Systems Engineer III

Apex Systems, LLC; San Diego (CA); On-site; USD 120,000 - 150,000; Full time

Job summary

Apex Systems in San Diego, CA is seeking a Systems Engineer III to design, implement, and support complex security infrastructure. You will manage enterprise firewalls, IPS, VPNs, and cloud connectivity across on‑prem and cloud environments.

The role emphasizes network segmentation, STIG/IAVM compliance, and hands‑on work with NGFWs and Palo Alto Panorama Pan-OS, with strong logging and threat analysis capabilities.

Qualifications

• Bachelor's degree in Engineering or related field or 7+ years of experience.
• 7 years of professional systems engineering experience.
• Experience configuring enterprise firewalls, VPNs, and IPS.

Responsibilities

• Manage, configure, and troubleshoot enterprise firewalls, IPS, and VPNs.
• Implement network segmentation and firewall rules.
• Apply STIGs, IAVMs, and CTO directives with documentation.
• Work with NGFWs and Palo Alto Panorama Pan-OS.
• Analyze logs using Splunk and Elastic, and monitor security events.
• Support secure connectivity for AWS and Azure.
• Contribute to Zero Trust Network Access (ZTNA) architecture.

Skills

Next Gen Firewalls

Palo Alto Panorama

Pan-OS

Splunk

Elastic

ZTNA

AWS networking

Azure networking

Firewall management

Log analysis

Education

Bachelor's degree in Engineering or related field

Tools

Palo Alto Panorama

Pan-OS

Splunk

Elastic

Job description

## Job Description# Systems Engineer III* Bachelor's level degree in an Engineering discipline or years of experience.* 7 years of professional experience in systems engineering.* Strong experience managing, configuring, and troubleshooting enterprise firewalls, IPS, and VPN devices in both on-prem and cloud environments* Deep knowledge of network segmentation, VLANs, and firewall rule implementation* Experience applying STIGs, IAVMs, and CTO directives with strong documentation skills* Proficiency with Next Generation Firewalls (NGFW), Palo Alto Panorama centralized management platform and Pan-OS.* Hands-on experience with log aggregation and analysis using Splunk, Elastic. Global Protect Log Analysis* Knowledge of cloud networking and secure connectivity methods for AWS and Azure* Experience with Zero Trust Network Access (ZTNA) architecture and migration from traditional access models