Senior Network Security Engineer

Senior Network Security Engineer


Location: Chicago, IL OR Salisbury, NC

Hybrid (2 Days/Week Onsite Required)

Duration: Long-Term Contract (Pending Fieldglass Release)

Quick Capture Requirements


Must Have

• 7+ years Enterprise Network Security Engineering experience
• 3-5+ years hands-on Tufin SecureTrack and SecureChange experience
• Firewall Policy Governance and Rule Lifecycle Management
• Palo Alto, Check Point, Fortinet, Cisco Firepower, or similar enterprise firewalls
• ServiceNow integration experience
• Security Change Management and Workflow Automation
• Network Security Architecture
• TCP/IP, Routing, Switching, DNS, DHCP expertise
• Cloud Security (AWS, Azure, and/or GCP)
• Network Segmentation and Zero Trust Architecture
• Scripting and Automation (Python, PowerShell, Ansible, Terraform, REST APIs)
• Vulnerability Management and Risk Analysis
• Incident Response experience

Strong Pluses

• Tufin Certified Administrator (TCA)
• CISSP
• PCNSE
• CCNP Security
• Fortinet NSE Certifications
• GIAC Certifications
• Large Enterprise Firewall Environments
• Security Operations Automation Programs
• Retail or Highly Regulated Industries
• Geographically Distributed Enterprise Environments
• Infrastructure-as-Code Security Automation

Core Competencies

• Tufin Administration
• Firewall Policy Management
• Security Automation
• Network Security Architecture
• Incident Response
• Vulnerability Management
• Cloud Security
• Risk Assessment
• Zero Trust
• Process Improvement
• Technical Leadership
• Cross-Functional Collaboration

Ideal Candidate Profile


Senior Network Security Engineer with deep expertise administering and optimizing Tufin SecureTrack and SecureChange in large enterprise environments. Candidate should possess strong firewall governance experience, security automation expertise, cloud security knowledge, and the ability to streamline change management processes through integration and workflow automation. Must be capable of serving as a technical leader while partnering across Infrastructure, Security, Cloud, Governance, and Operations teams to reduce risk and improve enterprise security posture.


Preferred Certifications

• CISSP
• CCNP Security
• PCNSE
• Tufin Certified Administrator (TCA)
• Fortinet NSE
• GIAC Security Certifications
• CompTIA Security+

Screening Focus Questions

• How many years of hands-on Tufin SecureTrack and SecureChange administration experience?
• Which firewall platforms have they managed (Palo Alto, Check Point, Fortinet, Cisco Firepower)?
• Have they implemented firewall governance and policy recertification programs?
• What ServiceNow and Tufin integrations have they built or supported?
• What automation tools have they used (Python, PowerShell, Ansible, Terraform)?
• Have they supported Zero Trust or Network Segmentation initiatives?
• What size enterprise environment did they support (number of firewalls/policies/users)?
• Do they have cloud security experience across AWS, Azure, or GCP?
• Are they local to Chicago or Salisbury and willing to work onsite 2 days/week?

closure while partnering closely with Manufacturing, Engineering, Validation, Regulatory Affairs, and Quality teams.