Our client is seeking a Network Security Engineer for a 12-month contract in Irving, TX. Will be working on an onsite schedule.
Contract Duration: 12 Months
Required Skills & Experience
- Bachelor's degree in IT, Computer Science, Cybersecurity, or related field (or equivalent experience)
- PCNSA or PCNSE certifications
- Security+, CISSP, or GSEC certifications
- Experience with Azure, AWS, or GCP
- Knowledge of Zero Trust networking principles
- 3-5 years of network security engineering experience
- Experience with Palo Alto firewalls, site-to-site VPNs, GlobalProtect, and Imperva WAF
- Strong understanding of TCP/IP, routing, switching, DNS, SSL/TLS, and security principles
- Strong troubleshooting and documentation skills
Key Competencies
- Network Security Architecture, Firewall Policy Management, VPN Technologies, Web Application Security, Security Governance & Compliance, Technical Documentation, Incident Analysis & Troubleshooting, Cross-Functional Collaboration, Continuous Improvement Mindset.
Desired Skills & Experience
Preferred Industry Experience
- Convenience Retail, Fuel Operations, Supply Chain
What You Will Be Doing
Firewall Governance & Administration
- Manage enterprise firewall environments and enforce network security policies. Perform firewall rule reviews, cleanup initiatives, and remediation activities. Conduct regular audits of firewall configurations and access controls.
Firewall Standards & Documentation
- Develop, maintain, and update firewall standards, procedures, network security diagrams, and architecture documentation.
Site-to-Site VPN Management
- Plan, configure, and migrate site-to-site VPN tunnels. Troubleshoot VPN connectivity issues and validate configurations.
Web Application Firewall (Imperva)
- Administer and optimize Imperva WAF deployments, expand coverage, analyze events, and tune policies.
Remote Access & GlobalProtect Support
- Provide advanced troubleshooting and support for Palo Alto GlobalProtect VPN services.
Security Operations & Continuous Improvement
- Participate in security assessments, incident response activities, vulnerability remediation, and infrastructure modernization efforts.