Senior Network Security Engineer

Eliassen Group; Cary (NC); Hybrid; USD 140,000 - 150,000; Full time

Benefits offered by this job

Bonus

Equity

Job summary

Eliassen Group is seeking a Senior Network Security Engineer for a hybrid role in Cary, NC. The position combines hands-on engineering across firewall design, ZTNA, cloud network security, and security operations with advisory duties supporting multiple teams.

You will design and support enterprise firewall solutions, network segmentation, and zero trust controls, while conducting security assessments, triage, and continuous improvement initiatives.

Qualifications

• Bachelor's degree or equivalent experience.
• 5+ years of network security experience.
• Hands-on experience with enterprise firewall platforms (Palo Alto, Cisco, Fortinet, Check Point, Juniper).
• Strong understanding of firewall/network security fundamentals and segmentation.
• ZTNA/ZTNA experience (Zscaler, Netskope, Illumio, Prisma Access).
• Cloud security experience; Azure preferred, AWS/GCP acceptable.

Responsibilities

• Design, implement, and manage enterprise-grade firewall solutions to enforce security policies.
• Design and support network segmentation and workload segmentation to isolate systems and apps.
• Architect and deploy ZTNA and Zero Trust security solutions.
• Support cloud and on-premises network security controls across environments.
• Conduct security assessments and identify vulnerabilities and gaps.
• Lead security improvement projects and strategic initiatives.

Skills

Firewall platforms

Zero Trust

Cloud security

Scripting (PowerShell/Python/Ansible)

Education

Bachelor's degree or equivalent experience

Tools

Palo Alto

Cisco

Fortinet

ZTNA tools (Zscaler/Netskope)

Job description

Hybrid Three days onsite per week. Tuesday - Thursday in Cary, NC

Our client seeks a Senior Network Security Engineer who will operate as a trusted technical advisor and hands-on engineer across network, cloud, and Zero Trust security domains. You will design and support enterprise firewall solutions, network segmentation, workload segmentation, ZTNA, cloud network security, and layered security controls. You will help determine what needs to be protected, why it needs to be protected, and how firewalls and other security controls can be used to contain threats and reduce risk.

This is a full-time, permanent opportunity, offering a competitive salary and comprehensive benefits package. Qualified applicants must be willing and able to work on a w2 basis.

Salary: $140,000 - $150,000/ yr. w2 + 10% Bonus + yearly equity award

Responsibilities

• Design, implement, and manage enterprise-grade firewall solutions to enforce network security policies and mitigate threats.
• Design and support network segmentation and workload segmentation to isolate systems, applications, and workloads and contain security threats.
• Architect and deploy ZTNA and Zero Trust security solutions.
• Design and support network security controls across cloud, on-premises, and hybrid environments.
• Apply layered security principles using firewalls and other security controls to contain threats and reduce risk.
• Configure and support cloud security technologies including WAFs and cloud-native network security controls.
• Conduct security assessments and identify vulnerabilities and security gaps.
• Perform security triage, incident investigation, and operational troubleshooting.
• Execute security configuration reviews, audit support, and security hygiene checks.
• Partner with network, infrastructure, cloud, and application teams on security initiatives.
• Lead security improvement projects and strategic annual initiatives.
• Other duties as assigned.

Experience Requirements

• 5+ years of network security, cybersecurity, or security engineering experience.
• Hands-on experience with one or more enterprise firewall platforms, such as Palo Alto, Cisco, Fortinet, Check Point, Juniper, or equivalent.
• Strong understanding of firewall and network security fundamentals, including how firewalls are used to protect systems and contain threats.
• Experience with network segmentation and workload segmentation.
• Experience with Zero Trust and ZTNA. Zscaler, Netskope, Illumio, Prisma Access, or similar.
• Solid understanding of networking concepts, including routing, traffic flows, WAFs, and network security.
• Cloud network security experience is required. Azure preferred, but AWS, GCP, or another major cloud platform is acceptable.
• Experience with layered security and using multiple security controls to contain threats and reduce risk.
• Ansible, Python, or PowerShell experience preferred.
• Approximately 5% travel.

Education Requirements

• Bachelor's degree or equivalent experience.