Network Security Engineer with Palo Alto ZTNA Experience

Job Description

Our client is seeking an experienced Senior Network Security Engineer to support strategic network segmentation and Zero Trust Network Access (ZTNA) initiatives within a complex enterprise environment.

The ideal candidates will possess deep expertise in network security infrastructure design, implementation, administration, and automation, with a strong background in firewall technologies, routing, DNS/IP management, and application delivery services.

These engineers will play a key role in designing and implementing security controls, enhancing network segmentation strategies, supporting Zero Trust architectures, and ensuring secure, scalable, and resilient network operations across the enterprise.

Key Responsibilities

• Design, implement, and support enterprise network segmentation and Zero Trust Network Access (ZTNA) architectures.
• Configure, manage, and automate next-generation firewall environments, including Check Point and Palo Alto Networks platforms.
• Administer and optimize Palo Alto ZTNA solutions to support secure user and application access.
• Design, troubleshoot, and maintain BGP routing configurations within enterprise and hybrid network environments.
• Manage enterprise DNS, IP Address Management (IPAM), and DHCP services utilizing Infoblox solutions.
• Configure and administer F5 Global Traffic Manager (GTM) and Local Traffic Manager (LTM) environments to ensure application availability and traffic optimization.
• Develop and maintain network security standards, architecture documentation, and operational procedures.
• Perform security assessments and recommend improvements to strengthen network segmentation and access control policies.
• Investigate and resolve complex network and security incidents impacting connectivity, performance, or security posture.
• Collaborate with infrastructure, security, cloud, and application teams to deliver secure network solutions.
• Support migration, upgrade, and transformation projects related to network modernization and Zero Trust initiatives.

Required Qualifications

• 7+ years of experience in network security engineering or infrastructure engineering roles.
• Strong hands-on experience with:
• Check Point Firewalls
• Palo Alto Networks Next-Generation Firewalls
• Palo Alto ZTNA solutions
• BGP Routing
• Infoblox DNS, DHCP, and IPAM
• F5 GTM and LTM
• Experience designing and implementing network segmentation solutions in large enterprise environments.
• Knowledge of Zero Trust security principles and architectures.
• Strong understanding of TCP/IP, routing, switching, and network security fundamentals.
• Experience troubleshooting complex network security and connectivity issues.
• Excellent documentation, communication, and stakeholder management skills.

Preferred Qualifications

• Palo Alto Networks certifications (PCNSA, PCNSE).
• Check Point certifications (CCSA, CCSE).
• F5 Certified Administrator (F5-CA) or equivalent.
• Experience with firewall automation and Infrastructure as Code (IaC) methodologies.
• Experience supporting cloud networking and hybrid connectivity models.
• Knowledge of micro-segmentation and software-defined networking technologies.