Colorado Remote Network Security Administrator (Palo Alto/Cisco)

Aptonet; Denver (CO); On-site; USD 90,000 - 120,000; Full time

Job summary

Aptonet in Denver, CO is seeking an experienced Network Security Administrator to support multiple Colorado state agencies by maintaining secure, compliant, and modern network infrastructures.

You will focus on firewall administration (Palo Alto and Cisco ASA), security policy configuration, and participation in on-call rotation to maintain enterprise network operations across production environments.

Qualifications

• Experience administering Palo Alto Next-Generation Firewalls.
• Experience with Cisco ASA Firewall configuration and troubleshooting.
• Strong understanding of Network routing, TCP/IP and OSI Model.
• Experience managing firewall rules, NAT, and Site-to-Site VPNs.
• Ability to troubleshoot production network and security issues.
• Strong documentation and communication skills.

Responsibilities

• Administer and maintain Palo Alto and Cisco ASA firewalls.
• Review and implement Firewall Service Requests (FSRs).
• Troubleshoot network security incidents and break/fix issues.
• Execute change requests following change management procedures.
• Support firewall hardware refresh and EOL replacement projects.
• Configure and maintain security policies, NAT, Site-to-Site VPNs, zones, and threat prevention features.
• Ensure compliance with IRS, FBI, and CJI security standards.
• Participate in scheduled maintenance and after-hours support when required.
• Collaborate with technical teams to maintain secure network operations.

Skills

Palo Alto Next-Generation Firewalls

Cisco ASA Firewall

Network routing

TCP/IP

OSI Model

Firewall rules management

NAT

Site-to-Site VPNs

Troubleshooting

Documentation

Job description

Aptonet in Denver, CO is seeking an experienced Network Security Administrator to support multiple Colorado state agencies by maintaining secure, compliant, and modern network infrastructures.

You will focus on firewall administration (Palo Alto and Cisco ASA), security policy configuration, and participation in on-call rotation to maintain enterprise network operations across production environments.