Senior Security Engineer, Network Security

Match Point Solutions; Maryland Heights (MO); Remote; USD 96,000 - 103,000; Full time

Job summary

MatchPoint Solutions is seeking a Senior Security Engineer specializing in network security to lead NGFW migrations, configuration, and policy validation. This remote-friendly contract role supports large-scale migrations with emphasis on Palo Alto NGFWs, HA deployments, and SAFe-aligned delivery.

You will coordinate MOPs, maintain documentation, and work closely with customers; this role requires travel to client sites as needed and strong communication skills.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Engineering, or equivalent.
• Minimum of five (5) years in network security engineering with firewall design, config, migration and support.
• Hands-on experience with NGFW platforms in production, including high-availability deployments.
• PCNSE or equivalent NGFW certification required.

Responsibilities

• Prepare, configure, and migrate Next-Generation Firewalls to support large-scale core migrations.
• Configure firewall interfaces, routing, NAT, and VLAN/zone configurations.
• Migrate and validate firewall rule sets, security policies, and NE/VSYS instances.
• Build and validate firewall services for high-availability environments.
• Develop MOPs, diagrams, port mappings, timestamps, and rollback plans.
• Coordinate firewall cutovers during maintenance windows.
• Validate connectivity post-migration and provide production support.
• Produce as-built docs and final-state diagrams; KT to customer.
• Track work items in Azure DevOps per DoD.

Skills

NGFW configuration

Palo Alto NGFW

Firewall migration

Network security

HA deployment

Azure DevOps

Documentation

SAFe Agile

Travel readiness

Education

BA/BS in CS/IT/Cybersecurity/Engineering

Tools

Palo Alto NGFW

PCNSE

Cisco Firepower

Azure DevOps

Job description

MatchPoint Solutions is a fast-growing, young, energetic global IT-Engineering services company with clients across the US. We provide technology solutions to various clients like Uber, Robinhood, Netflix, Airbnb, Google, Sephora, and more! More recently, we have expanded to working internationally in Canada, China, Ireland, UK, Brazil, and India. Through our culture of innovation, we inspire, build, and deliver business results, from idea to outcome. We keep our clients on the cutting edge of the latest technologies and provide solutions by using industry-specific best practices and expertise.

Senior Security Engineer, Network Security

Pennsylvania - Remote
6 Months
Pay rate: $70 - $75/hr on W2

Key Responsibilities

• Prepare, configure, and migrate Next-Generation Firewalls (Palo Alto Networks; Cisco firewall experience a plus) to support large-scale network core migration initiatives.
• Configure firewall network settings, including interfaces, routing, NAT, and VLAN/zone configurations.
• Migrate and validate firewall rule sets, security policies, and virtual system (VSYS) instances to the new NGFW infrastructure.
• Build and validate firewall services required to support high-availability core network environments.
• Develop production traffic migration and cutover strategies, including Method of Procedure (MOP) documentation: step-by-step execution, current/end-state network diagrams, port mapping, timestamps, and rollback plans.
• Execute production traffic migration activities and coordinate firewall pair cutovers during approved maintenance windows.
• Validate network, internet, security, and application connectivity following each migration event.
• Troubleshoot and remediate issues encountered during migration and stabilization, including hyper-care/production support.
• Provide implementation support, coordination, and change management support for firewall migration activities.
• Produce as-built documentation and final-state architecture diagrams, and support knowledge transfer (KT) to the customer.
• Track and manage all work (Features, Stories, Tasks, Defects, Risks) in Azure DevOps (ADO) in accordance with the Definition of Ready / Definition of Done.
• Participate in SAFe Agile ceremonies - Daily Stand-up, Iteration Planning, Iteration Review/Demo, Iteration Retrospective, and Program Increment (PI) Planning.
• Maintain project documentation on Wiki sites and adhere to the Agile Ways of Working, Team Norms, and Out of Office procedures.

Required Qualifications

• Bachelor's degree (BA/BS) in Computer Science, Information Technology, Cybersecurity, Engineering, or a related field; OR an equivalent combination of education, training, and professional experience will be considered in lieu of a degree.
• Minimum of five (5) years of professional experience in network security engineering, with a focus on firewall platform design, configuration, migration, and support.
• Hands-on experience configuring, migrating, and supporting Next-Generation Firewall (NGFW) platforms in production environments, including high-availability (HA) pair deployments.
• Palo Alto Networks Certified Network Security Engineer (PCNSE), or its current equivalent, the Palo Alto Networks Next-Generation Firewall (NGFW) Engineer certification, required.
• Demonstrated experience executing firewall rule set, security policy, and NAT migrations between platforms, and performing coordinated production cutovers.
• Strong working knowledge of core networking and security concepts: TCP/IP, routing and switching, VPN, security zones, and firewall policy administration.
• Strong written and verbal communication skills, with the ability to produce clear technical documentation (MOPs, as-built documentation, validation summaries).
• Ability to manage multiple priorities in a fast-paced, project-based consulting environment.
• Willingness to travel to customer sites as required by project engagements.

Preferred Qualifications

• Cisco firewall platform experience (e.g., Firepower/FTD, ASA), in addition to Palo Alto Networks NGFW experience.
• Additional network security certifications (e.g., CCNP Security, Palo Alto Networks Network Security Architect, Fortinet NSE).
• Experience working in Agile/SAFe delivery environments, including Iteration and Program Increment (PI) cadences.
• Experience supporting firewall modernization projects in large enterprise or critical infrastructure environments.
• Scripting or automation experience (Python, Ansible, or similar) to support configuration migration and validation.

MatchPoint Solutions provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.

This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation, and training.