Job Summary:
The Network Security Engineer II will maintain, optimize, and secure enterprise network security platforms, including firewalls, VPN technologies, and web application firewalls. The role will focus on firewall governance and administration, site-to-site VPN management, Imperva WAF administration, Palo Alto GlobalProtect support, security operations, vulnerability remediation, and infrastructure modernization. This is a full-time, on-site position in Irving, TX, with occasional after-hours support as required.
Key Responsibilities:
• Manage enterprise firewall environments and enforce network security policies.
• Perform firewall rule reviews, cleanup initiatives, remediation activities, and regular audits of firewall configurations and access controls.
• Develop, maintain, and update firewall standards, procedures, network security diagrams, and architecture documentation.
• Plan, configure, and migrate site-to-site VPN tunnels.
• Troubleshoot VPN connectivity issues and validate VPN configurations.
• Administer and optimize Imperva WAF deployments, expand coverage, analyze security events, and tune policies.
• Provide advanced troubleshooting and support for Palo Alto GlobalProtect VPN services.
• Participate in security assessments, incident response activities, and vulnerability remediation.
• Support infrastructure modernization and continuous security improvement initiatives.
• Collaborate with cross-functional teams on network security architecture, governance, compliance, and technical troubleshooting.
Required Qualifications:
• 3-5 years of network security engineering experience.
• Hands-on experience with Palo Alto firewalls, site-to-site VPNs, GlobalProtect, and Imperva WAF.
• Strong understanding of TCP/IP, routing, switching, DNS, SSL/TLS, and network security principles.
• Strong troubleshooting, incident analysis, and technical documentation skills.
• Strong knowledge of network security architecture, firewall policy management, VPN technologies, and web application security.
• Bachelor's degree in IT, Computer Science, Cybersecurity, or a related field, or equivalent experience.
• PCNSA or PCNSE certification.
• Security+, CISSP, or GSEC certification.
• Ability to work full-time on-site in Irving, TX.
• Ability to provide occasional after-hours support.
Preferred Qualifications:
• Experience with Azure, AWS, or GCP.
• Knowledge of Zero Trust networking principles.
• Experience in Convenience Retail, Fuel Operations, or Supply Chain environments.
