Sr. Security Engineer - Southeast region

GuidePoint Security provides trusted cybersecurity expertise, solutions and services that help organizations make better decisions and minimize risk. By taking a three-tiered, holistic approach for evaluating security posture and ecosystems, GuidePoint enables some of the nation’s top organizations, such as Fortune 500 companies and U.S. government agencies, to identify threats, optimize resources and integrate best-fit solutions that mitigate risk.

General Description

We are looking for a skilled Sr. Security Engineer to deliver multi-pillar network security engagements, with a primary focus on Security Architecture & Advisory, Network Security & Firewall, and delivery across SASE/SSE. This role will engage in the independent delivery of complex, cross-pillar solutions from architecture and design through pre-sales scoping and implementation while providing “Wow Them” service to clients and internal stakeholders.

The Sr. Security Engineer will be required to demonstrate strong technical and consultative skills, led by influence, and apply sound business and financial acumen to drive repeatable, margin-conscious delivery that aligns engagements with practice objectives and lifecycle progression (Assess → Architect → Implement → Optimize → Operate → Expand).

About the Network Security Practice

The Network Security Practice is responsible for helping clients navigate the complex threat and cybersecurity solution landscape so they can make informed risk decisions at the speed of business. We assess, architect, implement, optimize, and operate network security solutions across the organization and our client base.

Our team of security engineers, architects, and advisors is organized around five market-facing pillars. As the practice scales, each pillar is supported by a dedicated sub-team, with engineers cross-trained to support adjacent pillars:

• Network Security & Firewall: next-generation firewalls, IPS/IDS, email security, content filtering, high-availability clustering, and firewall policy management.
• SASE/SSE (Secure Access & Cloud Edge): SASE/SSE, ZTNA, SWG, CASB, SD-WAN security overlay, VPN-to-ZTNA migration, and branch security posture.
• Network Access & Segmentation: NAC, 802.1X, microsegmentation, OT/IoT segmentation, identity-based access, and Zero Trust architecture.
• Network Detection & Response (NDR): NDR platforms, network visibility and analytics, traffic aggregation, breach-and-attack simulation, and threat hunting.
• Security Architecture & Advisory: architecture reviews, risk assessments, technology evaluations, security roadmaps, and vendor-neutral advisory.

Roles and Responsibilities:

This Sr. Security Engineer role is prioritized across three pillars in order of focus: Security Architecture & Advisory first, Network Security & Firewall second, and SASE/SSE third - while remaining cross-trained to support adjacent pillars as practice sub-teams mature.

• Lead architecture-level design and advisory engagements including security architecture reviews, Zero Trust strategy, and vendor-neutral roadmaps translating client requirements into defensible solution designs and serving as the practice’s senior advisory presence (Security Architecture & Advisory).
• Conduct assessments, architecture reviews, and technology evaluations that produce risk findings and prioritized security roadmaps, identifying natural next engagements across the lifecycle (Security Architecture & Advisory).
• Independently deliver firewall and perimeter engagements end to end design, configure, and deploy next-generation firewall and secure-infrastructure solutions on Palo Alto Networks and Fortinet platforms, owning technical quality (Network Security & Firewall).
• Lead firewall policy optimization, migration, and lifecycle engagements, applying delivery standards that protect margin and quality (Network Security & Firewall).
• Support secure access and cloud-edge solutions SASE/SSE, ZTNA, and VPN-to-ZTNA migrations for distributed and remote-work environments as a secondary delivery focus (SASE/SSE).
• Provide pre-sales technical leadership: lead scoping of engagements, define assumptions, level of effort, deliverables, and acceptance criteria to protect margin and prevent scope creep.
• Serve as a senior technical point of contact on assigned engagements; mentor and cross-train Associate and mid-level Security Engineers as pillar sub-team’s form.
• Enforce delivery discipline: adhere to practice playbooks, change-control, and project-health standards, and escalate delivery blockers immediately.
• Maintain a target 80% billable utilization while investing the remaining 20% in enablement, certifications, pre-sales and scoping support, and practice development.

