We are seeking an experienced, hands-on network and infrastructure security engineer to own the operational security, reliability, and continuous improvement of networks across multiple company locations. This role is primarily focused on network engineering and defensive security.
Compensation
The salary range in this posting depends on qualifications and experience. Actual compensation may vary, and this job posting is not necessarily reflective of actual compensation that may be earned, nor a promise of any specific pay for any specific employee, which is always dependent on relevant experience, qualifications/education, and other factors including work schedule, shift premiums, and overtime.
Responsibilities
Firewall and perimeter security: Administer, harden, monitor, and troubleshoot next-generation firewalls and edge services; manage rule bases, NAT, IPS/IDS, remote access, VPNs, firmware, certificates, and secure management access.
Proactive vulnerability and patch management: Maintain an accurate inventory of network/security devices; track vendor advisories, exposed services, end-of-life systems, configuration drift, and vulnerabilities. Prioritize and coordinate firmware/security updates, validate remediation, and document exceptions.
Segmentation and secure architecture: Design and maintain VLANs, ACLs, inter-VLAN controls, least-privilege access, site-to-site connectivity, and segmentation of user, server, guest, management, and other higher-risk networks. Reduce lateral-movement opportunities.
Switching, wireless, and network operations: Configure and troubleshoot managed switches, routing, DNS/DHCP dependencies, wireless controllers/APs, authentication, and network performance. Understand the security implications of each component.
Design, dimension, and optimize MTNN’s FTTH Core (Data & Voice) network architecture and capacity, support planning and deployment of new solutions, conduct feasibility studies, and maintain network modeling tools.
Responsibilities
Design and dimension the FTTH Core (Data & Voice) network
Support planning and design of FTTH Core architecture
Implement optimal network topology for FTTH Core platforms
Plan evolution of Data/voice solutions
Provision network capacity for FTTH Core elements
Requirements
First Degree in Electrical, Electronics, Computer, Systems Engineering or any relevant science courses
You will be part of the team that develops the Intrusion Prevention System to power the Palo Alto Networks’s next generation firewall. The Decoder team is responsible for decoding network protocols and inspecting application traffic on enterprise customers’ networks.
Compensation
$172,100.00 - $278,300.00/yr
Responsibilities
Research networking protocols and related application networking behavior.
Research file types and file properties
Research and provide defense mechanisms against popular protocol/firewall evasions
Develop protocol and file decoders, and integrate the detection solutions with Palo Alto Networks products
Build common services to support various network security services
Requirements
BS/MS in Computer Science or Electrical Engineering or equivalent Military experience
Detection, response, and resilience: Review firewall/network telemetry and alerts, investigate suspicious traffic and attempted intrusions, support incident containment, validate backups of device configurations, and test recovery procedures.