network security engineer

Apollo Technology Solutions LLC

<div><div><b>Title: Sr Network Security Engineer</b><br>
<b>Location: Mechanicsville, VA(Hybrid)</b><br>
<b>Duration: 10 Months</b><br>
<b>Interview Type: In Person Only</b><br>
<br>
<br>
<b>Job Description:</b><br>
Client is seeking an experienced Sr Network Security Engineer (Sr NSE) to implement and support the agency's IT network, cloud, and computing infrastructure. The Sr NSE performs day-to-day activities related to securing Client's infrastructure.<br>
The Sr NSE performs day-to-day activities related to securing, documenting, performing research, analysis, design, and implementation of Client's network and computing related infrastructure.<br>
<br>
The Sr NSE will support a hybrid enterprise environment consisting of approximately 300 statewide locations, Palo Alto firewalls, Azure networking, ExpressRoute connectivity, WAF technologies, Splunk SIEM, SD-WAN, and mission-critical public-facing applications. The role partners closely with Infrastructure, Cloud Engineering, and the Information Security Office to maintain the confidentiality, integrity, and availability of Client's network infrastructure.<br>
<br>
<b>Key Responsibilities:</b><br>
<ul><li>Ensures network security architecture aligns with operational security standards prior to and after deployment.</li>
<li>Lead investigation and containment of network security incidents.</li>
<li>Review firewall rule requests and ensure compliance with security standards.</li>
<li>Design and maintain secure hybrid network architecture across on-premises and Azure environments.</li>
<li>Monitor security events using SIEM technologies and coordinate incident response activities.</li>
<li>Perform network security assessments and recommend remediation strategies.</li>
<li>Develop and maintain network security standards, diagrams, and operational documentation.</li>
<li>Support penetration testing and remediation efforts.</li>
<li>Participate in on-call support during critical security incidents.</li>
<li>Responsible for conducting proactive threat hunting and anomaly detection.</li>
<li>Validates WAF and firewall placement and integration exposure/connectivity. Also leads implementation, review, and management of agency WAF(s).</li>
<li>Identifies and diagnoses system problems and threats by using system logs, line monitors, SIEM, diagnostic software, and test equipment.</li>
<li>Identifies, prioritizes, and remediates network security vulnerabilities.</li>
<li>Must have the ability to provide documentation, network architecture topology diagrams, IP schemes, firewall rules, and access controls when required.</li>
<li>Must have the ability to work independently on assigned projects.
</li></ul><br>
<b>Required/ Desired Skills:</b>
<ul><li>Enterprise Networking</li>
<li>Enterprise Security</li>
<li>Azure Networking</li>
<li>WAF/NGFW</li>
<li>Supporting environments with 300+ Network Devices</li>
<li>Candidate must have experience in the following areas: Incident response, Security investigations, Log analysis, Threat intelligence, Security monitor</li>
<li>Candidate must have experience with the SIEM products (e.g. Splunk, Microsoft Sentinel)</li>
<li>Candidate must have experience in vulnerability management and remediation tracking as well as vulnerability scanning tools (e.g. Nessus, Tenable, Def</li>
<li>Candidate must have experience in the following areas: Active Directory, MFA, Conditional Access, Certificates</li>
<li>Candidate must have experience with; SEC530, CIS Benchmarks, NIST CSF, NIST 800-53, Zero Trust principles</li>
<li>Candidate must have experience with the following: Cisco Client, NAC, 802.1X, RADIUS, TACACS</li>
<li>Candidate must have experience with the following products: Palo Alto, F5 Distributed Cloud, Azure WAF, Cisco VPN, Global Protect, F5 BIG-IP</li>
<li>Candidate must have experience working in highly regulated environments and leading technical troubleshooting during outages</li>
<li>Candidate must have ability to communicate technical issues to technical and executive audiences and an ability to mentor junior engineers.</li>
<li>Candidate should have achieved or ability to achieve the following certifications: Azure Security Engineer (AZ-500), Azure Network Engineer (AZ-700),</li></ul></div></div>

