Senior Network Security Engineer

Salary: $120 – $140 per hour

About the role

WWT is looking for a Senior Security Engineer specialising in Network Security to join the team in Sydney on a 6-month contract, with potential for extension. This is a project delivery role rather than a day-to-day operations position. The primary focus is designing firewall deployments, optimising firewall policies, and leading firewall migrations for WWT clients, alongside hands-on delivery of Cisco ISE network access control projects. You'll represent WWT directly with client teams, working alongside WWT's Domain Architects to deliver secure, resilient outcomes across multi-site environments.

Key responsibilities

• Lead the end-to-end lifecycle of Palo Alto firewall and Cisco ISE deployments and migrations, including assessment, design, implementation, testing and validation.

• Perform firewall policy optimisation, upgrades and cross-vendor migrations while minimising operational risk and service disruption.

• Validate implemented solutions through structured testing as part of the standard change process, ensuring compliance with security, quality and operational standards.

• Help develop network segmentation strategy, and support secure VPN and remote access design.

• Engage directly with customers to gather requirements and provide technical consultation, owning detailed design and hands-on implementation, and presenting design decisions and recommendations directly to stakeholders.

• Produce handover and knowledge transfer documentation at project milestones and when engagements close.

• Ramp up quickly across different client environments and toolsets, working closely with security, network and vendor teams to keep delivery secure by design.

Essential

• Excellent written and verbal communication skills, backed by previous experience in a client-facing consulting or professional services role, with the confidence to lead client design discussions independently.

• Deep, hands-on expertise in Palo Alto Firewalls, including Panorama, App-ID and threat prevention.

• Strong hands-on expertise in Cisco ISE, including 802.1X and TrustSec policy enforcement.

• Ability to design and implement network segmentation, VPN and secure remote access solutions.

• Proven experience delivering enterprise network projects end-to-end, within complex, large-scale environments, with the ability to ramp up quickly in unfamiliar client settings.

• Strong troubleshooting and problem-solving skills, backed by clear technical documentation, including handover and knowledge transfer materials.

• Ability to work collaboratively with engineering teams and project stakeholders.

• Willingness to undergo background checks before starting the contract.

Highly Desirable

• Familiarity working within data centre network and firewall environments.

• Multi-vendor firewall experience beyond Palo Alto, such as Cisco FTD/FMC or Fortinet FortiGate, including experience migrating firewall policies between vendor platforms.

• Broader network engineering depth, including Cisco or Juniper routing and switching, OSPF/BGP, and wireless network security, as supporting infrastructure knowledge.

• 8 or more years of network security engineering experience, ideally backed by a vendor certification such as CCNP Security, CCIE Security or PCNSE.

• Strong automation and scripting skills (Python, Bash, Ansible) for streamlining firewall and network security tasks.