[Hiring] Network Security Engineer Master @Govcio LLC

Role Description

GovCIO is seeking a highly experienced Master Network & Security Engineer to lead the design, operation, troubleshooting, and continuous improvement of enterprise network-security infrastructure. This role is responsible for:

• Palo Alto Networks next-generation firewalls
• Panorama
• High Availability
• Cisco switching
• Network segmentation
• Cortex XSIAM
• Strata Logging Service

The Senior Engineer will serve as a technical escalation point for complex network and security incidents, lead architecture and implementation initiatives, establish standards, and partner with SOC, infrastructure, cloud, application, and leadership teams to reduce risk and maintain highly available services. This position is located within the United States and is fully remote.

Responsibilities

• Lead the design, deployment, administration, and lifecycle management of Palo Alto Networks NGFW environments running PAN-OS.
• Own centralized firewall management through Palo Alto Panorama.
• Design and govern security policies using zero-trust, least-privilege, application-aware, and risk-based principles.
• Configure and troubleshoot security zones, NAT, virtual routers, static and dynamic routing, IPsec VPN, GlobalProtect, decryption, URL Filtering, Threat Prevention, WildFire, DNS Security, and App-ID policies.
• Lead enterprise network-segmentation and microsegmentation initiatives.
• Develop secure controls for traffic between various networks and resources.
• Architect, configure, test, and troubleshoot Palo Alto High Availability deployments.
• Resolve complex HA failures.
• Plan and execute HA failover testing, PAN-OS upgrades, disaster-recovery exercises, and maintenance procedures.
• Troubleshoot HA infrastructure dependencies.
• Lead the configuration, support, and troubleshooting of Cisco Catalyst and Nexus switching environments.
• Diagnose complex connectivity and performance issues.
• Analyze TCP/IP behavior and verify packet flow across various layers.
• Monitor firewall management-plane and dataplane health.
• Integrate Palo Alto NGFWs and Panorama with Strata Logging Service and Cortex XSIAM.
• Use Cortex XSIAM and XQL Search to investigate security events.
• Partner with SOC teams to tune detections and improve visibility.
• Lead root-cause analyses for major network or security incidents.
• Develop and maintain network diagrams, documentation, and operational procedures.
• Mentor junior engineers and provide technical leadership.

Qualifications

• Master’s degree in Cybersecurity, Information Technology, Computer Science, Engineering, or a related field (three additional years if Bachelor’s degree); equivalent relevant experience may be considered.
• 10+ years of progressive experience in network engineering, network security, firewall administration, or security infrastructure operations.
• 6+ years of hands-on Palo Alto Networks firewall experience in a production enterprise environment.
• Advanced operational experience with Palo Alto Panorama.
• Strong hands-on experience designing, maintaining, and troubleshooting Palo Alto High Availability environments.
• Advanced understanding of HA1, HA2, HA3, and related processes.
• Strong expertise in TCP/IP, IPv4/IPv6, DNS, DHCP, ARP, routing, NAT, VPNs, and packet-level troubleshooting.
• Extensive experience with Cisco Catalyst and/or Nexus switching technologies.
• Strong knowledge of enterprise switching and routing.
• Proven experience designing or implementing network segmentation and microsegmentation solutions.
• Working knowledge of Cortex XSIAM and related technologies.
• Ability to lead technical design discussions and communicate risks and recommendations.
• Strong documentation, change-management, incident-management, and root-cause-analysis skills.
• Clearance Required: Ability to obtain and maintain a Public Trust clearance.

Preferred Skills and Experience

• Palo Alto Networks certifications: PCNSA, PCNSE, PCCSE, or equivalent enterprise-level experience.
• Cisco certifications: CCNP Enterprise, CCNP Security, CCIE Enterprise Infrastructure, CCIE Security, or comparable expertise.
• Experience with Palo Alto Prisma Access, Prisma Cloud, Cortex XDR, Cortex XSOAR, or cloud-delivered security services.
• Experience with Cortex XSIAM alert triage and related tasks.
• Experience with Cisco ISE, Cisco ACI, SD-Access, or enterprise network-access-control solutions.
• Familiarity with Fortinet Security Fabric and related products.
• Experience with AWS, Azure, Google Cloud Platform, and cloud-security controls.
• Familiarity with SIEM, SOAR, EDR/XDR, and related platforms.
• Automation skills using Python, Ansible, Terraform, or related tools.
• Experience supporting 24x7 environments and participating in an on-call rotation.

Posted Salary Range

USD $125,000.00 - USD $150,000.00 /Yr.