Network Security Engineer

Build More Than Just a Career. Build Your Future. At Vailexa, we’re not just hiring — we’re building thinkers, creators, and future leaders. We believe in giving people the space to grow, the freedom to think, and the opportunity to create real impact from day one. If you’re someone who wants to learn fast, take ownership, and grow beyond limits, you’ll feel right at home here. Key Responsibilities: Firewall operations — Configure, manage, and tune next-generation firewall policies, NAT rules, VPNs, and security profiles across Palo Alto and Cisco platforms. Web proxy & secure access — Administer secure web gateway/proxy services (e.g., Zscaler), including URL filtering, SSL inspection, traffic forwarding, and policy enforcement for users and locations. DDoS protection — Deploy, monitor, and tune DDoS mitigation controls; respond to volumetric and application-layer attacks and refine protection thresholds. Network detection & response — Operate network detection and response (NDR) tooling to baseline traffic, investigate anomalies, and support threat hunting and incident response. Incident support — Investigate security events and alerts, perform root-cause analysis, and coordinate remediation with SOC and network teams. Documentation & change control — Maintain accurate configuration standards, runbooks, network diagrams, and change records; participate in the change-management process. Hardening & lifecycle — Support firmware/software upgrades, rule-based cleanup, and recurring policy and access reviews to reduce risk and technical debt. Collaboration — Collaborate with internal stakeholders and vendors to troubleshoot connectivity and security issues and to onboard new sites, services, and controls. Required Qualifications: Approximately 6+ years of hands-on experience in network security or network engineering with a security focus. Demonstrated hands-on experience administering next-generation firewalls, with practical expertise in Palo Alto and/or Cisco (ASA, Firepower) platforms. Working experience with secure web proxy / SWG solutions — Zscaler (ZIA/ZPA) strongly preferred — including SSL inspection and policy configuration. Practical knowledge of DDoS mitigation concepts and tooling, and experience responding to attack scenarios. Experience with NDR or network traffic analysis platforms for detection, investigation, and threat hunting. Solid grasp of TCP/IP, routing and switching, VPNs (IPsec/SSL), DNS, and network segmentation. Familiarity with SIEM/log analysis and a structured approach to incident investigation. Strong troubleshooting skills and the ability to work independently in a fast-paced, delivery-oriented contract environment. Clear written and verbal communication, with disciplined documentation habits. Preferred Qualifications: Industry certifications such as PCNSE (Palo Alto), CCNP Security, Zscaler Certified, CISSP, or Security+. Exposure to cloud network security (AWS, Azure, or GCP) and SASE/Zero Trust architectures. Experience with automation/scripting (Python, Ansible, or REST APIs) for policy and configuration management. Familiarity with load balancers, IDS/IPS, web application firewalls (WAF), and email security gateways. Experience operating in regulated or enterprise-scale environments with formal change control. Technology Environment: Candidates should be comfortable working across the following technology areas. Direct experience with the named platforms is preferred; equivalent experience with comparable enterprise tools will be considered. Firewalls — Palo Alto Networks NGFW; Cisco ASA / Firepower. Proxy / SWG — Zscaler (ZIA / ZPA) and comparable secure web gateways. DDoS — Cloud-based and on-premises DDoS mitigation services. NDR — Network detection and response and traffic analysis platforms. Supporting — SIEM, IDS/IPS, VPN concentrators, and segmentation controls. Ready to take the next step? If you’re excited about this role and ready to grow with a team that values ambition, ideas, and impact — we’d love to hear from you. Apply now and start building your journey with Vailexa.