Senior Network Security Engineer — Firewall Team

Senior Network Security Engineer — Firewall Team (South FL, US) About Us

For more than four decades, Compuquip Cybersecurity has designed, implemented, and operated security programs for organizations that cannot afford to get it wrong. Our teams deliver 24x7 detection and response, managed firewall and network security, vulnerability management, and offensive security services across cloud, network, and endpoint environments.
We are evolving how those services are delivered. Rather than having analysts triage every alert and engineers hand-write every change, we are building AI systems that handle reasoning work at scale so our people can focus on judgment, escalation, and customer outcomes. This work runs against live customer environments with real service commitments attached.

This role would join our Firewall Team as a senior technical resource, embedded on-site with an enterprise customer and backed by the wider Compuquip engineering organization.
The work is more than firewall administration. You will design and modernize network security architectures, lead migrations and platform transitions, and troubleshoot problems that cross firewalls, routing, VPN, segmentation, and cloud boundaries.
We are looking for a senior engineer with a deep networking foundation who will take ownership and operate autonomously.

Firewall architecture and policy
.
Design, implement, and optimize Palo Alto Networks environments across an enterprise environment. Including Panorama, security policies and profiles, threat prevention, application control, NAT, zoning, and high-availability configurations
End-to-end troubleshooting
.
Complex issues spanning firewalls, routing, switching, VPN, NAT, and segmentation. Traffic flow analysis, firewall logs, PCAPs, and telemetry, worked to root cause rather than to a workaround that holds until next quarter.
VPN and connectivity architecture
.
Site-to-site and remote-access designs, IPsec/IKE and GRE, and the dependencies that make them fragile in real customer networks.
Lifecycle and migration work.
Upgrades, platform transitions, multi-vendor migrations, and architecture modernization, including the implementation planning, change planning, and peer validation.
Architectural guidance.
Reviewing what exists, identifying where security, reliability, performance, or operability is being quietly compromised, and recommending the fix rather than absorbing the symptom.
Engineering standards.
Documentation, runbooks, and design patterns that make the next engineer's work easier, plus mentorship and technical guidance for less experienced engineers on the team.

Network Security Engineering:

• 8+ years in network security engineering, network engineering, or a related infrastructure security discipline, with significant hands‑on time on enterprise firewall platforms.

• Strong hands‑on experience with Palo Alto Networks, and ideally Check Point or Fortinet alongside it.

• Palo Alto Next‑Generation Firewall Engineer certification preferred

• Comfort designing and supporting high‑availability firewall architectures, centralized logging and management, and multi‑site policy at scale.

Enterprise networking

• Real depth in routing and switching, IP addressing and subnetting, VLANs, segmentation, NAT, VPN technologies, and network security architecture.

• Working knowledge of IPsec/IKE, GRE, BGP, OSPF, ACLs, and security zoning

• The ability to follow a flow across multiple layers of the network and security stack and find the actual cause.

How you work

• You operate independently. You take a complex problem from investigation to resolution without being managed through it.

• You communicate clearly with engineers and non‑engineers alike as well as directly with…