Network Engineer

We have an outstanding Contract position for a Network Engineer to join a leading Company located in the Huntsville, AL surrounding area.

**US Citizenship is required.**

**Candidates must possess an Active Secret Security Clearance.**

We are seeking a Prisma Access Network Engineer to design, implement, and operate Palo Alto Prisma Access and GlobalProtect connectivity, as well as Prisma Browser for secure remote user and branch connectivity. This role blends network engineering with platform operations, focusing on scalable architecture, strong security controls, and high availability. The engineer will partner with identity, endpoint, cloud, and network teams to deliver secure access outcomes.

Responsibilities:

• Architect, deploy, and enhance Prisma Access for Remote Users and Remote Networks, including onboarding new locations and user population
• Design connectivity and routing: IPsec, BGP (Border Gateway Protocol), SD-WAN integrations (as applicable), and traffic steering to on-prem and cloud workloads
• Define and implement security controls: security policies, URL filtering, threat prevention, DNS security, and TLS/SSL decryption (where approved/required)
• Integrate identity and device posture: SAML/SSO, MFA, certificate-based auth, and GlobalProtect configuration standards
• Build and maintain operational readiness: monitoring, logging, alerting, dashboards, runbooks, and automation for repeatable changes
• Lead change delivery: technical design, implementation plans, testing/validation, rollback strategy, and stakeholder communications
• Drive continuous improvement via root cause analysis, performance tuning, and lifecycle management (upgrades, configuration hygiene, standards)
• Serve as an escalation point for complex incidents and support an on-call rotation as required

Basic Hiring Criteria:

• Minimum 4 years in network/security engineering with hands-on delivery responsibility in enterprise environments
• Demonstrated experience implementing/supporting Prisma Access and/or GlobalProtect, plus Palo Alto platform experience (e.g., Panorama, PA-Series
• Strong fundamentals in TCP/IP, DNS, PKI/certificates, VPN/IPsec, and routing (BGP)
• Experience with enterprise change management and documentation (e.g., ServiceNow; design docs, MOPs/runbooks)
• Strong communication skills, translating technical decisions into risk, impact, and options for stakeholders

Desired Qualifications:

• Palo Alto certifications: PCNSA (preferred) and PCNSE (highly preferred)
• Identity integrations: Azure Active Directory (Azure AD) / Okta, conditional access, device compliance/posture
• Logging/monitoring: Splunk (or similar), Prisma Access logging, packet capture analysis, and performance troubleshooting
• Experience with cloud networking patterns (AWS/Azure) and hybrid connectivity to data centers