Primary scope: Cisco and Palo Alto firewall platforms; firewall policy lifecycle; NAT; segmentation; remote access and site-to-site VPN; RSA SecurID or equivalent MFA/two-factor authentication server and token services; Cloudflare or equivalent DNS/DDoS/WAF/Zero Trust edge security services; content filtering; network access control; monitoring, logging, and SIEM integration; vulnerability remediation; POA&M support; and audit evidence for TCO-managed systems. Examples include CCNP Security, CCIE Security, PCNSE, PCCSE, CISSP, CCSP, AWS Certified Security- Specialty, AWS Advanced Networking- Specialty, Microsoft Certified: Azure Security Engineer Associate, Microsoft Certified: Azure Network Engineer Associate, CompTIA Security+, CompTIA CySA+, GIAC certifications, or equivalent vendor/cloud certifications.