Network Security Engineer

improvixinc; Annapolis (MD); Hybrid; USD 120,000 - 160,000; Full time

Job summary

improvixinc is seeking an experienced IT security engineer in Annapolis, MD for a hybrid role. The candidate will implement and optimize Palo Alto firewall services, IDS/IPS, VPNs, and DLP, while mentoring junior staff and producing key technical documentation.

Minimum credentials include an IT-related associate degree with PCNSE and CCNP certifications. Strong networking experience and cloud/network security knowledge are required to support enterprise data centers.

Qualifications

• Associate degree in IT or related field.
• Active PCNSE certification required.
• Active CCNP Enterprise or CCNP Security certification required.
• Bachelor’s degree preferred.
• Active PCCSE certification preferred.
• Active CCIE Enterprise Infrastructure or Security certification preferred.

Responsibilities

• Provide hands-on design, deployment, and optimization of security architectures.
• Mentor junior engineers and share best practices.
• Prepare technical diagrams, design documents, and project plans.
• Present technical findings to stakeholders as needed.

Skills

Palo Alto firewalls

IDS/IPS with Palo Alto

DLP

TLS/SSL Inspection

VPNs (Palo Alto)

Certificate PKI

Mentoring juniors

Technical presentations

Networking fundamentals

Citrix/Cloud networking

Education

Associate degree in IT

Bachelor’s degree in IT

Tools

Palo Alto Panorama

Nessus

NMAP

Wireshark

Opnet

Riverbed

SolarWinds

A10 Networks

FreeRadius

ISE (Cisco)

Job description

Minimum Requirements:

• Associate degree in an Information Technology (IT) related field.
• Active certification:Palo Alto Networks Certified Network Security Engineer (PCNSE) Certification.
• Active certification:Cisco Certified Network Professional (CCNP) Enterprise or (CCNP) Security Certification.

Preferred Requirements:

• Ten (10) years of CONUS technical experience in IT networking and network security.
• Bachelor’s degree in an Information Technology (IT) related field.
• Active certification:Prisma Certified Cloud Security Engineer (PCCSE) Certification from Palo Alto Networks.
• Active certification:Cisco Certified Internetwork Expert (CCIE) in Enterprise Infrastructure or Security Certification.

Position Skills, Experience, & Capabilities:

• Five (5) years of experience with:
• Palo Alto Networks’ next-generation firewall services.
• Intrusion Detection and Prevention with Palo Alto Networks.
• Content Filtering Palo Alto Networks.
• Virtual Private Networks using Palo Alto network systems.
• Data Loss Prevention.
• TLS/SSL Inspection.
• Four (4) years of experience in Complex switching, routing, and wireless with Cisco Systems.
• Three (3) years of experience in Reverse Proxies, Load Balancing with A10 networks.
• Two (2) years of experience in Network Access Control - Cisco Identity Services Engine (ISE), Free Radius, and Access Control Lists (ACLs).
• General experience with the following:
• Implementing multifactor authentication solutions with Microsoft.
• Cloud-based virtual networking and security services.
• Authentication standards - (802.1x) in wired and wireless applications.
• Scalable routing protocols: Enhance Interior Gateway Routing Protocol (EIGRP), Open Shortest Path First (OSPF), and Border Gateway Protocol (BGP).
• Enterprise Data Center is implementing micro-segmentation.
• Certificate Management, Public Key Infrastructure (PKI).
• Vulnerability management using Nessus, NMAP, Windows, Unix, and Linux OS.
• Packet/Protocol Analysis using Opnet, Riverbed, Wireshark, and taps.
• Centralized Management using Panorama, SolarWinds.
• Major server and desktop operating systems and utilities.
• Ability to work independently, troubleshoot, and provide mentoring to junior associates.
• Communicate effectively when providing presentations.
• Produce technical documents (diagrams, design documents, project plans and schedules, and user instructions) as required.

Work Arrangement:

• Work shall be performed in a hybrid setting each week, Monday through Friday, as follows: Two (2) days remote at a suitable off-site location. The client reserves the right to determine that an off-site location is unsuitable (e.g., crowded public space with distracting background noise during meetings).
• Three (3) days on site in Annapolis, MD 21401.
• Perform during normal operating hours, Monday through Friday, 8:00 AM to 4:30 PM Eastern Standard Time (EDT).
• The candidate shall be flexible in extending coverage hours or scheduling to meet deadlines, project requirements, and/or on-call operational support, including evenings, nights, weekends, and holidays.