Network Security Engineer

First Quality•Home Office (PA), TX

2d•Remote

About The Position

First Quality Enterprises, LLC is seeking a remote Network Security Engineer to support and manage its network security infrastructure, including Palo Alto Next-Generation Firewalls, Network Access Control (NAC), and micro-segmentation platforms. The role also assists with auditing configurations on routers, switches, and wireless equipment. The engineer works with information security and network teams to maintain security policies and configurations, troubleshoot firewall rules and network services, and support changes to security platforms across the enterprise network. The position contributes to network security operations, incident and request response, firewall policy analysis and optimization, micro-segmentation, and firewall log configuration for the Security Operations Center (SOC). It also collaborates with outsourced service partners and cross-functional teams, follows IT architecture principles and information security standards, and maintains operational procedures and checklists. The position requires the ability to work in a 24/7 environment across multiple time zones and includes 10% domestic travel.

Requirements

At least 3 years of networking experience and 2 years of hands-on firewall engineering experience.
Experience managing Palo Alto firewall infrastructure in an enterprise environment.
Extensive hands-on experience configuring and troubleshooting in Palo Alto Panorama and SCM (Strata Cloud Manager).
Strong understanding of VPN technologies, including site-to-site and remote-access client VPNs, IPSec, IKE, tunnel modes, SSL, and tunnels between firewalls, with broad troubleshooting experience.
Experience with micro-segmentation in a virtualized data center environment.
Familiarity with Network Access Control (NAC) concepts and fundamentals.
Basic understanding of network engineering, SD-WAN, and LAN/WAN technologies and topologies.
Fundamental knowledge of network infrastructure, including Cisco routers and switches and Cisco and Aruba wireless equipment.
Strong troubleshooting and problem-solving abilities.
Ability to work in a 24/7 environment across multiple time zones and in a fast-paced environment that embraces change.
Results-oriented and customer-focused approach.
Ability to work independently and as part of a team; highly motivated and able to execute.
Solid organizational and time-management skills.
Trustworthiness and a high degree of credibility.
Solid written and verbal communication skills, including the ability to communicate with both business and technical audiences.
Ability to collaborate effectively with cross-functional teams.
Willingness to travel domestically 10%.

Nice To Haves

PCNSA, PCNSE, or CISSP certification.

Responsibilities

Monitor and manage firewall infrastructure, VPN, NAC, micro-segmentation platforms, and other security tools.
Collaborate with information security and network teams to establish and enforce firewall and NAC security policies and configurations.
Analyze and troubleshoot firewall rule sets in relation to application performance and availability.
Support change management by reviewing the impact of proposed security-platform configuration changes on the enterprise network and executing approved changes.
Participate in team and departmental meetings, providing updates on projects, initiatives, and incidents.
Ensure adherence to IT architecture principles and guidelines and published Information Security Standards (ISS).
Collaborate with outsourced partners in the delivery of network security services.
Use third-party tools such as Algosec or Tufin to identify firewall rule-set misconfigurations and gaps and optimize firewall policies.
Perform micro-segmentation using firewalls and tools such as Illumio or Guardicore.
Respond to and address support calls, incidents, and requests related to network and security infrastructure.
Configure and optimize firewall logs sent to the SOC.
Follow Standard Operating Procedures (SOPs) and maintain daily operational checklists.
Assist in auditing configurations on routers, switches, and wireless equipment.

Benefits

Competitive base salary and bonus opportunities
Paid time off (three-week minimum)
Medical insurance starting day one
Dental insurance starting day one
Vision insurance starting day one
401(k) with employer match
Paid parental leave
Child and family care assistance through a dependent care FSA with employer match up to $2,500
Bundle of joy benefit: a year's worth of free diapers for team members with a new baby
Tuition assistance
Wellness program with savings of up to $4,000 per year on insurance premiums