Network Security Engineer (CCNP, Palo Alto NGFW)

IDR; Atlanta (GA); Remote; USD 120,000 - 180,000; Full time

Job summary

gobravvo is recruiting a Network Security Engineer to lead enterprise network security implementations across diverse industries. You will deploy and manage Cisco ISE, Cisco Secure Firewalls, and Palo Alto NGFW in on-premises and cloud environments, coordinating with clients and internal teams to design secure, scalable networks.

You will implement SSE/SD-WAN solutions, ensure AD/AAD integration, and maintain thorough documentation.

Qualifications

• 10 to 15 years of professional experience in enterprise network/security engineering roles.

Responsibilities

• Lead end-to-end implementation of enterprise network security solutions, from discovery to delivery and post-implementation support.
• Deploy and configure Cisco ISE solutions with 802.1X, MAB, Guest Portal, and AD/AAD integration.
• Implement Cisco Secure Firewalls, manage Secure Client deployments, configure NAT, VPNs, and FMC/Secure Cloud Control.
• Configure Palo Alto NGFW with User-ID, GlobalProtect, NAT, VPNs, and Panorama/Strata Cloud Manager.
• Support SSE and SD-WAN deployments ensuring integration with existing security architectures.
• Collaborate with customers and internal teams to design secure, scalable networks.
• Document configurations, architectures, and operational procedures.

Skills

Network security

Client-facing

Leadership

Education

CCNP Security

Palo Alto NGFW Certification

Tools

Cisco ISE

Cisco Secure Firewall

Palo Alto NGFW

SSE

SD-WAN

HPE Aruba ClearPass

Azure Active Directory

Job description

The Network Security Engineer (CCNP, Palo Alto NGFW) plays a critical role in the delivery of robust network security solutions for enterprise-level organisations. This position offers an exciting opportunity for skilled professionals to leverage their technical expertise in network access control, next-generation firewalls, and secure connectivity, working with industry-leading technologies from Cisco and Palo Alto. The Network Security Engineer will work in a dynamic, client-facing environment, collaborating with internal teams and customers to implement and configure comprehensive security frameworks that safeguard enterprise networks. This role includes the opportunity for remote work, with occasional travel to client locations as needed, providing flexibility and variety in day-to-day responsibilities.

Network Security Engineer (CCNP, Palo Alto NGFW) - Summary

As a Network Security Engineer (CCNP, Palo Alto NGFW), you will be responsible for leading and executing enterprise network security implementations across various industries. Your primary focus will be on the deployment and management of Cisco Identity Services Engine (ISE), Cisco Secure Firewalls, and Palo Alto Networks Next-Generation Firewalls (NGFW), ensuring each solution meets client security requirements and industry standards. You will collaborate directly with clients and cross-functional teams to architect, implement and optimise secure network infrastructures, supporting both on-premises and cloud-based environments.

Duties & Responsibilities

• Lead end-to-end implementation of enterprise network security solutions, from initial discovery and requirements gathering to final delivery and post-implementation support.
• Deploy and configure Cisco Identity Services Engine (ISE) solutions, including 802.1X authentication, MAC Authentication Bypass (MAB), Guest Portal services, and integration with Active Directory and Azure Active Directory for wired and wireless network access control.
• Implement Cisco Secure Firewalls, managing Secure Client deployments, configuring access policies, Network Address Translation (NAT), routing, site-to-site VPNs, and centralised management using Firepower Management Center (FMC) or Secure Cloud Control.
• Configure and deploy Palo Alto Next-Generation Firewalls, utilising features such as User-ID, Cloud Identity Engine, GlobalProtect, security policy enforcement, NAT, routing, site-to-site VPNs, and management via Panorama or Strata Cloud Manager.
• Support the deployment of Secure Service Edge (SSE) and Software-Defined Wide Area Network (SD-WAN) solutions, ensuring seamless integration with existing security architectures.
• Collaborate with customers and internal technical teams to design and deliver secure, scalable network solutions tailored to client environments.
• Implement network access control and authentication solutions using HPE Aruba ClearPass, enabling secure guest access and directory integrations.
• Maintain thorough documentation of configurations, architectures and operational procedures for all deployed solutions.
• Stay current with emerging technologies in the network security space, proactively recommending enhancements and best practices to clients and internal stakeholders.

Salary & Benefits

• Competitive compensation package commensurate with experience and industry standards.
• Comprehensive benefits, including medical, dental, vision and life insurance coverage.
• Access to an Employee Stock Ownership Program (ESOP).
• Opportunities for ongoing professional development and advancement within an industry-leading organisation.
• Dedicated engagement manager support to ensure professional success and career growth.
• Recognition as part of a company awarded ClearlyRated's Best of Staffing Client and Talent Award for multiple consecutive years.

Qualifications & Requirements

• 10 to 15 years of professional experience in enterprise network/security engineering roles.
• Extensive, hands‑on experience with the implementation and configuration of Cisco ISE, Cisco Secure Firewalls and Palo Alto Networks NGFW solutions in client-facing environments.
• Proven expertise in deploying and managing Palo Alto Secure Service Edge (SSE), Cisco or Palo Alto SD-WAN and enterprise wired/wireless network security solutions.
• Experience implementing HPE Aruba ClearPass for network access control, authentication, guest access and directory integration.
• Strong working knowledge of Microsoft Active Directory and Azure Active Directory integration for network authentication and policy enforcement.
• Active Palo Alto NGFW certification required.
• Active Cisco CCNP Security certification required.

Ideal Candidate Snapshot

• Highly motivated self‑starter with a passion for network security and client success.
• Excellent communication skills, able to engage with stakeholders at all organisational levels.
• Demonstrated leadership in complex, multi‑phase security implementation projects.
• Adaptable and eager to learn, with a commitment to staying current on industry trends and evolving security technologies.
• Proven ability to work independently and as part of a collaborative team in fast‑paced environments.

Other Relevant Information

• This position provides the flexibility of remote work, with travel to client sites as required to ensure successful project delivery and client engagement.
• The organisation has over 25 years of proven experience in the industry, offering a stable and growth‑oriented career environment for network professionals.
• Employees are supported by a dedicated engagement manager focused on professional development and success.
• Joining this team offers the chance to work with a recognised leader in network security services and solutions.

All qualified applicants will receive consideration for employment without regard to race, colour, religion, sex, sexual orientation, gender identity, national origin, disability or status as a protected veteran. IDR is subject to certain governmental recordkeeping and reporting requirements for the administration of civil rights laws and regulations. In order to comply with these laws, we invite employees to voluntarily self‑identify their race or ethnicity, gender, and veteran status (if applicable). Submission of this information is voluntary and refusal to provide it will not subject you to any adverse treatment. The information obtained will be kept confidential and may only be used in accordance with the provisions of applicable laws, executive orders and regulations, including those that require the information to be summarised and reported to the federal government for civil rights enforcement. You may access this form here.