📋
Description
- The Network Security Engineer (Level 7) is a hands-on technical specialist responsible for the engineering, configuration, maintenance, and operational support of Solidigm’s global network security controls. This role serves as a Palo Alto Networks subject matter expert, supporting the configuration and operation of the enterprise firewall stack across data centers, labs, cloud environments, and remote access platforms. Primary responsibilities include global firewall operations, lab network segmentation, on-prem and cloud proxies, and supporting VPN security operations. This is an execution-focused, engineering-driven role with no people-management, MSP oversight, roadmap ownership, or governance leadership responsibilities.
- Firewall Engineering & Operations (Primary Responsibility): Configure, maintain, and troubleshoot Palo Alto NGFWs, Panorama policies, security profiles, and routing. Perform firewall rule deployments, address/object updates, and security policy tuning. Maintain Cortex and Strata integrations aligned with the enterprise ELA framework. Monitor firewall system health, sessions, licensing, and platform performance. Perform packet captures, traffic analysis, and security event troubleshooting.
- Lab Network Segmentation (Secondary Responsibility): Configure segmentation policies and firewall rules for lab VLANs, research environments, and isolated network zones. Support secure connectivity between engineering labs, data centers, and development platforms. Validate segmentation controls through testing and routine verification.
- Proxy & Secure Web Gateway Operations: Support the engineering and administration of on-premise proxy appliances and cloud-based secure web gateways. Perform policy changes, URL filtering updates, and certificate handling. Troubleshoot user proxy access issues and web security events.
- VPN & Remote Access Support: Support day-to-day operations of Palo Alto Global Protect and remote access security controls. Troubleshoot authentication, tunnel stability, routing, and posture-based access issues. Ensure proper integration between VPN, RADIUS, and AD authentication services.
- Operational Support & Procedures: Execute change requests for firewall, segmentation, VPN, and proxy environments. Respond to L2/L3 tickets related to global network security platforms. Maintain technical documentation for configurations, SOPs, and runbooks. Support incident response activities related to firewall or remote access infrastructure.
🎯
Requirements
- Bachelor’s degree in IT, Engineering, Cybersecurity, or equivalent experience.
- 5–7 years of experience in network security engineering.
- Strong hands-on experience with Palo Alto firewalls, Panorama, security policies, objects, NAT, and routing.
- Experience with Cortex, Strata, and associated Palo Alto toolsets.
- Familiarity with Global Protect VPN, secure web gateways and proxies, network segmentation, DNS/DHCP fundamentals (preferably Infoblox).
- Solid understanding of TCP/IP, BGP/OSPF, SSL/TLS, PKI, SAML/SSO.
- Preferred certifications: Palo Alto PCNSE, CCNP Security, Cloud networking cert (Azure/AWS) a plus.
🏖️
Benefits
- Competitive salary within the range of USD 91,500 - USD 157,300.
- Hybrid work position based out of Rancho Cordova CA, San Jose CA, or Longmont CO.
- Opportunity to work in a global, innovative company in the memory industry.
- Engaging workplace fostering diversity, equity, and inclusion.
- Support for professional growth and development.