Senior Network Engineer

We are seeking an experienced Senior Network Engineer to design, implement, secure, and support enterprise network infrastructure and cybersecurity solutions. This role will provide senior-level technical leadership across network architecture, firewalls, VPNs, cloud networking, security monitoring, network segmentation, and infrastructure modernization.

The ideal candidate will have extensive hands-on experience with Palo Alto and/or Check Point firewalls, GlobalProtect VPN, Next-Generation Firewalls (NGFW), enterprise routing and switching, cloud networking, and NIST-based security practices.

Key Responsibilities

• Configure, administer, and document enterprise firewall infrastructure, security policies, access rules, and network security controls.

• Manage Palo Alto, Check Point, GlobalProtect VPN, and Next-Generation Firewall (NGFW) technologies.

• Perform firewall deployments, rule migrations, firewall administration, and migration of existing rule-based policies to new security platforms.

• Design, implement, and support enterprise LAN/WAN, routing and switching, wireless networks, VPNs, network segmentation, Internet connectivity, cloud connectivity, and data center infrastructure.

• Configure and manage cloud networking infrastructure, firewall policies, security controls, and network traffic monitoring.

• Develop secure network architectures, segmentation strategies, access controls, VPN solutions, and other enterprise security controls.

• Design network segmentation strategies to restrict lateral movement, protect critical systems, isolate sensitive workloads, and establish appropriate security boundaries.

• Evaluate north-south and east-west network traffic to identify security risks and opportunities for improved security controls.

• Monitor, analyze, and respond to cybersecurity threats, vulnerabilities, unauthorized access attempts, network anomalies, malware, and policy violations.

• Lead troubleshooting and resolution of complex network and security incidents using network monitoring, logging, packet analysis, performance data, and cybersecurity tools.

• Perform enterprise security risk assessments and develop risk-based mitigation and remediation strategies.

• Administer and monitor security profiles, access controls, alerts, violation reports, and security exceptions.

• Develop and maintain enterprise security policies, procedures, standards, technical controls, and operational documentation.

• Ensure security practices and technical documentation align with NIST guidelines, organizational requirements, and applicable industry standards.

• Develop and maintain network diagrams, infrastructure schematics, IP addressing documentation, VLAN configurations, firewall rules, access controls, operational procedures, and disaster recovery documentation.

• Establish and monitor network performance and security metrics, including dashboards, KPIs, capacity indicators, vulnerabilities, and operational risks.

• Evaluate emerging networking and cybersecurity technologies and conduct technical assessments, proof-of-concept activities, and product evaluations.

• Provide advanced technical consultation and support to infrastructure, cloud, application, database, architecture, cybersecurity, and business teams.

• Provide security and network engineering expertise throughout the project lifecycle, including requirements gathering, architecture, design, implementation, testing, deployment, and production support.

• Review proposed solutions and project designs to identify risks and ensure appropriate network and security controls are incorporated.

• Coordinate with vendors and internal technical teams during critical incidents, network outages, security events, and infrastructure projects.

• Provide technical leadership and mentoring to network and security engineers.

• Establish network engineering standards, security best practices, configuration standards, and architectural guidelines.

• Prepare technical documentation, risk assessments, management reports, security metrics, and recommendations for IT leadership.

Required Experience

• 10 + years of combined IT, network engineering, infrastructure, and/or information security experience.

• 3–5 years of experience working with information security tools and practices based on NIST standards.

• Strong hands-on experience with enterprise networking and cybersecurity technologies.

• Experience administering Palo Alto and/or Check Point Next-Generation Firewalls.

• Experience with GlobalProtect VPN or comparable enterprise VPN technologies.

• Strong understanding of:

  • Enterprise network architecture

  • Routing and switching

  • Firewall administration

  • VPN technologies

  • Network segmentation

  • LAN/WAN technologies

  • Wireless networking

  • Cloud networking

  • Identity and access management

  • Security monitoring

  • Vulnerability management

  • Incident response

  • Disaster recovery

  • Network performance monitoring

• Experience troubleshooting complex network and security incidents.

• Experience configuring and supporting cloud network infrastructure and security policies.

• Knowledge of cybersecurity risks, techniques, controls, and their implications across enterprise technology platforms.

• Experience creating and maintaining network and infrastructure diagrams using schematic or diagramming tools.

• Ability to communicate complex technical information to technical teams, management, and business stakeholders.

Education

Bachelor’s degree in Computer Science, Information Systems, Information Technology, Cybersecurity, or a related field.

Equivalent professional experience may be considered in lieu of a degree.

Preferred Certifications

One or more of the following certifications are preferred:

• PCNSE – Palo Alto Networks Certified Network Security Engineer

• CCNP – Cisco Certified Network Professional

• CCIE – Cisco Certified Internetwork Expert

• CISSP – Certified Information Systems Security Professional

Senior-Level Qualifications

The Senior Network Engineer must demonstrate advanced knowledge and experience in enterprise networking, cybersecurity, cloud infrastructure, systems, databases, and related technology environments.

The position requires the ability to:

• Develop and implement enterprise network and cybersecurity strategies.

• Lead complex infrastructure and security projects.

• Design secure, scalable, highly available, and resilient network architectures.

• Resolve highly complex network and security issues.

• Conduct enterprise security and technology risk assessments.

• Evaluate and recommend emerging networking and cybersecurity technologies.

• Provide senior-level technical guidance to engineering teams, IT leadership, and business stakeholders.

• Lead infrastructure modernization and network security initiatives.

• Mentor technical staff and establish engineering standards and best practices.