements.
Perform threat modeling and security risk assessments.
Establish metrics and KPIs to demonstrate security effectiveness and risk reduction.
Serve as a mentor and assist others with complex technical issues.

Requirements

Bachelor’s degree (BS/BA) desired in Computer Science or Cybersecurity.
7+ years of related experience.
Certification required in some areas.

Tools and Technologies

Palo Alto Networks security platforms
Next-generation firewalls
Advanced Threat Prevention
DNS Security
WildFire
SSL Decryption
URL Filtering
Panorama
Strata Cloud Manager
Security analytics platforms

Job Contribution

Expert-level role applying broad business knowledge and strategic insight to solve complex problems and drive organizational outcomes.
Leads critical, high-impact projects and designs/implements innovative business strategies.
Works with minimal oversight; consults senior leadership and influences executive decisions frequently.
Supervisor: No

Career Step Differentiator

Manages and leads very complex cybersecurity work and is an expert in a specific cybersecurity area.
Creates plans impacting large organizations and multiple very complex applications and systems.

Compensation and Schedule

Salary range: USD 155,400 - 261,100 per year
Weekly hours: 40
Time type: Regular

Location

Onsite: Charlotte, NC
Also listed: Charlotte, North Carolina; Dallas, Texas

Benefits

Medical/Dental/Vision coverage
401(k) plan
Tuition reimbursement program
Paid Time Off and Holidays: based on date of hire, at least 23 days of vacation each year and 9 company-designated holidays
Paid Parental Leave
Paid Caregiver Leave
Additional sick leave beyond what state and local law require may be available but is unprotected
Adoption Reimbursement
Disability Benefits (short term and long term)
Life and Accidental Death Insurance
Supplemental benefit programs: critical illness/accident hospital indemnity/group legal
Employee Assistance Programs (EAP)
Extensive employee wellness programs
Employee discounts up to 50% off on eligible AT&T mobility plans and accessories; AT&T internet (and fiber where available); and AT&T phone

View full job page →

8d ago

AVP, Network Security Engineer

LPL Financial Corp Fort Mill, SC

Fort Mill, SC

8d ago

$104k - $173k/yr Full time Aws Cloud Security Cybersecurity Tools Ddos Defense

Apply Now

Job Description

LPL Financial Corp is seeking an AVP Tech Network Engineer, Security to design, engineer, and operate network security capabilities that help deliver scalable, resilient, and secure networking solutions. This hybrid role based in Fort Mill, SC combines hands-on security engineering with automation and cloud-focused implementation, supporting critical client-facing infrastructure while you contribute to continuous improvement.

Why this role

Collaborative, fast-paced culture focused on integrity, continuous improvement, and client success
Hands-on security ownership spanning firewall, DDoS, NAC/ISE, VPN remote access, and AWS cloud security
Automation and orchestration impact using scripting languages and APIs to improve security operations
Strong benefits including 401(k) matching, health benefits, employee stock options, and paid time off

Responsibilities

Design and engineer network security solutions using Palo Alto, Cisco FTD, and Fortinet firewalls
Build automation using Python or PERL, leveraging APIs for data exchange
Engineer and operate the VPN and Cisco ISE/NAC remote access environment
Implement firewall solutions in AWS using an auto-scaling design
Troubleshoot complex network security issues, identify root cause, and drive ongoing platform improvements
Harden platform devices to reduce the vulnerability footprint
Manage firewall service requests
Manage and optimize logging for firewall traffic and rule-based activity
Maintain security baseline standards, along with design documentation and diagrams
Travel up to 10% based on business needs

Requirements

5+ years of Network and Security Engineering experience, with emphasis on security products from Radware, Fortinet, Cisco, and Palo Alto
2+ years with security technologies/products such as DDoS, proxy, VPN, firewall orchestration, and/or network access control
2+ years of network security hardening and controls, plus hands-on experience using network monitoring and logging tools (e.g., SolarWinds, LiveNX, ELK)
2+ years of network defense technology experience both on-prem and in cloud environments

