Senior Network Security Engineer

Role Overview

The Network Security Team is seeking a Sr. Network and Firewall Security Engineer to secure and operate connectivity across global offices and data centers. This is a hands-on role requiring deep expertise in Palo Alto firewalls, including design, deployment, migration, and ongoing optimization of security policies in complex enterprise environments.

Responsibilities

• Design, deploy, and migrate Palo Alto firewall solutions across global environments, including architecture of security policies, segmentation, SSL decryption, and centralized management
• Lead complex security and network integrations by applying strong core networking principles (BGP, OSPF, routing design, failover, traffic engineering) to ensure resilient, high-performance connectivity
• Partner with network, cloud, and infrastructure teams to design and implement secure, scalable connectivity across on-prem and hybrid environments
• Serve as a senior escalation point, driving advanced troubleshooting across firewalls and underlying network infrastructure, including deep packet, flow, and session-level analysis
• Support network security operations and incident response, diagnosing complex connectivity issues involving routing, NAT, policy enforcement, and application behavior
• Mentor engineers and NOC staff, reinforcing strong networking fundamentals, structured troubleshooting, and operational best practices
• Manage and prioritize work intake while delivering clear, direct communication to both technical stakeholders and senior leadership
• Evaluate and recommend enhancements to security architecture, firewall capabilities, and network design to continuously improve reliability and security posture

Qualifications

• 7+ years of network and security engineering experience across enterprise routing, switching, and firewall platforms, with strong foundations in secure connectivity and network design
• 5+ years of hands-on experience managing Palo Alto firewalls, including SSL decryption, security profiles, and Panorama-based centralized management (required)
• Strong, demonstrated experience designing and troubleshooting complex network and security environments, including routing protocols (BGP, OSPF), NAT, and packet-level analysis in production environments
• Deep understanding of TCP/IP, traffic flows, and structured troubleshooting methodologies across network and security domains
• Strong understanding of network security design principles, including segmentation, access control, and secure architecture patterns (zone-based design, microsegmentation, zero-trust concepts)
• Experience leading firewall migrations and contributing to enterprise network security architecture
• Experience with scripting or API-driven automation to improve operational efficiency

Preferred Qualifications

• Experience across additional enterprise networking platforms and edge technologies, including Arista or similar environments, proxy platforms, load balancers (e.g., F5), and multi-vendor infrastructure
• Experience with cloud networking and security, including AWS networking constructs and security controls, as well as edge security platforms such as Cloudflare or similar services
• Familiarity with modern application and container networking models, including Kubernetes networking, segmentation, and network policies
• Relevant industry certifications such as Palo Alto, Cisco, or equivalent