Our client, a large professional services firm located in New York, NY is looking to hire a Sr Network Security Engineer for a 1-to-3-month contract to start with the chance to extend or go perm. The consultant will work a 3 day per week onsite schedule to install, configure, operate, and maintain the core network infrastructure with a focus on Palo Alto Networks security appliances.
Responsibilities:
- Configuration Review: Conduct a comprehensive examination of the existing firewall design and security rules on the Palo Alto systems to assess their effectiveness and compliance with industry best practices.
- Rule Clean-up: Identify and eliminate redundant, obsolete, or conflicting security rules to streamline rule management and improve firewall performance.
- Security Enhancements: Implement necessary updates and modifications to enhance the security posture of the firewall, ensuring robust protection against unauthorized access and threats based on industry best practices.
- Documentation: Prepare detailed documentation of the current configurations, identified issues, and the actions taken to rectify any deficiencies.
- Recommendations Report: Provide a report with strategic recommendations for maintaining ongoing security health and possible enhancements beyond the scope of the initial clean-up.
- Knowledge Transfer Session: Conduct a training session with the Client’s IT team to discuss changes made, explain the rationale behind them, and empower them to handle basic ongoing rule management.
Required Skills:
- 10+ years of experience in network security with a heavy focus on Palo Alto Networks solutions
- Expertise in TCP/IP networking concepts, with experience in BGP, EIGRP, OSPF, STP, NAT, HSRP/VRRP, VRF, QoS, and multicast.
- Experience with Palo Alto Panorama, creating and managing configurations for large-scale, multi-site deployments.
- Proven ability to lead project-based work, focusing on mid to high-level design of network security architectures.
- Strong skills for troubleshooting Palo Alto firewalls and Panorama configurations
- Experience with Cisco ASA
- Must be able to be onsite 3 days per week in their NYC office