Security Engineer

Mid-Level Network Security Engineer

Orange Cyber defense is seeking a highly motivated, customer-oriented Mid-Level Network Security Engineer to join our team. The engineer will act as a subject matter expert for the customer's firewall/VPN/loadbalancer and other network related technologies. The engineer will maintain firewall operations and document the current environment. The engineer will also incorporate change management into all processes and procedures.

About you

• Troubleshoot and resolve critical security incidents related to firewall platforms (Fortinet FortiGate, Palo Alto Networks NGFW, Check Point, Cisco ASA), SSL/IPSec VPNs, DNS/IPAM systems (Infoblox), and secure remote access (Ivanti Connect Secure, Zscaler ZIA/ZPA).
• Perform deep-dive diagnostics for routing issues involving Border Gateway Protocol (BGP), policy-based routing, and Software-Defined WAN (SD-WAN) overlays.
• Coordinate with Engineering, Planning, Customer Configuration, and VPN (Virtual Private Network) teams to address network design, capacity, or service-related problems.
• Engage external vendors (Fortinet, Palo Alto Networks, Check Point) to resolve hardware failures and software defects.
• Support internal stakeholders in preparing RCA (Root Cause Analysis), TIR (Technical Incident Report), and SIP (Service Improvement Plan) documentation for complex issues.
• Perform Web Application Firewall (WAF) tuning and policy enforcement using FortiWeb, addressing threats like SQL injection and cross-site scripting in compliance with OWASP Top 10 standards.
• Configure and centrally manage firewalls through FortiManager, Panorama, and Check Point SmartConsole, ensuring consistency and audit-readiness across customer environments.
• Implement and validate security features and upgrades, including:
• FortiAnalyzer for log correlation and event analysis.
• Palo Alto Panorama templates for large-scale policy deployment.
• GlobalProtect for secure user access via SAML/LDAP integrations.
• Support service introduction projects by validating new hardware/software features, documenting operational acceptance criteria, and performing pilot deployments.
• Monitor firewall and routing performance using vendor tools and third-party telemetry; develop improvement plans in collaboration with Engineering teams.
• Assist in the execution of critical changes, such as SSL decryption policy deployment, advanced NAT configurations, SD-WAN path monitoring, and high availability failover validation.

REQUIREMENTS: Bachelor's degree in computer science, Information Systems, or Engineering followed by 5 years of experience in networking and/or security support roles. Experience must include:

• 5 years of experience with IP, MPLS (Multiprotocol Label Switching) and Core enterprise networks.
• 5 years of experience troubleshooting Layer 3 routing protocols (OSPF, BGP), packet capture analysis, and VPN tunnel diagnostics.
• 3 years of hands-on experience with FortiGate, FortiWeb, FortiManager, FortiAnalyzer, Panorama, Palo Alto NGFW, Check Point, Cisco ASA, Infoblox, Zscaler, and Ivanti SSL VPN platforms.
• 3 years of experience securing AWS, FortiGate, firewalls, configuring VPCs, Security Groups, NACLs, and IAM (Identity and Access Management) policies.
• 3 years of experience with SIEM (Security Information and Event Management) integration, syslog analysis, and log forwarding.

TELEWORK: Hybrid position; 2 days per week remote.

LOCATION: 100 Galleria Parkway, Suite 300, Atlanta, GA, 30339

You bring a can-do attitude, tackle challenges head-on and challenge the status quo with new and innovative ideas.

What we offer

• Global Opportunities: Work in multi-national teams with opportunity to collaborate with colleagues and customers from all over the world. • Flexible Work Environment: Flexible working hours and possibility to combine work from office and home (hybrid ways of working). • Professional Development: Training programs and upskilling/re-skilling opportunities. • Career Growth: Internal growth and mobility opportunities within Orange. • Caring and Daring Culture: Health and well-being programs and benefits, diversity & inclusion initiatives, CSR and employee connect events. • Reward Programs: Employee Referral Program, Change Maker Awards.

Only your skills matter Regardless of your age, gender identity, race, ethnic origin, religion/belief, sexual orientation, marital status, neurotype, disability, veteran status or appearance, we encourage diversity within our teams because it is a strength for the collective and a vector of innovation. Orange Group is a disabled-friendly company and equal opportunity employer: don't hesitate to tell us about your specific needs.

Chez Orange, seules vos compétences comptent.

Quel que soit votre âge, genre, origine, parcours, religion, orientation sexuelle, handicap, neuroatypie, ou apparence, nous encourageons activement la diversité au sein de nos équipes, car elle constitue une force pour le collectif et un vecteur d'innovation. Orange est une entreprise handi-accueillante : n'hésitez pas à nous faire part de vos besoins spécifiques.