AHEAD

AHEAD

AHEAD accelerates the impact of technology on clients by engineering customized data, developer, and infrastructure platforms that improve IT operations. By weaving together cloud infrastructure, intelligent operations, and modern applications, we help...

IT Services
1K-5K
$43M raised

Description

  • Lead end-to-end delivery of large, multi-technology security engagements, including discovery, architecture, implementation, testing, cutover, and documentation.
  • Design, deploy, migrate, and troubleshoot Palo Alto, Fortinet, and Cisco Secure Firewall environments, including high availability, VPN, segmentation, cloud firewalls, logging, and automation.
  • Design and implement Cisco ISE network access control, identity-based segmentation, authentication, profiling, posture assessment, guest access, BYOD, and distributed deployments.
  • Architect and deploy F5 BIG-IP, NGINX, cloud-native, and managed load-balancing, WAF, API security, application access, and traffic-management solutions.
  • Design and implement Zscaler and Palo Alto Prisma Access SASE and Zero Trust architectures for users, branches, cloud workloads, and data centers.
  • Lead client discovery sessions, design workshops, architecture reviews, migration planning, cutover activities, and knowledge-transfer sessions.
  • Serve as technical authority and escalation point while directing cross-functional delivery teams and mentoring consultants and engineers.
  • Support sales campaigns through solution design, scoping, estimates, statements of work, and sales-to-delivery transition.
  • Create reusable delivery assets, automation, reference architectures, technical content, runbooks, and enablement materials.
  • Own technical quality, documentation, risk escalation, client satisfaction, and practice maturity across assigned engagements.

Requirements

  • 10+ years of network security, infrastructure security, or security engineering experience, including at least 4 years in consulting, professional services, or client-facing delivery.
  • Hands-on enterprise production experience with next-generation firewalls on at least two of Palo Alto Networks, Cisco Secure Firewall, and Fortinet platforms.
  • Production experience deploying Cisco ISE for 802.1X, TACACS+, network access policies, and distributed wired, wireless, and VPN environments.
  • Production experience with F5 BIG-IP LTM and at least one of BIG-IP DNS or Advanced WAF.
  • Production experience with Zscaler ZIA/ZPA or Palo Alto Prisma Access, including SWG, CASB, ZTNA, and traffic-forwarding design.
  • Strong knowledge of BGP, OSPF, EIGRP, IPsec, SSL/TLS, DNS, network segmentation, cloud networking, and Zero Trust principles.
  • Experience with AWS, Azure, or GCP security services, cloud-native load balancing, and hybrid connectivity.
  • Experience integrating Okta, Microsoft Entra ID, SAML 2.0, SCIM, SIEM platforms, syslog, Terraform, Ansible, and REST APIs.
  • Ability to independently lead complex projects, direct technical resources, scope engagements, and communicate with executive stakeholders.
  • Ability to travel at least 25%; 60% target utilization is expected.
  • Preferred certifications include CCIE Security, CISSP, PCNSE/PCNSC, Fortinet NSE 7/8, F5 certifications, Zscaler ZCCA/ZCCP, or CCNP Security.
  • Preferred experience includes firewall migrations, microsegmentation, additional SSE platforms, regulated industries, multi-cloud IaC/CI/CD, and public-facing technical content.

Benefits

  • Medical, dental, and vision insurance.
  • 401(k) plan.
  • Paid company holidays and paid time off.
  • Paid parental and caregiver leave.
  • Professional development, cross-department training, and sponsored certifications.
  • Access to a multi-million-dollar technology lab.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Junior Pentester

Thoropass 51-250 Internet Software & Services

Thoropass is seeking a Junior Penetration Tester to support customer security engagements across web, API, mobile, cloud, network, and LLM environments while developing offensive security expertise alongside senior testers.

Penetration Testing
8 hours, 58 minutes ago

IT Systems Audit SME (SAP WMS)

C5MI 11-50 Internet Software & Services

C5MI is seeking an IT Systems Audit SME to lead audit readiness, internal-control evaluation, risk management, and compliance activities for mission-critical DoD/DLA warehouse management and SAP environments.

Cybersecurity
5 days, 9 hours ago

Senior Professional Services Technical Architect - Security

GitLab 1K-5K Internet Software & Services

GitLab is hiring a Senior Professional Services Technical Architect, Security to design and lead secure enterprise DevSecOps solutions for Professional Services clients across AMER, from pre-sales scoping through implementation and enablement.

Ansible CI/CD DevSecOps GitLab Jenkins SonarQube Terraform
1 week, 2 days ago

Lead Security Engineer - Penetration Testing & AI Security

HighLevel 251-1K Internet Software & Services

HighLevel is seeking a Lead Security Engineer to secure its SaaS platform and AI-enabled products through application security leadership, secure development practices, and adversarial testing of AI systems.

Bash CI/CD Cybersecurity DevSecOps Docker Go JavaScript JWT Kubernetes Microservices OpenID Connect OWASP Penetration Testing Python SAML
1 week, 5 days ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers