Senior Network & Security Engineer (Palo Alto)

Simpson Thacher & Bartlett LLP; New York (NY); On-site; USD 175,000 - 210,000; Full time

Job summary

Simpson Thacher & Bartlett LLP is seeking a Senior Network Engineer to fortify the firm’s network and security posture. You will design, deploy, and maintain secure connectivity across on‑premises and cloud environments, while guiding junior engineers and ensuring regulatory compliance.

The role requires 7+ years of experience with Palo Alto, PAN-OS, Prisma Access VPN, and SASE, with strong analytical and collaboration skills.

Qualifications

• Bachelor's degree or equivalent professional experience in network security.
• 7+ years of relevant experience.
• Proficient in network protocols, routing and switching.
• Ability to troubleshoot complex network security issues.
• Familiarity with firewall management tools and security monitoring technologies.

Responsibilities

• Architect, deploy, and maintain secure network solutions across on‑premises and cloud environments.
• Manage firewall rules and policies; optimize rule bases and security zones.
• Perform regular security audits and ensure regulatory compliance.
• Identify vulnerabilities and recommend security posture enhancements.
• Lead firewall migration projects and oversee upgrades; provide guidance to junior staff.

Skills

Palo Alto Networks

PAN-OS

Fortinet

VPN/SASE

Security monitoring

Network troubleshooting

Prisma Access VPN

SASE targets

Team collaboration

Education

Bachelor's degree in IT, Cybersecurity, CS, or related field

Tools

Palo Alto SD-WAN-IONs

Job description

Simpson Thacher & Bartlett LLP is seeking a Senior Network Engineer to fortify the firm’s network and security posture. You will design, deploy, and maintain secure connectivity across on‑premises and cloud environments, while guiding junior engineers and ensuring regulatory compliance.

The role requires 7+ years of experience with Palo Alto, PAN-OS, Prisma Access VPN, and SASE, with strong analytical and collaboration skills.