Network Security Engineer Master

GovCIO; United States; Remote; USD 140,000 - 190,000; Full time

Job summary

GovCIO is seeking a highly experienced Master Network & Security Engineer to lead the design, operation, and optimization of enterprise network-security infrastructure. The role focuses on Palo Alto NGFWs, PAN-OS, and related technologies, with high availability and secure configurations.

You will partner with SOC and infrastructure teams across the United States in a fully remote capacity, driving architecture standards, incident escalation, and continuous improvement to reduce risk and

Qualifications

• Extensive experience designing and operating enterprise network-security infrastructure.
• Expertise with Palo Alto PAN-OS and Panorama.
• Strong knowledge of zero-trust and least-privilege principles.
• Ability to lead security architecture initiatives.
• Collaboration with SOC and cross-functional teams.

Responsibilities

• Lead design, deployment, and lifecycle management of NGFW environments.
• Manage firewall configurations via Panorama (device groups, templates, upgrades).
• Define security policies with zero-trust, least-privilege, risk-based approach.
• Configure security zones, NAT, VPN, decryption, URL Filtering, and Threat Prevention.
• Drive network segmentation initiatives using VLANs and security policies.
• Collaborate with SOC, infra, cloud, and app teams to reduce risk.

Skills

Network security

Palo Alto Networks

PAN-OS

Zero-trust

Firewall management

High availability

Incident response

Tools

Palo Alto Panorama

NGFW (Palo Alto)

GlobalProtect

WildFire

DNS Security

App-ID policies

Job description

United States

Suitability/Public Trust

Fully remote

Information Technology

Overview

GovCIO is seeking a highly experienced Master Network & Security Engineer to lead the design, operation, troubleshooting, and continuous improvement of enterprise network-security infrastructure. This role is responsible for Palo Alto Networks next-generation firewalls, Panorama, High Availability, Cisco switching, network segmentation, Cortex XSIAM, and Strata Logging Service.

The Senior Engineer will serve as a technical escalation point for complex network and security incidents, lead architecture and implementation initiatives, establish standards, and partner with SOC, infrastructure, cloud, application, and leadership teams to reduce risk and maintain highly available services.

This position is located within the United States and is fully remote.

Responsibilities

• Lead the design, deployment, administration, and lifecycle management of Palo Alto Networks NGFW environments running PAN-OS.
• Own centralized firewall management through Palo Alto Panorama, including device groups, templates, template stacks, policy inheritance, upgrades, configuration backups, log monitoring, and firewall onboarding.
• Design and govern security policies using zero-trust, least-privilege, application-aware, and risk-based principles.
• Configure and troubleshoot security zones, NAT, virtual routers, static and dynamic routing, IPsec VPN, GlobalProtect, decryption, URL Filtering, Threat Prevention, WildFire, DNS Security, and App-ID policies.
• Lead enterprise network-segmentation and microsegmentation initiatives using security zones, VLANs, subinterfaces, virtual routers, routing controls, and application-based security policies.
• Develop secure controls for traffic between users, servers, applications, management