Senior Network Security Engineer - Almont

Requirements:

• At least 6 years of experience engineering and supporting network security solutions in complex production environments.
• Advanced hands-on expertise with Palo Alto Networks platforms, including PAN-OS and Panorama.
• Strong knowledge of firewall policies, segmentation, NAT, VPN, threat prevention, routing, switching, and network troubleshooting.
• Experience with enterprise network platforms such as Juniper Junos, Cisco NX-OS, or Arista EOS.
• Experience automating network or infrastructure tasks with tools such as Terraform, Ansible, Python, or Bash.
• Ability to independently lead complex technical initiatives and resolve high-impact network and security issues.
• Strong documentation, communication, and cross-functional collaboration skills.
• Preferred: Experience with GlobalProtect, Prisma Access, Cloud NGFW, SASE, or Zero Trust technologies.
• Preferred: Hands-on experience with Juniper routing and switching platforms.
• Preferred: Experience with Network Access Control platforms such as Aruba ClearPass or Mist Access Assurance.
• Preferred: Familiarity with 802.1X, RADIUS, certificate-based authentication, and enterprise wireless technologies.
• Preferred: Familiarity with Azure and AWS networking technologies.
• Preferred: Professional certification such as PCNSE, CCNP Security, CCNP Enterprise, JNCIS, JNCIP, or equivalent.
• Preferred: Experience supporting regulated, mission-critical, aerospace, defense, or engineering environments.
• Must be willing and able to work on a W-2 basis and convert to full-time employment after the contract period.

Responsibilities:

• Design, implement, and maintain secure network architectures for data centers, offices, remote locations, and cloud-connected environments.
• Administer and optimize Palo Alto Networks technologies, including PAN-OS, Panorama, GlobalProtect, Threat Prevention, URL Filtering, Application Control, and WildFire.
• Engineer and maintain firewall policies, segmentation, NAT, site-to-site and remote-access VPNs, and Zero Trust or SASE connectivity.
• Administer or support Network Access Control technologies and enterprise authentication controls.
• Analyze network traffic and security logs, support vulnerability remediation, and contribute to network incident response.
• Carry out firewall upgrades, security hardening, and lifecycle maintenance in accordance with change-management standards.
• Support routing, switching, WAN, and wireless infrastructure across data centers and global locations.
• Troubleshoot complex routing, firewall, connectivity, performance, and application-access issues.
• Support secure hybrid connectivity with Azure and AWS, including related virtual firewall and routing technologies.
• Collaborate with infrastructure and cloud teams to include network security requirements in solution designs.
• Work with Palo Alto Networks, Juniper, and other vendors to resolve escalations and technical issues.
• Automate recurring network and security tasks using tools such as Terraform, Ansible, Python, or Bash.
• Create and maintain configuration standards, network diagrams, runbooks, and technical documentation.
• Provide Tier 3 escalation support for outages, incidents, and complex network security problems.
• Mentor fellow engineers and share network security practices and troubleshooting approaches.
• Participate in on-call rotations, scheduled maintenance windows, and emergency response as needed.

Technologies:

• AI
• AWS
• Ansible
• Aruba
• Azure
• Bash
• Cloud
• Cisco
• Firewall
• Support
• NAT
• Network
• Nx
• Prisma
• Python
• Security
• Terraform
• VPN
• Windows

More

We are recruiting for a remote Senior Network Security Engineer to help secure, scale, and strengthen a global network spanning data centers, offices, engineering environments, global WAN connections, and hybrid cloud infrastructure. This is a contract-to-hire opportunity, with a W-2 hourly pay range of $60–$90; the rate may depend on skills, experience, and other compensable factors. Eligible W-2 employees regularly scheduled for at least 30 hours per week may receive medical, dental, and vision coverage, pre-tax accounts, voluntary life and disability insurance, a 401(k) with company match, and sick time where required by law. Eliassen Group is a strategic consulting firm providing technology, business advisory, and life sciences solutions, and is committed to an inclusive workplace and equal employment opportunity. We use AI tools during initial application screening and hiring, with AI-assisted evaluations and responses reviewed by human recruiters.

last updated 43 week of 2026