Lead Network Security Engineer/Architect

Lead Network Security Engineer (Architect Level)

Location: Richmond, VA (Hybrid – Onsite 1 day/week)

Duration: 6 Months Contract-to-Hire

Rate: 70-75/HR on C2C

Position Overview

We are seeking a highly experienced Network Security Engineer with 15+ years of enterprise networking experience to lead the design, implementation, and support of secure, scalable network infrastructures across on-premises and cloud environments. This role requires deep expertise in network architecture, routing, security, SD-WAN, and cloud connectivity, with a strong focus on Palo Alto firewalls and Cisco SD-WAN technologies.

Required Skills

• Palo Alto Firewall Administration & Security (Mandatory)
• Cisco SD-WAN (Viptela)
• Enterprise Networking & Network Architecture
• BGP Routing & Advanced Network Design
• Strong Communication & Stakeholder Management Skills

Key Responsibilities

Network Architecture & Design

• Design and implement enterprise and hybrid cloud networking solutions.
• Develop scalable, secure, and highly available network architectures.
• Lead network modernization and consolidation initiatives.
• Define standards for routing, segmentation, resiliency, and security.

Routing & Core Networking

• Design, implement, and troubleshoot complex routing environments.
• Manage BGP, OSPF, and EIGRP routing protocols.
• Optimize routing policies, failover mechanisms, and traffic engineering.
• Resolve complex network performance issues including latency, packet loss, and routing anomalies.

Security & Firewall Management

• Administer and optimize Palo Alto Networks firewalls and Panorama.
• Design and enforce security policies, NAT configurations, and network segmentation.
• Collaborate with cybersecurity teams on compliance, threat mitigation, and security best practices.

SD-WAN & Branch Connectivity

• Design, deploy, and support Cisco SD-WAN (Viptela) environments.
• Manage branch connectivity and network performance across distributed locations.
• Ensure consistent security, visibility, and policy enforcement across all sites.

Cloud Networking

• Design and support networking solutions within Azure and hybrid cloud environments.
• Implement and manage:
• Virtual Networks (VNets/VPCs)
• ExpressRoute and Direct Connect connectivity
• Routing, firewall, and network security controls
• Integrate on-premises infrastructure with cloud environments.

Carrier & Vendor Management

• Serve as the primary technical contact for telecom providers and ISPs.
• Lead circuit deployments, troubleshooting, and escalation management.
• Support DIA, MPLS, Broadband, and LTE/5G connectivity solutions.

Operations & Leadership

• Act as a Tier-3 escalation point for critical network incidents.
• Mentor junior engineers and provide technical leadership.
• Maintain network documentation, standards, and operational procedures.
• Participate in on-call support as required.

Required Qualifications

• 12+ years of experience in Enterprise Network Engineering.
• Expert-level knowledge of BGP routing and network architecture.
• Hands-on experience with:
• Palo Alto Networks Firewalls
• Cisco SD-WAN (Viptela)
• Enterprise Routing & Switching
• Strong experience designing and supporting hybrid cloud networking solutions.
• Proven ability to troubleshoot complex network and security issues.
• Experience working directly with telecom carriers and service providers.

Preferred Qualifications

• Cisco Meraki (MX, MS, MR) experience.
• Multi-site or multi-environment network consolidation experience.
• Relevant certifications such as:
• CCNP or CCIE
• PCNSE
• Azure Network Engineer Associate (AZ-700)
• AWS Advanced Networking Specialty

Short Skills Summary:

1. Palo Alto Firewall Security – Must Have
2. Cisco SD-WAN (Viptela) – Must Have
3. Strong Enterprise Networking (BGP, Routing, Design) – Must Have
4. Cloud Networking (Azure Preferred) – Nice to Have
5. Excellent Communication Skills – Must Have

Top 3 non-negotiables: Palo Alto, Cisco SD-WAN, and Enterprise Networking Architecture .