Senior Network Security Engineer

Cypress HCM; Town of Texas (WI); On-site; USD 120,000 - 150,000; Full time

Benefits offered by this job

Medical, dental, vision plans

Health Saving Accounts (HSA)

Flexible PTO

401K plan with company match

Job summary

Cypress HCM is seeking a Network Security Engineer to design, implement, and maintain the enterprise network security infrastructure. The role focuses on Palo Alto Networks and Zero Trust Architectures, with hands-on experience required in cloud security implementations.

Ideal candidates will have over 10 years in enterprise security and lead projects effectively. Benefits include comprehensive health plans, a 401K with company match, and generous PTO policies.

Qualifications

• 10+ years of experience in enterprise-level network security engineering.
• Deep expertise in Palo Alto Networks firewall configuration.
• Hands-on experience with Zero Trust Architectures.

Responsibilities

• Designing and maintaining an enterprise network security infrastructure.
• Managing Palo Alto Networks ecosystems and implementing ZTA.
• Administering Cloudflare and Cisco Umbrella for secure edge access.

Skills

Enterprise network security

Palo Alto Networks

Zero Trust Architecture

Cloud security

Project leadership

Vulnerability remediation

Education

PCNSE certification

Tools

Palo Alto Networks firewalls

Cloudflare

Cisco Umbrella

Job description

Location: Flower Mound, TX 75028 | In the office Monday – Friday

Responsibilities

• Designing, implementing, and maintaining an enterprise network security infrastructure
• Role is focused on Palo Alto Networks ecosystems and Zero Trust Architecture (ZTA)
• Advancing a hybrid environment, ensuring protection, secure access, and threat mitigation
• Configuring, managing, troubleshooting Palo Alto firewalls Panorama and Strata Cloud Manager
• Leveraging advanced threat protection capabilities – Enterprise DLP, Wildfire, URL Filtering, Global Protect VPN
• Designing and implementing ZTA network architectures utilizing advanced network micro-segmentation strategies and tools
• Administering Cloudflare and Cisco Umbrella for secure edge access, DNS filtering, DDoS mitigation, WAF, API protections, and web proxy
• Managing and maintaining Public PKI certificate lifecycles, ensuring secure encrypted communications and strong authentication
• Vulnerability remediation, incident response efforts, and 24x7 support on-call rotation

Requirements

• 10+ years of professional experience in enterprise-level network security engineering
• Experience leading projects and prioritization and direction of junior staff and consultants
• Deep expertise in Palo Alto Networks firewall configuration and troubleshooting
• Experience Panorama, Strata, DLP, and Global Protect
• Hands‑on experience with cloud security implementations, including NGFW within Azure
• Hands‑on experience with Zero Trust Architectures (ZTA) and network micro‑segmentation
• Experience with Cloudflare, Cisco Umbrella, Public PKI, automation, and IaC is preferred
• PCNSE certification is required
• Medical, dental, vision plans, Health Saving Accounts (HSA), Flexible Spending Accounts (FSA), 401K plan with company match, short-term and long-term disability, life insurance, flexible PTO, 3 floating holidays, paid parental leave, commuter benefits, and more