Network Security Engineer

We are Systematix and we are currently looking for a senior Network Security & Cloud Engineer with expertise in Palo Alto cloud-based firewalls to design, implement, and support enterprise network security and cloud connectivity solutions for one of our key technology partners. This role is 100% remote with possible, occasional travel to the Eastern USA.

ABOUT THE PROJECT

Our client operates a large, globally distributed enterprise technology environment supporting business operations across multiple locations and cloud platforms.

As part of the Network Engineering team, the Senior Network Security & Cloud Engineer will focus on the design, implementation, optimization, and support of enterprise firewall, network security, VPN, and hybrid cloud connectivity solutions.

This is a senior, hands-on engineering role requiring deep Palo Alto expertise combined with strong cloud networking capabilities across Microsoft Azure and/or AWS. The successful candidate will work closely with Network Engineering, Cybersecurity, Cloud Platform, Infrastructure, Application, and Operations teams to deliver secure, resilient, and scalable connectivity.

ABOUT THE RESPONSIBILITIES

• Design, implement, configure, and optimize Palo Alto firewall environments, including security policies, NAT, security zones, segmentation, and high-availability configurations.
• Engineer and troubleshoot site-to-site IPsec VPNs, secure remote connectivity, internet egress, and hybrid cloud connectivity.
• Design and support cloud networking within Microsoft Azure and AWS, including virtual networks, VPCs, routing, network security controls, private connectivity, and connectivity to on-premises environments.
• Integrate cloud network security services and firewalls with enterprise routing, identity, logging, and monitoring platforms.
• Review existing firewall rules, security policies, and network architectures and recommend improvements to security, resiliency, scalability, and operational consistency.
• Support network segmentation and secure connectivity across enterprise and cloud environments.
• Provide Tier 3 escalation support for complex firewall, VPN, proxy, cloud networking, and network security incidents.
• Participate in an on-call support rotation as required.
• Develop and maintain firewall standards, rule documentation, cloud network diagrams, configuration templates, and operational procedures.
• Collaborate with Cybersecurity, Cloud Platform, Network Engineering, Application, Operations, and business stakeholders.
• Support ongoing network modernization, security, automation, and operational improvement initiatives.

ABOUT THE REQUIREMENTS

• Bachelor's degree or equivalent combination of education and practical experience.
• Extensive hands-on experience with Palo Alto Networks firewalls.
• Strong experience with centralized firewall management, security policies, NAT, high availability, segmentation, and troubleshooting.
• Strong cloud networking experience within Microsoft Azure and/or AWS.
• Experience with cloud routing, network security controls, hybrid connectivity, and cloud firewall architectures.
• Experience with Zscaler or comparable cloud-delivered network security technologies.
• Strong experience with IPsec VPNs, secure connectivity, network segmentation, and security policy lifecycle management.
• Working knowledge of BGP, OSPF, VRF, and enterprise routing concepts.
• Experience with Cisco IOS-XE, Cisco Catalyst, and Cisco Nexus platforms.
• Experience with network authentication and access technologies, including Cisco ISE, TACACS, RADIUS, and 802.1X.
• Strong technical troubleshooting and analytical skills.
• Strong documentation skills and the ability to develop clear technical standards, diagrams, and procedures.
• Excellent written and verbal English communication skills.
• Ability to work effectively across distributed technical and business teams.

PREFERRED QUALIFICATIONS

• Advanced experience with Palo Alto Panorama and firewall automation.
• Experience with Azure Firewall and/or AWS Network Firewall.
• Experience with cloud transit architectures and cloud-native load balancing.
• Experience with Palo Alto ION SD-WAN.
• Experience with Cloudflare and/or F5 LTM.
• Experience with Python, Terraform, or other infrastructure-as-code and network automation technologies.
• Experience with DNS, DHCP, and Infoblox.
• Familiarity with VMware and Linux environments.
• Experience supporting complex, global enterprise networks.

ABOUT THE ROLE

This is an initial 6-month contract opportunity with the potential for extension based on ongoing business requirements.

The position is remote and will support a distributed enterprise environment. The successful candidate will also participate in an on-call rotation and should be comfortable supporting business-critical network services across multiple locations and technology platforms.

AI DISCLOSURE

As part of our recruitment process, Systematix may use artificial intelligence (AI) tools to assist with resume screening, candidate matching, and recruitment administration. All hiring decisions are ultimately made by our recruitment and hiring teams.

APPLY NOW

If you are interested in finding out more, please contact us or submit your resume to [email protected].

Know someone who would be a great fit? We welcome referrals of qualified candidates and are always interested in connecting with talented technology professionals.

ABOUT SYSTEMATIX

Systematix is a Canadian-owned Global Consulting and Resourcing firm with nearly 50 years of experience delivering technology solutions to clients across North America and the United Kingdom. We provide the highest-caliber consulting solutions to a diverse client base across all levels of government and private industry. Systematix is committed to creating a diverse, inclusive environment and is proud to be an equal opportunity employer. At Systematix, we value diverse perspectives, experiences, and backgrounds.

Systematix. Solutions Focused. People Driven.