Secret Cleared Network Security Engineer

Insight Global (United States); San Diego (CA); On-site; USD 120,000 - 160,000; Full time

Job summary

Insight Global is seeking a Network Security Engineer to manage, secure, and troubleshoot next-generation firewall and network security infrastructure across on-premises and cloud environments. The role emphasizes Palo Alto technologies, Zero Trust, and DoD security requirements for large government environments.

You will configure NGFWs via Panorama and PAN-OS, analyze logs, support VPN and cloud connectivity (AWS/Azure), and advance Zero Trust with STIG/IAVM compliance and log analytics using

Qualifications

• 7+ years of professional experience in Network/Systems Engineering.
• Experience with on-prem and cloud enterprise firewalls, IPS, VPNs.
• Knowledge of VLANs and firewall rule implementation.
• Experience applying STIGs, IAVMs, and CTO directives.

Responsibilities

• Configure and manage Palo Alto NGFWs using Panorama and PAN-OS.
• Troubleshoot connectivity, routing, firewall, and security issues.
• Analyze logs (GlobalProtect, VPN, firewall) for incidents.
• Support secure AWS and Azure connectivity.
• Implement ZTNA technologies transitioning from VPN to Zero Trust.

Skills

Active Secret Clearance

IAT II

7+ years exp

Enterprise firewall experience

Network segmentation

STIGs & IAVMs

NGFW knowledge

Tools

Palo Alto PAN-OS

Panorama

GlobalProtect

Splunk

Elastic

AWS

Azure

ZTNA

Job description

Job Description

We are seeking a Network Security Engineer to manage, secure, and troubleshoot next-generation firewall and network security infrastructure across on-premises and cloud environments. This role will have a strong focus on Palo Alto Networks technologies, Zero Trust, and DoD security requirements in support of large government environments.

Key Responsibilities:

Configure, deploy, manage, and troubleshoot Palo Alto Next-Generation Firewalls (NGFWs) using Panorama and PAN-OS.Perform network troubleshooting and packet analysis to identify and resolve connectivity, routing, firewall, and security issues.Analyze GlobalProtect logs, firewall traffic logs, and threat logs to troubleshoot VPN and security incidents.Configure and troubleshoot GlobalProtect, IPsec VPNs, site-to-site VPNs, firewall policies, VLANs, and network segmentation.Implement STIGs, IAVM/CTO requirements, threat prevention, and DNS security controls.Support secure connectivity into AWS and Azure environments and validate firewall and port-exception requests.Support log aggregation and security analysis using Splunk, Elastic, or similar platforms.Research, implement, and maintain ZTNA technologies, helping transition traditional VPN and port-based access toward a Zero Trust architecture.

Skills and Requirements

• Active Secret ClearanceIAT II 7 years of professional experience in Network/Systems Engineering
• Strong experience managing, configuring, and troubleshooting enterprise firewalls, IPS, and VPN devices in both on-prem and cloud environments
• Deep knowledge of network segmentation, VLANs, and firewall rule implementation
• Experience applying STIGs, IAVMs, and CTO directives with strong documentation skills
• Proficiency with Next Generation Firewalls (NGFW), Palo Alto Panorama centralized management platform and Pan-OS.
• Hands-on experience with log aggregation and analysis using Splunk, Elastic. Global Protect Log Analysis
• Knowledge of cloud networking and secure connectivity methods for AWS and Azure
• Experience with Zero Trust Network Access (ZTNA) architecture and migration from traditional access models

We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal employment opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment without regard to race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or the recruiting process, please send a request to [e-mail].