Sr. Network Security Engineer (48518)

Job Description Job Description

Position Title: Sr. Network Security Engineer

Client: Information Systems Solutions, Inc.

Address: 53560 Hull St. San Diego, CA 92152

Clearance Level: Secret

Position Status: 6-month contract to permanent

Position Description: Our client is looking for a Sr. Network Security Engineer (Palo Alto / Zero Trust) for an onsite position in San Diego, CA. They are a government IT and cybersecurity contractor providing technology services to the U.S. Department of Defense and other federal agencies. ISS specializes in cybersecurity, network and systems engineering, IT infrastructure, software development, and technical support for mission-critical government programs.

Responsibilities: Seeking an Engineer, System III to support the NIWC PAC Information Technology Management Support Services contract. A Systems Engineer, also known as lead systems analyst, a network engineer who can also program, or a software engineer who can also manage networks, is an IT professional who oversees the creation of hybrid software, web and hardware products from initial specifications to final rollout and maintenance. These products are often sophisticated systems that run on the web. The systems engineer is responsible for integrating various network operating systems, application programs and hardware devices. Duties of a systems engineer typically include managing the development cycle associated with producing resilient software, hardware and web applications, including specification, design, coding, testing and maintenance. Systems engineering is like putting together a puzzle, matching varied pieces together to make one cohesive whole. Systems engineers are concerned with the big picture of a project in addition to technical aspects and must consider details like cost, schedules and social issues that may be associated with a project.

Manage, configure, deploy, and audit perimeter security devices (firewalls, IPS, VPN) in on-prem and cloud environments; recommend performance optimizations.

Segment networks, implement VLAN/site firewall rules, apply STIGs/IAVM/CTO requirements, maintain documentation, and integrate NGFW threat prevention and DNS security.

Coordinate with NIWC Pacific teams to ensure proper device configuration and support log aggregation/analysis with Splunk, Elastic, or similar tools.

Troubleshoot VPN client connectivity, validate port-exception requests, and support secure connections into AWS/Azure environments.

Research, implement, and maintain ZTNA technologies; lead migration from traditional access and port exceptions to Zero Trust architecture.

This position is 100% onsite.

Qualifications:

Active Secret clearance

Bachelor's level degree in an Engineering discipline or years of experience.

7 years of professional experience in systems engineering.

Strong experience managing, configuring, and troubleshooting enterprise firewalls, IPS, and VPN devices in both on-prem and cloud environments

Deep knowledge of network segmentation, VLANs, and firewall rule implementation

Experience applying STIGs, IAVMs, and CTO directives with strong documentation skills

Proficiency with Next Generation Firewalls (NGFW), Palo Alto Panorama centralized management platform and Pan-OS.

Hands-on experience with log aggregation and analysis using Splunk, Elastic. Global Protect Log Analysis

Knowledge of cloud networking and secure connectivity methods for AWS and Azure

Experience with Zero Trust Network Access (ZTNA) architecture and migration from traditional access models

Next-Generation Firewalls (NGFW)

Palo Alto Networks Firewalls

Palo Alto Panorama (Centralized Management Platform)

Palo Alto PAN-OS

Network Troubleshooting and Packet Analysis

GlobalProtect Log Analysis

Firewall Traffic and Threat Log Analysis

IPsec (Internet Protocol Security)