Senior Network & Security Engineer - Remote

GovCIO; Boise (ID); Remote; USD 120,000 - 140,000; Full time

Benefits offered by this job

Employee Assistance Program (EAP)

Corporate Discounts

Learning & Development platform

Training, Education and Certification

Referral Bonus Program

Internal Mobility Program

Pet Insurance

Flexible Work Environment

Job summary

GovCIO is seeking a Senior Network & Security Engineer to lead the design, operation, troubleshooting, and ongoing improvement of enterprise network-security infrastructure. This role focuses on Palo Alto Networks NGFWs, Panorama, HA, and Cisco switching, with responsibilities spanning architecture and incident resolution.

You will mentor engineers, drive advanced projects, and collaborate with SOC, infra, cloud, and leadership teams to reduce risk and ensure highly available services.

Qualifications

• Bachelor’s degree with 8+ years (or commensurate experience).
• 7+ years of progressive experience in network engineering, network security, firewall administration, or security infrastructure operations.
• 5+ years of hands‑on Palo Alto Networks firewall experience in a production enterprise environment.
• Advanced operational experience with Palo Alto Panorama, including multi‑device policy management, templates, device groups, upgrades, configuration management, and troubleshooting.
• Strong hands‑on experience designing, maintaining, and troubleshooting Palo Alto High Availability environments.
• Working knowledge of Cortex XSIAM, Strata Logging Service, security‑event correlation, alert investigation, XQL Search, and firewall log ingestion.

Responsibilities

• Lead the design, deployment, administration, and lifecycle management of Palo Alto Networks NGFW environments running PAN-OS.
• Own centralized firewall management through Palo Alto Panorama, including device groups, templates, template stacks, policy inheritance, upgrades, configuration backups, log monitoring, and firewall onboarding.
• Design and govern security policies using zero‑trust, least‑privilege, application‑aware, and risk‑based principles.
• Configure and troubleshoot security zones, NAT, virtual routers, static and dynamic routing, IPsec VPN, GlobalProtect, decryption, URL Filtering, Threat Prevention, WildFire, DNS Security, and App‑ID policies.
• Lead enterprise network‑segmentation and microsegmentation initiatives using security zones, VLANs, subinterfaces, virtual routers, routing controls, and application‑based security policies.
• Develop secure controls for traffic between users, servers, applications, management networks, guest networks, IoT/OT devices, data‑center workloads, and cloud resources.
• Architect, configure, test, and troubleshoot Palo Alto High Availability deployments, including Active/Passive and Active/Active designs as required.
• Resolve complex HA failures involving HA1 control links, HA2 session/state synchronization, HA3 packet forwarding, peer communications, configuration synchronization, monitoring failures, split‑brain prevention, and failover recovery.

Skills

Leadership

Network engineering

Security engineering

Troubleshooting

Incident response

Education

Bachelor’s degree

Tools

Palo Alto Panorama

PAN-OS

Palo Alto NGFW

Cortex XSIAM

Strata Logging Service

Cisco switching

Job description

GovCIO is seeking a Senior Network & Security Engineer to lead the design, operation, troubleshooting, and ongoing improvement of enterprise network-security infrastructure. This role focuses on Palo Alto Networks NGFWs, Panorama, HA, and Cisco switching, with responsibilities spanning architecture and incident resolution.

You will mentor engineers, drive advanced projects, and collaborate with SOC, infra, cloud, and leadership teams to reduce risk and ensure highly available services.