Sr Network Security Engineer

ExxonMobil

<div>
 <strong>
  About Us
  <br/>
 </strong>
 At ExxonMobil, our vision is to lead in energy innovations that advance modern living while reducing emissions. As one of the world&rsquo;s largest publicly traded energy and chemical companies, we are powered by a unique and diverse workforce fueled by the pride in what we do and what we stand for.
 <br/>
 <br/>
 The success of our Upstream, Product Solutions and Low Carbon Solutions businesses is the result of the talent, curiosity and drive of our people. They bring solutions every day to optimize our strategy in energy, chemicals, lubricants and lower-emissions technologies.
 <br/>
 <br/>
 We invite you to bring your ideas to ExxonMobil to help create sustainable solutions that improve quality of life and meet society&rsquo;s evolving needs. Learn more about
 <strong>
  our What and our Why
 </strong>
 and how we can work
 <strong>
  together
 </strong>
 .
 <br/>
 <br/>
 <strong>
  What Role You Will Play In Our Team
  <br/>
 </strong>
 As a Network Security Engineer, you will play a critical role in designing, engineering, and managing the enterprise network security posture. You will ensure that the network infrastructure aligns with corporate security policies and standards, protecting against evolving cyber threats. This role involves operating and maintaining key security technologies&mdash;such as firewalls, IDS/IPS, and other advanced controls&mdash;while applying DevOps principles to drive automation, scalability, and resilience. You will collaborate closely with network, infrastructure, application, and cybersecurity teams to support and enhance ExxonMobil&rsquo;s global IT services
 <br/>
 <br/>
 <strong>
  What You Will Do
  <br/>
 </strong>
 <ul>
  <li>
   Design, implement, and manage network security technologies and services across regions and different infrastructure environments (data centers, offices, edge).
  </li>
  <li>
   Research and recommend industry best practices and emerging technologies in network security.
  </li>
  <li>
   Operate and maintain network security appliances (Fortinet, Cisco, Juniper), including upgrades and patching.
  </li>
  <li>
   Build and manage network security infrastructure using DevOps practices and automation tools. Contribute to the Zero-Ops infrastructure management vision by developing solutions that reduce manual intervention and improve operational efficiency.
  </li>
  <li>
   Support security operations: monitoring, analysis, incident response, and vulnerability management.
  </li>
  <li>
   Evaluate security advisories and vulnerabilities, providing timely recommendations and mitigations.
  </li>
  <li>
   Participate in ad-hoc vulnerability assessments and incident response. Coordinate with stakeholders across Cybersecurity, Projects, and internal customers.
  </li>
  <li>
   Develop and maintain operational processes and documentation for ongoing support.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  About You
  <br/>
 </strong>
 <strong>
  Skills and Qualifications
  <br/>
 </strong>
 <ul>
  <li>
   Minimum 3 years of hands-on experience in network security.
  </li>
  <li>
   Experience with network security platforms: Cisco ASA (CSM), FTD (FMC), FortiGate (FortiManager), Juniper SRX (Junos Space).
  </li>
  <li>
   Strong understanding of networking fundamentals: TCP/IP, OSI model, routing/switching, ACLs.
  </li>
  <li>
   Familiarity with security technologies: firewalls, VPNs, IDS/IPS, encryption, authentication, vulnerability management, and incident response.
  </li>
  <li>
   Bachelor&rsquo;s degree or higher in Computer Science, Computer Engineering, or IT-related fields
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Technical Skills
  <br/>
 </strong>
 Deep knowledge of TCP/IP, Internet technologies, IPS/IDS, firewall virtualization, VPNs, NAT, DNS, etc. Relevant certifications (preferred but not required): Cisco (CCNA/CCNP Security), Fortinet (FCA/FCSS/NSE), CISSP, GIAC.
 <br/>
 <br/>
 <strong>
  Automation &amp; DevOps
  <br/>
 </strong>
 Strong advantage: experience with GitHub, Terraform, Ansible, Python, REST API, Jenkins, Jinja2, YAML. Familiarity with CI/CD concepts and tools is a plus
 <br/>
 <br/>
 <strong>
  Cloud
  <br/>
 </strong>
 Experience with AWS and Azure network security services
 <br/>
 <br/>
 <strong>
  Preferred Qualifications/ Experience
  <br/>
 </strong>
 <ul>
  <li>
   Excellent verbal and written communication in English.
  </li>
  <li>
   Mindset to grow and learn.
  </li>
  <li>
   Self-motivated, proactive, and able to work independently in a global virtual team.
  </li>
  <li>
   Strong multitasking and prioritization abilities.
  </li>
  <li>
   Analytical mindset and a collaborative team player.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Your Benefits
  <br/>
 </strong>
 An ExxonMobil career is one designed to last. Our commitment to you runs deep: our employees grow personally and professionally, with benefits built on our core categories of health, security, finance, and life.
 <br/>
 <br/>
 <strong>
  We offer you:
  <br/>
 </strong>
 <ul>
  <li>
   Pension Plan: Enrollment is automatic and at no cost to you. The basic benefit is a monthly annuity to be paid to you in retirement for the rest of your life.
  </li>
  <li>
   Savings Plan: You can contribute between 6% and 20% of your pay and are encouraged to enroll right away. If you contribute at least 6% to your savings plan, the Company will contribute a 7% match.
  </li>
  <li>
   Workplace Flexibility: We have several programs such as &ldquo;Flex your Day&rdquo;, providing ad-hoc flexibility around when and where you work, as well as longer-term programs such as leaves of absence and part-time work.
  </li>
  <li>
   Comprehensive medical, dental, and vision plans.
  </li>
  <li>
   Culture of Health: Programs and resources to support your wellbeing.
  </li>
  <li>
   Employee Health Advisory Program: Provides confidential professional counseling for you and your family, including tools and resources promoting mental health and resiliency at no additional cost to you.
  </li>
  <li>
   Disability Plan: Income replacement for when you cannot work due to illness or injury occurring on or off the job. Enrollment is automatic and at no cost to you.
   <br/>
   <br/>
  </li>
 </ul>
 More information on our Company&rsquo;s benefits can be found at www.exxonmobilfamily.com.
 <br/>
 <br/>
 Please note benefits may be changed from time to time without notice, subject to applicable law.
 <br/>
 <br/>
 <strong>
  Stay connected with us
  <br/>
  <br/>
 </strong>
 Learn more at our website
 <br/>
 <br/>
 Follow us on LinkedIN and Instagram
 <br/>
 <br/>
 Like us on Facebook
 <br/>
 <br/>
 Subscribe our channel at YouTube
 <br/>
 <br/>
 <strong>
  EEO Statement
  <br/>
  <br/>
 </strong>
 <strong>
  ExxonMobil is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, age, sexual orientation, gender identity, national origin, citizenship status, protected veteran status, genetic information, or physical or mental disability.
  <br/>
 </strong>
 Nothing herein is intended to override the corporate separateness of local entities. Working relationships discussed herein do not necessarily represent a reporting connection, but may reflect a functional guidance, stewardship, or service relationship.
 <br/>
 <br/>
 Exxon Mobil Corporation has numerous affiliates, many with names that include ExxonMobil, Exxon, Esso and Mobil. For convenience and simplicity, those terms and terms like corporation, company, our, we and its are sometimes used as abbreviated references to specific affiliates or affiliate groups. Abbreviated references describing global or regional operational organizations and global or regional business lines are also sometimes used for convenience and simplicity. Similarly, ExxonMobil has business relationships with thousands of customers, suppliers, governments, and others. For convenience and simplicity, words like venture, joint venture, partnership, co-venturer, and partner are used to indicate business relationships involving common activities and interests, and those words may not indicate precise legal relationships.
 <br/>
 <br/>
 Job ID:
 <strong>
  94852
 </strong>
</div>


