Network Security Engineer, III

Role Overview

• Lead the migration, configuration, and maintenance of Cisco ASA (Classic) and Firepower (FTD) systems, while managing a robust Palo Alto environment via Panorama
• Design and manage F5 BIG-IP solutions, focusing on LTM (Local Traffic Manager) for load balancing and ASM/WAF (Application Security Manager) for protecting web applications
• Implement and manage micro-segmentation policies and virtualized security services within VMware NSX (T/V) environments
• Architect strategies to transition legacy Cisco ASA rulesets to Cisco Firepower or Palo Alto NGFWs without service disruption
• Act as the highest escalation point for complex network outages, security breaches, or performance degradation across the global fabric
• Provide exceptional customer support via the phone and ticketing system
• Own level-appropriate customer requests and issues, seeing them through to resolution
• Own support escalations from other engineers and support teams according to escalation procedures
• Collaborate with Service Delivery Managers and Account Executives to build strong customer relationships
• Work closely with customers in the pre-implementation process to design and architect desired customer solutions
• Work closely with the implementation team to quality check deployments and perform initial vulnerability assessment as part of the customer environment acceptance process
• Research, plan and coordinate complex maintenance activities
• Participate in Root Cause Analysis (RCA) exercises to drive process & technology improvements
• Collaborate and share knowledge with other administrators and engineers via articles and training presentations
• Contribute to the development of technical best practices for administrative responsibilities
• Prepare and review defined policy and process standards
• Ability to communicate effectively, both verbally and in writing, with customers as well as with internal stakeholders.

Requirements

• Advanced knowledge of Cisco ASA (CLI/ASDM) and Firepower Threat Defense (FTD) managed via FMC
• Deep experience with Palo Alto NGFW features (App-ID, User-ID, SSL Decryption)
• Proficiency in F5 BIG-IP, including iRules development, SSL offloading, and traffic steering
• Hands-on experience with VMware NSX, specifically in configuring distributed firewalls (DFW) and edge gateways
• Mastery of TCP/IP, BGP, OSPF, and deep packet inspection
• CCNP Security – Required
• CCIE Security – Highly Preferred
• PCNSE (Palo Alto Networks Certified Network Security Engineer) – Highly Preferred
• F5-CTS (Certified Technology Specialist) – Preferred
• VCP-NV (VMware Certified Professional
• Network Virtualization) – Preferred
• Advanced level experience in network security engineering
• Demonstrated experience managing complex firewall rule bases (10,000+ rules) across disparate platforms
• Expertise in troubleshooting complex asymmetric routing issues and application-level latency in a multi-vendor environment.

Tech Stack

• Assembly
• Firewalls
• TCP/IP
• VMware

Benefits

• competitive salary
• incentive compensation opportunities in the form of annual bonus or incentives
• equity awards
• Employee Stock Purchase Plan (ESPP)