Network Security Engineer

Network Security Engineer
Location: Dallas, TX — Onsite
Employment Type: Contract, 6+ months
Engagement Type: W2 or C2C

Technical Skill Set

• Hands-on experience with Cisco ASA, FXOS, Palo Alto firewalls, and Panorama.
• Full understanding of Palo Alto firewall concepts: security zones, security policy ordering, searching and sorting audit logs, address sets, negated addresses, user roles and tables, route-based policies, address books, and application traffic control.
• Hands-on experience with Cisco ISE for VPN authentication, AAA, and policy creation.
• Understanding of and experience with routing protocols.
• Hands-on experience handling security incidents and planning mitigation.
• Good understanding of Symantec DLP.
• Extensive hands-on experience across security technologies including firewalls, VPNs, IDS/IPS, endpoint security solutions (AV, HIPS, hard disk encryption), strong authentication products (RSA SecurID), content security gateways (Cisco IronPort Web/Email Security Gateways), Cisco ISE, and TACACS/AAA solutions. Depth in more than one of these is preferred.
• Understanding of F5 load balancers.
• Strong presentation skills — able to participate in review meetings and clearly articulate points of concern.
• Ability to conduct risk analysis, impact analysis, and dependency assessment across customer and internal teams.
• Knowledge and experience working with ITIL processes.

Technical Responsibilities

• Configure Cisco and Palo Alto firewalls.
• Articulate and highlight risks and dependencies.
• Participate in an on-call support rotation.
• Conduct firewall auditing, review access control lists, and update firewalls as needed.
• Interact with various teams in managing the log management solution.
• Adhere to high-quality standards and best practices, delivering performant, scalable, repeatable processes in accordance with applicable regulations.
• Analyze, troubleshoot, and investigate network security incidents based on security platform reporting, network traffic, log files, host-based alerts, and automated security alerts.
• Evaluate systems using vulnerability scanners and manual techniques to verify system security settings and configurations.

Non-Technical Responsibilities

• Coordinate with team members on resource availability and capability.
• Ensure quality of work — review and validate technical configuration changes.
• Coordinate with Centers of Excellence (COE) resources to resolve technical issues before escalation to OEMs.