Network Security Engineer

Unify Group

<div><h4 class="jobSectionHeader"><b>About the Role</b></h4><p>
We are seeking a highly capable <b>Senior Network &amp; Security Engineer</b> to join our growing technology team.</p><p>
This role is ideal for a hands-on networking and cybersecurity professional with strong expertise in enterprise network design, Microsoft cloud security, network security, and security operations.</p><p>
You will play a key role in designing, securing, and optimising the organisation's enterprise network while strengthening its cybersecurity posture across both on-premises and cloud environments. The successful candidate will ensure the reliability, performance, and security of critical network services and business systems.</p><h4 class="jobSectionHeader"><b>
Key Responsibilities</b></h4><ul><li><p>
Design, implement, and maintain enterprise <b>LAN, WAN, SD-WAN, routing, switching, VPN, and wireless network infrastructure</b>.</p></li><li><p>
Administer, optimise, and troubleshoot enterprise firewalls, secure remote access solutions, and network security controls.</p></li><li><p>
Monitor and optimise network performance, availability, resilience, and capacity planning.</p></li><li><p>
Manage and secure Microsoft Azure and Microsoft 365 environments.</p></li><li><p>
Administer Microsoft Entra ID, including Conditional Access, MFA, Privileged Identity Management (PIM), and Identity Governance.</p></li><li><p>
Configure and optimise Microsoft Defender XDR, including Defender for Endpoint, Defender for Office 365, Defender for Identity, and Defender for Cloud.</p></li><li><p>
Configure and maintain Microsoft Sentinel for security monitoring, threat detection, and incident response.</p></li><li><p>
Conduct proactive threat hunting, vulnerability assessments, and remediation activities.</p></li><li><p>
Lead the investigation, containment, and resolution of network and security incidents.</p></li><li><p>
Provide Tier 2 and Tier 3 support for complex networking and security issues.</p></li><li><p>
Collaborate with cross-functional IT teams to improve network architecture, resilience, and cybersecurity.</p></li></ul><h4 class="jobSectionHeader"><b>
Requirements</b></h4><ul><li><p>
Bachelor's degree in Information Technology, Computer Science, Network Engineering, Cybersecurity, or a related discipline.</p></li><li><p>
Minimum <b>8 years of experience</b> in enterprise networking and cybersecurity.</p></li><li><p>
Minimum <b>3 years of hands-on experience</b> with Microsoft Azure and Microsoft 365 security.</p></li><li><p>
Strong expertise in:</p><ul><li><p>
Enterprise Networking (LAN/WAN)</p></li><li><p>
Routing &amp; Switching</p></li><li><p>
VPN Technologies</p></li><li><p>
Enterprise Firewalls (Fortinet, Cisco, Palo Alto)</p></li><li><p>
Microsoft Azure Security</p></li><li><p>
Microsoft Entra ID</p></li><li><p>
Microsoft Defender XDR</p></li><li><p>
Microsoft Sentinel</p></li><li><p>
Network Security</p></li><li><p>
Threat Detection &amp; Incident Response</p></li><li><p>
Vulnerability Management</p></li></ul></li><li><p>
Strong understanding of Zero Trust, identity security, cloud security, and network segmentation.</p></li><li><p>
Experience with network monitoring, security audits, and compliance.</p></li><li><p>
PowerShell scripting and automation skills are advantageous.</p></li></ul><h4 class="jobSectionHeader"><b>
Preferred Certifications</b></h4><ul><li><p>
CCNP Enterprise or CCNP Security</p></li><li><p>
Fortinet NSE / FCSS Certifications</p></li><li><p>
Microsoft Certified: Cybersecurity Architect Expert</p></li><li><p>
Microsoft Certified: Security Operations Analyst Associate</p></li><li><p>
AZ-500</p></li><li><p>
CISSP, CISM, or CCSP</p></li></ul></div>

