Network Security Engineer/Architect

Insight Global; Erlanger (KY); On-site; USD 120,000 - 160,000; Full time

Job summary

Insight Global seeks an experienced Network Security Engineer to design, implement, and maintain enterprise security across a large environment. You will focus on Palo Alto, Cisco Firepower/FMC, and Cisco ISE, providing hands-on firewall configuration and vulnerability remediation.

You will collaborate with infrastructure, cloud, application, and security teams to strengthen the overall security posture and drive roadmap initiatives.

Qualifications

• 7+ years in network security engineering or architecture.

Responsibilities

• Design and implement enterprise network security solutions.
• Configure, troubleshoot, and optimize Palo Alto and Cisco firewalls.
• Manage firewall rules, segmentation, access controls, and security policies.
• Administer and support Cisco ISE/NAC.
• Conduct security assessments and firewall rule reviews.
• Identify and remediate vulnerabilities and security gaps.
• Troubleshoot network security incidents and perform root cause analysis.
• Maintain architecture diagrams, runbooks, policies, and change documentation.
• Partner with network, infrastructure, cloud, and application teams on security initiatives.
• Evaluate new security technologies and recommend improvements.
• Support junior team members and participate in knowledge sharing.

Skills

Palo Alto PAN-OS

Next-gen firewalls

Cisco ASA/Firepower

Cisco ISE 802.1X

Security architecture

Incident response

Python/Ansible/Terraform

Cloud security

Splunk/QRadar/SOAR

Networking fundamentals

Education

PCNSE / CCNP Security / CCIE Security

Tools

Panorama

VM-Series

FTD

Cisco ISE

Splunk

QRadar

SOAR

SolarWinds

Blue Coat ProxySG

Job description

Job Description

An employer l is looking for an experienced Network Security Engineer to support a large enterprise environment. This individual will be responsible for designing, implementing, and maintaining network security solutions across the organization, with a strong focus on Palo Alto, Cisco Firepower/FMC, and Cisco ISE.This person will provide hands-on support for firewall configuration and troubleshooting, network segmentation, access control, vulnerability remediation, and overall security architecture. They will also partner with infrastructure, cloud, application, and security teams to improve the organization's overall network security posture.

Day-to-Day

• Design and implement enterprise network security solutions


• Configure, troubleshoot, and optimize Palo Alto and Cisco firewalls


• Manage firewall rules, segmentation, access controls, and security policies


• Administer and support Cisco ISE/NAC


• Conduct security assessments and firewall rule reviews


• Identify and remediate vulnerabilities and security gaps


• Troubleshoot network security incidents and perform root cause analysis


• Maintain architecture diagrams, runbooks, policies, and change documentation


• Partner with network, infrastructure, cloud, and application teams on security initiatives


• Evaluate new security technologies and recommend improvements


• Support junior team members and participate in knowledge sharing


• Assist leadership with security roadmaps and project priorities

Skills and Requirements

7+ years in network security engineering or architecture. Must be a hands-on architect who designs solutions and also builds and configures them.Palo Alto expert: deep hands-on knowledge of PAN-OS architecture, design and configuration. Has built VM-Series and next-generation firewalls in a virtual environment and manages them through Panorama.5+ years in production supporting Cisco ASA/Firepower (FTD) and FMC, including migrating from FTD to next-generation firewalls.Security audits and gap analysis: has run security audits across Palo Alto, Cisco ASA and FTD (working alongside the wireless engineer on this role).Can find and close gaps in architecture, monitoring, process and security.Cisco ISE: 802.1X, RADIUS, TACACS+, device profiling and policy enforcement.Strong networking and security fundamentals: firewall rule management, segmentation and micro-segmentation, VPN (IPSec/SSL), IDS/IPS, DMZ, Zero Trust, BGP, OSPF, EIGRP, spanning tree, QoS and SD-WAN.PCNSE, CCNP Security, CCIE Security or PCSAE Python, Ansible or Terraform automation; Cisco ISE API integrationSplunk, QRadar or SOAR; SolarWinds NPM/NCM; Blue Coat ProxyCloud security (Azure, AWS or GCP)NIST, ISO 27001, PCI-DSS or SOC 2

We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal employment opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment without regard to race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or the recruiting process, please send a request to [e-mail].