Job Description

Job Titile: Network Security Engineer
Location: Remote
Contract

We are seeking an experienced Network Security Engineer to strengthen our network security posture through firewall rule analysis, remediation, and migration activities. This role requires a hands-on expert who can quickly assess existing environments, identify and remediate security risks, and support a migration from Palo Alto Networks firewalls to Fortinet FortiGate solutions. The ideal candidate is highly self-sufficient, security-focused, and capable of delivering immediate value with minimal ramp-up.

Key Responsibilities

Firewall Security Assessment & Remediation

• Analyze Palo Alto Networks firewall policies and configurations to identify:
  • Overly permissive rules
  • Shadowed, redundant, and unused rules
  • Missing security profiles and logging
  • Stale rules referencing decommissioned IP ranges
  • Weak segmentation between security zones
• Use rule hit counts and log analysis to identify inactive or outdated policies.
• Validate that firewall rules have documented business justification and ownership.
• Assess firewall configurations against industry security standards, including:
  • Vendor best practices
  • CIS benchmarks
  • Administrative access controls
  • Authentication and logging requirements
  • Threat prevention and decryption policies
• Document findings, risk ratings, and remediation recommendations.
• Partner with network and security teams to implement approved changes through established change management processes.

Network Security Architecture

• Evaluate network segmentation and traffic flows to identify lateral movement risks.
• Recommend improvements to zoning and security policies aligned with least-privilege principles.
• Harden firewall management planes and security configurations.

Documentation & Project Delivery

• Create and maintain:
• Drive tasks to completion with minimal supervision.
• Communicate project status, risks, and blockers effectively to stakeholders.
• Participate in after-hours maintenance windows and migration cutovers as required.

Required Qualifications

Technical Expertise

• Hands-on experience with Palo Alto Networks next-generation firewalls, including:
• Hands-on experience with Fortinet FortiGate and FortiOS, including:
• Experience auditing firewall rule bases and identifying:
• Proven success executing firewall migrations between vendors, preferably Palo Alto to FortiGate.
• Strong knowledge of:
• Experience applying CIS benchmarks and vendor security best practices.
• Scripting and automation experience using tools such as Python or PowerShell.

Job Tags

Similar Jobs