job summary
We are seeking an experienced Network Security Engineer to join our global infrastructure team. In this role, you will play a pivotal part in designing, deploying, and maintaining advanced micro-segmentation policies and zero-trust security frameworks across our enterprise hybrid cloud environments. You will work closely with cross-functional global teams to protect critical systems and mitigate lateral security risks.
location: Telecommute
job type: Contract
salary: $40 - 50 per hour
work hours: 8am to 5pm
education: Bachelors
responsibilities
- Design, implement, and maintain micro-segmentation policies using Illumio or Guardicore across hybrid workload environments.
- Manage, configure, and optimize Palo Alto firewalls and Panorama management systems.
- Perform application dependency mapping, policy testing, traffic flow validation, and enforcement across cloud and data center networks.
- Utilize automation tools (Python, Terraform, Ansible) to streamline rule pushes and configuration baselines.
- Troubleshoot complex network security issues, participate in change management processes, and join a 24x7 on-call rotation.
qualifications
REQUIRED QUALIFICATIONS
Bachelor's degree in Computer Science, IT, Engineering, or a related field.
8+ years of hands-on experience in networking and network security engineering.
5+ years of experience in network architecture with a focus on enterprise micro-segmentation and zero-trust principles.
Demonstrated hands-on expertise with Palo Alto firewalls and micro-segmentation tools (Illumio Core/Cloud, Guardicore).
Solid experience with cloud networking and security design in AWS and Azure.
PREFERRED QUALIFICATIONS
Proficiency in network automation using Python, Ansible, or Terraform.
Strong understanding of BGP, OSPF, VXLAN, and east-west traffic management.
Experience in ITIL change management processes and global enterprise support.
skills
Akamai
AWS
Ansible
BGP
Cloud
cloud networking
complex network
Data Center
disaster recovery
DNS
DHCP
Azure
network architecture
network security
Micro-Segmentation
network segmentation
Network automation
OSPF
VXLAN
Python
SD
TCP/IP stack
Terraform
traffic analysis
VPNs
wireless network
zero-trust
zero-trust architecture
exceptional communication skills
self-starting
24x7
change management
ITIL processes
policy creation
policy enforcement
SD-WAN
Security
security updates
traffic flows
workflows