Job Description

Description The Network Security Engineer will design, implement, and maintain secure enterprise network infrastructure while proactively defending against threats. You will own the availability, performance, and security of firewalls, intrusion detection/prevention systems, VPNs, and perimeter defenses across on-prem and multi-cloud environments. Key Responsibilities: + Assess network security requirements and design hardened architectures (zero-trust, segmentation, DMZ, SASE/SSE) + Select, deploy, and integrate security appliances and software (firewalls, IDS/IPS, WAF, VPN concentrators, proxy, NAC) + Build and maintain firewall policies, NAT rules, VPN tunnels, and secure remote access solutions + Perform advanced troubleshooting of network and security incidents using packet capture, traffic analysis, and log correlation + Respond to security events, conduct root-cause analysis, and implement remediation plans + Manage and tune perimeter defenses: Palo Alto, Fortinet, Cisco Firepower, Check Point, Cloudflare, Zscaler, etc. + Implement and maintain intrusion detection/prevention (Snort, Suricata, Zeek, CrowdStrike Falcon, Microsoft Defender for Cloud) + Conduct regular security assessments, rule reviews, penetration test support, and compliance audits (PCI, SOC2, ISO27001, NIST) + Automate repetitive tasks via scripting (Python, Ansible) and infrastructure-as-code where possible + Provide Tier-3 escalation support and post-incident reporting Requirements + Bachelor's degree in Computer Science, Information Security, or equivalent experience + 4-8+ years of hands-on network security engineering experience + Expert-level knowledge of firewalls (Palo Alto PAN-OS strongly preferred, or Fortinet, Check Point) + Deep understanding of TCP/IP, routing/switching (BGP, OSPF), and network protocols + Experience with IDS/IPS, web application firewalls, VPN (IPsec & SSL), and proxy technologies + Proficiency with packet analysis tools (Wireshark, tcpdump, Zeek) + Solid scripting/automation skills (Python, Bash, Ansible) + Relevant certifications: PCNSE, CCNP Security, CISSP, or equivalent Preferred Qualifications: + Experience migrating to or operating cloud-native security controls (AWS Network Firewall, Azure Firewall, GCP, Zscaler ZIA/ZPA) + Zero-trust architecture and SASE/SSE implementation experience + Familiarity with EDR/XDR platforms and SIEM integration (Splunk, Elastic, Sentinel) + Background in security operations (SOC) or incident response + Knowledge of Terraform or other IaC for security infrastructure Technology Doesn't Change the World, People Do.® Robert Half is the world's first and largest specialized talent solutions firm that connects highly qualified job seekers to opportunities at great companies. We offer contract, temporary and permanent placement solutions for finance and accounting, technology, marketing and creative, legal, and administrative and customer support roles. Robert Half works to put you in the best position to succeed. We provide access to top jobs, competitive compensation and benefits, and free online training. Stay on top of every opportunity - whenever you choose - even on the go. Download the Robert Half app ( and get 1-tap apply, notifications of AI-matched jobs, and much more. All applicants applying for U.S. job openings must be legally authorized to work in the United States. Benefits are available to contract/temporary professionals, including medical, vision, dental, and life and disability insurance. Hired contract/temporary professionals are also eligible to enroll in our company 401(k) plan. Visit roberthalf.gobenefits.net for more information. © 2025 Robert Half. An Equal Opportunity Employer. M/F/Disability/Veterans. By clicking "Apply Now," you're agreeing to Robert Half's Terms of Use ( .

Job Tags

Permanent employment, Contract work, Temporary work, Remote work,

Similar Jobs