Mid/Snr Network Security Engineer - 6mos contract - view to extend

Northbridge IT Recruitment Propr; Sydney; Sur place; AUD 160 000 - 200 000; Plein temps

Résumé du poste

Northbridge IT Recruitment Propr is seeking a Mid/Snr Network Security Engineer to modernize enterprise security by migrating from SWG to SSE, and integrating cloud security with Zscaler ZIA/ZPA and SASE architectures. You will manage policy translation, firewall configurations, and multi‑vendor diagnostics.

The role emphasizes ITIL‑driven change management, detailed runbooks, and collaboration with identity, endpoint, and networking teams to support executive leadership with status updates.

Qualifications

• 5+ years enterprise network security engineering.
• Advanced Palo Alto experience in PAN‑OS, Panorama and GlobalProtect.
• ITIL change management in ServiceNow in high‑availability environments.
• Deep packet analysis, log parsing and traffic troubleshooting.
• Mastery of TCP/IP, DNS, PKI, forward proxy, and SSL/TLS interception.
• Strong written and verbal communication to bridge engineering and leadership.

Responsabilités

• Architect migration from legacy SWG to SSE/cloud security platforms.
• Transform policies for cloud‑native access controls.
• Configure and maintain firewalls to route traffic to cloud platforms.
• Perform multi‑vendor diagnostics with Wireshark, tcpdump, and SIEMs.
• Manage change and risk in ITIL CAB forums via ServiceNow.
• Produce runbooks and diagrams for cross‑functional teams.

Connaissances

Palo Alto PAN‑OS

PAN‑OS Panorama

GlobalProtect

Zscaler ZIA/ZPA

ITIL Change Management

Deep packet analysis

Wireshark

tcpdump

ServiceNow

CAB liaison

TCP/IP & DNS

SSL/TLS interception

SASE/SSE

Outils

PAN‑OS

Panorama

GlobalProtect client

Wireshark

tcpdump

Splunk

Description du poste

Mid/Snr Network Security Engineer - 6mos contract - view to extend

Northbridge IT Recruitment Propr – Sydney NSW

Contract

The Role

Results-driven Network Security Engineer specializing in modernizing enterprise security architectures through large-scale cloud proxy and SASE migrations. Recognized for bridging legacy on‑premises web gateways to cloud-native security platforms like Zscaler (ZIA/ZPA), while maintaining robust next‑generation firewall engineering, deep packet troubleshooting, and strict ITIL-aligned change management.

Key Responsibilities

• Migration Strategy & Execution: Architected and executed seamless end-to-end migrations from legacy secure web gateways (SWG) to cloud security service edge (SSE) platforms, managing policy analysis, translation, and phased site‑by‑site cutovers.
• Policy Transformation: Audited, re‑engineered, and optimized legacy web policies—including URL categorization, deep packet SSL/TLS inspection, authentication frameworks, and bypass rules—into modern cloud‑native access controls.
• Firewall & Traffic Steering Engineering: Configured and maintained enterprise firewalls (PAN‑OS, Panorama, and GlobalProtect) to orchestrate secure traffic steering to cloud security platforms via dynamic GRE/IPsec tunnels, automated PAC files, and endpoint client connectors.
• Complex Diagnostics & Root Cause Analysis: Performed advanced troubleshooting across multi‑vendor environments using deep packet analysis (Wireshark, tcpdump), SIEM log correlation, and real‑time traffic flow tracing to resolve latency, authentication, and SSL inspection friction.
• ITIL Change & Incident Governance: Managed lifecycle operations within ServiceNow, authoring high‑risk change requests, comprehensive backout plans, and presenting technical risk profiles in Change Advisory Board (CAB) forums.
• Documentation & Cross‑Functional Leadership: Authored detailed operational runbooks, migration run‑sheets, and as‑built architectural diagrams, facilitating coordination across identity, endpoint, and networking teams while delivering status updates to executive project leadership.

Required Qualifications

• 5+ years of dedicated experience in enterprise network security engineering.
• Advanced Palo Alto Expertise: Extensive hands‑on experience deploying and managing PAN‑OS, Panorama, and GlobalProtect security ecosystems.
• ITIL Change Management Maturity: Proven track record of planning, risk‑assessing, and executing infrastructure changes within ServiceNow in high‑availability enterprise environments.
• Advanced Diagnostics: Deep technical proficiency in packet capture analysis, log parsing, traffic flow troubleshooting, and structured root‑cause investigation.
• Core Networking & Security Fundamentals: Comprehensive mastery of TCP/IP, dynamic routing, DNS architecture, Public Key Infrastructure (PKI), forward proxy concepts, and SSL/TLS interception mechanics.
• Communication & Collaboration: Excellent written, presentation, and interpersonal skills capable of bridging technical engineering groups with business leadership.

Preferred Qualifications

• Cloud Security Specialization: Hands‑on experience with Zscaler ZIA/ZPA, SASE/SSE architecture design, and Zero Trust Network Access (ZTNA) principles.
• Identity & Access Management: Experience integrating SAML/SSO frameworks with cloud identity providers (e.g., Azure AD / Entra ID).
• Automation & Scripting: Proficiency in Python, infrastructure‑as‑code (Terraform), or leveraging security platform APIs for automation.
• Professional Certifications: PCNSE, Zscaler Certifications (ZCCA/ZDTA), and ITIL Foundation.

Tools and Technologies

• Network & Security: Palo Alto Networks (PAN-OS, Panorama, GlobalProtect), Zscaler (ZIA, Client Connector), Legacy Web Gateways / Proxy architectures.
• Operations & ITSM: ServiceNow (Change, Incident, Problem Modules).
• Troubleshooting & Monitoring: Wireshark, tcpdump, Splunk (or equivalent SIEM platforms).