Network Engineer – hybrid

We are seeking a skilled and experienced security focused Network Engineer to join our team. The ideal candidate will possess in-depth expertise in cybersecurity practices, strong knowledge of network systems, and hands-on experience with advanced security technologies. Your role will involve designing, implementing, and maintaining robust security solutions while ensuring thorough documentation and streamlined operations.

Hybrid role with Tuesday/Wednesday onsite.

Key Responsibilities

• Palo Alto VPN and Prisma Access Management
• Design, deploy, and manage Palo Alto VPN solutions.
• Configure and optimize Prisma Access for secure remote connectivity.
• Monitor and troubleshoot VPN and Prisma Access performance issues.
• Develop and maintain comprehensive documentation for network security designs, configurations, and operational procedures.
• Generate reports detailing security incidents, vulnerabilities, and mitigation strategies.
• Utilize AIOps tools for predictive analysis, anomaly detection, and network optimization.
• Apply Palo Alto Networks Certified Network Security Administrator (PCNSA) best practices to enhance operational efficiency.
• Configure, manage, and troubleshoot Arista routers and EOS-based network environments.
• Leverage Arista DMF (DANZ Monitoring Fabric) to ensure comprehensive network visibility and traffic analysis.
• Diagnose and resolve network connectivity and security issues.
• Collaborate with cross-functional teams to optimize network performance and ensure minimal downtime.
• Understand and support the unique security requirements of SCADA and Industrial Control Systems (ICS).
• Assist in integrating security solutions with operational technology (OT) environments.
  
  

Qualifications

• Bachelor’s degree in Cybersecurity, Information Technology, or related field (or equivalent experience).
• 5 years of experience in cybersecurity, with a focus on network security.
• Strong expertise in Palo Alto technologies, including Prisma Access and PCNSA certification.
• Proven experience with Arista routers, EOS, and DMF.
• Familiarity with SCADA/ICS systems and their security challenges.
• Excellent documentation, analytical, and communication skills.
• Ability to work independently and collaboratively in a fast-paced environment.
  
  

Desirable Skills

• Experience with Zeek/Corelight for network traffic analysis and threat detection.
• Familiarity with Acalvio’s deception technology for advanced threat mitigation.
• PCNSA (Palo Alto Networks Certified Network Security Administrator).
• Arista Certified Engineering Associate (ACE-A). CISSP, CISM, or similar cybersecurity certifications.