Senior Network & Security Engineer

Everforth ECS

<div><p>Everforth ECS is seeking an <b><i>Network &amp; Security Infrastructure Engineer </i></b>to work in our <b><i>Washington, DC </i></b>office / <b><i>remote</i></b>. <b>The role is contingent upon additional funding.</b></p>
<p>
</p><p>We are seeking an experienced and technically versatile <b>Network &amp; Security Infrastructure Engineer</b> to take on a high-impact, dual-function role within a large and complex enterprise environment. This position sits at the crossroads of network infrastructure, virtual environment engineering, and security operations, and it requires genuine depth across all three, not surface-level familiarity.</p>
<p>
</p><p>The near-term priority for this role is significant: you will lead a major re-architecture of the organization's VMware ESXi virtual environment to support comprehensive firewall and VLAN implementations that deliver proper network segmentation across the enterprise. This is a foundational infrastructure initiative with direct security implications, and it will require someone who can think and execute at the architectural level within a virtualized environment.</p>
<p>
</p><p>Beyond that primary objective, this role carries ongoing responsibility across two organizational teams. You will provide dedicated firewall support to the Architecture and Engineering division, administering the enterprise's internal and cloud-facing firewall environments. On the networking side, you will support the security operations division, monitoring and maintaining a Cisco-based network infrastructure and an Aruba wireless environment from a security-first perspective.</p>
<p>
</p><p>This role is built for someone who can operate with equal confidence in a virtual environment console, a firewall policy manager, and a network operations context.</p>
<p>
</p><p><i>Salary Range: $120,000 - $130,000</i><br>
<i>General Description of Benefits</i></p>
Requirements:
<p>Virtual Environment &amp; Network Segmentation</p>
<ul>
<li>Hands-on experience designing and re-architecting VMware ESXi environments in an enterprise setting</li>
<li>Ability to plan and implement VLAN segmentation strategies within virtualized infrastructure to support firewall enforcement and proper traffic isolation</li>
<li>Experience configuring virtual switches, distributed switches, and virtual port groups in support of security segmentation objectives</li>
<li>Familiarity with NSX or equivalent software-defined networking (SDN) platforms as they relate to micro-segmentation and east-west traffic control</li>
<li>Ability to document virtual network architecture clearly and thoroughly, including design decisions, configurations, and future-state plans</li>
</ul>
<p>Firewall Administration</p>
<ul>
<li>Hands-on experience configuring and administering enterprise-class firewall technologies, with specific experience on Check Point and Palo Alto platforms</li>
<li>Ability to implement new firewall architectures, upgrades, and feature rollouts as directed</li>
<li>Experience administering firewall policy including updates, upgrades, policy administration, and validation</li>
<li>Proficiency managing and tuning software blades and associated security features such as IPS, URL filtering, Application Control, antivirus, and advanced malware detection</li>
<li>Ability to review and implement changes consistent with existing firewall policies while maintaining thorough, up-to-date documentation</li>
<li>Strong knowledge of firewall rules, security policies, and security operations within a large enterprise environment</li>
<li>Willingness to work outside of normal business hours when required to support outage resolution or planned maintenance</li>
</ul>
<p>Network Infrastructure &amp; Security</p>
<ul>
<li>Strong hands-on experience with Cisco network infrastructure including routing, switching, and network security configurations in an enterprise setting</li>
<li>Experience supporting and securing Aruba wireless access point environments</li>
<li>Solid understanding of core networking protocols including TCP/IP, BGP, OSPF, VLANs, and VPNs</li>
<li>Ability to monitor and analyze network architecture, communication flows, policies, and protocols from a cybersecurity perspective</li>
<li>Experience identifying and isolating network-based security issues quickly during incidents and outages</li>
<li>Familiarity with network access control concepts and how they integrate with broader security operations</li>
</ul>
<p>Collaboration &amp; Documentation</p>
<ul>
<li>Ability to collaborate across teams including cybersecurity, systems administration, and technology support partners</li>
<li>Experience supporting security continuous monitoring efforts such as risk assessments, vulnerability identification, and patch coordination</li>
<li>Ability to create and maintain clear, accurate documentation for virtual, network, and firewall configurations, procedures, and troubleshooting steps</li>
<li>Comfortable communicating technical findings and infrastructure risk clearly to both technical peers and senior leadership</li>
</ul>
<p>A minimum of 5+ years of experience in network security engineering or a closely related infrastructure discipline is required, with direct hands-on experience on both Check Point and Palo Alto platforms strongly preferred. Candidates who bring demonstrated experience with VMware ESXi re-architecture and VLAN segmentation design &mdash; in addition to enterprise networking and firewall administration &mdash; will be given strong preference over candidates with depth in only one or two of these areas.</p><br>
<br>
Req Benefits:
<div>Benefits - Everforth ECS</div></div>

