Senior Technical Consultant - Network Security

4 months, 2 weeks ago
Full-time
Senior
DevOps and Infrastructure
AHEAD

AHEAD

AHEAD accelerates the impact of technology on clients by engineering customized data, developer, and infrastructure platforms that improve IT operations. By weaving together cloud infrastructure, intelligent operations, and modern applications, we help...

IT Services
1K-5K
$43M raised

Description

  • Design and deploy Cisco Secure Firewall and Palo Alto Networks next-generation firewall solutions in enterprise production environments.
  • Lead firewall migration projects, including ASA-to-FTD conversions and cross-vendor migrations with policy translation and cutover planning.
  • Design network segmentation architectures using zones, virtual routers, VRFs, and policy-based routing to enforce least-privilege traffic controls.
  • Deploy cloud-native firewall solutions for AWS, Azure, and containerized workloads.
  • Implement firewall high availability, centralized logging, SIEM integration, NetFlow/IPFIX, and compliance-focused rule optimization.
  • Automate firewall provisioning, backups, and policy deployment using Terraform, Ansible, and vendor APIs.
  • Design and implement Cisco ISE for 802.1X, MAB, RADIUS/TACACS+, authorization policies, profiling, posture, and guest/BYOD workflows.
  • Lead SASE and Zero Trust deployments across remote user, branch, cloud, and data center use cases using platforms such as Zscaler, Prisma Access, Cisco Secure Access, or Netskope.
  • Create HLDs, LLDs, diagrams, runbooks, cutover plans, and as-built documentation for client engagements.
  • Lead discovery sessions, architecture reviews, knowledge transfer sessions, and provide technical escalation support and mentorship.

Requirements

  • 7+ years of experience in network security, infrastructure security, or security engineering, including at least 3 years in a consulting, professional services, or client-facing delivery role.
  • Hands-on experience designing and deploying Cisco Secure Firewall (FTD/FMC) and Palo Alto Networks NGFW (PAN-OS/Panorama).
  • Production experience deploying Cisco ISE for 802.1X authentication, TACACS+ device administration, and network access policy enforcement.
  • Production experience with at least one SASE platform, such as Zscaler ZIA/ZPA, Palo Alto Prisma Access, Cisco Secure Access, or Netskope.
  • Strong understanding of routing protocols, VPN technologies, network segmentation, and Zero Trust architecture principles.
  • Experience with cloud platforms including AWS VPC, Azure VNet, or GCP VPC, plus hybrid connectivity architectures.
  • Experience integrating with identity and access management platforms such as Okta, Microsoft Entra ID, SAML 2.0, and SCIM.
  • Experience integrating security platforms with SIEM tools such as Splunk or Microsoft Sentinel, syslog, and automation tools like Terraform and Ansible.
  • CCIE Security or CCNP Security certification preferred.
  • Palo Alto PCNSE or PCNSC, Zscaler ZCCA/ZCCP, Cisco Secure Access, or Netskope certifications preferred.
  • CISSP, CompTIA Security+, or an equivalent industry security certification preferred.
  • Firewall migration experience, including ASA to FTD conversions and cross-vendor migrations, preferred.

Benefits

  • $170,000 - $200,000 a year OTE, including base salary and any applicable target bonus.
  • Medical, dental, and vision insurance.
  • 401(k) plan.
  • Paid company holidays.
  • Paid time off.
  • Paid parental and caregiver leave.
  • Sponsorship for certifications and credentials for continued learning.
  • Access to a multi-million-dollar lab and cross-department training and development opportunities.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Senior Reverse Engineer - Remote

Zyte 251-1K Professional Services

Zyte is hiring a Reverse Engineer to develop scalable tooling, automation, and AI-assisted pipelines that help engineers analyze evolving antibot and browser-fingerprinting systems and ship solutions faster.

Burp Suite C C++ JavaScript LLM Machine Learning Node.js Python Rust Wireshark
4 hours, 19 minutes ago

Manager, Third-Party Risk Management (TPRM)

DoorDash 10K-50K Air Freight & Logistics

DoorDash is hiring a US-based Third-Party Risk Management Manager to lead its global vendor security risk program, manage TPRM teams, and build AI-enabled workflows across DoorDash, Wolt, and Deliveroo.

CI/CD Encryption OAuth OpenID Connect Penetration Testing Python SAML Secrets Management SQL
1 day, 3 hours ago

Network & Security Support Engineer

Kerv 51-250 IT Services

Kerv Digital is seeking a remote Network & Security Support Engineer to support Kerv Connected Cloud’s managed network and security environments, delivering planned out-of-hours work and resolving critical customer incidents during UK night shifts.

DevSecOps DHCP DNS Fortinet Load Balancing
2 days, 4 hours ago

Network Engineer – Field Support

New Era Technology US 1K-5K IT Services

New Era Technology is seeking a remote Network Engineer to manage customer WAN and edge networks, deploy connectivity solutions, and provide engineering support for field installations and troubleshooting.

Juniper Linux Network Security TCP/IP
2 days, 4 hours ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers