Sr. Network Security Engineer

Yoh Services LLC; San Diego (CA); Hybrid; USD 92,000 - 131,000; Full time

Job summary

Yoh is seeking a Senior Network Security Engineer for an advanced technology client. This hands-on role focuses on securing and scaling enterprise networks with emphasis on Palo Alto Networks, firewall architecture, segmentation, VPN connectivity, and network automation.

The position is a contract role with flexibility by location and potential travel. Candidates in the San Mateo, DC, CA, TX areas are preferred; San Diego may be considered.

Qualifications

• 6+ years of professional experience in enterprise network security.
• Hands-on experience with Palo Alto Networks, PAN-OS and Panorama.
• Strong knowledge of firewalls, segmentation, NAT, VPN, threat prevention, routing and troubleshooting.
• Experience with Juniper, Cisco, or Arista networking equipment.
• Experience with network automation tools such as Terraform, Ansible, Python, or Bash.
• Ability to lead technical initiatives independently and resolve complex problems.
• Strong written and verbal communication skills.
• Bachelor's degree in a technical field or equivalent experience.

Responsibilities

• Engineer and support secure network infrastructure across offices, data centers, remote locations, and cloud environments.
• Configure Palo Alto PAN-OS, Panorama, GlobalProtect, and related security capabilities.
• Manage firewall rules, segmentation, NAT, VPNs, and secure connectivity.
• Develop automation for network and security operations using Terraform, Ansible, Python, or Bash.
• Create technical documentation, network diagrams, and runbooks.
• Provide senior escalation support for critical incidents.
• Collaborate with network, cloud, infrastructure, and cybersecurity teams.

Skills

Network security

PAN-OS

Panorama

GlobalProtect

Terraform

Ansible

Python

Bash

Communication

Education

Bachelor's degree in technical field

Tools

PAN-OS

Panorama

GlobalProtect

Terraform

Ansible

Python

Bash

Job description

Job Overview

Yoh has an exciting opportunity for a Senior Network Security Engineer to join our advanced technology client. This is a hands‑on senior engineering role focused on securing and scaling complex enterprise network environments, with a strong emphasis on Palo Alto Networks, firewall architecture, network segmentation, VPN/security connectivity, and network automation.

The team is primarily targeting candidates in the San Mateo, CA area, with Washington, D.C. also a strong preferred location. Candidates near Santa Clarita or San Diego, CA, and Frisco, TX may also be considered. The position offers some flexibility in work arrangement depending on location and business needs, with occasional travel potentially required.

Title:

Senior Network Security Engineer

Location:

San Mateo, CA preferred; Washington, D.C. also strongly considered; additional locations may include Santa Clarita, CA; San Diego, CA; and Frisco, TX

Type:

Contract

Compensation:

$70-105/hr DOE

Eligibility:

Must be a U.S. Citizen or Green Card Holder (ITAR / CUI environment)

Estimated Min Rate

$66.50

Estimated Max Rate

$95.00

Responsibilities

• Engineer and support secure network infrastructure across corporate offices, data centers, remote locations, and cloud-connected environments.
• Configure, administer, and enhance Palo Alto Networks technologies, including PAN-OS, Panorama, GlobalProtect, threat protection, application controls, and related security capabilities.
• Manage firewall rules, network segmentation, NAT, site-to-site and remote‑access VPNs, and secure connectivity solutions.
• Support network access controls, authentication technologies, and Zero Trust/SASE initiatives.
• Investigate network traffic, security events, connectivity issues, and vulnerabilities while assisting with remediation and incident response.
• Perform firewall upgrades, configuration hardening, lifecycle maintenance, and production changes.
• Troubleshoot complex routing, switching, WAN, wireless, firewall, application‑access, and performance issues.
• Support secure network connectivity between enterprise infrastructure and cloud environments, including AWS and Azure.
• Collaborate with network, cloud, infrastructure, and cybersecurity teams on architecture and technical implementations.
• Develop automation for network and security operations using tools such as Terraform, Ansible, Python, or Bash.
• Create and maintain technical documentation, network diagrams, configuration standards, and operational runbooks.
• Provide senior‑level escalation support for critical network and security incidents.
• Participate in planned maintenance, on‑call support, and technical knowledge sharing with other engineers.

Qualifications

• 6+ years of professional experience supporting network security within complex enterprise or production environments.
• Advanced hands‑on experience with Palo Alto Networks, particularly PAN-OS and Panorama.
• Strong understanding of firewalls, segmentation, NAT, VPN technologies, threat prevention, routing, switching, and network troubleshooting.
• Experience working with enterprise networking platforms such as Juniper, Cisco, or Arista.
• Hands‑on experience with network automation or infrastructure‑as‑code tools such as Terraform, Ansible, Python, or Bash.
• Ability to independently lead technical initiatives and resolve complex, business‑critical network and security problems.
• Strong written and verbal communication skills with the ability to work effectively across technical teams.
• Bachelor's degree in a technical field or equivalent combination of education and professional experience.

Preferred Qualifications

• Experience with Palo Alto GlobalProtect, Prisma Access, Cloud NGFW, SASE, and/or Zero Trust architectures.
• Experience administering Juniper routing and switching technologies.
• Familiarity with Network Access Control solutions such as Aruba ClearPass or Mist Access Assurance.
• Knowledge of 802.1X, RADIUS, certificate‑based authentication, and enterprise wireless environments.
• Experience supporting AWS and/or Azure networking.
• Relevant certifications such as PCNSE, CCNP Security, CCNP Enterprise, JNCIS/JNCIP, or comparable credentials.
• Previous experience supporting regulated, mission‑critical, aerospace, defense, or highly technical engineering environments.

What’s In It for You?

Benefit eligibility is in accordance with applicable laws and client requirements. Benefits include:

• Medical, Prescription, Dental & Vision Benefits (for employees working 20+ hours per week)
• Health Savings Account (HSA) (for employees working 20+ hours per week)
• Life & Disability Insurance (for employees working 20+ hours per week)
• MetLife Voluntary Benefits
• Employee Assistance Program (EAP)
• 401K Retirement Savings Plan
• Direct Deposit & weekly epayroll
• Referral Bonus Programs
• Certification and training opportunities

Note: Any pay ranges displayed are estimations. Actual pay is determined by an applicant's experience, technical expertise, and other qualifications as listed in the job description. All qualified applicants are welcome to apply.

Equal Opportunity Statement

Yoh, a Day & Zimmermann company, is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.

Accessibility

Visit https://www.yoh.com/applicants-with-disabilities to contact us if you are an individual with a disability and require accommodation in the application process.

California Compliance

For California applicants, qualified applicants with arrest or conviction records will be considered for employment in accordance with the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act. All of the material job duties described in this posting are job duties for which a criminal history may have a direct, adverse, and negative relationship potentially resulting in the withdrawal of a conditional offer of employment.

Massachusetts State Law

It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.

Privacy Notice

To learn more about Yoh’s privacy practices, please see our Candidate Privacy Notice: https://www.yoh.com/privacy-notice