Job ID: 1710220
OA Reference: 3411- 301177
We are seeking a highly skilled Senior Network Security Engineer with extensive experience in designing and engineering proxy-based Edge Secure Web Gateway (SWG) solutions. In this role, you will focus on developing robust network security products, including perimeter security and connectivity for on-premises, internet, and public cloud environments. Your expertise will be crucial in enhancing our Secure Service Edge (SSE) and SASE solutions, and you will play a key role in developing new features and maintaining high standards for our products.
AllSTEM is committed to guiding your career progression and to transforming the way hiring happens. We are big believers in that people matter and a job search should be effortless and enjoyable. If this sounds like the process, you are looking for then.
APPLY TODAY!
Key Responsibilities:
Research, design, and engineer network security products with a focus on proxy-based Edge SWG solutions.
Develop and manage perimeter network security and connectivity, encompassing on-premises, internet, and public cloud environments.
Utilize hands-on experience with Palo Alto SSE/SASE solutions and cloud security architectures.
Design solutions, introduce new feature requirements, and address client needs effectively.
Develop and maintain scripts for device pave/repave and automate day-to-day tasks.
Establish and uphold engineering standards and create artifacts for certified products.
Oversee hardware and software certifications.
Act as the escalation point for Network Operations and Service Delivery teams.
Collaborate cross-functionally with stakeholders to ensure cohesive project execution.
Required Qualifications:
5+ years of experience in network security design, engineering, and implementation within a large enterprise environment.
5+ years of experience in designing and engineering proxy-based Edge SWG, Secure Service Edge (SSE), and SASE solutions.
Proven experience with other SWG and SSE vendors, including Palo Alto, Zscaler, and Netskope.
Proficiency in software development and scripting languages such as Python, Ansible, Terraform, and JSON.
Experience with microservices, CI/CD pipelines (e.g., Jenkins), and APIs.
BS/BA degree or equivalent practical experience.
Preferred Qualifications:
In-depth experience with SASE, SSE, and SWG solutions.
Familiarity with internet and cloud DMZ architecture and load balancing techniques.
Experience with employee remote access solutions.
Knowledge of stateful and application layer firewall technologies is a plus.
Experience working with Agile methodologies such as Kanban and Scrum
EEO/AA Employer/Vet/Disabled.
The Know Your Rights poster is available here:
https://www.eeoc.gov/sites/default/files/2023-06/22-088_EEOC_KnowYourRights6.12.pdf
The pay transparency policy is available here:
https://www.dol.gov/sites/dolgov/files/ofccp/pdf/pay-transp_%20English_formattedESQA508c.pdf
For temporary assignments lasting 13 weeks or longer, the Company is pleased to offer major medical, dental, vision, 401k and any statutory sick pay where required.
We are committed to working with and providing reasonable accommodations to individuals with disabilities. If you need a reasonable accommodation for any part of the employment process, please contact your staffing representative who will reach out to our HR team.
AllSTEM Connections participates in the E-Verify program in certain locations as required by law. Learn more about the E-Verify program.
https://e-verify.uscis.gov/web/media/resourcesContents/E-Verify_Participation_Poster_ES.pdf
We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. Pursuant to applicable state and municipal Fair Chance Laws and Ordinances, we will consider for employment-qualified applicants with arrest and conviction records. For Los Angeles, CA applicants: Qualified applications with arrest or conviction records will be considered for employment in accordance with the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act.
SASE, SSE, and SWG solutions, cloud DMZ architecture,