Senior Network Security Engineer

About the role

As a Senior Network Security Engineer, you will provide expert-level engineering and operational support for the organization’s enterprise network and security infrastructure. You will play a lead role in the planning, design, implementation, and ongoing maintenance of secure network solutions across campus, data center, remote offices, cloud environments, and third-party connectivity. This includes core services such as firewall management, networking, VPNs, directory services, identity management, PKI, Web Application Firewalls (WAF), and virtual networks.

Responsibilities

• Implement and optimize secure connectivity and access solutions, assisting with the deployment of Zero Trust Network Access (ZTNA).
• Manage firewall policies, VPNs, and segmentation strategies.
• Collaborate with cross-functional teams to deliver secure, resilient, and high-performing network services that meet business and regulatory requirements.
• Mentor junior staff and ensure adherence to security best practices and operational standards.

Requirements

• Five years of progressively responsible experience in network operations and engineering within enterprise or large-scale environments.
• Bachelor's degree in Computer Science, Information Technology, or a closely related field.
• A combination of post-secondary education and/or job-related experience may substitute for the minimum qualifications on a year-for-year basis.
• Successfully obtain a valid Arizona Driver's license by the time of hire.

Qualifications

• Okta Certified Professional / Okta Certified Administrator.
• Cisco Certified Network Professional (CCNP) Enterprise or higher.
• Palo Alto Networks Certified Network Security Engineer (PCNSE).
• Certified Information Systems Security Professional (CISSP).
• Experience in designing, implementing, and managing enterprise network infrastructure, including on-premises, cloud, and hybrid solutions.
• Experience with enterprise LAN/WAN architecture and wireless networking, including planning, deployment, and troubleshooting across campus and remote locations.
• Experience deploying and configuring Multi-Factor Authentication (MFA) policies using tools such as Microsoft Entra ID, Okta, or Duo to enhance access security.
• Experience supporting the design and troubleshooting of Single Sign-On (SSO) integrations using SAML, OIDC, and OAuth protocols across enterprise applications.
• Experience configuring, managing, and troubleshooting Next-Generation Firewalls (NGFW)—such as Palo Alto Networks —including security policies, application control, threat prevention, URL filtering, and VPN services.
• Experience implementing and supporting VPN solutions, including site-to-site and remote access configurations, with a focus on performance and security.
• Proficiency in network automation and scripting (e.g., Python, Ansible, or REST APIs) to streamline configuration management and operational tasks.

Skills

• Ability to design, architect, and govern enterprise network security frameworks and secure connectivity models.
• Experience with enterprise firewall policy design, segmentation architecture, and secure access across on-premises, cloud, and hybrid environments.
• Knowledge of identity-integrated network access controls, including authentication and authorization models.
• Experience with enterprise LAN/WAN architecture and wireless networking, including planning, deployment, and troubleshooting across campus and remote locations.
• Experience with Multi-Factor Authentication (MFA) policies and tools such as Microsoft Entra ID, Okta, or Duo.
• Experience with Single Sign-On (SSO) integrations using SAML, OIDC, and OAuth protocols.
• Experience with Next-Generation Firewalls (NGFW) and their configuration, management, and troubleshooting.
• Experience with VPN solutions, including site-to-site and remote access configurations.
• Proficiency in network automation and scripting (e.g., Python, Ansible, or REST APIs).

Benefits

Proud to Offer
- Work with a greater purpose
- Tuition reimbursement
- Exceptional work-life balance, with hybrid and alternative work schedule options
- Opportunities for growth and development within Maricopa County
- Low-cost, high-value healthcare for you and your qualifying dependents
- Child care benefits, including access to our on-site center, Maricopa County Kids Club, dedicated to serving Maricopa County families
- Paid vacation, sick time, and parental leave
- Extensive wellness program, including an incentive
- Enrollment in the Arizona State Retirement System, a defined retirement benefit requiring a 12% monthly contribution rate that includes a 100% employer match on Day 1

Pay

$97,250 - $142,500 annually
Salary offers are based on the candidate's equivalent experience and internal equity with other employees within the same job classification. This position is not eligible for overtime compensation.

Schedule

Position is typically office or administrative work and is not substantially exposed to adverse environmental conditions.