On-Site Senior Network Security Engineer | DoD/NGFW

Techead; San Diego (CA); Sur place; USD 120 000 - 140 000; Plein temps

Résumé du poste

TECHEAD in San Diego, CA seeks a Senior Network Security Engineer to design, deploy, and manage NGFWs and IPsec VPNs in on-prem and hybrid-cloud environments. The role requires DoD security clearance (Secret), day-one IAT Level II, and hands-on expertise with Palo Alto technologies, SIEM (Splunk/Elastic), and zero-trust network architectures to protect critical networks and meet DoD mandates.

Your duties include configuring PAN-OS via Panorama, performing deep packet inspection, and coordinating

Qualifications

• Bachelor's degree in engineering or equivalent hands-on experience.
• 7+ years of professional systems/network security engineering experience.
• Active Secret security clearance.
• Active DoD IAT Level II certification required on day one (e.g., Security+ CE).
• Hands-on proficiency with Palo Alto Firewalls, PAN-OS, GlobalProtect, IPsec VPNs, and troubleshooting.
• Experience with log analysis using Splunk, Elastic, or similar SIEMs.

Responsabilités

• Manage, deploy, configure, and troubleshoot Palo Alto NGFWs, PAN-OS, and IPsec VPNs across on-prem and hybrid-cloud environments.
• Administer firewall configurations, policy updates, and system upgrades via Panorama.
• Conduct deep packet inspection and network troubleshooting.
• Analyze logs from firewall traffic and threat intel using Splunk/Elastic SIEMs.
• Design and maintain network segmentation and Zero Trust initiatives; support ZTNA migrations.
• Implement DISA STIGs and maintain documentation for boundary systems.

Connaissances

Palo Alto Firewalls

PAN-OS

Panorama

GlobalProtect

IPsec VPNs

Deep packet inspection

Zero Trust

Splunk

Elastic

Formation

Bachelor's degree in engineering or equivalent experience

Outils

Palo Alto Panorama

AWS

Azure

Description du poste

TECHEAD in San Diego, CA seeks a Senior Network Security Engineer to design, deploy, and manage NGFWs and IPsec VPNs in on-prem and hybrid-cloud environments. The role requires DoD security clearance (Secret), day-one IAT Level II, and hands-on expertise with Palo Alto technologies, SIEM (Splunk/Elastic), and zero-trust network architectures to protect critical networks and meet DoD mandates.

Your duties include configuring PAN-OS via Panorama, performing deep packet inspection, and coordinating