Senior Network Security Engineer

Jobtailor

Menomonee Falls (WI)

On-site

USD 120,000 - 170,000

Full time

3 days ago

Be an early applicant

Get more replies from employers

Send a job-specific resume in minutes.

Job summary

Jobtailor is a leading security-focused employer seeking a seasoned Network Security Engineer to design, implement, and manage cloud and on-premises firewalls and secure remote access.

The role emphasizes Zero Trust, cloud networking with GCP, and next-gen firewall policies across data centers, retail locations, and cloud environments. Collaboration with cross-functional teams is essential.

Qualifications

5+ years of network security experience in large-scale environments.
Strong understanding of TCP/IP, BGP, EIGRP, OSPF, VLANs, DNS/DHCP.
Hands-on with Palo Alto firewalls, Panorama, GlobalProtect, Prisma Access.
Knowledge of remote-access VPN, SASE, ZTNA, IPsec VPN, identity integration.
Certifications preferred: PCNSA, PCNSE, Prisma Access; CCNA/CCNP/CCIE/CISSP.
Experience with GCP networking: VPCs, Cloud NGFW, Cloud VPN, Cloud Interconnect.

Responsibilities

Design, implement, and support GCP network-security solutions including VPCs and Cloud NGFW.
Deploy and manage next-gen firewalls across data centers, retail locations, and cloud.
Own firewall-policy lifecycle from intake to decommissioning.
Lead hardware refreshes, upgrades, migrations with minimal business impact.
Troubleshoot firewall and network issues using logs and captures.
Design and support GlobalProtect VPN and Prisma Access for remote access.
Drive Zero Trust adoption and secure direct internet access.
Lead on-call support and root-cause analysis for incidents.

Skills

Google Cloud Platform

Palo Alto Firewalls

GlobalProtect VPN

Zero Trust

Network Security

VPC Architecture

Cloud NGFW

Routing

DNS/DHCP

Cloud Interconnect

Tools

Palo Alto VM-Series

Panorama

Prisma Access

Job description

Design, implement, and support Google Cloud Platform or similar cloud network-security solutions, including VPC architecture, Cloud NGFW, Palo Alto VM-Series firewalls, routing, segmentation, ingress and egress controls, NAT, and centralized logging
Design, deploy, configure, and support next-generation firewalls across data centers, retail locations, internet edge, B2B partner connectivity, remote access, and cloud environments
Own the firewall-policy lifecycle, including intake, design review, implementation, validation, documentation, periodic rule recertification, and decommissioning obsolete rules
Lead hardware refreshes, software upgrades, migrations, and platform consolidations with minimal business impact
Troubleshoot complex firewall, connectivity, routing, NAT, application, and performance issues using logs, packet captures, traffic-flow analysis, and monitoring tools
Design, implement, and support GlobalProtect VPN and Prisma Access services for secure remote-user connectivity
Drive the transition toward Zero Trust access controls, SSL decryption, consistent security policy enforcement, and secure direct internet access
Troubleshoot remote-user connectivity, application performance, authentication, voice and video quality, routing, and security-policy issues across GlobalProtect and Prisma Access
Lead lifecycle management, upgrades, capacity planning, resiliency testing, and operational improvements for remote-access and SASE platforms
Serve as an escalation resource for major network incidents, participate in the on-call rotation, support front-line operations teams with complex issues, lead root-cause analysis, and implement corrective actions to prevent recurrence

Requirements

5+ years of network security experience in large-scale, complex enterprise, or high-traffic global environments
Strong understanding of networking concepts and protocols, including TCP/IP, BGP, EIGRP, OSPF, VLANs, DNS/DHCP
Hands-on experience with Palo Alto Networks firewalls, Panorama, GlobalProtect VPN, and Prisma Access
Strong understanding of remote-access VPN, SASE, Zero Trust Network Access, IPsec VPN, identity integration, and security-policy design
Strong experience with Google Cloud Platform or similar cloud networking and security, including VPCs, firewall policies, Cloud NGFW or third-party cloud firewalls, Cloud VPN, Cloud Interconnect, Cloud Router, BGP, Cloud DNS, and load balancing
Experience troubleshooting GlobalProtect and Prisma Access issues using firewall logs, Prisma Access logs, packet captures, routing data, and end-user experience metrics
Experience designing secure connectivity for remote users, retail locations, cloud environments, data centers, and third-party partners
Preferred: Palo Alto Networks certifications such as PCNSA, PCNSE, or Prisma Access certification
Preferred: Cisco certifications such as CCNA, CCNP Enterprise, CCNP Security, CCIE Enterprise Infrastructure, or CCIE Security
Preferred: CISSP or equivalent security certification
Preferred: Experience with Cisco routing, switching, Cisco ACI, SD-WAN, and enterprise data-center networking
Preferred: Experience with Prisma Access, SASE, ZTNA, ADEM, and identity-based access controls
Preferred: Experience with FireMon or similar firewall policy-management and compliance platforms
Preferred: Experience supporting PCI DSS or another regulated environment

Core Competencies

Demonstrates expertise in designing and implementing network security solutions on Google Cloud Platform, including firewall management, remote access, and Zero Trust access controls. Proficient in troubleshooting complex network issues and leading lifecycle management for security platforms.

Highest-signal resume keywords