Sr. Staff Network Security Engineer

Position: Sr. Staff Network Security Engineer

Location: Dublin CA (or), North Dallas, TX(Hybrid - 2 days onsite a week)

Hiring Mode: 6 Months Contract to Hire

Job Description:

Client is seeking a Senior Staff Network Security Engineer to serve as a technical authority across network security platforms. This individual will lead the design, operations, and continuous improvement of secure access solutions, including firewall platforms, VPN infrastructure, and enterprise browser technologies. The role is critical in advancing Zero Trust architecture and protecting enterprise connectivity across global office environments and remote users.

This position requires deep expertise in Palo Alto Networks technologies, particularly PAN OS and Prisma Access, along with strong networking fundamentals.

Key Responsibilities:

• Own full lifecycle management of PAN OS firewalls including policy development, optimization, upgrades, and performance tuning
• Administer and enhance Prisma Access and GlobalProtect VPN infrastructure to ensure secure and reliable remote connectivity
• Lead enterprise browser strategy including policy configuration, URL filtering, and security integration
• Design and implement network security architectures across routing, switching, and segmentation layers
• Support secure deployment of office networks in coordination with facilities and IT teams
• Identify gaps in security posture and lead remediation of risks related to access control and traffic visibility
• Collaborate with identity and access management teams to support Zero Trust initiatives and least privilege access models
• Develop and maintain documentation including runbooks, standards, and operating procedures

Required Qualifications

• Bachelor degree or equivalent experience with at least 8 years of experience in network engineering or network security
• Expert level experience managing Palo Alto Networks PAN OS firewalls including policy configuration, NAT, application identification, and threat prevention
• Strong experience with Prisma Access or GlobalProtect VPN in enterprise environments
• Experience managing enterprise browser platforms such as Prisma Browser, Island, Talon, or equivalent
• Solid understanding of networking fundamentals including routing protocols such as BGP and OSPF, switching, VLANs, SD WAN concepts, and segmentation
• Experience deploying secure office networks including cabling and access layer design
• Experience with automation or scripting tools such as Python, Ansible, or Terraform
• Experience using AI tools within network engineering or security operations workflows

Preferred Qualifications

• Experience implementing SSL and TLS decryption at scale including certificate management and traffic exemptions
• Familiarity with identity platforms such as Okta and integration with network access controls
• Experience with Zero Trust Network Access frameworks
• Relevant certifications such as PCNSE or CCNP Security