Network & Security Infrastructure Engineer

DeepSource Technologies

<div><p>Network Security Engineer (CCNP Security) &ndash; Cisco &amp; Palo Alto</p><p></p><p>
We are seeking<b> experienced CCNP Security Resident Engineers</b> to support a major client in Jeddah. The ideal candidate will have strong hands-on experience with <b>Cisco Security</b> technologies and <b>Palo Alto Firewalls</b>, providing implementation, administration, troubleshooting, and operational support within an enterprise environment.</p>
Key Responsibilities<ul><li>
Provide onsite resident engineering support for enterprise network security infrastructure.
</li><li>Configure, administer, and troubleshoot Cisco security solutions.
</li><li>Manage and support Palo Alto Next-Generation Firewalls.
</li><li>Monitor security infrastructure performance and ensure high availability.
</li><li>Investigate and resolve security incidents and network connectivity issues.
</li><li>Implement firewall policies, NAT, VPNs, and security rules.
</li><li>Perform software upgrades, patching, and maintenance activities.
</li><li>Work closely with customer IT and security teams.
</li><li>Produce technical documentation, operational reports, and incident records.
</li><li>Participate in change management activities following ITIL processes.</li></ul><br>
<b>
Requirements</b><br>
<ul><li>
CCNP Security Certification (Preferred/Required).
</li><li>3+ years of hands-on experience in Network Security.
</li><li>Strong experience with Cisco Security technologies.
</li><li>Hands-on experience with Palo Alto Firewalls.
</li><li>Strong understanding of:
</li><li><ul><li>Routing &amp; Switching
</li><li>TCP/IP
</li><li>VPN Technologies (IPSec, SSL VPN)
</li><li>NAT
</li><li>Access Control Lists (ACLs)
</li><li>Network Segmentation
</li></ul></li><li>Experience troubleshooting enterprise network security environments.
</li><li>Excellent communication skills.
</li><li>Ability to join immediately and relocate/work in Jeddah.
</li></ul>Preferred Skills<ul><li>
Panorama administration.
</li><li>Cisco Firepower Management Center (FMC).
</li><li>Cisco ASA / Firepower.
</li><li>High Availability (HA) configurations.
</li><li>ITIL knowledge.</li></ul></div>

