Network Security Engineer - Strata EEC

Ampcus - Washington, DC

Full-time

Remote - Washington, DC

Professional, Scientific, and Technical Services

About the position

We are looking for a Network Security Engineer with a strong background in Strata Experience to join our team. This position is fully remote and is expected to last for 12 months, with a high possibility of extension. The ideal candidate will have extensive experience with PANW firewall migrations and policy analysis/cleanup. In this role, you will provide guidance and technical support to clients as they deploy our security integrations. You will act as a technical partner, offering strategic guidance on complex systems to secure a digital environment. Your interactions will be direct with clients, where you will partner closely with their personnel to suggest integrations that enhance their success. Your thorough understanding of our product integrations will contribute to the development of new principles and concepts, allowing you to provide detailed analysis on what is working, what is not, and what could be improved. You will enjoy implementation work, proactively resolving potential concerns, and adhering to strict best practices that enable our clients to achieve a more secure digital world. Creativity, innovation, and a love for challenges are essential, as you will be learning how integrations can work better with new products and technologies. In this role, you will work full-time either at the customer site or remotely, communicating with customers, sales teams, peers, engineering, and support teams as necessary. You will need to understand the customer environment, requirements, and security roadmap to implement the appropriate security solutions. Your responsibilities will include configuring, implementing, and maintaining the Security Operating Platform, optimizing and migrating policies and objects from the existing environment to our next-generation firewall, and testing and validating the migration environment. You will coordinate and execute the cutover to production, provide guidance on code upgrades, facilitate the development of new application and threat signatures, and interact with our Technical Assistance Center (TAC) to understand and diagnose support cases. Some travel may be required depending on customer requests, and you will work closely with the customer's security and network teams to build confidence across their business units.

Responsibilities

• Provide guidance and technical support to clients deploying security integrations.
• Act as a technical partner, providing strategic guidance around complex systems to secure a digital environment.
• Communicate with customers, sales teams, peers, engineering, and support teams as appropriate.
• Understand the customer environment, requirements, and security roadmap to implement appropriate security solutions.
• Configure, implement, and maintain the Security Operating Platform.
• Optimize and migrate policies and objects from the existing environment to the next-generation firewall.
• Test and validate the migration environment.
• Coordinate and execute cutover to production.
• Provide guidance on code upgrades.
• Facilitate the development of new application and threat signatures.
• Interact with the Technical Assistance Center (TAC) to understand and diagnose support cases.
• Work with the customer's security and network teams to build confidence across business units.

Requirements

• High level of experience with Panorama and log collectors.
• Experience with next-generation firewalls (NGFW).
• Experience with Global Protect.
• Bachelor's degree in Computer Science, MIS, business, or equivalent education/training/experience.
• Minimum of 5 years' experience with network/security solutions and technologies (BGP, SD-WAN concepts, VXLAN, and general routing and switching).
• Minimum of 3 years' experience leading security solutions in large environments.
• Detailed technical experience in the installation, configuration, and operation of high-end firewall appliances, ideally PAN.
• Experience in internetworking, LAN, and WAN technologies.
• Good understanding of Internet protocols and applications.
• Possess industry certifications: CISSP, CCNA, CNSE, and JNCIE-SEC.
• Ability to handle multiple projects and work calmly under high pressure.
• Excellent writing and strong verbal communication skills, with the ability to communicate effectively to senior leaders and technical peers.