Houston TX)

AECOM•Houston, TX

2h•$130,000 - $175,000•Hybrid

About The Position

We are seeking a skilled and motivated Firewall & Network Security Engineer with hands-on experience supporting Palo Alto Networks Next-Generation Firewalls (NGFWs) and Prisma Access to join our Cybersecurity Engineering department. The successful candidate will collaborate closely with internal cybersecurity, infrastructure, and architecture teams, as well as an outsourced service provider, to ensure the secure design, implementation, and operation of firewall and network security technologies in a multi-datacenter, global enterprise environment supporting over 50,000 onsite and remote users. The ideal candidate is comfortable operating firewall environments end-to-end, troubleshooting complex issues, and partnering across infrastructure and cloud teams to deliver secure, scalable solutions. This role offers opportunities for cross-training across other areas of the Cybersecurity Engineering department, enabling professional growth and broader exposure to enterprise security technologies. Experience across broader network and security disciplines, including routing, switching, and load balancers, is preferred. This position offers flexibility for a hybrid work schedule, combining in-office and virtual work, and must be based in Dallas or Houston, TX.

Requirements

BA/BS degree plus at least 6 years of experience in IT security or a related field or demonstrated equivalency of experience and/or education
Hands-on experience managing Palo Alto NGFWs, GlobalProtect, and Prisma Access in a centrally managed, enterprise environment
Proven experience troubleshooting complex network/security incidents, including connectivity, performance, and policy issues
Experience creating or enforcing firewall and network security policies at scale across multiple sites or geographies
Strong analytical, problem-solving, and communication skills
Ability to work independently while contributing effectively within a team environment

Nice To Haves

Palo Alto Networks certifications (PCNSE, PCNSA)
Broader networking experience beyond firewalls, including routing, switching, and load balancing fundamentals
Experience with both Panorama and Strata Cloud Manager, including transition
F5 BIG-IP certifications or hands-on experience managing load balancers
Cisco certifications (CCNA, CCNP) or demonstrated expertise in enterprise routing/switching
Experience with secure network segmentation and micro-segmentation in enterprise environments
Familiarity with cloud security services (e.g., AWS Security Groups, Azure NSG, Prisma Cloud) and cloud-native firewall integration

Responsibilities

Own the firewall access request and approval process, including security and NAT policies and device configurations, while collaborating under the guidance of the senior Network Cybersecurity Engineer
Design, implement, and manage security policies, including App-ID, User-ID, Content-ID, and URL filtering
Manage the full firewall rule lifecycle, including creation, validation, optimization, cleanup, and periodic reviews
Participate in device configuration and security reviews for firewalls to ensure alignment with security standards, best practices, and architectural requirements
Lead the identification, assessment, and remediation of Palo Alto security advisories and vulnerabilities, ensuring network protection and compliance
Oversee day-to-day firewall and network security operations in partnership with a third-party managed security service provider (MSSP), providing technical guidance, oversight, and escalation support as needed
Partner with the IT Infrastructure networking team to strengthen security and operational processes across enterprise networking technologies, including F5 load balancers and Cisco routing and switching, ensuring alignment with security standards and best practices
Provide subject matter expertise to the Cybersecurity Architecture team on the deployment of Palo Alto and other network devices
Drive continuous improvements to processes, environments, and overall security posture, ensuring operational efficiency and risk reduction
Participate in cross-training opportunities within the Cybersecurity Engineering department to develop broader skills across enterprise security technologies and network operations