Sr Network Security Engineer

Our client, a large professional services firm located in New York, NY is looking to hire a Sr Network Security Engineer for a 1-to-3-month contract to start with the chance to extend or go perm. The consultant will work a 3 day per week onsite schedule to install, configure, operate, and maintain the core network infrastructure with a focus on Palo Alto Networks security appliances.

Responsibilities:

• Configuration Review: Conduct a comprehensive examination of the existing firewall design and security rules on the Palo Alto systems to assess their effectiveness and compliance with industry best practices.
• Rule Clean-up: Identify and eliminate redundant, obsolete, or conflicting security rules to streamline rule management and improve firewall performance.
• Security Enhancements: Implement necessary updates and modifications to enhance the security posture of the firewall, ensuring robust protection against unauthorized access and threats based on industry best practices.
• Documentation: Prepare detailed documentation of the current configurations, identified issues, and the actions taken to rectify any deficiencies.
• Recommendations Report: Provide a report with strategic recommendations for maintaining ongoing security health and possible enhancements beyond the scope of the initial clean-up.
• Knowledge Transfer Session: Conduct a training session with the Client’s IT team to discuss changes made, explain the rationale behind them, and empower them to handle basic ongoing rule management.

Required Skills:

• 10+ years of experience in network security with a heavy focus on Palo Alto Networks solutions
• Expertise in TCP/IP networking concepts, with experience in BGP, EIGRP, OSPF, STP, NAT, HSRP/VRRP, VRF, QoS, and multicast.
• Experience with Palo Alto Panorama, creating and managing configurations for large-scale, multi-site deployments.
• Proven ability to lead project-based work, focusing on mid to high-level design of network security architectures.
• Strong skills for troubleshooting Palo Alto firewalls and Panorama configurations
• Experience with Cisco ASA
• Must be able to be onsite 3 days per week in their NYC office