Network Security Engineer

Job Overview:

Pay Range: $53.00hr - $58.00hr

Requirement/Must Have:

• Deep expertise in firewalls, secure access technologies, proxy/security platforms, and incident management.
• Hands-on experience with Cisco ASA (CSM) and Cisco FTD (FMC).
• Experience with Palo Alto Firewalls (Strata Cloud Manager) and Prisma Access.
• Proficiency in Zscaler (ZIA & ZPA).
• Experience with Cisco Umbrella & WSA Proxy.
• Knowledge of GlobalProtect VPN and IPSEC / SSL VPN.
• Expertise in URL filtering, SSL/TLS decryption, Proxy bypass, and PAC file management.
• Experience with DNS security (Umbrella) and O365/cloud proxy integrations.
• Strong understanding of routing protocols including BGP and OSPF.
• Experience with switching technologies including VLANs, STP, and EtherChannel.
• Familiarity with Cisco ASR/ISR Routers and Nexus 9K devices.
• 12+ years of experience in network security.

Responsibilities:

• Provide L3 support and act as SME for network security technologies.
• Manage and troubleshoot firewalls, VPN, proxy, and cloud security platforms.
• Handle P1/P2 incidents, RCA, and problem management.
• Execute changes aligned with ITIL processes.
• Manage and optimize Cisco WSA (proxy) including URL filtering, access control, and HTTPS decryption.
• Configure malware protection and security policies.
• Perform firmware upgrades, patches, and maintenance activities.
• Analyze logs, packet captures, and security alerts.
• Collaborate with SOC, TAC, and cross-functional teams.
• Maintain documentation, SOPs, and configurations.
• Participate in technical discussions and stakeholder calls.

Nice to Have:

• Certifications such as CCNP Security, PCNSE, or Zscaler certifications.
• Exposure to email security (ESA).
• Experience with automation and optimization initiatives.

Skills:

• Cisco ASA.
• CSM.
• Cisco FTD.
• FMC.
• Palo Alto.
• Prisma.
• Zscaler.
• ZIA.
• ZPA.
• Cisco Umbrella.
• WSA Proxy.
• BGP.
• OSPF.
• Nexus 9K.
• IPSEC.
• SSL VPN.

Qualification And Education:

• 12+ years of experience in network security infrastructure.