Core competencies

Hands-on engineering experience with Radware, Palo Alto, Fortinet, and Cisco security products, including management platforms
Ability to think critically and perform in high-pressure situations where cyber threats evolve unpredictably
Strong interpersonal and presentation skills in both oral and written communication, with the ability to explain complex technologies with business acumen
Experience with Radware Defense Pro hardware and Cisco ISE
Understanding of network security best practices and knowledge of native firewalls in AWS and Azure

Helpful qualifications

Bachelor’s Degree or equivalent work experience
CCNA, CCNP, or CISSP is a plus
Experience with scripting and automation tools
Experience with Agile

Compensation

Pay range: USD 103,618 - 172,628 per year. Actual base salary varies based on relevant skills, prior experience, education, base pay of internal peers, demonstrated performance, and geographic location.

Additional information

This position does not offer work authorization sponsorship now or in the future. Applicants must have valid U.S. work authorization that does not require employer sponsorship.
LPL will only communicate with applicants from an @lplfinancial.com email address and will never conduct an interview online or in a chatroom forum.
During an interview, LPL will not request any form of payment or information regarding an applicant’s bank or credit card.

View full job page →

13d ago

Senior Network Security Engineer

Govcio LLC Remote 🇺🇸 Remote

Remote

13d ago

$120k - $140k/yr Full time Senior Engineer Firewall

Apply Now

Job Description

GovCIO LLC is seeking a Senior Network & Security Engineer to lead enterprise network security infrastructure design, operations, troubleshooting, and continuous improvement.

Responsibilities

Design, deploy, administer, and manage the lifecycle of Palo Alto Networks NGFW environments running PAN-OS.
Own centralized firewall management with Palo Alto Panorama including device groups, templates, template stacks, policy inheritance, upgrades, configuration backups, log monitoring, and firewall onboarding.
Design and govern security policies using zero-trust, least-privilege, application-aware, and risk-based principles.
Configure and troubleshoot security zones, NAT, virtual routers, static and dynamic routing, IPsec VPN, GlobalProtect, decryption, URL Filtering, Threat Prevention, WildFire, DNS Security, and App-ID policies.
Lead enterprise network segmentation and microsegmentation using security zones, VLANs, subinterfaces, virtual routers, routing controls, and application-based security policies.
Develop secure controls for traffic across users, servers, applications, management networks, guest networks, IoT/OT devices, data-center workloads, and cloud resources.
Architect, configure, test, and troubleshoot Palo Alto High Availability deployments including Active/Passive and Active/Active designs.
Resolve complex HA failures across HA1 control links, HA2 session and state synchronization, HA3 packet forwarding, peer communications, configuration synchronization, monitoring failures, split-brain prevention, and failover recovery.
Plan and execute HA failover testing, PAN-OS upgrades, disaster-recovery exercises, and maintenance procedures while minimizing service impact.
Troubleshoot HA infrastructure dependencies including cables, transceivers, switch ports, port channels, VLANs, routing, MTU, latency, packet loss, and redundant-path failures.
Lead configuration support and troubleshooting of Cisco Catalyst and Nexus switching environments.
Design and support VLANs, trunking, STP/RSTP/MST, EtherChannel/port channels, HSRP/VRRP, Layer 2/Layer 3 switching, ACLs, QoS, switch security, routing, and access-control technologies.
Diagnose complex connectivity and performance issues using firewall logs, session inspection, packet captures, CLI diagnostics, switch counters, flow data, and network-monitoring platforms.
Analyze TCP/IP behavior including handshake failures, SYN/SYN-ACK/ACK flows, retransmissions, resets, timeouts, asymmetric routing, MTU/MSS issues, fragmentation, latency, packet loss, and NAT translation problems.
Verify packet flow end-to-end across firewall policy, App-ID, routing, NAT, decryption, threat prevention, VPN, switching, and server/application layers.
Monitor firewall management-plane and dataplane health including CPU, memory, session capacity, packet buffers, throughput, logging, and interface performance.
Integrate NGFWs and Panorama with Strata Logging Service and Cortex XSIAM.
Ensure reliable firewall log forwarding, cloud logging, log ingestion, data normalization, event availability, retention, and telemetry quality.
Use Cortex XSIAM and XQL Search to investigate, correlate, and respond to firewall, endpoint, identity, cloud, and third-party security events.
Partner with SOC teams to tune detections, investigate alerts, develop response procedures, improve visibility, and support incident containment and remediation.
Lead root-cause analyses for major network or security incidents and deliver corrective and preventive action plans.
Develop and maintain network diagrams, firewall-policy documentation, HA designs, runbooks, change plans, architecture standards, and operational procedures.
Mentor junior engineers and provide technical leadership during projects, production incidents, and security reviews.

