Network Security Engineer

Our client is seeking a Network Security Engineer for a 12-month contract in Irving, TX. Will be working on an onsite schedule.

Contract Duration: 12 Months

Required Skills & Experience

• Bachelor's degree in related field, Master's preferred, or equivalent experience
• 3-5 years of network security engineering experience
• 5 years of related experience with Bachelor's, 3 years with Master's
• Experience with Palo Alto firewalls, site-to-site VPNs, GlobalProtect, and Imperva WAF
• Strong understanding of TCP/IP, routing, switching, DNS, SSL/TLS, and security principles
• Strong troubleshooting and documentation skills

Certification/Licenses

• Must have: At least one entry-level vendor certification (with non-entry-level preferred) in the Network Security arena (Palo Alto PCNSA/PCNSE preferred, Cisco CCNA/CCNP Security, Juniper JNCIA-SEC/JNCIS-SEC, etc.) or equivalent experience

Desired Skills & Experience

• At least one entry-level vendor-neutral certification in the Information Security arena (GICF, GSEC, CISA, CEH, etc.)
• Convenience Retail, Fuel Operations, Supply Chain

What You Will Be Doing

• Will be a key player on a team responsible for all aspects of Network Security within company. You may be a SME in some domains, but are expected to have full professional knowledge of security concepts and company objectives to resolve a wide range of issues in effective and sometimes creative ways, in all of the following domains. As an advanced engineer, you are expected to do these things with little technical direction and with only general guidance on new assignments:
• Firewalls and network filters, in both Enterprise, Stores, and cloud networks
• Intrusion Prevention policies
• Site-to-site and remote-access VPN connectivity
• Network Access Control
• Authentication, Authorization and Accounting (to include multi-factor authentication)
• Web access proxy servers and URL filtering
• DNS Security
• Threat research, vulnerability remediation, and creation of compensating controls
• Network Security policy creation, exception documentation and approval
• Provide suggestions to team lead/manager in creating your professional development and training plan.
• Prioritize taskings and projects assigned based on importance to accomplishment of business objectives. Occasionally assist junior teammates with maintaining proper prioritization.
• Solve diverse and complex issues where analysis of situations and data requires in-depth evaluation of identifiable factors. Provide escalation support and technical guidance to teammates in areas where you are a SME.
• Work on projects assigned to you, in effort to advance partnership opportunities between Network Security team and other business areas.
• Work with senior engineers to define network security requirements for current and future state end-to-end architectures and platforms to advance security controls and the security posture of the business.
• Assist senior engineers in collaborating with development and engineering teams to prioritize security risks, provide mitigation or remediation recommendations, and implement compensating controls.
• Perform network security architecture and third-party risk management reviews.
• Perform network security platform testing, vulnerability remediation, and operating system hardening to reduce attack surface.
• Assist in performing proof-of-concept testing for network security solutions under consideration for purchase and implementation.
• Assist in developing and maintaining network security policies, standards, processes and workflows.
• Work with senior engineers in identifying network security products and technologies that can enhance company's mission by providing appropriate protection for all data on the network, or sent or received to/from various public or private clouds, or the Internet at large.

Firewall Governance & Administration

• Manage enterprise firewall environments and enforce network security policies. Perform firewall rule reviews, cleanup initiatives, and remediation activities. Conduct regular audits of firewall configurations and access controls.
• Firewall Standards & Documentation
• Develop, maintain, and update firewall standards, procedures, network security diagrams, and architecture documentation.

Site-to-Site VPN Management

• Plan, configure, and migrate site-to-site VPN tunnels. Troubleshoot VPN connectivity issues and validate configurations.

Web Application Firewall (Imperva)

• Administer and optimize Imperva WAF deployments, expand coverage, analyze events, and tune policies.

Remote Access & GlobalProtect Support

• Provide advanced troubleshooting and support for Palo Alto GlobalProtect VPN services.

Security Operations & Continuous Improvement

• Participate in security assessments, incident response activities, vulnerability remediation, and infrastructure modernization efforts.