CCNP Security Engineer- 3 Months- Jeddah, KSA

RealPage Inc

<div>Overview:
<p>
We are seeking a <b>Sr.</b> <b>Network Security Engineer </b>with deep expertise in <b>Palo Alto Networks</b> and <b>Prisma Access (GlobalProtect)</b>. The ideal candidate will bring <b>5+ years of expert-level experience</b> designing, implementing, and operating enterprise network security solutions across complex hybrid environments.</p><p></p><p><br>
This individual will have extensive experience with <b>routing and switching integration</b>, <b>next-generation firewall (NGFW) architecture</b>, <b>cloud network security</b>, and the full lifecycle of firewall operations, including automation, monitoring, support, optimization, and maintenance.</p><p></p><p><br>
In this role, you will architect, deploy, and support secure network solutions across RealPage's global infrastructure, including on-premises data centers, multi-cloud environments, VMware NSX platforms, and remote corporate and customer locations. You will be responsible for the daily management, monitoring, performance, and troubleshooting of critical network security systems while ensuring high availability, scalability, and operational excellence.</p><p>
The successful candidate will partner closely with Infrastructure, Cloud, Security, Engineering, and Operations teams to troubleshoot complex networking challenges, define future-state architectures, recommend strategic enhancements, and lead the implementation of secure, scalable network solutions that support the business today and into the future.</p><br>
<p></p>
Responsibilities:
<div><div><p><b>
WHAT YOU&rsquo;LL DO</b></p></div><div><ul><li><p>
Palo Alto Firewall (PA5450, 5250, 450, AIRS VM NGFW, Panorama 11.2+ , Prisma, GP, Log Collectors) &ndash; Required</p></li></ul></div><div><ul><li><p>
Cisco Nexus (9500, 9300 and 7K) &ndash; Required</p></li></ul></div><div><ul><li><p>
Cisco 4000&rsquo;s, 2600&rsquo;s 4500&rsquo;s - Required</p></li></ul></div><div><ul><li><p>
Clouds AWS or Google Cloud Required</p></li></ul></div><div><ul><li><p>
VMware NSX Preferred</p></li></ul></div><div><ul><li><p>
F5 LTM, GTM, AFM, ASM, APM- Preferred</p></li></ul></div><div><p><b>
PRIMARY RESPONSIBILITIES</b></p></div><div><ul><li><p>
Manage and act as subject matter expert (SME) for our Palo Alto Firewalls and management platform &ndash; focus on improvements and automation</p></li></ul></div><div><ul><li><p>
Engineer solutions utilizing Cisco, F5 and AWS or GCP stack.</p></li></ul></div><div><ul><li><p>
Ideal candidates will have AWS, GCP experience.</p></li></ul></div><div><ul><li><p>
Configure, monitor, and troubleshoot network platform</p></li></ul></div><div><ul><li><p>
Perform in depth application assessments and document changes required to on board APP into RealPage Systems</p></li></ul></div><div><ul><li><p>
Determine operational weaknesses within the existing network infrastructure and present execution plans to overcoming those concerns in a timely fashion while still making the most cost-efficient use of resources.</p></li></ul></div></div><div><div><ul><li><p>
Evaluate and identify opportunities to improve the security and/or performance of existing environments.</p></li></ul></div><div><ul><li><p>
Interact with other teams to provide escalation support during outages and customer issues even if the problem might not be directly related to the network infrastructure.</p></li></ul></div><div><ul><li><p>
Interact directly with technical and non-technical customers/vendors to resolve incidents and manage project tasks.</p></li></ul></div><div><ul><li><p>
Work to completion all projects assigned to the engineer and exhaust all possible resources in order to provide results on time, within specifications, and on budget.</p></li></ul></div><div><ul><li><p>
Actively monitor and react to real-time network conditions and make recommendations on improving monitoring and reporting.</p></li></ul></div><div><ul><li><p>
Configure, monitor, and troubleshoot routing, BGP, SDWAN, IPSEC and NSX configurations</p></li></ul></div><div><ul><li><p>
Implementation and enforcement of existing and self-designed security measures and policies to protect the RealPage and client networks from both external and internal attacks and/or abuses.</p></li></ul></div><div><ul><li><p>
Travel may be required to meet project objectives. Approximately &lt;5% travel. #LI-JL1 #LI-HYBRID</p></li></ul><p><i>
Compensation may vary depending on your location, qualifications including job-related education, training, experience, licensure, and certification, that could result at a level outside of these ranges. Certain roles are eligible for additional rewards, including annual bonus, and sales incentives depending on the terms of the applicable plan and role as well as individual performance.</i></p><p></p><p><i><br>
Equal Opportunity Employer: RealPage Company is an equal opportunity employer and committed to creating an inclusive environment for all employees</i></p></div></div><br>
<div></div>
Qualifications:
<div><div><p>
REQUIRED KNOWLEDGE/SKILLS/ABILITIES</p></div><div><ul><li><p>
CCNP Certification</p></li></ul></div><div><ul><li><p>
5+ years of expert level experience with Palo Alto Firewalls onprem and NGFW in cloud, including Panorama, Global Protect, and Prisma</p></li></ul></div><div><ul><li><p>
5+ years of Hands-on expertise with Cisco and F5 Systems, AWS or GCP</p></li></ul></div><div><ul><li><p>
10 years of progressive network engineering experience in enterprise and data-center environments.</p></li></ul></div><div><ul><li><p>
In depth knowledge and experience with the implementation and support of switched and routed networks and associated protocols: SDWAN, BGP, OSPF, TCP/IP, NAT/PAT, HSRP, VRRP, STP, PBR, ACI</p></li></ul></div><div><ul><li><p>
Ability to work as a member of a cross functional team.</p></li></ul></div><div><ul><li><p>
Ability to document solutions with Visio, Lucichart, Word and PowerPoint.</p></li></ul></div><div><ul><li><p>
Must have ability to effectively communicate with clients, management, and peers.</p></li></ul></div><div><ul><li><p>
Must possess excellent written and verbal communication skills.</p></li></ul></div><div><ul><li><p>
Ability to work an on-call rotation</p></li></ul></div><div><p>
PREFERRED KNOWLEDGE/SKILLS/ABILITIES</p></div></div><div><div><ul><li><p>
Palo Alto Engineering and Deployment experience</p></li></ul></div><div><ul><li><p>
Hands on experience with AWS and Google Cloud architectures</p></li></ul></div><div><ul><li><p>
Experience with Load Balancers</p></li></ul></div><div><ul><li><p>
Network automation tools such as ansible or python</p></li></ul></div><div><ul><li><p>
Application stack layer 3-7</p></li></ul></div><div><ul><li><p>
Positive attitude with a love of learning new tech. #LI-REMOTE #LI-JL1</p></li></ul></div></div>
Pay Range: USD $105,800.00 - USD $180,200.00 /Yr.</div>

Sr. Firewall Engineer (Palo Alto / Prisma Access)