Requirements

Bachelor’s degree with 8+ years (or commensurate experience).
7+ years progressive experience in network engineering, network security, firewall administration, or security infrastructure operations.
5+ years hands-on Palo Alto Networks firewall experience in a production enterprise environment.
Advanced operational experience with Palo Alto Panorama including multi-device policy management, templates, device groups, upgrades, configuration management, and troubleshooting.
Strong hands-on experience designing, maintaining, and troubleshooting Palo Alto High Availability environments.
Advanced understanding of HA1, HA2, HA3, configuration synchronization, session synchronization, failover behavior, link monitoring, path monitoring, peer health, and recovery processes.
Strong expertise in TCP/IP, IPv4/IPv6, DNS, DHCP, ARP, routing, NAT, VPNs, and packet-level troubleshooting.
Demonstrated ability to investigate TCP handshakes, resets, retransmissions, MTU/MSS issues, asymmetric routing, connection timeouts, and firewall session behavior.
Extensive experience with Cisco Catalyst and/or Nexus switching technologies.
Strong knowledge of enterprise switching and routing including VLANs, trunking, STP/RSTP/MST, EtherChannel, HSRP/VRRP, routing protocols, ACLs, QoS, and switch-security controls.
Proven experience designing or implementing network segmentation and microsegmentation solutions.
Working knowledge of Cortex XSIAM, Strata Logging Service, security-event correlation, alert investigation, XQL Search, and firewall log ingestion.
Ability to lead technical design discussions, independently manage complex workstreams, and communicate risks and recommendations to technical and nontechnical stakeholders.
Strong documentation, change-management, incident-management, and root-cause-analysis skills.
Must be able to attain and maintain AOUSC Public Trust.

Technologies

Palo Alto Networks NGFW, PAN-OS, Palo Alto Panorama
Cortex XSIAM, Strata Logging Service, Cortex XQL Search, XQL Search
Cisco Catalyst, Cisco Nexus
IPsec VPN, GlobalProtect, URL Filtering, Threat Prevention, WildFire, DNS Security, App-ID
High Availability (Active/Passive and Active/Active)
TCP/IP, NAT, STP/RSTP/MST, EtherChannel/port channels, HSRP/VRRP, VLANs

Role Location

Remote within the United States

Compensation

USD 120,000 - 140,000 per year

Preferred Skills and Education

Master’s degree in Cybersecurity, Information Technology, Computer Science, Engineering, or a related field (preferred).
Palo Alto Networks certifications: PCNSA, PCNSE, PCCSE, or equivalent enterprise-level experience.
Cisco certifications: CCNP Enterprise, CCNP Security, CCIE Enterprise Infrastructure, CCIE Security, or comparable expertise.
Experience with Palo Alto Prisma Access, Prisma Cloud, Cortex XDR, Cortex XSOAR, or cloud-delivered security services.
Experience with Cortex XSIAM alert triage, XQL queries, data-source integrations, detection tuning, dashboards, reporting, and response automation.
Experience with Cisco ISE, Cisco ACI, SD-Access, or enterprise network-access-control solutions.
Familiarity with Fortinet Security Fabric, FortiGate, FortiManager, and FortiAnalyzer.
Experience with AWS, Azure, Google Cloud Platform, hybrid-cloud network design, and cloud-security controls.
Familiarity with SIEM, SOAR, EDR/XDR, vulnerability-management, NDR, network-monitoring, and ticketing platforms.
Automation skills using Python, Ansible, Terraform, REST APIs, or related infrastructure-as-code and orchestration tools.
Experience supporting 24x7 environments, participating in an on-call rotation, leading critical incidents, and executing emergency changes.

