Network Security Engineer

Customers Bank•Malvern, PA

2d•Onsite

About The Position

We are seeking a motivated and detail-oriented Network Security Engineer to secure, monitor, and enhance our enterprise network environment. This role focuses heavily on firewall administration, network segmentation, and security hardening. You will support the design and enforcement of security policies, maintain next‑generation firewalls, and collaborate with Security and Infrastructure teams to ensure a resilient and compliant network.

Requirements

3-5 years of experience in network security, network engineering, or related IT roles.
Strong understanding of network security concepts: segmentation, ACLs, IPS/IDS, threat prevention, SSL decryption, Zero Trust principles.
Hands‑on experience with Palo Alto firewalls and Panorama; experience with Cisco firewalls is a plus.
Experience designing and implementing network segmentation (VLANs, VRFs, micro‑segmentation).
Experience with VPN technologies and troubleshooting secure remote access solutions.
Experience with wireless security protocols and enterprise authentication (WPA2‑E, 802.1X).
Experience with Cloud security concepts.
Solid knowledge of TCP/IP, DNS, DHCP, NAT, VPN, VLANs, OSPF, BGP.
Familiarity with network monitoring/logging tools (e.g., Splunk, Syslog).
Strong communication and documentation skills.
Relevant certifications are preferred such as Palo Alto PCCSA/PCNSA/PCNSE, Cisco CCNA Security, CompTIA Security+ or Network+.
Experience with Palo Alto firewalls, Panorama, and threat prevention tools.
Experience with Cisco networking including Cisco Identity Services Engine (ISE).
Exposure to cloud security/networking (Azure) is a plus.
Working knowledge of ITIL frameworks.

Responsibilities

Configure, maintain, and troubleshoot next‑generation firewalls (especially Palo Alto Networks) including security policies, NAT, threat profiles, URL filtering, and VPN configurations.
Lead efforts in network segmentation, micro‑segmentation, and Zero Trust architecture adoption.
Implement and maintain network security controls across wired, wireless, and cloud environments.
Monitor security logs, analyze firewall events, and respond to network security incidents.
Manage VPN technologies including remote access and site‑to‑site tunnels.
Support network architecture reviews and security assessments.
Ensure adherence to regulatory and security frameworks (SOX, FFIEC, PCI, HIPAA, etc.).
Maintain detailed documentation of firewall rulesets, segmentation maps, topology changes, and security configurations.
Work cross‑functionally with Information Security, Cloud, and Infrastructure teams.
Participate in IT change management processes and follow ITIL best practices.