[Hiring] Senior Network/Security Engineer @Ad Hoc

Role Description

Senior Network/Security Engineer

This is a remote position.

Primary Responsibilities:

• Experience with Palo Alto, panorama OS (PAN-OS), Firewalls, SIEM, Security Configuration Management (SCM), migration, security and compliance, RBAC and access models, Data Loss Prevention (DLP), Strata Cloud Manager.
• Operate and engineer enterprise web proxy, deliver reliable policy changes, and diagnose issues down to packet level.
• Configuring Network ACLs, firewalls, and security groups to enforce policy and isolate sensitive workloads.
• Design secure network infrastructure enforcing Zero Trust principles for the DXP.
• Ensure 100% compliance with IRS/NIST boundary protection standards.
• Proxy Engineering: Forward/reverse proxy modes; explicit vs transparent; PAC/WPAD design and distribution.
• SSL/TLS inspection: cert chains, pinning impacts, ALPN, HTTP/2 behavior, auth flows (Kerberos/NTLM, SAML/OIDC).
• Safe bypass strategies (domain/SNI/IP/risk-based) without degrading coverage.
• Layer 3 & Internet Fundamentals: Routing & addressing (CIDR, MTU/fragmentation/PMTUD, NAT44/66, VRFs), basic BGP/OSPF, DNS recursion/forwarding and failure modes.
• Ports & Protocols: TCP/UDP behavior, ephemeral ranges, TLS handshake/SNI, and middlebox interactions (no QUIC/HTTP-3 requirement).
• PCRE: Writes and reviews complex PCRE (lookarounds, backreferences, atomic groups) with an eye for performance (avoid catastrophic backtracking).
• Troubleshooting: Packets + Analytics: tcpdump/Wireshark proficiency (TLS/HTTP analysis, TCP dynamics).
• Log correlation at scale (e.g., Splunk/ELK) to isolate issues off-box (client, network, IdP, upstream).
• Can distinguish origin responses vs proxy-generated errors and document root cause.
• Communication & Prioritization: Clear stakeholder comms; triage correctly under load—doesn’t treat every noisy issue as P1.

Goals:

• Normalize firewall / Panorama versions.
• Get Panorama 12.x integrated with Strata Cloud Manager as the “real” central manager.
• Upgrade the DLP plug-in so it works cleanly in SCM.

Qualifications

• Current or previous Federal Government Clearance.

Benefits

• Company-subsidized health, dental, and vision insurance.
• Flexible PTO.
• 401K with employer match.
• Paid parental leave after one year of service.
• Employee Assistance Program.