View full job page →

13d ago

Network Security Engineer Master

Govcio LLC Remote 🇺🇸 Remote

Remote

13d ago

$125k - $150k/yr Full time Ai Security Cloud Platforms Cloud Security

Apply Now

Job Description

This fully remote Network Security Engineer role supports enterprise network-security infrastructure and continuous improvement across firewall, switching, logging, and security analytics.

Responsibilities

Lead the design, deployment, administration, and lifecycle management of Palo Alto Networks NGFW environments running PAN-OS.
Own centralized firewall management using Palo Alto Panorama, including device groups, templates, template stacks, policy inheritance, upgrades, configuration backups, log monitoring, and firewall onboarding.
Design and govern security policies using zero-trust, least-privilege, application-aware, and risk-based principles.
Configure and troubleshoot security zones, NAT, virtual routers, static and dynamic routing, IPsec VPN, GlobalProtect, decryption, URL Filtering, Threat Prevention, WildFire, DNS Security, and App-ID policies.
Drive enterprise network segmentation and microsegmentation using security zones, VLANs, subinterfaces, virtual routers, routing controls, and application-based security policies.
Develop secure controls for traffic between users, servers, applications, management networks, guest networks, IoT/OT devices, data-center workloads, and cloud resources.
Architect, configure, test, and troubleshoot Palo Alto High Availability deployments, including Active/Passive and Active/Active designs.
Resolve complex HA failures across HA1 control links, HA2 session/state synchronization, HA3 packet forwarding, peer communications, configuration synchronization, monitoring failures, split-brain prevention, and failover recovery.
Plan and execute HA failover testing, PAN-OS upgrades, disaster-recovery exercises, and maintenance procedures while minimizing service impact.
Troubleshoot HA infrastructure dependencies including cables, transceivers, switch ports, port channels, VLANs, routing, MTU, latency, packet loss, and redundant-path failures.
Lead configuration, support, and troubleshooting of Cisco Catalyst and Cisco Nexus switching environments.
Design and support VLANs, trunking, STP/RSTP/MST, EtherChannel/port channels, HSRP/VRRP, Layer 2/Layer 3 switching, ACLs, QoS, switch security, routing, and access-control technologies.
Diagnose complex connectivity and performance issues using firewall logs, session inspection, packet captures, CLI diagnostics, switch counters, flow data, and network-monitoring platforms.
Analyze TCP/IP behavior including handshake failures, SYN/SYN-ACK/ACK flow, retransmissions, resets, timeouts, asymmetric routing, MTU/MSS issues, fragmentation, latency, and NAT translation problems.
Verify packet flow across firewall policy, App-ID, routing, NAT, decryption, threat prevention, VPN, switching, and server/application layers.
Monitor firewall management-plane and dataplane health including CPU, memory, session capacity, packet buffers, throughput, logging, and interface performance.
Integrate Palo Alto NGFWs and Panorama with Strata Logging Service and Cortex XSIAM.
Ensure reliable firewall log forwarding, cloud logging, log ingestion, data normalization, event availability, retention, and telemetry quality.
Use Cortex XSIAM and XQL Search to investigate, correlate, and respond to firewall, endpoint, identity, cloud, and third-party security events.
Partner with SOC teams to tune detections, investigate alerts, develop response procedures, improve visibility, and support incident containment and remediation.
Lead root-cause analyses for major network or security incidents and deliver corrective and preventive action plans.
Maintain network diagrams, firewall-policy documentation, HA designs, runbooks, change plans, architecture standards, and operational procedures.
Mentor junior engineers and provide technical leadership during projects, production incidents, and security reviews.

