Senior Network Security Engineer

Role Purpose

The Senior Network Security Engineer will work on various aspects of network security, including proxy and firewall installation, policy creation, and operational maintenance. The engineer is responsible for assessing network security requirements, and developing the implementation plans for new solutions to secure the enterprise network from security threats and unauthorized access, through the competent assessment, monitoring, and management of network security appliances and applications. The Network Security Engineer possesses an expert knowledge of network design, technologies, systems, and protocols. 

Key Responsibilities

• Evaluate the network security requirements for existing, new, and emerging technologies
• Design, plan, install, and configure Palo Alto Networks firewalls and Zscaler product deployments (including Advanced Cloud Firewall, ZCC,  ZIA, and ZPA services)
• Create and manage firewall and proxy URL Filtering/Cloud App filtering rulesets
• Troubleshoot firewall and proxy traffic flows using knowledge, traffic logs, and packet captures
• Design, plan, and deploy Zero Trust and micro segmentation agents
• Design, plan, and install site-to-site and client VPNs

• Collaborate with cross functional teams to integrate perimeter and edge security services with existing infrastructure 
• Maintain up to date knowledge of Zscaler products and services to recommend upgrades and enhancements  

• Provide advanced troubleshooting support and critical incident response support
• Lead the technical efforts for migration and IT modernization projects
• Develop and implement vulnerability remediation solutions and harden network defenses
• Ensure the overall security of the enterprise network perimeter and isolated segments
• Generate network and traffic flow diagrams

Experiences/Education - Required

Experiences/Education - Required

• Minimum 5 years of firewall administration experience
• At least 2 years of experience managing, administrating, or deploying Zscaler

Shift Schedule

• This role requires availability for weekends and night shifts. Primary shift hours are at night.

Experiences/Education - Desired

Experiences/Education - Preferred

• Industry Network Certification (e.g. CCNP, CCNA)
• Industry Security Certification (e.g. Security+, CISM)
• Vendor-specific experience (Zscaler ZIA/ZPA, Palo Alto Next Generation Firewall, Fortinet/Fortigate Firewall, Juniper Firewall)