Senior Network Security Engineer

Hybrid Three days onsite per week. Tuesday - Thursday in Cary, NC

Our client seeks a Senior Network Security Engineer who will operate as a trusted technical advisor and hands-on engineer across network, cloud, and Zero Trust security domains. You will design and support enterprise firewall solutions, network segmentation, workload segmentation, ZTNA, cloud network security, and layered security controls. You will help determine what needs to be protected, why it needs to be protected, and how firewalls and other security controls can be used to contain threats and reduce risk.

This is a full-time, permanent opportunity, offering a competitive salary and comprehensive benefits package. Qualified applicants must be willing and able to work on a w2 basis.

Salary: $140,000 - $150,000/ yr. w2 + 10% Bonus + yearly equity award

• Design, implement, and manage enterprise-grade firewall solutions to enforce network security policies and mitigate threats.
• Design and support network segmentation and workload segmentation to isolate systems, applications, and workloads and contain security threats.
• Architect and deploy ZTNA and Zero Trust security solutions.
• Design and support network security controls across cloud, on-premises, and hybrid environments.
• Apply layered security principles using firewalls and other security controls to contain threats and reduce risk.
• Configure and support cloud security technologies including WAFs and cloud-native network security controls.
• Conduct security assessments and identify vulnerabilities and security gaps.
• Perform security triage, incident investigation, and operational troubleshooting.
• Execute security configuration reviews, audit support, and security hygiene checks.
• Partner with network, infrastructure, cloud, and application teams on security initiatives.
• Lead security improvement projects and strategic annual initiatives.
• Other duties as assigned.

• 5+ years of network security, cybersecurity, or security engineering experience.
• Hands-on experience with one or more enterprise firewall platforms, such as Palo Alto, Cisco, Fortinet, Check Point, Juniper, or equivalent.
• Strong understanding of firewall and network security fundamentals, including how firewalls are used to protect systems and contain threats.
• Experience with network segmentation and workload segmentation.
• Experience with Zero Trust and ZTNA. Zscaler, Netskope, Illumio, Prisma Access, or similar.
• Solid understanding of networking concepts, including routing, traffic flows, WAFs, and network security.
• Cloud network security experience is required. Azure preferred, but AWS, GCP, or another major cloud platform is acceptable.
• Experience with layered security and using multiple security controls to contain threats and reduce risk.
• Ansible, Python, or Power Shell experience preferred.
• Approximately 5% travel.

• Bachelor's degree or equivalent experience.