Senior Technical Consultant - Network Security

3 months ago
Full-time
Senior
DevOps and Infrastructure
AHEAD

AHEAD

AHEAD accelerates the impact of technology on clients by engineering customized data, developer, and infrastructure platforms that improve IT operations. By weaving together cloud infrastructure, intelligent operations, and modern applications, we help...

IT Services
1K-5K
$43M raised

Description

  • Design and deploy Cisco Secure Firewall and Palo Alto Networks next-generation firewall solutions in enterprise production environments.
  • Lead firewall migration projects, including ASA-to-FTD conversions and cross-vendor migrations with policy translation and cutover planning.
  • Design network segmentation architectures using zones, virtual routers, VRFs, and policy-based routing to enforce least-privilege traffic controls.
  • Deploy cloud-native firewall solutions for AWS, Azure, and containerized workloads.
  • Implement firewall high availability, centralized logging, SIEM integration, NetFlow/IPFIX, and compliance-focused rule optimization.
  • Automate firewall provisioning, backups, and policy deployment using Terraform, Ansible, and vendor APIs.
  • Design and implement Cisco ISE for 802.1X, MAB, RADIUS/TACACS+, authorization policies, profiling, posture, and guest/BYOD workflows.
  • Lead SASE and Zero Trust deployments across remote user, branch, cloud, and data center use cases using platforms such as Zscaler, Prisma Access, Cisco Secure Access, or Netskope.
  • Create HLDs, LLDs, diagrams, runbooks, cutover plans, and as-built documentation for client engagements.
  • Lead discovery sessions, architecture reviews, knowledge transfer sessions, and provide technical escalation support and mentorship.

Requirements

  • 7+ years of experience in network security, infrastructure security, or security engineering, including at least 3 years in a consulting, professional services, or client-facing delivery role.
  • Hands-on experience designing and deploying Cisco Secure Firewall (FTD/FMC) and Palo Alto Networks NGFW (PAN-OS/Panorama).
  • Production experience deploying Cisco ISE for 802.1X authentication, TACACS+ device administration, and network access policy enforcement.
  • Production experience with at least one SASE platform, such as Zscaler ZIA/ZPA, Palo Alto Prisma Access, Cisco Secure Access, or Netskope.
  • Strong understanding of routing protocols, VPN technologies, network segmentation, and Zero Trust architecture principles.
  • Experience with cloud platforms including AWS VPC, Azure VNet, or GCP VPC, plus hybrid connectivity architectures.
  • Experience integrating with identity and access management platforms such as Okta, Microsoft Entra ID, SAML 2.0, and SCIM.
  • Experience integrating security platforms with SIEM tools such as Splunk or Microsoft Sentinel, syslog, and automation tools like Terraform and Ansible.
  • CCIE Security or CCNP Security certification preferred.
  • Palo Alto PCNSE or PCNSC, Zscaler ZCCA/ZCCP, Cisco Secure Access, or Netskope certifications preferred.
  • CISSP, CompTIA Security+, or an equivalent industry security certification preferred.
  • Firewall migration experience, including ASA to FTD conversions and cross-vendor migrations, preferred.

Benefits

  • $170,000 - $200,000 a year OTE, including base salary and any applicable target bonus.
  • Medical, dental, and vision insurance.
  • 401(k) plan.
  • Paid company holidays.
  • Paid time off.
  • Paid parental and caregiver leave.
  • Sponsorship for certifications and credentials for continued learning.
  • Access to a multi-million-dollar lab and cross-department training and development opportunities.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Network Engineer

Blueprint Technologies 251-1K Internet Software & Services

Blueprint Technologies is seeking a remote Network Engineer to support enterprise, data center, and lab network infrastructure by executing production operations, changes, migrations, troubleshooting, and lifecycle activities.

17 hours, 23 minutes ago

Sr Lead Network Development Engineer - 11838

Coupa Software 1K-5K Internet Software & Services

Coupa is hiring a Senior Lead Network Development Engineer to scale and operate its global public-cloud networking infrastructure for its high-growth SaaS platform.

Ansible AWS Azure Chef DNS Fortinet Go Java Kubernetes Linux Python Ruby TCP/IP Terraform TLS
18 hours, 8 minutes ago

Pillar Lead: Network Engineer (R-00209)

True Zero Technologies 11-50 Internet Software & Services

True Zero Technologies is seeking a Network Engineer to lead the Networks and Environment pillar of the VA Zero Trust acceleration effort by developing and validating secure network architecture patterns across enterprise, cloud, hybrid, legacy, and mission-critical environments.

Network Security
1 day, 17 hours ago

Core Network Lead

Airalo 51-250 Airlines

Airalo is seeking a remote Technical Team Lead to build and integrate Full MVNO systems across global markets, leading end-to-end architecture, testing, commissioning, and operational handover.

Agile Ansible AWS Azure CI/CD Cisco Docker GCP Kubernetes Terraform
1 day, 17 hours ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers