Lead Network Security Engineer - Palo Alto

LCA Lab. Corp. of America; North Carolina; Hybrid; USD 100,000 - 130,000; Full time

Benefits offered by this job

Medical, Dental, Vision benefits

401(k) plan

Paid Time Off (PTO)

Job summary

Labcorp is looking for a Lead Network Security Engineer – Palo Alto to join their team in Durham, NC. This full-time role requires expertise in network security and firewall management with responsibilities including designing secure architectures and supporting compliance audits.

Applicants should have over 10 years of network security experience, specifically with Palo Alto and Cisco technologies. The position offers a hybrid work schedule along with comprehensive benefits including medical, dental, and a 401(k) plan.

Qualifications

• 10+ years of experience in network security engineering with a focus on firewall technologies.
• 5+ years of hands-on experience designing and managing Palo Alto Firewall environments.
• 3+ years of hands-on experience managing Cisco Firepower platforms.

Responsibilities

• Design, implement, and manage network security architectures.
• Develop security policies aligned to regulatory requirements.
• Provide support for Palo Alto and Cisco Firepower firewall platforms.

Skills

Network security engineering

Palo Alto Firewall

Cisco Firepower

TCP/IP

VPN technologies

Education

Bachelor’s degree in Engineering or related field

Job description

Labcorp is seeking a Lead Network Security Engineer – Palo Alto to join our team at our Durham, NC location. Applicants who live within 35 miles of Durham will follow a hybrid schedule with a minimum of three in‑office days per week.

Work Schedule: This is a full‑time, exempt (salaried) position assigned to a First Shift schedule, with standard business hours of Monday through Friday, 8:00 a.m. to 5:00 p.m. EST. Flexibility in work hours may occasionally be required.

Job Responsibilities

• Design, implement, and manage secure network security architectures for large‑scale enterprise environments.
• Develop and maintain security policies and procedures aligned to regulatory and organizational requirements.
• Provide expert‑level configuration, optimization, and operational support for Palo Alto and Cisco Firepower firewall platforms.
• Troubleshoot complex network security issues across firewall, network, and remote‑access solutions.
• Review, implement, and manage firewall rules through enterprise ticketing systems in accordance with security best practices.
• Support PCI, SOC, and similar compliance audits and security assessments.
• Partner with cross‑functional teams to integrate network security solutions into existing infrastructure.
• Support enterprise remote‑access technologies including VPN platforms.
• Lead or support major initiatives such as firewall platform migrations, enterprise VPN deployments, acquired‑site integrations, and network security automation.
• Develop and maintain documentation for network architecture, security controls, policies, and procedures.
• Designed and supported HA/cluster architectures and large‑scale Panorama environments.

Minimum Qualifications

• Bachelor’s degree in Engineering, Computer Science, Information Technology, Information Assurance, or Networking; or an Associate’s degree with 4 or more years of Network experience; or a high school diploma with 10 or more years of Network experience.
• 10 or more years of experience in network security engineering with a focus on firewall technologies.
• 5 or more years of hands‑on experience designing, implementing, and managing Palo Alto Firewall environments.
• 3 or more years of hands‑on experience designing, implementing, and managing Cisco Firepower platforms.
• 10 or more years of experience with core networking protocols including TCP/IP, DNS, DHCP, and VPN technologies.

Preferred Qualifications

• PCNSE (Palo Alto Networks Certified Network Security Engineer) certification.
• CCNP Security or CCIE Security certification.
• 5 or more years of experience working with security frameworks such as the NIST Cybersecurity Framework or ISO 27001.

Additional Job Standards

• Ability to participate in on‑call rotation and support security events outside standard business hours as needed.
• Familiarity with cloud‑based security solutions within AWS, Azure, or Google Cloud.
• Experience supporting firewall automation and network security tooling.
• Strong documentation and communication skills supporting technical and non‑technical stakeholders.
• Ability to lead complex technical initiatives such as platform migrations and enterprise capability rollouts.

Benefits

• Employees regularly scheduled to work 20 or more hours per week are eligible for comprehensive benefits including Medical, Dental, Vision, Life, STD/LTD, 401(k), Paid Time Off (PTO) or Flexible Time Off (FTO), Tuition Reimbursement, and Employee Stock Purchase Plan.
• Employees scheduled to work less than 20 hours, or those who are Casual, Intern, or Temporary, are only eligible to participate in the 401(k) Plan.
• Employees scheduled on a 7 on/7 off schedule are eligible for all of the foregoing benefits except PTO or FTO.

Labcorp is proud to be an Equal Opportunity Employer. Labcorp strives for inclusion and belonging in the workforce and does not tolerate harassment or discrimination of any kind. We make employment decisions based on the needs of our business and the qualifications and merit of the individual. Qualified applicants will receive consideration for employment without regard to race, religion, color, national origin, sex (including pregnancy, childbirth, or related medical conditions), family or parental status, marital, civil union or domestic partnership status, sexual orientation, gender identity, gender expression, personal appearance, age, veteran status, disability, genetic information, or any other legally protected characteristic. Additionally, all qualified applicants with arrest or conviction records will be considered for employment in accordance with applicable law.