Senior Network and Firewall Engineer

We are seeking a Senior Network/Firewall Engineer to manage the network infrastructure and security architecture across hybrid on‑premises and Azure environments. This role focuses on day‑to‑day Palo Alto firewall operations, leading our VPN‑to‑SASE migration, and designing network architectures that optimize traffic flows and support our quantitative investment operations. You will work closely with the Platform Services team to ensure our network delivers optimal uptime, performance, and security while meeting the demands of a regulated asset management firm.

• Manage Palo Alto firewall infrastructure including daily rule changes, policy optimization, and threat prevention
• Lead migration from traditional VPN to SASE architecture for remote users
• Design network architectures optimizing north‑south and east‑west traffic flows across on‑premises and Azure environments
• Implement Azure networking including NSGs, Express Route, Private Link, and VNets
• Manage enterprise TLS/SSL certificate lifecycle to support Zero Trust Network Access initiatives
• Design network segmentation strategies supporting business operations and compliance requirements
• Implement SD‑WAN/SASE for remote locations while maintaining traditional routing between owned sites
• Manage DNS infrastructure and develop automation for upcoming Kubernetes deployment
• Collaborate with infrastructure team on network optimization for virtualized workloads and storage systems
• Monitor network performance, execute maintenance windows, and participate in on‑call rotation
• Develop network automation using Python or Power Shell and maintain comprehensive documentation
• BS in Computer Science or related field; 7+ years enterprise network engineering experience
• Strong Palo Alto firewall experience including daily operations and policy management
• Proven ability designing network architectures for hybrid datacenter and cloud environments
• Hands‑on experience with Azure networking (NSGs, Express Route, VNets, Private Link)
• Knowledge of SD‑WAN, SASE solutions, and experience with VPN migrations
• Understanding of network protocols (BGP, OSPF, VLAN) and routing architectures
• Experience with certificate management and PKI infrastructure
• Scripting skills in Python or Power Shell for network automation
• Strong troubleshooting abilities and systematic problem‑solving approach
• Experience in regulated environments (financial services, healthcare, or similar)
• Excellent communication skills and ability to collaborate with infrastructure teams

• PCNSE, CCNP Security, or Azure Network Engineer certification
• Experience with Infrastructure as Code tools (Terraform, Ansible)
• Knowledge of DNS automation for Kubernetes environments
• Understanding of virtualization networking concepts
• Familiarity with low‑latency network requirements for financial applications

This is a full time permanent role with a great team that offers challenging problems to solve as well as opportunity to learn. There is no sponsorship available. Must be EAD, Greencard, or US Citizen. Great salary+ bonus + excellent benefits. Interviews occurring now please apply!