Senior Network Security Engineer TECHEAD

Techead; San Diego (CA); Presencial; USD 120.000 - 140.000; Jornada completa

Descripción de la vacante

TECHEAD in San Diego, CA seeks a Senior Network Security Engineer to design, deploy, and manage NGFWs and IPsec VPNs in on-prem and hybrid-cloud environments. The role requires DoD security clearance (Secret), day-one IAT Level II, and hands-on expertise with Palo Alto technologies, SIEM (Splunk/Elastic), and zero-trust network architectures to protect critical networks and meet DoD mandates.

Your duties include configuring PAN-OS via Panorama, performing deep packet inspection, and coordinating

Formación

• Bachelor's degree in engineering or equivalent hands-on experience.
• 7+ years of professional systems/network security engineering experience.
• Active Secret security clearance.
• Active DoD IAT Level II certification required on day one (e.g., Security+ CE).
• Hands-on proficiency with Palo Alto Firewalls, PAN-OS, GlobalProtect, IPsec VPNs, and troubleshooting.
• Experience with log analysis using Splunk, Elastic, or similar SIEMs.

Responsabilidades

• Manage, deploy, configure, and troubleshoot Palo Alto NGFWs, PAN-OS, and IPsec VPNs across on-prem and hybrid-cloud environments.
• Administer firewall configurations, policy updates, and system upgrades via Panorama.
• Conduct deep packet inspection and network troubleshooting.
• Analyze logs from firewall traffic and threat intel using Splunk/Elastic SIEMs.
• Design and maintain network segmentation and Zero Trust initiatives; support ZTNA migrations.
• Implement DISA STIGs and maintain documentation for boundary systems.

Conocimientos

Palo Alto Firewalls

PAN-OS

Panorama

GlobalProtect

IPsec VPNs

Deep packet inspection

Zero Trust

Splunk

Elastic

Educación

Bachelor's degree in engineering or equivalent experience

Herramientas

Palo Alto Panorama

AWS

Azure

Descripción del empleo

Always Connecting, Always Evolving.

TECHEAD.com or on Glassdoor

Job Details:

Title: Senior Network Security Engineer
Location: San Diego, CA
Compensation: $120,000 – $140,000 /per Year
Work Type: Contract-To-Hire
Work Location: On-Site

Job Description:

This role focuses on end-to-end engineering, maintenance, and policy enforcement utilizing Next-Generation Firewalls (NGFW)primarily Palo Alto Networks platforms managed via Panorama. Operating in a high-security defense environment, the position requires deep technical expertise in IPsec VPNs, packet analysis, network segmentation, and zero trust security models to safeguard critical networks while ensuring full compliance with DoD security mandates.

Responsibilities

• Manage, deploy, configure, and troubleshoot enterprise Next-Generation Firewalls (Palo Alto NGFW, PAN-OS), Intrusion Prevention Systems (IPS), and IPsec VPN tunnels across on-premises and hybrid-cloud environments.
• Administer enterprise firewall configurations, policy updates, and system upgrades utilizing the Palo Alto Networks Panorama centralized management platform.
• Conduct deep packet inspection and network troubleshooting.
• Perform detailed log analysis across firewall traffic, threat intelligence logs, and GlobalProtect logs using SIEM tools such as Splunk and Elastic.
• Design and maintain robust network segmentation, VLAN architectures, and fine-grained firewall access control rules; support Zero Trust Network Access (ZTNA) initiatives and migrations.
• Implement and enforce DISA STIGs, IAVMs, and CTO directives; maintain rigorous technical documentation and verification artifacts for all boundary systems.
• Establish, monitor, and optimize secure connectivity pathways and perimeter controls within AWS and Microsoft Azure cloud environments.

Must Have Qualifications

• Bachelors degree in an Engineering discipline, or equivalent professional hands-on experience.
• 7+ years of professional systems/network security engineering experience.
• Active Secret security clearance.
• Active DoD IAT Level II certification required on day one (e.g., CompTIA Security+ CE)
• Deep hands-on proficiency in Palo Alto Firewalls, PAN-OS, Panorama, Global Protect, IPsec VPNs, and advanced packet-level troubleshooting.
• Practical experience with log aggregation, threat hunting, and log analysis utilizing Splunk, Elastic, or equivalent SIEM platforms.

Preferred Qualifications

• Direct experience leading migrations from legacy network access models to Zero Trust Network Access (ZTNA) architectures.
• Demonstrated engineering experience implementing cloud network security controls and direct-connect integrations in AWS or Azure.
• Advanced vendor certifications (e.g., PCNSA, PCNSE).

TECHEAD’s mission is to make our on-site associates successful by placing them in the right environment so they can grow and prosper. How we treat and respond to our clients and employees is a reflection of who we are and makes us stand out from the rest. Keeping our business focused on building and maintaining relationships with our employees and clients is the key to our success. We won’t strive for anything less.

TECHEAD provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, gender, sexual orientation, gender identity or expression, national origin, age, disability, genetic information, marital status, amnesty, or status as a covered veteran in accordance with applicable federal, state and local laws governing nondiscrimination in employment in every location in which the company has facilities. This policy applies to all terms and conditions of employment, including, but not limited to, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation, and training.

For more information on TECHEAD please visit www.techead.com.

No second parties will be accepted.