Security Network Engineer

We are looking for a Security Network Engineer to join a banking technology environment in Malvern, Pennsylvania on a contract-to-permanent basis. This role focuses on strengthening enterprise network defenses, safeguarding connectivity across multiple locations, and advancing secure access standards throughout the organization.

Responsibilities

• Build, configure, and support Palo Alto next-generation firewall solutions across enterprise and branch environments, including policy management and advanced security services.
• Oversee Cisco firewall platforms by maintaining rule sets, managing threat protection features, and performing upgrades and patching activities.
• Maintain secure remote connectivity through VPN technologies, including remote access and site-to-site tunnels, to support users and distributed offices.
• Help secure the SD-WAN environment by enforcing segmentation controls, applying security standards, and protecting encrypted traffic flows.
• Administer DNS-layer and web security controls, including policy tuning, threat visibility, and reporting for enterprise-wide protection.
• Investigate network security events, analyze suspicious activity, and contribute to incident response efforts related to perimeter and transport-layer threats.
• Lead change activity for network security updates with proper documentation, approvals, implementation planning, and post-change validation.
• Partner with security, cloud, and infrastructure teams to enhance segmentation strategies, zero-trust initiatives, and overall network architecture.
• Produce and maintain accurate technical documentation, including standards, runbooks, diagrams, and operational procedures for security platforms.

Requirements

• At least 5 years of hands-on experience in network security engineering or a closely related infrastructure security role.
• Strong working knowledge of Palo Alto Networks firewalls in enterprise environments.
• Experience supporting Cisco security technologies such as routers, ASA, ISE, and related firewall platforms.
• Practical understanding of VPN connectivity, remote access solutions, and site-to-site secure communications.
• Familiarity with network segmentation, zero-trust concepts, and security policy enforcement across distributed environments.
• Ability to troubleshoot complex network security issues and respond effectively to incidents.
• Strong documentation, communication, and collaboration skills when working across technical teams and stakeholders.

Benefits

• Medical, vision, dental, and life and disability insurance.
• Eligibility to enroll in the company 401(k) plan.

All applicants must be legally authorized to work in the United States.