Senior Network Security Architect — Zero Trust & Cloud

Eliassen Group; Cary (NC); Hybrid; USD 140,000 - 150,000; Full time

Benefits offered by this job

Bonus

Equity

Job summary

Eliassen Group is seeking a Senior Network Security Engineer for a hybrid role in Cary, NC. The position combines hands-on engineering across firewall design, ZTNA, cloud network security, and security operations with advisory duties supporting multiple teams.

You will design and support enterprise firewall solutions, network segmentation, and zero trust controls, while conducting security assessments, triage, and continuous improvement initiatives.

Qualifications

• Bachelor's degree or equivalent experience.
• 5+ years of network security experience.
• Hands-on experience with enterprise firewall platforms (Palo Alto, Cisco, Fortinet, Check Point, Juniper).
• Strong understanding of firewall/network security fundamentals and segmentation.
• ZTNA/ZTNA experience (Zscaler, Netskope, Illumio, Prisma Access).
• Cloud security experience; Azure preferred, AWS/GCP acceptable.

Responsibilities

• Design, implement, and manage enterprise-grade firewall solutions to enforce security policies.
• Design and support network segmentation and workload segmentation to isolate systems and apps.
• Architect and deploy ZTNA and Zero Trust security solutions.
• Support cloud and on-premises network security controls across environments.
• Conduct security assessments and identify vulnerabilities and gaps.
• Lead security improvement projects and strategic initiatives.

Skills

Firewall platforms

Zero Trust

Cloud security

Scripting (PowerShell/Python/Ansible)

Education

Bachelor's degree or equivalent experience

Tools

Palo Alto

Cisco

Fortinet

ZTNA tools (Zscaler/Netskope)

Job description

Eliassen Group is seeking a Senior Network Security Engineer for a hybrid role in Cary, NC. The position combines hands-on engineering across firewall design, ZTNA, cloud network security, and security operations with advisory duties supporting multiple teams.

You will design and support enterprise firewall solutions, network segmentation, and zero trust controls, while conducting security assessments, triage, and continuous improvement initiatives.