Sr. Network Security Engineer

Position Summary

We have an exciting opportunity to join our team as a Sr. Network Security Engineer. In this role, the Senior Network Security Engineer will design, implement, and manage enterprise‑level VPN solutions and network security infrastructure. The ideal candidate will have deep expertise in Palo Alto Global Protect, F5 VPN technologies, and enterprise firewall management across multi‑vendor environments. You will be responsible for ensuring secure, reliable, and high‑performance connectivity for our global workforce and protecting our network perimeter.

This position will play a critical role in the operational stability and strategic evolution of our security posture, working with technologies from Palo Alto Networks, F5, Fortinet, Forescout, and Gigamon.

• Design, deploy, and maintain Palo Alto Global Protect VPN infrastructure for secure remote access
• Implement and manage F5 APM (Access Policy Manager) and VPN solutions
• Configure and optimize VPN policies, authentication mechanisms, and access controls
• Troubleshoot complex VPN connectivity issues and performance bottlenecks
• Develop and maintain VPN architecture documentation and standard operating procedures
• Configure, manage, and monitor network security devices, including firewalls, VPNs, IDS/IPS, and load balancers. Ensure proper access controls, segmentation, and hardening of network devices.
• Support responses to security incidents, including conducting thorough investigations and implementing necessary remediation measures. Create incident response plans and playbooks to enhance incident handling efficiency.
• Implement, and enforce network security policies, procedures, and guidelines. Ensure compliance with industry regulations and standards related to network security.
• Conduct regular network vulnerability assessments and penetration testing. Collaborate with IT teams to prioritize and remediate identified vulnerabilities.
• Implement and manage network security monitoring tools to detect and respond to security threats in real‑time. Configure alerts and notifications to proactively address potential security incidents.
• Collaborate with cross‑functional teams to promote a security‑first mindset across the organization.
• Stay up to date with the latest security threats, trends, and best practices. Participate in industry conferences and forums to share knowledge and gain insights.

Typically requires 7 or more years of experience and a BA/BS degree.

• 5+ years of experience with Palo Alto Networks firewalls and Global Protect VPN
• 3+ years of hands‑on experience with F5 BIG‑IP (LTM, APM, ASM)
• Strong knowledge of Fortinet Forti Gate firewall configuration and management
• Experience with Forescout NAC deployment and policy management
• Proficiency with Gigamon visibility platforms and packet brokering
• Experience with authentication protocols (RADIUS, LDAP, SAML, MFA)
• Palo Alto Networks Certified Network Security Engineer (PCNSE)
• F5 Certified Technology Specialist (F5‑CTS)

Qualified candidates must be able to effectively communicate with all levels of the organization.

NYU Langone Health provides its staff with far more than just a place to work. Rather, we are an institution you can be proud of, an institution where you'll feel good about devoting your time and your talents. At NYU Langone Health, we are committed to supporting our workforce and their loved ones with a comprehensive benefits and wellness package. Our offerings provide a robust support system for any stage of life, whether it's developing your career, starting a family, or saving for retirement.

The support employees receive goes beyond a standard benefit offering, where employees have access to financial security benefits, a generous time‑off program and employee resources groups for peer support. Additionally, all employees have access to our holistic employee wellness program, which focuses on seven key areas of well‑being: physical, mental, nutritional, sleep, social, financial, and preventive care. The benefits and wellness package is designed to allow you to focus on what truly matters.

Join us and experience…