RemoteLeaf Logo
Log in Sign up

Principal Technical Consultant - Network Security

1 month, 1 week ago
United States
Full-time
Lead
Penetration Tester
DevOps and Infrastructure
Ansible AWS Azure CI/CD CloudFormation DNS GCP HIPAA JSON Kubernetes Microservices Network Security OpenAPI SIEM Splunk Terraform XML
Apply Now
AHEAD

AHEAD

AHEAD accelerates the impact of technology on clients by engineering customized data, developer, and infrastructure platforms that improve IT operations. By weaving together cloud infrastructure, intelligent operations, and modern applications, we help...

IT Services
1K-5K
$43M raised
View All Jobs 83

Description

  • Lead end-to-end delivery of large, multi-technology security engagements, including discovery, architecture, implementation, testing, cutover, and documentation.
  • Design, deploy, migrate, and troubleshoot Palo Alto, Fortinet, and Cisco Secure Firewall environments, including high availability, VPN, segmentation, cloud firewalls, logging, and automation.
  • Design and implement Cisco ISE network access control, identity-based segmentation, authentication, profiling, posture assessment, guest access, BYOD, and distributed deployments.
  • Architect and deploy F5 BIG-IP, NGINX, cloud-native, and managed load-balancing, WAF, API security, application access, and traffic-management solutions.
  • Design and implement Zscaler and Palo Alto Prisma Access SASE and Zero Trust architectures for users, branches, cloud workloads, and data centers.
  • Lead client discovery sessions, design workshops, architecture reviews, migration planning, cutover activities, and knowledge-transfer sessions.
  • Serve as technical authority and escalation point while directing cross-functional delivery teams and mentoring consultants and engineers.
  • Support sales campaigns through solution design, scoping, estimates, statements of work, and sales-to-delivery transition.
  • Create reusable delivery assets, automation, reference architectures, technical content, runbooks, and enablement materials.
  • Own technical quality, documentation, risk escalation, client satisfaction, and practice maturity across assigned engagements.

Requirements

  • 10+ years of network security, infrastructure security, or security engineering experience, including at least 4 years in consulting, professional services, or client-facing delivery.
  • Hands-on enterprise production experience with next-generation firewalls on at least two of Palo Alto Networks, Cisco Secure Firewall, and Fortinet platforms.
  • Production experience deploying Cisco ISE for 802.1X, TACACS+, network access policies, and distributed wired, wireless, and VPN environments.
  • Production experience with F5 BIG-IP LTM and at least one of BIG-IP DNS or Advanced WAF.
  • Production experience with Zscaler ZIA/ZPA or Palo Alto Prisma Access, including SWG, CASB, ZTNA, and traffic-forwarding design.
  • Strong knowledge of BGP, OSPF, EIGRP, IPsec, SSL/TLS, DNS, network segmentation, cloud networking, and Zero Trust principles.
  • Experience with AWS, Azure, or GCP security services, cloud-native load balancing, and hybrid connectivity.
  • Experience integrating Okta, Microsoft Entra ID, SAML 2.0, SCIM, SIEM platforms, syslog, Terraform, Ansible, and REST APIs.
  • Ability to independently lead complex projects, direct technical resources, scope engagements, and communicate with executive stakeholders.
  • Ability to travel at least 25%; 60% target utilization is expected.
  • Preferred certifications include CCIE Security, CISSP, PCNSE/PCNSC, Fortinet NSE 7/8, F5 certifications, Zscaler ZCCA/ZCCP, or CCNP Security.
  • Preferred experience includes firewall migrations, microsegmentation, additional SSE platforms, regulated industries, multi-cloud IaC/CI/CD, and public-facing technical content.

Benefits

  • Medical, dental, and vision insurance.
  • 401(k) plan.
  • Paid company holidays and paid time off.
  • Paid parental and caregiver leave.
  • Professional development, cross-department training, and sponsored certifications.
  • Access to a multi-million-dollar technology lab.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Zyte

Senior Reverse Engineer - Remote

Zyte 251-1K Professional Services

Zyte is hiring a Reverse Engineer to develop scalable tooling, automation, and AI-assisted pipelines that help engineers analyze evolving antibot and browser-fingerprinting systems and ship solutions faster.

Poland Full-time Senior Penetration Tester
Burp Suite C C++ JavaScript LLM Machine Learning Node.js Python Rust Wireshark
1 day, 23 hours ago
DoorDash

Manager, Third-Party Risk Management (TPRM)

DoorDash 10K-50K Air Freight & Logistics

DoorDash is hiring a US-based Third-Party Risk Management Manager to lead its global vendor security risk program, manage TPRM teams, and build AI-enabled workflows across DoorDash, Wolt, and Deliveroo.

United States Full-time Senior Penetration Tester
$164k-$242k
CI/CD Encryption OAuth OpenID Connect Penetration Testing Python SAML Secrets Management SQL
2 days, 22 hours ago
Aspenview Technology Partners

Incident Response Lead

Aspenview Technology Partners Internet Software & Services

AspenView Technology Partners is hiring a US-based Incident Response Lead to direct major incident response and digital forensics for a large consumer lender supported by nearshore security operations teams.

United States Full-time Lead Penetration Tester
AWS Azure Elasticsearch GCP Linux SIEM Splunk
5 days, 22 hours ago
Invicti

Staff Security Researcher (Europe Remote)

Invicti 251-1K Internet Software & Services

Invicti Security is hiring a hands-on Offensive Security Researcher in Europe to research emerging web, cloud, and AI threats and turn findings into accurate, production-ready detection capabilities.

Europe Full-time Lead Penetration Tester
Burp Suite GraphQL HTTP JavaScript Kubernetes Nmap Python REST API
5 days, 23 hours ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers