Senior Network Security Engineer

Design and implement enterprise network security architecture for perimeter, internal networks, data centers, and OT environments.

Design and manage Palo Alto NGFW solutions across physical and virtual environments.

Work extensively with Palo Alto Panorama, Prisma Access, GlobalProtect, and site-to-site VPN solutions.

Design and implement secure IPsec VPN connectivity and troubleshoot IKE/IPsec and traffic-flow issues.

Develop security strategies for Internet perimeter protection, DMZ, internal segmentation, and east-west traffic.

Design and implement microsegmentation to control lateral movement and improve internal security.

Architect secure connectivity between on-premises infrastructure and Microsoft Azure and AWS environments.

Work with Azure VNet, ExpressRoute, Private Link, VPN Gateways, VNet Peering and related cloud networking technologies.

Work with AWS networking technologies including VPC, Transit Gateway, Direct Connect, PrivateLink, VPN, and peering.

Design and support security controls for OT/ICS environments.

Implement and manage Cisco ISE for network access control, authentication, authorization, and identity-based access.

Design and support F5 Load Balancing / F5 LTM solutions.

Work with Cisco Umbrella for DNS-layer security, secure Internet access, and security policy enforcement.

Participate in security architecture reviews, technology assessments, and infrastructure modernization initiatives.

Troubleshoot complex network and security incidents involving firewalls, routing, VPN, cloud connectivity, load balancing, and access control.

Work with infrastructure, cloud, application, and security teams to ensure secure end-to-end connectivity.

Develop and maintain network/security architecture diagrams, standards, procedures, and technical documentation.

Ensure solutions follow enterprise security, compliance, availability, and resiliency standards.