Remote Senior Network & Security Engineer - Palo Alto

GovCIO; Frankfort (KY); Remote; USD 120,000 - 140,000; Full time

Benefits offered by this job

Employee Assistance Program (EAP)

Corporate Discounts

Learning & Development platform

Training, Education and Certification

Referral Bonus Program

Internal Mobility Program

Pet Insurance

Flexible Work Environment

Job summary

GovCIO is seeking a highly experienced Senior Network & Security Engineer to lead design, operation, and optimization of enterprise network-security infrastructure. The role focuses on Palo Alto firewalls, Panorama, High Availability, Cisco switching, and Cortex XSIAM integration.

The Senior Engineer will serve as a technical escalation point, mentor teams, and partner with SOC, infrastructure, cloud, and leadership teams to reduce risk while maintaining highly available services.

Qualifications

• Bachelor’s degree with 8+ years in network engineering or security
• 7+ years of progressive experience in network engineering, network security, firewall administration, or security infrastructure operations.
• 5+ years of hands-on Palo Alto Networks firewall experience in a production enterprise environment.
• Advanced operational experience with Palo Alto Panorama, including multi-device policy management, templates, device groups, upgrades, configuration management, and troubleshooting.
• Strong hands-on experience designing, maintaining, and troubleshooting Palo Alto High Availability environments.

Responsibilities

• Lead the design, deployment, administration, and lifecycle management of Palo Alto NGFW environments running PAN-OS.
• Own centralized firewall management through Palo Alto Panorama, including device groups, templates, template stacks, policy inheritance, upgrades, configuration backups, log monitoring, and firewall onboarding.
• Design and govern security policies using zero-trust, least-privilege, application-aware, and risk-based principles.
• Configure and troubleshoot security zones, NAT, virtual routers, static and dynamic routing, IPsec VPN, GlobalProtect, decryption, URL Filtering, Threat Prevention, WildFire, DNS Security, and App-ID policies.
• Lead enterprise network-segmentation and microsegmentation initiatives using security zones, VLANs, subinterfaces, virtual routers, routing controls, and application-based security policies.
• Develop secure controls for traffic between users, servers, applications, management networks, guest networks, IoT/OT devices, data-center workloads, and cloud resources.
• Architect, configure, test, and troubleshoot Palo Alto High Availability deployments, including Active/Passive and Active/Active designs as required.
• Resolve complex HA failures involving HA1 control links, HA2 session/state synchronization, HA3 packet forwarding, peer communications, configuration synchronization, monitoring failures, split-brain prevention, and failover recovery.

Skills

Palo Alto Networks firewall

Panorama

High Availability

Network segmentation

TCP/IP troubleshooting

Zero Trust security

Threat prevention

Education

Bachelor's degree

Tools

PAN-OS

Cisco switching/Nexus

Strata Logging Service

Cortex XSIAM

Log monitoring

Job description

GovCIO is seeking a highly experienced Senior Network & Security Engineer to lead design, operation, and optimization of enterprise network-security infrastructure. The role focuses on Palo Alto firewalls, Panorama, High Availability, Cisco switching, and Cortex XSIAM integration.

The Senior Engineer will serve as a technical escalation point, mentor teams, and partner with SOC, infrastructure, cloud, and leadership teams to reduce risk while maintaining highly available services.