Job Description

Job Title: Network Security Engineer II
Location: Onsite

We’re seeking a Senior Network Security Engineer to enhance our global security posture, focusing mainly on Palo Alto, Zscaler, WAF, IoT/OT security, and zero-trust architecture. You will design and deploy network security controls across standalone and hybrid environments, safeguard critical web applications with WAF, implement IoT/OT security measures in a manufacturing setting, and lead teams in developing secure, scalable solutions within an agile framework.

Key Responsibilities

• Design and implement network security architectures using Palo Alto Next-Generation Firewalls (NGFWs) and Zscaler (ZIA/ZPA) across on-premises, cloud, and remote settings.
• Lead the development and enforcement of zero-trust principles, including identity-aware policies, network segmentation, and least-privilege access.
• Configure and maintain Palo Alto firewalls and Panorama, managing policies, NAT, VPNs, SSL decryption, GlobalProtect, and logging functionalities.
• Deploy and oversee Zscaler services, integrating traffic forwarding methods, security policies, and identity provider (IdP) connections.
• Design, implement, and fine-tune Web Application Firewalls (WAF) to safeguard against the OWASP Top 10 threats and sophisticated web-based attacks.
• Develop and enforce IoT and operational technology (OT) security controls tailored for manufacturing plants.
• Resolve complex network security issues and monitor security controls and applications through log analysis, packet captures, and traffic flow examination.
• Utilize your expertise in switching and routing, including VLANs, BGP, and OSPF, to ensure secure and reliable connectivity.
• Work collaboratively with agile teams, contributing to sprint planning, refining user stories, and iteratively delivering security features.
• Follow change control processes that involve conducting risk assessments, documenting changes, and validating implementation post-execution.
• Create clear technical documentation, set standards and runbooks, and provide mentorship to junior engineers as needed.

Required Qualifications

A Bachelor of Science degree in Information Technology, Cybersecurity, Computer Science, or a closely related field.

Experience & Skills

• Extensive hands-on experience (ideally 5+ years) in network security engineering within medium to large organizations.
• Proven expertise in managing Palo Alto firewalls, preferably using Panorama in a production environment.
• Practical experience in deploying and managing Zscaler solutions (ZIA/ZPA/ZDX or similar).
• A deep understanding of zero-trust principles and how to apply them effectively in real-world scenarios.
• Solid background in architecting, implementing, and troubleshooting Web Application Firewalls (WAF).
• Demonstrated proficiency in designing and deploying security frameworks for Internet of Things (IoT) and Operational Technology (OT) environments.
• Strong knowledge of network switching and routing, covering Layer 2/Layer 3 fundamentals, along with experience in at least one major routing protocol.
• Comfortable working in an agile project management environment Scrum preferred.
• Excellent troubleshooting skills coupled with strong communication and documentation capabilities.

Certifications

At least one of the following certifications is required:

• PCNSE, PCNSA, ZDTA, ZDTE, or ZDXA
• CCNA
• CISSP

Nice to Have

• Experience with major cloud platforms like AWS, Azure, or GCP.
• Familiarity with SIEM/SOAR integrations and analysis.