Network Security Engineer II

Responsibilities

• Design and implement network security architectures using Palo Alto NGFWs and Zscaler (ZIA/ZPA) across on-premises, cloud, and remote environments.
• Lead the development and enforcement of zero-trust principles, including identity-aware policies and network segmentation.
• Configure and maintain Palo Alto firewalls and Panorama, managing policies, NAT, VPNs, and GlobalProtect.
• Deploy and oversee Zscaler services, integrating traffic forwarding and identity provider connections.
• Design, implement, and fine-tune Web Application Firewalls (WAF) to protect against OWASP Top 10 threats.
• Develop and enforce IoT and operational technology (OT) security controls for manufacturing environments.
• Resolve complex security issues through log analysis, packet captures, and traffic flow examination.
• Collaborate with agile teams to deliver security features through sprint planning and user story refinement.
• Create technical documentation, standards, and runbooks while providing mentorship to junior engineers.

Requirements

• Bachelor of Science in IT, Cybersecurity, Computer Science, or a related field.
• 5+ years of hands-on experience in network security engineering within medium to large organizations.
• Proven expertise in managing Palo Alto firewalls and Panorama in a production environment.
• Practical experience deploying and managing Zscaler solutions (ZIA/ZPA/ZDX).
• Deep understanding of zero-trust principles and WAF architecture/troubleshooting.
• Experience designing security frameworks for IoT and OT environments.
• Proficiency in Layer 2/Layer 3 switching and routing (VLANs, BGP, OSPF).
• At least one of the following certifications: PCNSE, PCNSA, ZDTA, ZDTE, ZDXA, CCNA, or CISSP.

Preferred Qualifications

• Experience with major cloud platforms such as AWS, Azure, or GCP.
• Familiarity with SIEM/SOAR integrations and analysis.
• Experience working within a Scrum/Agile project management environment.

About the Company

Vertiv is a global leader in providing critical digital infrastructure and continuity solutions for data centers, communication networks, and commercial/industrial environments.