Remote Network Security Engineer (Firewall & ISE Expert)

Planet Group; Erlanger (KY); A distancia; USD 69.000 - 83.000; Jornada completa

Descripción del empleo

Title: Network Security Engineer
Location: Remote
Contract length: 6 month
Schedule: Normal Business Hours
Pay: 50-60 per hour

ABOUT:
We are seeking a highly skilled and experienced Network Security Engineer to join our Information Technology team. In this role, you will be responsible for designing, implementing, and maintaining robust network security infrastructure to protect organizational assets. You will serve as a subject matter expert in firewall architecture, network access control, and security policy enforcement, working closely with the Network Manager to align security initiatives with business objectives.

KEY RESPONSIBILITIES

• Design, architect, and implement scalable network security solutions, including firewall policies, segmentation strategies, and access control frameworks across enterprise environments.

• Hands on Experience with Palo Alto , FMC , Blue Coat Proxy

• Lead the end-to-end lifecycle management of Cisco and Palo Alto firewall platforms, including configuration, rule optimization, health monitoring, and capacity planning.

• Administer and manage Cisco Identity Services Engine (ISE) for network access control (NAC), including policy enforcement, posture assessment, profiling, and reporting.

• Conduct regular security assessments, firewall rule reviews, and audits to identify and remediate vulnerabilities and policy gaps.

• Develop and maintain comprehensive network security documentation including architecture diagrams, runbooks, change management records, and security policies.

• Collaborate with cross-functional teams (infrastructure, cloud, applications) to integrate security controls into new and existing systems.

• Respond to and lead investigation of network security incidents, performing root cause analysis and implementing corrective actions.

• Evaluate and recommend new security technologies, tools, and best practices to continuously improve the security posture.

• Mentor junior security team members and contribute to knowledge-sharing initiatives across the IT organization.

• Partner with the Network Manager to define security roadmaps, project priorities, and resource requirements.

REQUIRED QUALIFICATIONS

Education

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field; equivalent work experience will be considered.

Experience (Must Have)

• Minimum 7 years of hands-on experience in network security architecture and design, with demonstrated expertise in enterprise firewall design and deployment.

• Hands on configuration and troubleshooting experience with Palo Alto & Cisco FMC

• Minimum 5 years of direct, production-level experience administering Cisco ASA / Firepower and Palo Alto Networks (PAN-OS) firewall platforms.

• Proven experience with Cisco Identity Services Engine (ISE), including configuration of 802.1X, RADIUS, TACACS+, profiling policies, guest access, and ISE reporting/dashboards.

• Strong knowledge of network security principles including zero-trust architecture, micro-segmentation, VPN (IPSec/SSL), IDS/IPS, and DMZ design.

• Experience with network protocols including BGP, OSPF, EIGRP, spanning tree, QoS, and SD-WAN concepts in a security context.

• Demonstrated ability to document complex network security architectures and present to both technical and non-technical stakeholders.

PREFERRED QUALIFICATIONS (NICE TO HAVE)

Certifications

• Cisco Certified Network Professional - Security (CCNP Security) or Cisco Certified Internetwork Expert (CCIE Security).

• Palo Alto Networks Certified Network Security Engineer (PCNSE) or Palo Alto Networks Certified Security Automation Engineer (PCSAE).

• Cisco Certified CyberOps Associate/Professional or equivalent Cisco security certification.

Technical Skills

• API integration experience using Python with Cisco ISE - including scripting automated policy changes, generating custom reports, and integrating ISE data with ITSM or SIEM platforms.

• Experience with SolarWinds Network Performance Monitor (NPM) and/or Network Configuration Manager (NCM), including API-based automation and custom alerting workflows using Python.

• Familiarity with SOAR platforms, SIEM tools (Splunk, QRadar), or security orchestration frameworks.

• Exposure to cloud security (AWS, Azure, GCP) and cloud-native firewall/security controls.

• Experience with DevSecOps practices and infrastructure-as-code tools (Ansible, Terraform) for network security automation.

CORE COMPETENCIES

• Analytical thinking with strong problem-solving skills in high-pressure, production environments.

• Excellent written and verbal communication skills with the ability to produce clear, concise technical documentation.

• Strong understanding of compliance frameworks such as NIST, ISO 27001, PCI-DSS, or SOC 2 as applied to network security.

• Ability to manage multiple concurrent projects and priorities while meeting deadlines.

• Collaborative mindset with the ability to work effectively across distributed teams.

WORK ENVIRONMENT & EXPECTATIONS

• This position reports directly to the Network Manager and operates within a collaborative IT security team.

• Participation in an on-call rotation may be required for critical security incidents and change windows.

• Travel may be required on a limited basis for site assessments or vendor engagements.