Network Security Engineer

Vailexa • Boise, ID

18h

About The Position

At Vailexa, we’re not just hiring — we’re building thinkers, creators, and future leaders. We believe in giving people the space to grow, the freedom to think, and the opportunity to create real impact from day one. If you’re someone who wants to learn fast, take ownership, and grow beyond limits, you’ll feel right at home here.

Requirements

• Approximately 6+ years of hands-on experience in network security or network engineering with a security focus.
• Demonstrated hands-on experience administering next-generation firewalls, with practical expertise in Palo Alto and/or Cisco (ASA, Firepower) platforms.
• Working experience with secure web proxy / SWG solutions — Zscaler (ZIA/ZPA) strongly preferred — including SSL inspection and policy configuration.
• Practical knowledge of DDoS mitigation concepts and tooling, and experience responding to attack scenarios.
• Experience with NDR or network traffic analysis platforms for detection, investigation, and threat hunting.
• Solid grasp of TCP/IP, routing and switching, VPNs (IPsec/SSL), DNS, and network segmentation.
• Familiarity with SIEM/log analysis and a structured approach to incident investigation.
• Strong troubleshooting skills and the ability to work independently in a fast-paced, delivery-oriented contract environment.
• Clear written and verbal communication, with disciplined documentation habits.

Nice To Haves

• Industry certifications such as PCNSE (Palo Alto), CCNP Security, Zscaler Certified, CISSP, or Security+.
• Exposure to cloud network security (AWS, Azure, or GCP) and SASE/Zero Trust architectures.
• Experience with automation/scripting (Python, Ansible, or REST APIs) for policy and configuration management.
• Familiarity with load balancers, IDS/IPS, web application firewalls (WAF), and email security gateways.
• Experience operating in regulated or enterprise-scale environments with formal change control.

Responsibilities

• Configure, manage, and tune next-generation firewall policies, NAT rules, VPNs, and security profiles across Palo Alto and Cisco platforms.
• Administer secure web gateway/proxy services (e.g., Zscaler), including URL filtering, SSL inspection, traffic forwarding, and policy enforcement for users and locations.
• Deploy, monitor, and tune DDoS mitigation controls; respond to volumetric and application-layer attacks and refine protection thresholds.
• Operate network detection and response (NDR) tooling to baseline traffic, investigate anomalies, and support threat hunting and incident response.
• Investigate security events and alerts, perform root-cause analysis, and coordinate remediation with SOC and network teams.
• Maintain accurate configuration standards, runbooks, network diagrams, and change records; participate in the change-management process.
• Support firmware/software upgrades, rule-based cleanup, and recurring policy and access reviews to reduce risk and technical debt.
• Collaborate with internal stakeholders and vendors to troubleshoot connectivity and security issues and to onboard new sites, services, and controls.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed