Senior Security Engineer, Network Security

Cypress HCM; Pennsylvania; On-site; USD 96,000 - 110,000; Full time

Job summary

Cypress HCM is seeking an experienced Senior Network Security Consultant to support enterprise-grade NGFW deployments and firewall modernization. You will configure, migrate, and validate NGFW environments with a emphasis on Palo Alto technologies and related Cisco platforms.

You’ll develop detailed migration plans, coordinate cutovers, and ensure post-deployment validation across enterprise networks, while contributing to documentation and knowledge transfer for customer teams.

Qualifications

• Bachelor's degree in a related field.
• 5+ years of professional network security engineering experience.
• Hands-on NGFW deployment and HA pair experience.
• Palo Alto Networks PCNSE or equivalent.
• Experience migrating firewall rules and NAT configurations.
• Strong understanding of core networking technologies.
• Ability to produce clear technical documentation.
• Willingness to travel to customer sites.

Responsibilities

• Configure, deploy, and migrate NGFW platforms (Palo Alto focus).
• Work with Cisco firewall platforms.
• Configure interfaces, routing, NAT, VLANs, security zones.
• Migrate existing firewall rules and policies to new NGFWs.
• Plan production traffic migrations and write MOPs.
• Coordinate firewall cutovers during maintenance windows.
• Perform post-migration testing of connectivity and security.
• Create as-built docs and architecture diagrams.
• Transfer knowledge to customer teams.

Skills

Firewall engineering

Network security

Documentation

Travel readiness

Education

Bachelor's degree in Computer Science / IT / Cybersecurity / Engineering

Tools

Palo Alto Networks NGFW

Cisco firewalls

Firepower/FTD

ASA

Python

Ansible

Azure DevOps (ADO)

Job description

Pay: $70 - $80/hr (compensation may vary based on experience level)

General Overview

We are seeking an experienced Senior Network Security Consultant to support enterprise-scale network security and firewall modernization initiatives. This position will serve as a hands-on technical resource responsible for configuring, migrating, deploying, and supporting Next-Generation Firewall (NGFW) environments.

The role will have significant involvement in firewall configuration, security policy, and rule migration, production traffic transitions, and post-deployment validation. The senior Consultant will collaborate with technical and project stakeholders throughout the delivery lifecycle and may also provide guidance to other consultants and analysts supporting the engagement.

Responsibilities

• Configure, deploy, and migrate Next-Generation Firewall (NGFW) platforms, with a primary focus on Palo Alto Network technologies.
• Experience with Cisco firewall platforms.
• Configure firewall networking components, including interfaces, routing, NAT, VLANs, security zones, and related network settings.
• Transition existing firewall rule sets, security policies, and virtual system (VSYS) configurations into new NGFW environments.
• Build, configure, and validate firewall services supporting highly available enterprise network environments.
• Develop detailed plans for production traffic migrations and firewall cutovers, including Method of Procedure (MOP) documentation, execution steps, current and future state diagrams, port mappings, timelines, validation procedures, and rollback plans.
• Perform production migration activities and coordinate firewall pair cutovers during scheduled maintenance windows.
• Conduct post-migration testing to confirm network, internet, security, and application connectivity.
• Identify, troubleshoot, and resolve technical issues during migrations and post-cutover stabilization/hyper-care periods.
• Support implementation planning, technical coordination, and change management activities associated with firewall migrations.
• Create and maintain as-built documentation, final-state architecture diagrams, implementation records, and other technical documentation.
• Facilitate knowledge transfer to customer technical teams following implementation.
• Track project Features, Stories, Tasks, Defects, and Risks within Azure DevOps (ADO) while adhering to established Definition of Ready and Definition of Done standards.
• Participate in Agile/SAFe delivery activities, including daily stand‑ups, iteration planning, iteration reviews/demos, retrospectives, and Program Increment (PI) planning.
• Maintain project documentation within team Wiki environments and follow established delivery processes and team operating standards.

Requirements

• Bachelor's degree degree in Computer Science, Information Technology, Cybersecurity, Engineering, or a related field.
• 5+ years of professional network security engineering experience, with significant exposure to firewall architecture, configuration, migration, deployment, and ongoing support.
• Demonstrated hands-on experience implementing, migrating, and supporting NGFW platforms in production environments, including high-availability (HA) firewall pair deployments.
• Current Palo Alto Networks Next-Generation Firewall Engineer certification, formerly PCNSE, or an applicable current equivalent.
• Proven experience migrating firewall rule sets, security policies, and NAT configurations between platforms and executing coordinated production cutovers.
• Strong understanding of core networking and network security technologies, including TCP/IP, routing, switching, VPNs, security zones, NAT, and firewall policy administration.
• Ability to develop clear and thorough technical documentation, including MOPs, implementation plans, as-built documentation, diagrams, and validation summaries.
• Strong written and verbal communication skills with the ability to work effectively with both technical teams and project stakeholders.
• Ability to manage competing priorities and deliver effectively within a fast-paced, project-oriented environment.
• Ability and willingness to travel to customer locations when required by project needs.

Preferred Qualifications

• Experience with Cisco firewall technologies, including Firepower/FTD and ASA, in addition to Palo Alto Networks NGFW platforms.
• Additional network or security certifications, such as CCNP Security, Palo Alto Networks Network Security Architect, Fortinet NSE, or comparable credentials.
• Previous experience delivering technical projects within Agile or SAFe environments, including Iteration and Program Increment (PI) cycles.
• Experience supporting large-scale firewall modernization or migration programs within enterprise or critical infrastructure environments.
• Experience using scripting or automation technologies such as Python, Ansible, or similar tools to assist with firewall configuration, migration, testing, or validation.