Senior Network Security Engineer

ZipStaff•Washington, DC

4d•Onsite

About The Position

ZipStaff is seeking an experienced Senior Network Security Engineer to serve as a technical leader designing, implementing, and optimizing perimeter and infrastructure security controls for a major transportation organization. The role safeguards critical enterprise infrastructure across on-premises networks and AWS and Microsoft Azure environments, with a strong focus on Palo Alto Networks firewalls. The engineer will manage network threats, advance security automation, align controls with regulatory frameworks, and mentor junior engineering staff. The position is on-site in Washington, DC, and is a contract role through ZipStaff on W2; C2C and 1099 arrangements are not accepted. The engineer will work with cloud, network, application, and multidisciplinary project teams to secure enterprise architectures and guide work throughout the system development lifecycle. The role includes incident response, threat hunting, forensic investigations, security assessments, documentation, and participation in planned maintenance, after-hours implementations, and emergency response activities.

Requirements

At least 11 years of dedicated cybersecurity engineering experience, focused on enterprise network and firewall security.
Advanced hands-on administration of Palo Alto Networks firewalls in complex enterprise environments.
Deep knowledge of TCP/IP, routing, switching, VPNs, WAN/LAN architectures, and perimeter defense concepts.
Practical experience managing IDS/IPS, SIEM, EDR, DLP, CASB, and WAF solutions.
Direct experience supporting and securing cloud infrastructure in AWS and Microsoft Azure.
Proficiency in automating security workflows with Python, PowerShell, or Bash.
Solid understanding of NIST, CIS Controls, PCI-DSS, HIPAA, and ISO 27001.
Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Engineering, or a related field.
Strong problem-solving, written and verbal communication, and stakeholder management skills.
Ability to work on-site in Washington, DC.

Nice To Haves

Master’s degree in Cybersecurity, IT, or a related field.
Active industry certifications such as PCNSE, CISSP, CCNP Security, GIAC, CEH, or Security+.
Background working directly with or within a Security Operations Center (SOC).
Experience implementing Zero Trust security architectures and cloud-native security tools.
Prior experience supporting network security in transportation, operations-focused, or large distributed enterprise environments.

Responsibilities

Lead the design, configuration, rule maintenance, and optimization of enterprise Palo Alto Networks firewalls and related perimeter security platforms.
Maintain and support Web Application Firewalls (WAF), Intrusion Detection/Prevention Systems (IDS/IPS), VPNs, and Network Access Control (NAC) technologies.
Partner with cloud, network, and application teams to implement secure architectures across AWS and Microsoft Azure.
Analyze and respond to network security incidents, monitor events through SIEM platforms, perform threat hunting, and conduct root-cause forensic investigations.
Conduct security reviews and risk assessments for new systems and architectural designs, ensuring compliance with applicable standards and frameworks.
Build automation scripts using Python, PowerShell, or Bash to streamline operational security tasks.
Develop and maintain operational runbooks, network diagrams, and standard operating procedures.
Guide multidisciplinary project teams throughout the system development lifecycle and mentor junior security engineers.
Participate in planned maintenance windows, after-hours implementations, and emergency incident response activities.