Network Security Engineer

Talentify; Town of Elma (NY); On-site; USD 120,000 - 155,000; Full time

Job summary

Talentify in New York region seeks an experienced Network Security Engineer to design and maintain secure firewall policies, perform hardening, and translate business requests into robust security controls.

The role requires hands-on PAN-OS expertise with Palo Alto firewalls, strong knowledge of policy management, and collaboration with stakeholders to ensure security requirements are implemented correctly.

Qualifications

• 5–8+ years of experience in network security engineering.
• Deep hands-on experience with Palo Alto Networks firewalls (PAN-OS).
• Strong understanding of firewall rulebases, NAT policies, zones, and security profiles.
• Experience with firewall hardening, audit remediation, and compliance frameworks.
• Ability to translate business requirements into technical security controls.

Responsibilities

• Design, implement, and maintain secure firewall policies aligned with business and security requirements.
• Perform firewall hardening activities, including rulebase optimisation, risk reduction, and compliance alignment.
• Translate incoming project and business requests into well-defined firewall rules and security policies.
• Collaborate with project managers, network engineers, and security teams to ensure requirements are implemented correctly.
• Conduct impact analysis and risk assessments for proposed firewall changes.
• Manage firewall policy changes through change control processes; monitor and troubleshoot firewall issues for high availability and performance.
• Maintain documentation for firewall rules, configurations, and design standards.

Skills

Analytical skills

Problem solving

Stakeholder coordination

Structured project experience

Independent working

Tools

Palo Alto PAN-OS

Tufin

Job description

Must Have:

• Advanced communication skills
• Firewall Policies
• Palo Alto firewall administration
• Palo Alto Networks Next Generation Firewalls (NGFW)

Nice to Have:

• Amazon Web Services (AWS) Security
• CISM Certification

JOB DESCRIPTION

Seeking an experienced Network Security Engineer with strong expertise in firewall hardening, policy design, and network security operations. The candidate will be responsible for analysing project requests and translating them into effective firewall rules and policy configurations. The role includes coordinating with project stakeholders to ensure security requirements are met and implemented correctly. Experience with Palo Alto & Tufin for firewall policy management is highly desirable. Additional experience in designing and implementing network segmentation strategies is a strong advantage.

Key Responsibilities:

• Design, implement, and maintain secure firewall policies aligned with business and security requirements
• Perform firewall hardening activities, including rulebase optimisation, risk reduction, and compliance alignment
• Analyse incoming project and business requests, translating them into well-defined firewall rules and security policies
• Collaborate with project managers, network engineers, and security teams to ensure requirements are accurately implemented
• Conduct impact analysis and risk assessments for proposed firewall changes
• Manage firewall policy changes through established change control processesMonitor and troubleshoot firewall-related issues, ensuring high availability and performance
• Maintain documentation for firewall rules, configurations, and design standards

Required Experience & Skills:

• 5–8+ years of experience in network security engineering
• Strong hands-on experience with Palo Alto Networks firewalls (PAN-OS)
• Deep understanding of firewall rulebases, NAT policies, zones, and security profiles
• Experience with firewall hardening, audit remediation, and compliance frameworks
• Proven ability to translate business requirements into technical security controls
• Strong analytical and problem-solving skills
• Experience working in structured project environments with multiple stakeholders

Preferred Skills:

• Experience with Tufin (or similar firewall policy orchestration tools) for rule analysis, automation, and compliance
• Experience designing and implementing network segmentation (including micro-segmentation strategies)
• Familiarity with cloud security (AWS, Azure) and hybrid network environments
• Knowledge of zero trust architecture principles

Certifications (Preferred/Desired):

• Palo Alto Networks Certified Network Security Engineer (PCNSE) – strongly preferred
• Palo Alto Networks Certified Network Security Administrator (PCNSA)
• CISSP, CISM, or equivalent security certification (nice to have)
• Relevant networking certifications such as CCNP Security or equivalent

Additional Requirements:

• Strong communication skills with the ability to work across technical and non-technical teams
• Ability to work independently and manage multiple priorities in a fast-paced environment
• Experience in regulated environments or with security compliance standards is a plus