Mid/Snr Network Security Engineer - 6mos contract - view to extend

The Role

Results-driven Network Security Engineer specializing in modernizing enterprise security architectures through large-scale cloud proxy and SASE migrations. Recognized for bridging legacy on-premises web gateways to cloud-native security platforms like Zscaler (ZIA/ZPA), while maintaining robust next-generation firewall engineering, deep packet troubleshooting, and strict ITIL-aligned change management.

Key Responsibilities

• Migration Strategy & Execution: Architected and executed seamless end-to-end migrations from legacy secure web gateways (SWG) to cloud security service edge (SSE) platforms, managing policy analysis, translation, and phased site-by-site cutovers.
• Policy Transformation: Audited, re-engineered, and optimized legacy web policies—including URL categorization, deep packet SSL/TLS inspection, authentication frameworks, and bypass rules—into modern cloud-native access controls.
• Firewall & Traffic Steering Engineering: Configured and maintained enterprise firewalls (PAN-OS, Panorama, and GlobalProtect) to orchestrate secure traffic steering to cloud security platforms via dynamic GRE/IPsec tunnels, automated PAC files, and endpoint client connectors.
• Complex Diagnostics & Root Cause Analysis: Performed advanced troubleshooting across multi-vendor environments using deep packet analysis (Wireshark, tcpdump), SIEM log correlation, and real-time traffic flow tracing to resolve latency, authentication, and SSL inspection friction.
• ITIL Change & Incident Governance: Managed lifecycle operations within ServiceNow, authoring high-risk change requests, comprehensive backout plans, and presenting technical risk profiles in Change Advisory Board (CAB) forums.
• Documentation & Cross-Functional Leadership: Authored detailed operational runbooks, migration run-sheets, and as-built architectural diagrams, facilitating coordination across identity, endpoint, and networking teams while delivering status updates to executive project leadership.

Required Qualifications

• 5+ years of dedicated experience in enterprise network security engineering.
• Advanced Palo Alto Expertise: Extensive hands-on experience deploying and managing PAN-OS, Panorama, and GlobalProtect security ecosystems.
• ITIL Change Management Maturity: Proven track record of planning, risk-assessing, and executing infrastructure changes within ServiceNow in high-availability enterprise environments.
• Advanced Diagnostics: Deep technical proficiency in packet capture analysis, log parsing, traffic flow troubleshooting, and structured root-cause investigation.
• Core Networking & Security Fundamentals: Comprehensive mastery of TCP/IP, dynamic routing, DNS architecture, Public Key Infrastructure (PKI), forward proxy concepts, and SSL/TLS interception mechanics.
• Communication & Collaboration: Excellent written, presentation, and interpersonal skills capable of bridging technical engineering groups with business leadership.

Preferred Qualifications

• Cloud Security Specialization: Hands-on experience with Zscaler ZIA/ZPA, SASE/SSE architecture design, and Zero Trust Network Access (ZTNA) principles.
• Identity & Access Management: Experience integrating SAML/SSO frameworks with cloud identity providers (e.g., Azure AD / Entra ID).
• Automation & Scripting: Proficiency in Python, infrastructure-as-code (Terraform), or leveraging security platform APIs for automation.
• Professional Certifications: PCNSE, Zscaler Certifications (ZCCA/ZDTA), and ITIL Foundation.

Tools and Technologies

• Network & Security: Palo Alto Networks (PAN-OS, Panorama, GlobalProtect), Zscaler (ZIA, Client Connector), Legacy Web Gateways / Proxy architectures.
• Operations & ITSM: ServiceNow (Change, Incident, Problem Modules).
• Troubleshooting & Monitoring: Wireshark, tcpdump, Splunk (or equivalent SIEM platforms).

If you're interested, share your resume to Ellie Ardeza at ellie@nbridge.com.au or hit apply.