Sr. Network Security Engineer

Society of Defense Financial Management; San Mateo (CA); Hybrid; USD 92,000 - 131,000; Full time

Benefits offered by this job

Medical, Prescription, Dental & Vision

Health Savings Account

Life & Disability Insurance

401K Retirement Savings Plan

Employee Assistance Program

Direct Deposit & weekly epayroll

Certification and training

Job summary

Yoh, a Day & Zimmermann company, is seeking a Senior Network Security Engineer to design and support secure network infrastructure across multiple sites, including data centers and cloud environments.

You will configure Palo Alto PAN-OS and Panorama, manage firewall rules and VPNs, and contribute to Zero Trust/security initiatives. Strong automation skills with Terraform, Ansible, Python, or Bash are essential.

Qualifications

• 6+ years of professional experience in network security.
• Expertise with Palo Alto PAN-OS and Panorama.
• Experience with firewall, VPN, NAT, and network troubleshooting.

Responsibilities

• Engineer and support secure network infrastructure across offices, data centers, remote locations, and cloud environments.
• Configure, administer, and enhance Palo Alto networks technologies including PAN-OS, Panorama, GlobalProtect, and threat protection.
• Manage firewall rules, segmentation, NAT, VPNs, and secure connectivity solutions.
• Develop automation for network and security operations using Terraform, Ansible, Python, or Bash.
• Create and maintain network diagrams, configuration standards, and runbooks.

Skills

Palo Alto PAN-OS

Zero Trust

Firewall management

Network troubleshooting

Security architecture

Education

Bachelor's degree in a technical field or equivalent

Tools

Terraform

Ansible

Python

Bash

Job description

Senior Network Security Engineer

Location: San Mateo, CA preferred; Washington, D.C. also strongly considered; additional locations may include Santa Clarita, CA; San Diego, CA; and Frisco, TX

Type: Contract

Compensation: $70-105/hr DOE

Eligibility: Must be a U.S. Citizen or Green Card Holder (ITAR / CUI environment)

Responsibilities

• Engineer and support secure network infrastructure across corporate offices, data centers, remote locations, and cloud-connected environments.
• Configure, administer, and enhance Palo Alto Networks technologies, including PAN-OS, Panorama, GlobalProtect, threat protection, application controls, and related security capabilities.
• Manage firewall rules, network segmentation, NAT, site-to-site and remote-access VPNs, and secure connectivity solutions.
• Support network access controls, authentication technologies, and Zero Trust/SASE initiatives.
• Investigate network traffic, security events, connectivity issues, and vulnerabilities while assisting with remediation and incident response.
• Perform firewall upgrades, configuration hardening, lifecycle maintenance, and production changes.
• Troubleshoot complex routing, switching, WAN, wireless, firewall, application-access, and performance issues.
• Support secure network connectivity between enterprise infrastructure and cloud environments, including AWS and Azure.
• Collaborate with network, cloud, infrastructure, and cybersecurity teams on architecture and technical implementations.
• Develop automation for network and security operations using tools such as Terraform, Ansible, Python, or Bash.
• Create and maintain technical documentation, network diagrams, configuration standards, and operational runbooks.
• Provide senior-level escalation support for critical network and security incidents.
• Participate in planned maintenance, on-call support, and technical knowledge sharing with other engineers.

Qualifications

• 6+ years of professional experience supporting network security within complex enterprise or production environments.
• Advanced hands-on experience with Palo Alto Networks, particularly PAN-OS and Panorama.
• Strong understanding of firewalls, segmentation, NAT, VPN technologies, threat prevention, routing, switching, and network troubleshooting.
• Experience working with enterprise networking platforms such as Juniper, Cisco, or Arista.
• Hands-on experience with network automation or infrastructure-as-code tools such as Terraform, Ansible, Python, or Bash.
• Ability to independently lead technical initiatives and resolve complex, business-critical network and security problems.
• Strong written and verbal communication skills with the ability to work effectively across technical teams.
• Bachelor's degree in a technical field or equivalent combination of education and professional experience.

Preferred Qualifications

• Experience with Palo Alto GlobalProtect, Prisma Access, Cloud NGFW, SASE, and/or Zero Trust architectures.
• Experience administering Juniper routing and switching technologies.
• Familiarity with Network Access Control solutions such as Aruba ClearPass or Mist Access Assurance.
• Knowledge of 802.1X, RADIUS, certificate-based authentication, and enterprise wireless environments.
• Experience supporting AWS and/or Azure networking.
• Relevant certifications such as PCNSE, CCNP Security, CCNP Enterprise, JNCIS/JNCIP, or comparable credentials.
• Previous experience supporting regulated, mission-critical, aerospace, defense, or highly technical engineering environments.

Benefits

• Medical, Prescription, Dental & Vision Benefits (for employees working 20+ hours per week)
• Health Savings Account (HSA) (for employees working 20+ hours per week)
• Life & Disability Insurance (for employees working 20+ hours per week)
• MetLife Voluntary Benefits
• Employee Assistance Program (EAP)
• 401K Retirement Savings Plan
• Direct Deposit & weekly epayroll
• Referral Bonus Programs
• Certification and training opportunities

Estimated Min Rate: $66.50

Estimated Max Rate: $95.00

Note: Any pay ranges displayed are estimations. Actual pay is determined by an applicant's experience, technical expertise, and other qualifications as listed in the job description.

Yoh, a Day & Zimmermann company, is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.

Visit https://www.yoh.com/applicants-with-disabilities to contact us if you are an individual with a disability and require accommodation in the application process.

For California applicants, qualified applicants with arrest or conviction records will be considered for employment in accordance with the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act. All of the material job duties described in this posting are job duties for which a criminal history may have a direct, adverse, and negative relationship potentially resulting in the withdrawal of a conditional offer of employment.

It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.

By applying and submitting your resume, you authorize Yoh to review and reformat your resume to meet Yoh's hiring clients' preferences. To learn more about Yoh's privacy practices, please see our Candidate Privacy Notice: https://www.yoh.com/privacy-notice

Stay Safe During Your Job Search

Fraudulent recruiting communications have become increasingly common. Emails from Yoh recruiters will only come from an @yoh.com email address. Yoh will never ask candidates to pay fees, purchase equipment, send gift cards, or transfer funds as part of the recruiting or hiring process. If you receive a communication that appears suspicious or requests payment, contact Yoh directly before responding or sharing personal information.