Senior Network Security Architect - Hybrid & Cloud

ZealHire Inc.; Mechanicsville (VA); Hybrid; USD 120,000 - 160,000; Full time

Job summary

ZealHire Inc. in Mechanicsville, VA seeks a Senior Network Security Engineer to design, implement, and sustain secure network and cloud infrastructure for a statewide enterprise.

This hybrid role requires 12+ years of experience, strong firewall, SIEM, and incident response skills, plus hands-on work with Palo Alto, Azure networking, WAF, and SD-WAN. Local candidates only; visa restrictions apply; in-person interview.

Qualifications

• 12+ years of network security engineering experience.
• Experience with hybrid enterprise networks and security controls.
• Proven ability to design and implement secure architectures.

Responsibilities

• Ensure network security architecture aligns with standards before and after deployment.
• Lead incident investigations and containment of security events.
• Review firewall rules for compliance with security standards.
• Design and maintain secure hybrid network architecture across on-prem and Azure.
• Monitor security events using SIEM and coordinate incident response.
• Perform network security assessments and remediation guidance.
• Develop security standards, diagrams, and documentation.
• Support penetration testing and remediation efforts.
• Participate in on-call support during critical incidents.
• Proactively hunt threats and detect anomalies.
• Validate WAF/firewall placement and manage agency WAF(s).
• Diagnose issues using logs, SIEM, and diagnostic tools.

Skills

WAF/NGFW

Incident response

Threat intelligence

Threat hunting

Splunk SIEM

Microsoft Sentinel

Nessus

Tenable

Firewall management

Tools

Splunk SIEM

Azure networking

Palo Alto Firewalls

ExpressRoute

Job description

ZealHire Inc. in Mechanicsville, VA seeks a Senior Network Security Engineer to design, implement, and sustain secure network and cloud infrastructure for a statewide enterprise.

This hybrid role requires 12+ years of experience, strong firewall, SIEM, and incident response skills, plus hands-on work with Palo Alto, Azure networking, WAF, and SD-WAN. Local candidates only; visa restrictions apply; in-person interview.