Remote Senior Network Security Engineer (Palo Alto)

Eliassen Group; Montpelier (VT); Remote; USD 170,822,000 - 257,611,000; Full time

Benefits offered by this job

Medical benefits

Dental benefits

Vision benefits

401k with company matching

Life insurance

Referral program

Job summary

Eliassen Group is seeking a Senior Network Security Engineer for a remote contract-to-hire engagement. You will secure and optimize a global network, focusing on Palo Alto platforms, VPNs, threat prevention, and zero trust initiatives across data centers, offices, and cloud environments.

Responsibilities include designing secure architectures, administering PAN-OS and Panorama, implementing NAC, and automating tasks with Terraform, Ansible, Python, or Bash, while mentoring junior engineers and

Qualifications

• 6+ years of network security engineering in complex production environments.
• Advanced hands-on experience with Palo Alto Networks PAN-OS and Panorama.
• Strong knowledge of firewall policy, NAT, VPN, segmentation, threat prevention, and routing.
• Experience with Juniper Junos, Cisco NX-OS, or Arista EOS.
• Experience with Terraform, Ansible, Python, or Bash for automation.
• Ability to own complex technical initiatives and troubleshoot high-impact issues.
• Strong documentation and cross-functional collaboration skills.
• Certifications such as PCNSE, CCNP Security/Enterprise, JNCIS or JNCIP are preferred.

Responsibilities

• Design, deploy, and maintain secure network architectures across data centers, offices, remote sites, and cloud-connected environments.
• Administer and optimize Palo Alto Networks technologies including PAN-OS, Panorama, GlobalProtect, Threat Prevention, URL Filtering, Application Control, and WildFire.
• Engineer and maintain firewall policy, segmentation, NAT, site-to-site VPN, remote-access VPN, and Zero Trust or SASE connectivity.
• Administer or support Network Access Control technologies and enterprise authentication controls.
• Analyze traffic and security logs, support vulnerability remediation, and participate in network-related incident response.
• Perform firewall upgrades, security hardening, and lifecycle maintenance aligned with change-management standards.
• Support routing, switching, WAN, and wireless infrastructure across data centers and global sites.
• Provide advanced troubleshooting for routing, firewall, connectivity, performance, and application-access issues.
• Support secure hybrid connectivity with Azure and AWS, including associated virtual firewall and routing technologies.
• Partner with infrastructure and cloud teams to incorporate network security requirements into solution designs.
• Coordinate with Palo Alto Networks, Juniper, and other vendors on escalations and technical issues.
• Automate repeatable network and security tasks using tools such as Terraform, Ansible, Python, or Bash.
• Develop and maintain configuration standards, network diagrams, runbooks, and technical documentation.
• Provide Tier 3 escalation support for outages, incidents, and complex network security issues.
• Mentor other engineers and share network security practices and troubleshooting methods.
• Participate in on-call rotations, planned maintenance windows, and emergency response when required.

Skills

Palo Alto Networks

PAN-OS / Panorama

Firewall policy

Network security engineering

Terraform / Ansible / Python / Bash

Zero Trust / SASE concepts

Education

Professional certifications (PCNSE, CCNP Security, CCNP Enterprise, JNCIS / JNCIP)

Tools

PAN-OS

Panorama

GlobalProtect

Threat Prevention

URL Filtering

Application Control

WildFire

Job description

Eliassen Group is seeking a Senior Network Security Engineer for a remote contract-to-hire engagement. You will secure and optimize a global network, focusing on Palo Alto platforms, VPNs, threat prevention, and zero trust initiatives across data centers, offices, and cloud environments.

Responsibilities include designing secure architectures, administering PAN-OS and Panorama, implementing NAC, and automating tasks with Terraform, Ansible, Python, or Bash, while mentoring junior engineers and