Requirements

Master’s degree in Cybersecurity, Information Technology, Computer Science, Engineering, or a related field (three additional years if Bachelor’s degree); equivalent relevant experience may be considered.
10+ years of progressive experience in network engineering, network security, firewall administration, or security infrastructure operations.
6+ years of hands-on Palo Alto Networks firewall experience in a production enterprise environment.
Advanced operational experience with Palo Alto Panorama including multi-device policy management, templates, device groups, upgrades, configuration management, and troubleshooting.
Strong hands-on experience designing, maintaining, and troubleshooting Palo Alto High Availability environments.
Advanced understanding of HA1, HA2, HA3, configuration synchronization, session synchronization, failover behavior, link monitoring, path monitoring, peer health, and recovery processes.
Strong expertise in TCP/IP, IPv4/IPv6, DNS, DHCP, ARP, routing, NAT, VPNs, and packet-level troubleshooting.
Demonstrated ability to investigate TCP handshakes, resets, retransmissions, MTU/MSS issues, asymmetric routing, connection timeouts, and firewall session behavior.
Extensive experience with Cisco Catalyst and/or Cisco Nexus switching technologies.
Strong knowledge of enterprise switching and routing including VLANs, trunking, STP/RSTP/MST, EtherChannel, HSRP/VRRP, routing protocols, ACLs, QoS, and switch-security controls.
Proven experience designing or implementing network segmentation and microsegmentation solutions.
Working knowledge of Cortex XSIAM, Strata Logging Service, security-event correlation, alert investigation, XQL Search, and firewall log ingestion.
Ability to lead technical design discussions, independently manage complex workstreams, and communicate risks and recommendations to technical and nontechnical stakeholders.
Strong documentation, change-management, incident-management, and root-cause-analysis skills.
Clearance Required: Ability to obtain and maintain a Public Trust clearance.

Technologies

Palo Alto Networks, PAN-OS, Palo Alto Panorama
HA1, HA2, HA3
Cisco Catalyst, Cisco Nexus
GlobalProtect, IPsec VPN
Cortex XSIAM, Strata Logging Service, XQL Search
WildFire, App-ID, URL Filtering, Threat Prevention, DNS Security
NAT
STP, RSTP, MST, EtherChannel, HSRP, VRRP, VLANs, QoS
MTU, MSS
Python, Ansible, Terraform, REST APIs
Prisma Access, Prisma Cloud, Cortex XDR, Cortex XSOAR
Cisco ISE, Cisco ACI, SD-Access
Fortinet Security Fabric, FortiGate, FortiManager, FortiAnalyzer
AWS, Azure, Google Cloud Platform
SIEM, SOAR, EDR/XDR, vulnerability-management, NDR, network-monitoring, ticketing platforms

Preferred Skills and Experience

Palo Alto Networks certifications: PCNSA, PCNSE, PCCSE, or equivalent enterprise-level experience.
Cisco certifications: CCNP Enterprise, CCNP Security, CCIE Enterprise Infrastructure, CCIE Security, or comparable expertise.
Experience with Palo Alto Prisma Access, Prisma Cloud, Cortex XDR, Cortex XSOAR, or cloud-delivered security services.
Experience with Cortex XSIAM alert triage, XQL queries, data-source integrations, detection tuning, dashboards, reporting, and response automation.
Experience with Cisco ISE, Cisco ACI, SD-Access, or enterprise network-access-control solutions.
Familiarity with Fortinet Security Fabric, FortiGate, FortiManager, and FortiAnalyzer.
Experience with AWS, Azure, Google Cloud Platform, hybrid-cloud network design, and cloud-security controls.
Familiarity with SIEM, SOAR, EDR/XDR, vulnerability-management, NDR, network-monitoring, and ticketing platforms.
Automation skills using Python, Ansible, Terraform, REST APIs, or related infrastructure-as-code and orchestration tools.
Experience supporting 24x7 environments, participating in an on-call rotation, leading critical incidents, and executing emergency changes.