Required Experience and Education:

• 5-8 years of progressive experience in network security engineering and consulting, with demonstrated independent, multi-pillar delivery.
• Deep, hands-on expertise with Palo Alto Networks and Fortinet platforms (firewall/NGFW design, configuration, and deployment) the practice’s primary delivery need.
• Demonstrated ability to lead security architecture and advisory engagements, including risk assessments, roadmaps, and technology evaluations.
• Experience providing pre-sales technical leadership and scoping complex, multi-pillar engagements.
• Working proficiency designing and deploying secure-access/cloud-edge solutions (SASE/SSE, ZTNA) as a secondary delivery area.
• Bachelor’s degree in Computer Science, Information Security, a related technical field, or equivalent professional experience.
• Embraces emerging technologies, including AI tools, to work smarter, solve problems, and drive better business outcomes.
• Must hold or obtain, within 90 days of hire, at least one professional-level certification on a primary platform (e.g., Palo Alto PCNSE or Fortinet NSE 4).

Preferred Experience and Education

• Palo Alto Networks certifications (e.g., PCNSE, PCNSA).
• Fortinet certifications (e.g., NSE 4-7 / Fortinet Certified Solution Specialist).
• Industry architecture or security certifications (e.g., CISSP, CCSP, SABSA, TOGAF).
• Secure-access/cloud-edge certifications (e.g., Zscaler ZDTA/ZCCP, Netskope NCCP).
• Experience leading security architecture and Zero Trust programs for strategic accounts.
• Prior consulting or professional-services delivery experience with client-facing pre-sales and scoping.
• Experience mentoring junior engineers and contributing to practice playbooks and enablement.

Travel Requirements:

• Up to 10% travel

Physical Requirements:

• Sedentary work
• Substantial movement of the wrists, hands, and/or fingers for a minimum of 8 hours a day
• Required to have close visual acuity to view computer terminal and/or extensive reading for a minimum of 8 hours a day

Note: Applicants must be authorized to work for any employer in the U.S. We are unable to sponsor or take over sponsorship of an employment visa for this role.

We use Greenhouse Software as our applicant tracking system and Zoom Scheduler for HR screen request scheduling. At times, your email may block our communication with you. Please be sure to check your SPAM folder so that you don't miss updates on your application.

Why GuidePoint?

GuidePoint Security is a rapidly growing, profitable, privately-held value added reseller that focuses exclusively on Information Security. Since its inception in 2011, GuidePoint has grown to over 1,300 employees, established strategic partnerships with leading security vendors, and serves as a trusted advisor to more than 6,200 customers.

Firmly-defined core values drive all aspects of the business, which have been paramount to the company’s success and establishment of an enjoyable workplace atmosphere. At GuidePoint, your colleagues are knowledgeable, skilled, and experienced and will seek to collaborate and provide mentorship and guidance at every opportunity.  

This is a unique and rare opportunity to grow your career along with one of the fastest growing companies in the nation.

Some added perks….

• Remote workforce primarily (U.S. based only, some travel may be required for certain positions, working on-site may be required for Federal positions)
• Group Medical Insurance options: Zero Deductible PPO Plan (GuidePoint pays 90% of the premium for employees and 70% for family plans (spouse/children/family) or High Deductible Health Plan with HSA (GuidePoint pays 100% of the employees premiums and 75% for family plans (spouse/children/family). If you choose the High Deductible / HSA plan, GPS will contribute in 4 equal quarterly installments: ($850 per EE annually / $1750 per family annually (includes spouse/children/family options)
• Group Dental Insurance: GuidePoint pays 100% of the premium for employees and 75% of family plans
• 12 corporate holidays and a Flexible Time Off (FTO) program
• Healthy mobile phone and home internet allowance
• Eligibility for retirement plan after 2 months at open enrollment
• Pet Benefit Option