Senior Network Security Engineer

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Senior Network Security Engineer based in United States.

This is a senior-level opportunity for a network security professional with deep Palo Alto Networks expertise and a strong consulting mindset. You will lead complex enterprise security engagements from discovery and architecture through implementation, migration, optimization, and operational handoff. The role combines hands-on engineering with technical leadership, client advisory, mentoring, and security practice development. You will translate business and technical requirements into scalable architectures while helping clients strengthen their security environments. You’ll also contribute to reusable standards, playbooks, and reference architectures that improve delivery quality across future engagements. This is an ideal role for someone who enjoys ownership, solving complex challenges, and making a measurable impact in client environments.

Accountabilities

• Lead end-to-end security engagements, including discovery, architecture, design, implementation, migration, validation, troubleshooting, and operational transition.
• Design and document high-level and low-level architectures, implementation plans, test plans, rollback procedures, network diagrams, and knowledge-transfer materials.
• Serve as a senior technical advisor to clients, facilitating workshops, translating requirements, and recommending practical security solutions.
• Lead production cutovers and resolve complex network and security issues while identifying and mitigating delivery risks early.
• Support solution scoping, technical estimation, statements of work, validation activities, and sales-to-delivery handoffs.
• Design, deploy, migrate, optimize, and troubleshoot Palo Alto Networks security environments across enterprise infrastructure.
• Partner with delivery leadership, project management, sales, operations, and engineering teams to ensure strong client outcomes.
• Mentor other engineers and contribute to reusable playbooks, standards, reference architectures, and lessons learned.
• Identify security risks, escalate significant issues appropriately, and actively contribute to remediation efforts.
• Support the continuous improvement of security delivery practices, methodologies, and technical standards.

Requirements

• 8+ years of experience in enterprise network security engineering, consulting, or Professional Services environments.
• Deep hands-on experience designing, deploying, migrating, and troubleshooting Palo Alto Networks solutions in production environments.
• Strong knowledge of PA-Series and/or VM-Series, Panorama, security policies, NAT, routing, VPN, high availability, logging, and threat-prevention capabilities.
• Experience with Prisma Access, Strata Cloud Manager, GlobalProtect, Palo Alto SD-WAN, SSL/TLS decryption, App-ID, User-ID, Device-ID, AIOps, and policy optimization.
• Proven experience with firewall refreshes, migrations, consolidations, network segmentation, Zero Trust, or SASE initiatives.
• Familiarity with Azure, AWS, hybrid cloud environments, SIEM integrations, identity services, NAC, certificate services, and authentication dependencies.
• Experience using migration tools such as Expedition and working across multi-vendor security environments.
• Strong client-facing communication skills, with the ability to facilitate technical workshops and explain complex concepts to technical and non-technical stakeholders.
• Excellent documentation, troubleshooting, mentoring, analytical, and problem-solving abilities.
• A Professional-level Palo Alto Networks certification such as PCNSA or PCNSE, or active progress toward one, is preferred.
• Ability to work independently, manage technical workstreams, and collaborate effectively across project and delivery teams.
• Willingness to travel approximately 10-40% as required for client engagements.

Benefits

• Base salary range of $170,000-$180,000 for positions based in New York City, with compensation varying by geography.
• Opportunities for bonus and/or commission.
• Unlimited paid time off.
• Incentive compensation plans available to all employees.
• Company-funded 401(k) contributions.
• Zero-cost, employer-covered health insurance.
• Annual Bring Your Own Device reimbursement of up to $500.
• Paid parental leave.
• Regular 1:1 coaching, performance reviews, and continuous feedback.
• A collaborative, inclusive, and transparent work environment.
• Opportunity to contribute to technical standards, reusable solutions, and the growth of a security practice.
• U.S.-based position with remote flexibility.