Senior Network Engineer

Talentify; San Jose (CA); On-site; USD 90,000 - 124,000; Full time

Benefits offered by this job

Medical Insurance

Dental Insurance

Vision Insurance

Commuter Benefits

401K with company match

Job summary

Talentify in San Jose, CA is seeking a Senior Network Engineer to lead Zero Trust adoption for VPN access managed by Palo Alto technologies. You will help redesign VPN user hierarchies and implement identity- and role-based access controls.

This 6+ month onsite role requires hands-on security focus, collaboration with Cybersecurity and IT Architecture, and ensuring audit-ready configurations with AlienVault visibility.

Qualifications

• Senior-level experience in network security engineering.
• Hands-on with Palo Alto Networks firewalls and VPN.
• Knowledge of Zero Trust networking concepts.
• Ability to work onsite in San Jose, CA.
• Experience implementing identity- and role-based access controls.
• Hands-on experience with SIEM (AlienVault preferred).
• Strong troubleshooting and analytical skills.
• Effective communication with highly technical teams.

Responsibilities

• Design and configure Palo Alto Networks VPN solutions to support Zero Trust principles.
• Implement least-privilege VPN access, where users can only access systems required for their role.
• Define and enforce user- and group-based access policies rather than broad network access.
• Partner with cybersecurity leadership to align VPN controls with Zero Trust strategy.
• Support network segmentation and secure access to sensitive systems.
• Ensure configurations are auditable and defensible for compliance reviews.
• Use AlienVault and Palo Alto to analyze VPN traffic and user activity.
• Identify systems and applications accessed by VPN users for the engagement.
• Provide actionable insights to build a VPN access context.
• Collaborate with IT Architecture and Cybersecurity teams; communicate findings clearly.

Skills

Network Engineering

ZeroTrust

Palo Alto VPN

Tools

Palo Alto Firewall

AlienVault SIEM

Job description

JOB TITLE: Senior Network Engineer (ZeroTrust, Palo Alto VPN)

TOP 3 SKILLS: Network Engineering, ZeroTrust, Palo Alto VPN

LOCATION: San Jose, CA (100% onsite)

DURATION: 6+ months

RATE RANGE: $65.00 to $90.00/hour

POSITION SUMMARY

Senior Network Engineer needed to help optimize or redesign the VPN user group hierarchy to implement Zero Trust for the VPN that is managed by our Palo Alto Firewall with strong cybersecurity mindset to support the design, configuration, and implementation of Zero Trust networking, starting with VPN access using Palo Alto Networks technologies.

This role is initially focused on transforming our VPN environment from a traditional network-based model to an identity- and role-based Zero Trust access model. For the right candidate, the role will expand into additional security and network architecture areas over time.

The ideal candidate is hands-on, security-focused, and comfortable working closely with cybersecurity and infrastructure teams in a regulated, audit-conscious environment.

RESPONSIBILITIES

Zero Trust & VPN Engineering

• Design and configure Palo Alto Networks VPN solutions to support Zero Trust principles


• Implement least-privilege VPN access, where users can only access systems required for their role


• Define and enforce user- and group-based access policies rather than broad network access


• Partner with cybersecurity leadership to align VPN controls with Zero Trust strategy

Network Security & Visibility

• Support network segmentation and secure access to sensitive systems (e.g., admin and infrastructure services)


• Ensure configurations are fully auditable and defensible for future compliance reviews

Forensics & Access Context

• Use AlienVault and Palo Alto to:
  
  
  • Analyze VPN traffic and user activity
  
  
  • Identify systems and applications accessed by ~ 100 VPN users for this engagement
  
  
  • Support forensic investigations related to VPN access
  
  


• Provide actionable insights to help:
  
  
  • Build a VPN access context based on VPN traffic analysis of the 100 users
  
  
  • Assign users to the correct VPN groups as part of the Zero Trust initiative
  
  

Collaboration & Communication

• Work closely with:
  
  
  • The IT Architecture team
  
  
  • The Cybersecurity team
  
  


• Clearly communicate technical findings, access models, and design decisions


• Participate in design reviews, scoping discussions, and implementation planning

QUALIFICATIONS

• Ability to work onsite in San Jose, CA


• Senior-level experience in network security engineering


• Strong hands-on experience with Palo Alto Networks firewalls and VPN


• Demonstrated understanding of Zero Trust networking concepts


• Experience implementing identity-based and role-based access controls


• Hands-on experience with utilizing SIEM (AlienVault preferred) for logging, analysis, and forensic investigations


• Strong troubleshooting and analytical skills


• Ability to communicate effectively with highly technical teams

BENEFITS SUMMARY: Individual compensation is determined by skills, qualifications, experience, and location. Compensation details listed in this posting reflect the base hourly rate or annual salary only, unless otherwise stated. In addition to base compensation, full-time roles are eligible for Medical, Dental, Vision, Commuter and 401K benefits with company matching.

BENEFITS SUMMARY: Individual compensation is determined by skills, qualifications, experience, and location. Compensation details listed in this posting reflect the base hourly rate or annual salary only, unless otherwise stated. In addition to base compensation, full-time roles are eligible for Medical, Dental, Vision, Commuter and 401K benefits with company matching.