Network Security Engineer

Security & Network Engineer

Location: Chicago, IL (Hybrid)

Job Type: Full-Time

**Authorized to work in the United States without sponsorship**

Must have Palo Alto and CrowdStrike experience

About the Role

We’re looking for a hands-on Security & Network Engineer to help manage and improve our security infrastructure, network environment, and endpoint protection. This role will focus on securing enterprise systems, strengthening network defenses, supporting incident response, and helping maintain compliance with industry security standards.

What You’ll Do

• Security Infrastructure: Manage and optimize Palo Alto Networks next-generation firewalls, including security policies, NAT, threat prevention, URL filtering, WildFire, and decryption policies. Support Panorama, GlobalProtect, and Prisma Access administration and deployment.
• Endpoint & Threat Protection: Own day-to-day administration of CrowdStrike Falcon, including endpoint deployment and health, prevention policies, alert investigation, and coordination with managed detection and response teams.
• Security Monitoring: Support security monitoring and detection capabilities, including Falcon NG-SIEM (LogScale), identity threat protection, and cloud security tools. Help evaluate and adopt emerging security capabilities and AI-driven tools.
• Network Engineering: Maintain and troubleshoot LAN/WAN infrastructure, VPNs, routing and switching, DNS, and network segmentation. Contribute to infrastructure resilience, disaster recovery, and network improvement initiatives.
• Incident Response: Help lead technical investigations during security incidents, participate in tabletop exercises, and implement improvements based on findings.
• Compliance & Risk: Support security assessments and audits by maintaining technical evidence, documenting controls, and contributing to ongoing risk assessments and security reviews.
• Identity & Access Management: Support MFA, SSO, Microsoft Entra ID, SAML, and conditional access policies. Assist with identity security improvements and platform evaluations.

What We’re Looking For

• 5+ years of experience in network engineering, security engineering, or a related infrastructure security role.
• Strong hands-on experience administering Palo Alto Networks firewalls, including security policies, Panorama, and GlobalProtect. Prisma Access experience is a plus.
• Practical experience with CrowdStrike Falcon, including policy management, endpoint protection, and alert triage.
• Experience with at least one of the following: Falcon NG-SIEM/LogScale, Identity Protection, or Cloud Security.
• Solid networking fundamentals, including TCP/IP, routing and switching, VPN technologies (IPsec/SSL), DNS, and network segmentation.
• Experience supporting security compliance frameworks, ideally PCI DSS. Familiarity with SOC 2 or NIST CSF is also valuable.
• Experience administering Microsoft Entra ID (Azure AD), SAML-based SSO, and MFA.
• Strong troubleshooting, documentation, and communication skills, including the ability to maintain runbooks, network diagrams, and security control documentation.