Network Security II Engineer III

Vertiv; Mandaluyong; On-site; PHP 1,200,000 - 1,800,000; Full time

Job summary

Vertiv is seeking a Senior Network Security Engineer in Mandaluyong, Philippines, to enhance their global security posture focusing on Palo Alto, Zscaler, and zero-trust architecture. You will design and implement network security controls, lead in developing security frameworks, and work collaboratively with agile teams. The ideal candidate has 5+ years' experience in network security engineering with certifications like PCNSE and CCNA, and a degree in IT or related fields. The position emphasizes cybersecurity in a dynamic environment, offering growth opportunities.

Qualifications

• 5+ years of experience in network security engineering within medium to large organizations.
• Proven expertise in managing Palo Alto firewalls in a production environment.
• Deep understanding of zero-trust principles.
• Experience in deploying Zscaler solutions.

Responsibilities

• Design and implement network security architectures using Palo Alto and Zscaler.
• Lead development of security principles including identity-aware policies.
• Configure and maintain network security compliance.
• Monitor security controls through log analysis.

Skills

Network Security Engineering

Palo Alto Firewalls

Zscaler Deployment

Zero-Trust Principles

Web Application Firewalls (WAF)

IoT/OT Security

Routing Protocols

Agile Project Management

Education

Bachelor of Science in Information Technology, Cybersecurity, or Computer Science

Tools

Palo Alto Panorama

SIEM/SOAR

Job description

Job Description

We’re seeking a Senior Network Security Engineer to enhance our global security posture, focusing primarily on Palo Alto, Zscaler, WAF, IoT/OT security, and zero‑trust architecture. The role involves designing and deploying network security controls across standalone and hybrid environments, safeguarding critical web applications with WAF, implementing IoT/OT security measures in a manufacturing setting, and leading teams in developing secure, scalable solutions within an agile framework.

Key Responsibilities

• Design and implement network security architectures using Palo Alto Next‑Generation Firewalls (NGFWs) and Zscaler (ZIA/ZPA) across on‑premises, cloud, and remote settings.
• Lead the development and enforcement of zero‑trust principles, including identity‑aware policies, network segmentation, and least‑privilege access.
• Configure and maintain Palo Alto firewalls and Panorama, managing policies, NAT, VPNs, SSL decryption, GlobalProtect, and logging functionalities.
• Deploy and oversee Zscaler services, integrating traffic forwarding methods, security policies, and identity provider (IdP) connections.
• Design, implement, and fine‑tune Web Application Firewalls (WAF) to safeguard against the OWASP Top 10 threats and sophisticated web‑based attacks.
• Develop and enforce IoT and OT security controls tailored for manufacturing plants.
• Resolve complex network security issues and monitor security controls and applications through log analysis, packet captures, and traffic flow examination.
• Utilize expertise in switching and routing, including VLANs, BGP, and OSPF, to ensure secure and reliable connectivity.
• Work collaboratively with agile teams, contributing to sprint planning, refining user stories, and iteratively delivering security features.
• Follow change control processes that involve conducting risk assessments, documenting changes, and validating implementation post‑execution.
• Create clear technical documentation, set standards and runbooks, and provide mentorship to junior engineers as needed.

Required Qualifications

A Bachelor of Science degree in Information Technology, Cybersecurity, Computer Science, or a closely related field.

Experience & Skills

• Extensive hands‑on experience (ideally 5+ years) in network security engineering within medium to large organizations.
• Proven expertise in managing Palo Alto firewalls, preferably using Panorama in a production environment.
• Practical experience in deploying and managing Zscaler solutions (ZIA/ZPA/ZDX or similar).
• A deep understanding of zero‑trust principles and how to apply them effectively in real‑world scenarios.
• Solid background in architecting, implementing, and troubleshooting Web Application Firewalls (WAF).
• Demonstrated proficiency in designing and deploying security frameworks for Internet of Things (IoT) and Operational Technology (OT) environments.
• Strong knowledge of network switching and routing, covering Layer 2/Layer 3 fundamentals, along with experience in at least one major routing protocol.
• Comfortable working in an agile project management environment; Scrum preferred.
• Excellent troubleshooting skills coupled with strong communication and documentation capabilities.

Certifications Required

• PCNSE, PCNSA, ZDTA, ZDTE, or ZDXA
• CCNA
• CISSP

Nice to Have

• Experience with major cloud platforms like AWS, Azure, or GCP.
• Familiarity with SIEM/SOAR integrations and analysis.

Work Authorization

No call or agencies please. Vertiv will only employ those who are legally authorized to work in the United States. This position does not provide sponsorship for work authorization now or in the future. Individuals with temporary visas such as E, F-1, H-1, H-2, L, B, J, or TN, or who require sponsorship, are not eligible for hire.

Equal Opportunity Employer

We promote equal opportunities for all with respect to hiring, terms of employment, mobility, training, compensation, and occupational health, without discrimination as to age, race, color, religion, creed, sex, pregnancy status, marital status, sexual orientation, gender identity / expression, genetic information, citizenship status, national origin, protected veteran status, political affiliation, or disability.