Network Security Engineer/Lead

Title: Network Security Engineer/Lead

Location: Albany, NY

Duration: Longterm

Responsibilities:

• Lead the architecture and design of complex network security solutions
• Serve as SME for Juniper, Palo Alto, and Cisco firewall
• Design secure routing with dynamic protocols like BGP and OSPF
• Configure, optimize, and troubleshoot high-availability firewall policies, IDP/IPS and UTM
• Deploy and Configure site-to-site (IPSec) and remote-access VPN solutions
• Gather security requirements, conduct risk assessments, and develop enterprise security architectures
• Mentor team members and lead security projects
• Manage upgrades and resolve critical security incidents

Requirements:

• 5+ years of hands-on experience designing and implementing enterprise network security
• Expert-level configuration knowledge of Juniper SRX (Junos CLI, security zones) and Palo Alto firewalls
• Extensive experience with dynamic routing protocols, firewall policies, rule optimization and IDP/IPS
• Good understanding of security architecture, integration, and compliance standards
• Strong experience supporting Cisco switching and routing infrastructures
• Proven leadership in complex security deployments and troubleshooting
• Familiarity with Python, Ansible, or Terraform for automated policy deployment and configuration management
• Proficient in Visio diagramming and technical documentation
• Excellent communication, collaboration, and stakeholder management skills.

Relevant advanced certifications (JNCIP/JNCIE, CCIE, PCNSE, CISSP) preferred