Senior Network Engineer – (Local only)

Position: Senior Network Engineer

Role Type: Full-Time / Professional

Department: Enterprise Information Technology

Position Overview

The Client is seeking an experienced, hands-on Senior Network Engineer to design, implement, secure, and support our enterprise-wide network infrastructure.

This role serves as a senior technical authority focusing on enterprise firewall administration, network segmentation, secure VPN architectures, cloud networking, and rapid incident resolution. The successful candidate will align day-to-day operations and strategic technology modernization initiatives with NIST security frameworks while providing technical guidance and mentorship to engineering teams.

Key ResponsibilitiesNetwork & Security Engineering

• Firewall & Perimeter Defense: Configure, deploy, and administer Palo Alto and Check Point next-generation firewalls (NGFW) and GlobalProtect VPN solutions, including security policies, NAT, access control lists (ACLs), rule migrations, and firmware lifecycles.
• Core Infrastructure & Connectivity: Design, optimize, and support enterprise LAN/WAN environments, routing and switching, wireless architectures, high-availability data centers, and multi-cloud connectivity.
• Segmentation & Zero Trust: Architect secure network zones, micro-segmentation strategies, and perimeter defenses to isolate critical assets and mitigate lateral movement of threats.
• Cloud Network Security: Configure and manage security controls within hybrid and cloud network environments; implement traffic inspection, secure transit gateways, and cloud access controls.

Operations, Incident Response & Compliance

• Incident Triage & Troubleshooting: Investigate and resolve complex Tier 3/4 network and security incidents using deep packet inspection (Wireshark/tcpdump), log analysis, and root-cause analysis.
• Monitoring & Vulnerability Remediation: Proactively monitor network performance, traffic patterns, telemetry, and alerts; conduct risk assessments and coordinate vulnerability remediation with cybersecurity teams.
• Standards & NIST Alignment: Develop, maintain, and enforce NIST-aligned security baselines, configuration standards, operational runbooks, and disaster recovery procedures.
• Documentation & Governance: Maintain network topology diagrams, IP addressing/subnets, VLAN matrices, firewall rule documentation, access controls, and compliance audit artifacts.

Leadership & Strategy

• Technology Modernization: Evaluate emerging network and security solutions, lead proof-of-concept (PoC) validations, and formulate implementation roadmaps.
• Cross-Functional Collaboration: Partner with cloud, cybersecurity, database, application development, and infrastructure teams across project delivery lifecycles.
• Reporting & Mentorship: Develop operational dashboards, risk reports, and executive KPI summaries; mentor junior network and security personnel.

QualificationsRequired Experience & Education

• Education: Bachelor’s degree in Computer Science, Information Systems, Cyber Security, or a related field (or equivalent relevant professional experience).
• Overall Experience: 5–10 years of combined enterprise IT, network engineering, and information security experience.
• Security Frameworks: 3–5 years of hands-on experience implementing tools and controls aligned with NIST security standards (e.g., NIST SP 800-53, NIST CSF).
• Technical Depth: Demonstrated hands-on expertise in:
• Routing and switching protocols (BGP, OSPF, EIGRP, VXLAN, VLANs, Spanning Tree).
• Enterprise firewalls, VPN tunnels (Site-to-Site, Remote Access), and micro-segmentation.
• Hybrid cloud networking and secure interconnectivity (AWS, Azure, or GCP).
• Network security monitoring, vulnerability management, authentication mechanisms (TACACS+, RADIUS, 802.1X), and DR/business continuity planning.
• Tools: Proficiency with network diagramming software (Visio, Lucidchart, or equivalent) and packet capture/monitoring utilities.
• Soft Skills: Strong analytical, documentation, verbal/written communication, and stakeholder management skills.

Preferred Qualifications

• Hands-on operational experience with enterprise Palo Alto (PAN-OS, Panorama) or Check Point environments.
• Active professional certifications, such as:
• Palo Alto Networks Certified Network Security Engineer (PCNSE)
• Certified Information Systems Security Professional (CISSP)
• Cisco Certified Network Professional (CCNP) / Cisco Certified Internetwork Expert (CCIE)
• Check Point Certified Security Expert (CCSE)

Pay: $55.00 - $60.00 per hour

Expected hours: 40.0 per week

Work Location: In person