Senior Network Security Engineer

GTN Technical Staffing; Dallas (TX); Hybrid; USD 120,000 - 190,000; Full time

Job summary

GTN Technical Staffing’s client seeks a Senior Network Security Engineer to design, implement, and improve network security across a hyperscale infrastructure. This hands-on technical leader role combines security architecture, operations, incident response, and automation across data center, cloud, and hybrid environments.

The ideal candidate will apply Zero Trust principles, strengthen access controls, and lead automation efforts using Python, Ansible, Terraform, and vendor APIs, while

Qualifications

• Extensive experience in network engineering and network security with hands-on architecture and operations.

Responsibilities

• Design, implement, and maintain network security controls across trusted, untrusted, and DMZ environments.

Skills

Network security

Security architecture

Automation & scripting

Incident response

Zero Trust / segmentation

Hybrid/cloud networking

Tools

Palo Alto Networks

Fortinet

Check Point

F5

AlgoSec

Tufin

Jenkins

Git

Job description

Overview

Our client is seeking a Senior Network Security Engineer to design, implement, and improve network security across a hyperscale infrastructure environment.

This hands‑on technical leadership role combines security architecture, infrastructure operations, incident response, and automation. You will help protect critical systems and data, strengthen segmentation and access controls, and improve the reliability and consistency of security infrastructure.

Automation is central to the team’s roadmap. The ideal candidate brings deep network security expertise and practical experience using scripting, Infrastructure as Code, and vendor APIs to simplify deployment, policy management, troubleshooting, and lifecycle operations.

Key Responsibilities

Security Architecture & Engineering

• Design, implement, and maintain network security controls across trusted, untrusted, and DMZ environments.
• Deploy and optimize firewalls, proxies, VPNs, threat prevention profiles, and segmentation policies.
• Apply Zero Trust principles to strengthen access controls and limit unnecessary connectivity.
• Review security architectures, traffic flows, and policy changes to identify risks and improve protection.
• Support secure connectivity across data center, cloud, and hybrid infrastructure.
• Establish consistent configuration, hardening, and operational standards across security platforms.

Automation & Lifecycle Management

• Develop automation for security infrastructure provisioning, configuration, validation, maintenance, and ongoing support.
• Use Python, Ansible, Terraform, and vendor APIs to create repeatable workflows and reduce manual administration.
• Build and maintain firewall automation, policy review, and rule consolidation processes.
• Integrate security workflows with tools such as AlgoSec, Tufin, Jenkins, and Git, where applicable.
• Improve deployment safety through testing, version control, change validation, and documented recovery procedures.
• Automate recurring operational tasks and identify opportunities to improve consistency and efficiency.
• Serve as a senior escalation point for critical network security incidents and complex infrastructure issues.
• Lead troubleshooting across security platforms, network services, applications, and cloud connectivity.
• Develop incident response playbooks and support coordinated investigation and recovery.
• Conduct root‑cause analysis and implement corrective actions to reduce recurring incidents.
• Partner with internal security teams and external providers to improve detection, response, and operational readiness.

Vulnerability & Risk Management

• Oversee network vulnerability assessments and coordinate penetration testing activities.
• Prioritize remediation based on technical risk, business impact, and operational requirements.
• Contribute to threat modeling and security architecture reviews.
• Maintain network security policies, standards, and supporting documentation.
• Support compliance with applicable security requirements and established internal controls.

Technical Leadership & Collaboration

• Mentor junior and mid‑level engineers and guide peers through complex troubleshooting and design decisions.
• Provide technical direction across security engineering initiatives while maintaining hands‑on ownership.
• Partner with Infrastructure, DevOps, Cloud, and Application teams to incorporate security into platform design and operations.
• Communicate risks, technical recommendations, and incident findings clearly to stakeholders.
• Contribute to engineering standards, knowledge sharing, and continuous improvement.

Required Qualifications

• Extensive experience in network engineering and network security, including hands‑on architecture and operational responsibilities.
• Demonstrated experience designing and securing trusted, untrusted, and DMZ environments.
• Experience serving as a senior or lead engineer, guiding technical initiatives and mentoring other engineers.
• Strong understanding of the OSI model, TCP/IP, UDP, routing, switching, load balancing, and application traffic flows.
• Deep knowledge of network security technologies and protocols, including:
• Firewalls, proxies, and VPNs
• MACsec and IPsec
• HTTPS, TLS, and certificate chains
• DNS and NTP
• Authentication, authorization, and accounting (AAA)
• Domain‑based authentication and authorization
• Hands‑on experience with multiple security platforms, such as Palo Alto Networks, Fortinet, Check Point, and F5.
• Strong understanding of Zero Trust, network segmentation, and secure cloud networking in AWS or Azure.
• Practical scripting or infrastructure automation experience using Python, Ansible, Terraform, or comparable tools.
• Ability to troubleshoot complex production issues and coordinate incident resolution across teams.
• Strong written communication, documentation, and stakeholder‑management skills.
• Ability to work independently, manage competing priorities, and collaborate across engineering disciplines.
• Ability to work a hybrid schedule based in Dallas, Texas.

Preferred Qualifications

• Experience with firewall automation, policy orchestration, rule analysis, and policy consolidation.
• Familiarity with AlgoSec, Tufin, Jenkins, Git, and security vendor APIs.
• Knowledge of VXLAN/EVPN data center architectures and their security implications.
• Experience securing hybrid or multi‑cloud environments.
• Participation in technical integrations following mergers or acquisitions.
• Experience building Security Operations Center capabilities or partnering with Managed Security Service Providers.
• Relevant certifications, such as:
• CISSP
• CCIE Security
• GIAC GSEC, GCIH, or GXPN
• Palo Alto Networks certifications
• Fortinet certifications
• Comparable network security credentials

Ideal Candidate Profile

The strongest candidates combine network security depth, automation skills, and technical leadership.

You should be comfortable designing security controls, troubleshooting critical incidents, reviewing firewall policies, and building automation that makes infrastructure easier to operate securely. Success requires sound engineering judgment, clear communication, and ownership from initial design through production support.