Cybersecurity Engineer

We have an outstanding Contract position for a Cybersecurity Engineer to join a leading Company located in the Huntsville, AL surrounding area.

**US Citizenship is required.**

**Candidates must possess an Active Secret Security Clearance.**

The Cybersecurity Engineer designs, implements, and operates Palo Alto Networks Prisma Access, GlobalProtect, and Prisma Browser capabilities to enable secure remote user and branch connectivity. This role partners closely with a Network Engineer to ensure platform operations are resilient, scalable, and aligned with applicable cybersecurity policies and technical guidance, with emphasis on strong security controls, high availability, and operational excellence. The engineer collaborates with identity, endpoint, cloud, and network teams to deliver secure access outcomes across distributed environments.

Responsibilities:

• Design scalable architectures for Prisma Access, GlobalProtect, and Prisma Browser to support remote users and branch connectivity while meeting security and availability requirements.
• Define and implement security controls (e.g., segmentation, policy frameworks, threat prevention) consistentwith customer cyberpolicy and enterprise security standards.
• Develop implementation patterns for onboarding tenants/sites/users, including standard configurations, guardrails, and repeatable deployment approaches.
• Engineer GlobalProtect configurations for secure remote access, including authentication flows, policy enforcement, and user experience considerations.
• Deploy and operationalize Prisma Browser to provide secure browsing and controlled access to web and SaaS resources on mobile devices.
• Integrate with customer enterprise identity, endpoint, cloud, and network platforms to ensure cohesive, secure access outcomes.
• Operate the environment to maintain compliance with customer cybersecurity policies, technical implementation guidance, and audit expectations (e.g., configuration baselines, change control, evidence collection).
• Configure products to monitor security posture and service health; respond to alerts/incidents, perform root-cause analysis, and drive remediation to closure.
• Establish and maintain secure configuration standards, hardening guidance, and operational runbooks for the platform.
• Design for high availability and continuity of operations, including redundancy strategies, failure mode considerations, and recovery procedures.
• Partner with the Network Engineer to validate routing resiliency, performance, and availability across remote/branch connectivity paths.
• Lead or support testing activities (functional, security, performance, and failover) and coordinate production releases with stakeholders.
• Serve as a cybersecurity engineering point of contact for secure access services; coordinate with identity, endpoint, cloud, and network teams to resolve cross-domain dependencies.
• Support documentation, knowledge transfer, and operational readiness activities.

Basic Hiring Criteria:

• Hands-on engineering experience designing and operating secure remote access or secure access service edge (SASE) capabilities in enterprise environments.
• Demonstrated experience with Palo Alto Prisma Access and GlobalProtect configuration, policy design, and operations.
• Experience implementing security controls for remote user and branch connectivity (e.g., policy enforcement, segmentation approaches, threat prevention controls, logging/monitoring).
• Practical knowledge of enterprise networking fundamentals (routing, DNS, certificates/PKI concepts, authentication flows) and ability to work closely with network engineering peers.
• Experience working in regulated or mission environments requiring adherence to formal cybersecurity policy and configuration management discipline.
• Strong troubleshooting skills across identity, endpoint, network, and cloud integration points.

Desired Qualifications:

• Experience deploying/operating Prisma Browser and integrating secure browsing controls into enterprise access patterns.
• Familiarity with U.S. Department of Defense (DoD) / U.S. Army cybersecurity frameworks and operational constraints (e.g., policy-driven configuration baselines, audit evidence practices).
• Experience with identity integrations and conditional access concepts, endpoint posture signals, and cloud security integrations relevant to secure access services.
• Experience creating runbooks, standard operating procedures (SOPs), and onboarding playbooks for scalable operations.
• Security operations experience (incident response support, log analysis, continuous monitoring) in a distributed environment.