Evergreen: Senior Network/Security Engineer

Ad Hoc LLC; Evergreen (CO); On-site; USD 153,000 - 187,000; Full time

Benefits offered by this job

Company-subsidized health insurance

Flexible PTO

401(k) with employer match

Job summary

Ad Hoc LLC is looking for a Senior Network/Security Engineer to enhance our security infrastructure. This position involves configuring firewalls, managing security policies, and ensuring compliance with industry standards. The ideal candidate will have experience with Palo Alto and proficient troubleshooting skills in network security.

The role offers a salary range of $153,000–$187,000, along with company-subsidized health benefits, flexible PTO, and an inclusive work environment.

Qualifications

• Experience with security configurations, firewalls, and troubleshooting.
• Proficiency in using tcpdump/Wireshark for packet analysis.
• Understanding of Zero Trust security principles.

Responsibilities

• Configure network ACLs and enforce security policies.
• Design and implement secure network infrastructure.
• Ensure compliance with IRS/NIST regulations.

Skills

Palo Alto

Firewalls

SIEM

Security Configuration Management

Data Loss Prevention

tcpdump/Wireshark

Job description

Evergreen: Senior Network/Security Engineer

Ad Hoc is a technology company that empowers organizations to deliver scalable, impactful digital services. Using modern, agile methods, our team creates products that meet people’s needs and transform their experience of government.

Primary Responsibilities

Experience with Palo Alto, Panorama OS (PAN-OS), Firewalls, SIEM, Security Configuration Management (SCM), migration, security and compliance, RBAC and access models, Data Loss Prevention (DLP), Strata Cloud Manager

Operate and engineer enterprise web proxy, deliver reliable policy changes, and diagnose issues down to packet level.

• Configuring Network ACLs, firewalls, and security groups to enforce policy and isolate sensitive workloads.
• Design secure network infrastructure enforcing Zero Trust principles for the DXP.
• Ensure 100% compliance with IRS/NIST boundary protection standards.
• Forward/reverse proxy modes; explicit vs transparent; PAC/WPAD design and distribution.
• Safe bypass strategies (domain/SNI/IP/risk-based) without degrading coverage.
• Layer 3 & Internet Fundamentals
  • Routing & addressing (CIDR, MTU/fragmentation/PMTUD, NAT44/66, VRFs), basic BGP/OSPF, DNS recursion/forwarding and failure modes.
• Ports & Protocols
  • TCP/UDP behavior, ephemeral ranges, TLS handshake/SNI, and middlebox interactions (no QUIC/HTTP-3 requirement).
• PCRE
  • Writes and reviews complex PCRE (lookarounds, backreferences, atomic groups) with an eye for performance (avoid catastrophic backtracking).
• Troubleshooting: Packets + Analytics
  • tcpdump/Wireshark proficiency (TLS/HTTP analysis, TCP dynamics).
  • Log correlation at scale (e.g., Splunk/ELK) to isolate issues off-box (client, network, IdP, upstream).
  • Can distinguish origin responses vs proxy-generated errors and document root cause.
• Clear stakeholder comms; triage correctly under load—doesn’t treat every noisy issue as P1.

Goals

• Normalize firewall / Panorama versions
• Get Panorama 12.x integrated with Strata Cloud Manager as the “real” central manager
• Upgrade the DLP plug-in so it works cleanly in SCM

Preferred Qualifications

• Current or previous Federal Government Clearance
• Company‑subsidized health, dental, and vision insurance
• Flexible PTO
• 401(k) with employer match
• Paid parental leave after one year of service
• Employee Assistance Program

Ad Hoc LLC is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, national origin, ancestry, sex, sexual orientation, gender identity or expression, religion, age, pregnancy, disability, work‑related injury, covered veteran status, political ideology, marital status, or any other factor that the law protects from employment discrimination.

We value the unique skills gained through military service and encourage veterans and transitioning service members to apply.

In support of various state and city equal pay transparency laws, Ad Hoc job descriptions feature the starting range we reasonably expect to pay to candidates who would join our team with little to no need for training on the responsibilities we've outlined above. Actual compensation is influenced by a wide range of factors including but not limited to skill set, level of experience, and responsibility. The range of starting pay for this role is $153,000-187,000. Our recruiters will be happy to answer any questions you may have, and we look forward to learning more about your salary requirements.