California Institute of Technology

<div><div><p>Caltech is a world-renowned science and engineering institute that marshals some of the world's brightest minds and most innovative tools to address fundamental scientific questions. We thrive on finding and cultivating talented people who are passionate about what they do. Join us and be a part of the diverse Caltech community.</p><p></p><p><b>
Job Summary</b></p><p>
IPAC at Caltech is seeking a Security and Network Engineer to support the cybersecurity, compliance architecture, and high-performance network infrastructure powering world-class NASA, NSF, and privately funded ground and spaceborne observatories. As a member of the IPAC Support Group (ISG) Data Center Engineering team, you will focus heavily on shaping IPAC&rsquo;s overall cybersecurity posture while working alongside other network, systems, and database engineers to build and defend the vital pipelines that connect the global astronomical community to invaluable scientific data.</p><p>
IPAC, situated within the Division of Physics, Mathematics, and Astronomy at Caltech (www.caltech.edu), provides science operations, pipeline processing, user support, and data services for high-profile missions including the Nancy Grace Roman Space Telescope, SPHEREx, Euclid, the Near-Earth Object Surveyor, and the Zwicky Transient Facility (ZTF). Our diverse portfolio of research archives includes multi-petabyte datasets like the NASA/IPAC Infrared Science Archive (IRSA), alongside highly curated reference repositories like the NASA Extragalactic Database (NED) and the NASA Exoplanet Archive, which are key research references for modern astrophysics and exoplanet science.</p><p>
This role prioritizes robust cybersecurity governance and technical systems defense. While cybersecurity and federal compliance are the primary focuses of this position, your core network engineering expertise will directly inform your security architecture. As part of a close-knit team of about ten engineers, you will help shape IPAC&rsquo;s cybersecurity architecture, coordinate federal compliance activities, and provide network-security expertise across the organization.</p><p><b>
Essential Job Duties and Responsibilities</b></p><p><b>
As an IPAC Security and Network Engineer, your role will be to:</b></p><ul><li>
Manage NASA ATO Compliance &amp; Reporting: Coordinate IPAC&rsquo;s compliance, documentation, and reporting requirements necessary to achieve and maintain our NASA Authority to Operate (ATO) status. Lead the generation, aggregation, and continuous monitoring of evidence required to prove compliance with federal mandates.</li><li>
Develop Security Plans &amp; Frameworks: Design, maintain, and audit comprehensive System Security Plans (SSPs) and related Plan of Action and Milestones (POA&amp;M) tracking for individual space missions, research projects, and IPAC-wide infrastructure.</li><li>
Implement NIST &amp; NASA Frameworks: Translate federal compliance guidelines&mdash;specifically NIST SP 800-53 security controls, FIPS requirements, and NASA-specific IT security directives&mdash;into enforceable network architectures, system configurations, and operational workflows.</li><li>
Manage Enterprise Security Perimeters: Design, deploy, audit, and maintain firewall rules, intrusion prevention systems, and secure zone configurations across our enterprise edge, utilizing Palo Alto firewalls and related security platforms.</li><li>
Provide Network Consultation &amp; Backup Support: Collaborate with Data Center staff to apply security and networking expertise to IPAC infrastructure. Leverage your network engineering background to ensure compliance frameworks align practically with our network, systems, and software architectures. Provide cross-functional backup support to peer network engineers managing core Arista and Cisco routing and switching environments.</li><li>
Monitor &amp; Mitigate Threats: Implement and manage network-level monitoring, centralized logging, and security alerting tools to proactively analyze vulnerabilities, detect anomalies, and defend our data center environments.</li><li>
Perform other duties as assigned.</li></ul><p><b>
Basic Qualifications</b></p><ul><li>
Bachelor&rsquo;s degree in Information Technology, Computer Science, Computer Engineering, or a related field, plus 5+ years of relevant experience in network administration and cybersecurity (or an equivalent combination of education and experience).</li><li>
Solid hands-on network design and administration experience, particularly with Arista, Cisco, or similar enterprise networking hardware.</li><li>
Proven experience managing enterprise firewalls and network security perimeters.</li><li>
Experience with network penetration testing and security auditing. Experience with packet capture and data analysis.</li><li>
Demonstrated expertise in cybersecurity principles, including network access control, threat mitigation, and secure architecture design.</li><li>
Working familiarity with federal cybersecurity compliance frameworks (e.g., NIST SP 800-53, RMF).</li><li>
Qualify as a US PERSON as defined by ITAR regulations: A US person is a citizen of the United States, a lawful permanent resident alien of the US (&ldquo;Green Card&rdquo; holder), or an individual granted refugee or asylee status under US law.</li></ul><p><b>
Preferred Qualifications</b></p><p>
Beyond these basic qualifications, there are skills and experiences which will give you a head start here. We are a specialized environment looking for a well-rounded engineer who thrives in a shared-responsibility model. If you have experience in a few of these areas, you will hit the ground running, but even if these don&rsquo;t yet describe you and your experience, we would still like to hear from you:</p><ul><li>
