Senior Network Security Engineer

Senior Network Security Engineer

Type: Staff Augmentation (W2 employee of Innovation Consulting)

Location: San Jose, CA (Onsite - Monday through Friday, 8:30 AM-5:00 PM PST)

Estimated Duration: Approximately 6 months (August 2026 - February 2027)

Salary: $225K - $270K per year, DOE

About the Role

Innovation Consulting LLC is partnered with California's largest investor-owned water utility to recruit a Senior Network Security Engineer for a six-month onsite engagement in San Jose, CA, running from August 2026 through February 2027. This network security engineer role supports the design, configuration, and implementation of Zero Trust networking, starting with VPN access using Palo Alto Networks technologies.

The position advances the organization's Zero Trust Architecture (ZTA) initiatives, strengthens network security controls across on-premises and cloud environments, improves network visibility and access management, and supports infrastructure modernization. The ideal candidate is a hands-on, security-focused network security engineer comfortable working closely with cybersecurity and infrastructure teams in a regulated, audit-conscious environment. As a W2 employee of Innovation Consulting, you will be placed on assignment with our client for the duration of the contract.

Key Responsibilities

Zero Trust & VPN Engineering
• Design and configure Palo Alto Networks VPN solutions to support Zero Trust principles
• Implement least-privilege VPN access so users can reach only the systems required for their role
• Define and enforce user- and group-based access policies rather than broad network access
• Partner with cybersecurity leadership to align VPN controls with Zero Trust strategy

Network Security & Visibility
• Support network segmentation and secure access to sensitive systems, including admin and infrastructure services
• Ensure configurations are fully auditable and defensible for future compliance reviews
• Apply cloud networking security, segmentation, and access controls

Forensics & Access Context
• Use AlienVault and Palo Alto to analyze VPN traffic and user activity and identify systems and applications accessed by approximately 100 VPN users for this engagement
• Support forensic investigations related to VPN access
• Build a VPN access context from traffic analysis and assign users to the correct VPN groups as part of the Zero Trust initiative

Collaboration & Communication
• Work closely with the IT Architecture and Cybersecurity teams
• Clearly communicate technical findings, access models, and design decisions
• Participate in design reviews, scoping discussions, and implementation planning

Work Model and On-Site Requirements
• Fully onsite in San Jose, CA - this position is not eligible for remote work
• Standard business hours: 8:30 AM - 5:00 PM PST, Monday through Friday
• Relocation required if not within commutable distance of San Jose, CA

Qualifications

Required
• U.S. Citizenship required
• Ability to work onsite in San Jose, CA
• Senior-level experience in network security engineering
• Strong hands-on experience with Palo Alto Networks firewalls and VPN
• Demonstrated understanding of Zero Trust networking concepts
• Experience implementing identity-based and role-based access controls
• Hands-on experience using SIEM (AlienVault preferred) for logging, analysis, and forensic investigations
• Strong troubleshooting and analytical skills, with the ability to communicate effectively with highly technical teams

Preferred
• Experience in regulated, audit-conscious environments (e.g., utilities / critical infrastructure)
• Palo Alto Networks Certified Network Security Administrator (PCNSA) or Palo Alto Networks Certified Network Security Engineer (PCNSE) certification
• Familiarity with SASE and cloud-delivered Zero Trust access

Compensation & Employment

Employment Type: Staff Augmentation. As a W2 employee of Innovation Consulting, you will be placed on assignment with our client.

Salary: $225K - $270K per year, DOE.

Contract Duration: Approximately 6 months (August 2026 - February 2027).

Benefits: Comprehensive benefits package including medical, dental, and vision, 401(k) with safe-harbor matching, HRA, and PTO. No waiting period - benefits are available immediately and accrual items begin accruing immediately.

Innovation Consulting LLC is an equal opportunity employer and recruiter. We review candidates without regard to race, color, religion, sex, national origin, age, disability, veteran status, sexual orientation, gender identity, or any other protected characteristic.