Senior Network Security Engineer - Palo Alto, Check Point, Fortinet, Azure, AWS

AxiaMetrics LLP; United States; Hybrid; USD 140,000 - 190,000; Full time

Job summary

AxiaMetrics is seeking a Senior Network Security Engineer to design, implement and support security across on-premises, cloud, and hybrid environments. Lead Zero Trust initiatives, firewall administration, and secure Azure/AWS networks to protect critical production systems.

Experience with IDS/IPS, WAF, DDoS protection, and security tooling (Sentinel, Splunk, QRadar, Cortex XDR, CrowdStrike, Darktrace) is highly valued. Hybrid work and cross-functional collaboration are expected.

Qualifications

• 7–10+ years in network security engineering.
• Strong hands-on experience managing enterprise Firewall platforms.
• Experience securing complex enterprise and cloud environments including production systems.
• Proven delivery of network segmentation and Zero Trust initiatives.
• Knowledge of IDS/IPS, WAF, DDoS protection, secure web gateways, NAC and DNS security.

Responsibilities

• Design, implement and maintain enterprise network security architectures aligned to Zero Trust principles.
• Deploy and administer Firewall platforms, including policy, NAT and access control configuration.
• Lead Firewall rule optimisation and recertification exercises.
• Design and secure Azure and AWS network architectures and hybrid connectivity.
• Implement micro-segmentation, ZTNA and SASE solutions to reduce lateral movement risk.
• Implement and support site-to-site, client, IPSec and SSL VPNs and remote access solutions.
• Investigate network-based security incidents and analyse logs and traffic with SOC tools.
• Run vulnerability assessments, support penetration testing and remediation plans.
• Lead security assessments and architecture reviews for new projects.
• Ensure compliance with ISO 27001, NIST CSF, CIS Controls, GDPR and Cyber Essentials Plus.

Skills

Enterprise Firewalls

Azure network security

AWS network security

Zero Trust / ZTNA / SASE

Routing & Switching

Automation

Tools

Sentinel

Splunk

QRadar

Cortex XDR

CrowdStrike

Darktrace

Job description

AxiaMetrics is recruiting a Senior Network Security Engineer for an enterprise client. You will design, implement and support network security across complex on-premises, cloud and hybrid environments, lead security improvement initiatives and drive the adoption of Zero Trust networking.

KEY SKILLS

• Enterprise Firewalls: Palo Alto, Check Point, Cisco Firepower, Fortinet FortiGate, Juniper SRX
• Azure network security: Azure Firewall, NSGs, Application Gateway, DDoS Protection, Virtual WAN, ExpressRoute, Private Endpoints
• AWS network security: Security Groups, NACLs, Transit Gateway, Network Firewall, WAF, Shield, Direct Connect, VPC
• Zero Trust, ZTNA, SASE, SDP and micro-segmentation
• Routing and switching: BGP, OSPF, MPLS, VLANs, high availability
• Automation: Python, PowerShell, Terraform, Ansible

THE ROLE

• Design, implement and maintain enterprise network security architectures aligned to Zero Trust principles
• Deploy and administer Firewall platforms, including policy, NAT and access control configuration
• Lead Firewall rule optimisation and recertification exercises
• Design and secure Azure and AWS network architectures and hybrid connectivity
• Implement micro-segmentation, ZTNA and SASE solutions to reduce lateral movement risk
• Implement and support site-to-site, client, IPSec and SSL VPNs and remote access solutions
• Investigate network-based security incidents and analyse logs and traffic, working with the SOC using Sentinel, Splunk, QRadar, Cortex XDR, CrowdStrike or Darktrace
• Run vulnerability assessments, support penetration testing and own remediation plans
• Lead security assessments and architecture reviews for new projects
• Ensure compliance with ISO 27001, NIST CSF, CIS Controls, GDPR and Cyber Essentials Plus, and support audits
• Produce architecture designs, Firewall review reports, segmentation strategies, Zero Trust roadmaps, risk assessments and operational runbooks

REQUIRED EXPERIENCE

• 7-10+ years in network security engineering
• Strong hands-on experience managing enterprise Firewall platforms
• Experience securing complex enterprise and cloud environments, including critical production systems
• Proven delivery of network segmentation and Zero Trust initiatives
• Knowledge of IDS/IPS, WAF, DDoS protection, secure web gateways, NAC and DNS security
• Strong troubleshooting, stakeholder and vendor management skills, with the ability to work under pressure
• Background in a regulated sector such as financial services, insurance, healthcare, telecoms, energy and utilities, retail or the public sector is an advantage.