Security Policy Development and Implementation: Experience drafting, updating, and enforcing organizational IT security policies, acceptable use guidelines, and incident response procedures in an academic or research setting.</li><li>
Compliance Frameworks &amp; ATO Lifecycle: Practical experience steering systems through the federal cybersecurity Risk Management Framework (RMF) to secure or maintain an ATO. Direct familiarity with auditing NIST SP 800-53 controls, FIPS standards, or related NASA cybersecurity guidelines.</li><li>
Security &amp; Vulnerability Tooling: Hands-on experience with the deployment, configuration, and operational oversight of enterprise security tools, such as Rapid7 for vulnerability scanning and reporting, and CrowdStrike for endpoint protection.</li><li>
Systems &amp; Scripting: Strong Linux systems administration skills (Red Hat or Debian) and experience leveraging scripting/programming languages (e.g., Python, Bash) for security analysis, log parsing, or task automation.</li><li>
Cloud Security: Experience implementing and monitoring security controls within public cloud environments (e.g., AWS).</li><li>
Mission Alignment: A genuine interest in science, astronomy, or space exploration. Understanding mission objectives helps us build better systems for the scientists and staff we support.</li><li>
Teamwork &amp; Collaboration: A strong collaborative mindset, a willingness to share operational duties, and the ability to communicate security and compliance constraints clearly and pragmatically within an active engineering group.</li></ul><p><b>
Required Documents</b></p><ul><li>
Full Resume.</li><li>
Cover Letter (briefly highlighting key qualifications and fit for this role).</li><li>
Names and Contact information of 3 professional references.</li></ul><p><b>
Application Details</b></p><ul><li>
This is an on-site position at the Caltech campus in Pasadena, California. Remote work is normally allowed up to one day per week.</li><li>
Applicants for this position must be a United States (US) person as defined by ITAR regulations &ndash; A US person is a citizen of the United States, a lawful permanent resident alien of the US (&ldquo;Green Card&rdquo; holder), or individuals granted refugee and asylee status under US law.</li><li>
Applications are due by August 31, 2026</li></ul><p><b><br>
Life at IPAC</b></p><p>
People choose to work at IPAC for many reasons, and our casual, employee-centric culture often leads to fulfilling, long-term careers and positive relationships. Whether in science, engineering, or administration, IPAC staff share a unique sense of pride in knowing their individual talents support human discovery.</p><p>
Unlike traditional corporate tech, IPAC emphasizes sustainable workloads and a healthy work&ndash;life balance: after-hours work is rare, shared across the operations team, and typically limited to exceptional situations. We actively support ongoing professional development, including training, conferences, and skill development aligned with your career goals. Caltech&rsquo;s benefits program offers a highly competitive benefits package, an exceptional 403(b) defined contribution plan, and access to campus facilities including the athletic center, libraries, on-site daycare, and Athenaeum club membership.</p>
</div><div><div><div><div><h2 class="jobSectionHeader"><b>Hiring Range</b></h2>
<p>
$47.75 - $62.25 Per Hour<br>
<br>
The salary of the finalist(s) selected for this role will be set based on a variety of factors, including but not limited to, internal equity, experience, education, specialty and training.
<br>
<br>
As one of the largest employers in Pasadena, CA, Caltech is committed to providing comprehensive benefits to eligible employees and their eligible dependents. Our benefits package includes competitive compensation, health, dental, and vision insurance, retirement savings plans, generous paid time off (vacation, holidays, sick time, parental leave, bereavement, etc.), tuition reimbursement, and more. Non-benefit eligible employees will have access to some benefits such as onsite counseling and sick time. Learn more about our benefits and staff perks.</p><br>
<h2 class="jobSectionHeader"><b>
EEO Statement</b></h2>
<p>
We are an equal opportunity employer and all qualified applicants will receive consideration for employment without regard to age, race, color, religion, sex, sexual orientation, gender identity, or national origin, disability status, protected veteran status, or any other characteristic protected by law.<br>
<br>
Caltech is a VEVRAA Federal Contractor.</p>
<p>
To read more Equal Employment Opportunity (EEO) go to eeoc_self_print_poster.pdf.</p>
</div>
</div></div></div><div><div><div><div><h2 class="jobSectionHeader"><b>Disability Accommodations</b></h2><p>
Caltech complies with the Fair Employment and Housing Act (FEHA) and the Americans with Disabilities Act (ADA). We consider reasonable accommodation measures that may be necessary for eligible applicants and employees to perform the essential functions of a position.</p><p>
If you would like to request an accommodation to complete this application, interview, or otherwise participate in the employee selection process, please contact Caltech Recruiting at employment@caltech.edu.</p><p>
Additionally, if you do not meet the basic qualifications of a role but believe you can perform the essential functions of the job with reasonable accommodation, please reach out to Caltech Recruiting at employment@caltech.edu.</p></div></div></div></div></div><p></p>

Security and Network Engineer

Search 8213+ Network security engineer jobs near you this August. New roles added regularly across leading industries. Apply today.