Senior Security Engineer

Secur-Serv; Charlotte (NC); On-site; USD 120,000 - 135,000; Full time

Job summary

Secur-Serv is seeking a Senior Security Engineer to lead advanced deployments of Palo Alto Networks SASE solutions in a Charlotte, NC environment. You will drive migration from legacy remote access, build and tune security policies, and provide expert guidance across project cycles.

The role requires hands-on experience with Prisma Access, NGFW, and SD-WAN, plus strong communication. Expect onsite work five days a week with travel as needed.

Qualifications

• BS in Computer Science or equivalent education/training/experience.
• Prisma Access experience with enterprise deployments and DLP.
• 4+ years in remote access technologies (IPSec VPN, SSL VPN, Explicit Proxy, ZTNA).
• Experience with SD-WAN architectures and providers.
• Strong routing skills (BGP, static routing).
• NGFW capabilities and deployment including Panorama, User-ID, App-ID, Threat Prevention.
• Automation opportunities to optimize deployments.
• Excellent written and verbal communication.

Responsibilities

• Migrate customers from legacy remote access to Palo Alto Networks platforms.
• Build custom security policies and application signatures.
• Advance expertise in deploying Palo Alto Networks features.
• Provide after hours and weekend on‑call support as needed.
• Analyze logs for initial troubleshooting and issue identification.
• Collaborate with TAC to diagnose support cases.
• Mentor on upgrades and best practices.
• Ensure deliverables meet project scope.
• Travel as required, with efforts to minimize disruption.

Skills

Remote access technologies

Prisma Access

SD-WAN

Palo Alto Networks SASE

BGP routing

Certificate & auth methods

NGFW deployment

Automation potential

Communication skills

Education

BS in Computer Science

Tools

Panorama

Job description

Senior Security Engineer

• Location: Charlotte, NC – Full time Onsite 5 days per week
• Salary Range: $120k - $135k

The Professional Services Consultant (SASE) is an expert with a strong understanding of network security, Palo Alto Networks firewalls, GlobalProtect, and Prisma Access. The Professional Services Consultant knows how to implement, optimize, and operate SASE Platforms.

This is a highly technical role with a focus on large scale Prisma Access deployments. The Extended Expertise Consultant will develop, maintain and leverage expertise on SASE Platforms and the relevant tools that can be used to optimize the deployment and operation of the Platforms.

• BS in Computer Science or equivalent education/training/experience
• Prisma Access Experience: Proven track record configuring and supporting enterprise Prisma Access deployments—including Remote Networks and Mobile Users—with hands‑on expertise implementing core security services such as SSL Decryption and Data Loss Prevention (DLP).
• 4+ years of remote user access technologies, including IPSec VPN, SSL VPN, Explicit Proxy, ZTNA
• Experience with SD-WAN Architectures and providers
• Tunneling protocols such as SSL/TLS, IPSec, GRE
• Authentication methodologies, including: 2FA, SAML, RADIUS, LDAP,TACACS, Certificates
• Strong Routing Skills, including: BGP, Redistribution to other routing protocols, Static Routing, Traffic Steering, PBF.
• Next‑Generation Firewall capabilities, configuration, and deployment. Including Panorama, User‑ID, App‑ID, Threat Prevention, URL Filtering, CASB, DLP, SSL Decryption.
• Experience deploying and configuring SD‑WAN technologies, preferably Prisma SD‑WAN (Formerly CloudGenix) and PanOS native environments
• Experience identifying and executing on opportunities where automation can be used to optimize the deployment and operation of Palo Alto Networks SASE products in on‑premise, and public cloud models.
• Ability to work within small creative teams as well as cross‑functional teams
• Excellent written and verbal communication skills

Your Impact

• Migrate customers from legacy remote access technologies to Palo Alto Networks platforms
• Build custom security policies and application signatures, configured for our client’s needs
• Progress and uphold expertise in deploying advanced Palo Alto Networks features and functionality
• Provide after hours and weekend on‑call support, as needed, to support maintenance activities
• Analyze logs and events from the solution to perform initial troubleshooting and issue identification
• Work with our Technical Assistance Center to troubleshoot and diagnose support cases
• Maintain the Company’s solution and provide mentorship on code upgrades and best practices
• Ensure client needs are met and deliverables produced on time according to specified project deliverables and scope
• Travel is required in the scope of your duties. It can be heavy but we believe in a work/life balance and will do our best to ensure project travel is minimized when possible.

Your Experience

• Experience with network, security solutions, remote access and remote connectivity technologies in large environments.
• Experience with troubleshooting skills related to networking, routing, IP, NAT, IPSEC VPNs and knowledge of how these interact with applications and users
• Experience with installation, configuration and operation of NGFW products
• Effectively handle multiple projects and work calmly under pressure
• An excellent writer, with strong verbal social skills, with demonstrated ability to communicate to senior leaders, technical peers, and non‑technical partners
• Ability to work with the customers security & network teams to build confidence across the business units impacted by the change with the addition Palo Alto Networks
• Experience using of remote user access technologies, including IPSec VPN, SSL VPN, Explicit Proxy, ZTN
• Excellent written and verbal communication skills
• Director Customer Consulting Experience
• Authentication methodologies, including: 2FA, SAML, RADIUS, LDAP Certificates
• Strong RoutingSkills, including BGP and StaticRouting
• Next-Generation Firewall capabilities, configuration, and deployment. Including Panorama, User-ID, App-ID, Threat Prevention, URL Filtering, SSL Decryption.
• Ability to work within small creative teams as well as cross‑functional teams