Senior Network Security Engineer

Company
SMS Datacenter is a growing IT MSP for Managed Services, Colocation, Networking, Private Managed Cloud, and Help Desk. We are a team of engineers and technicians who tackle new projects, challenges, and issues every day, designing and supporting users’ systems and networks so they can focus on their businesses. If you enjoy busy days of working with fellow IT professionals to solve problems and create long-term solutions, and you meet our open position's requirements, then apply to join the team!
Description
We are looking for a Senior Network Security Engineer to join our network engineering and design team. You should be strong in Palo Alto firewall security, Cisco switching, and enterprise network architecture. This is a fully remote position that is open to US citizens and other permanent residents residing in the US only. Working hours will follow UTC-7 business hours, with a rotating on-call schedule.
Responsibilities
Configure and troubleshoot Palo Alto firewalls and other network devices
Design and deploy functional networks (LAN, WLAN, WAN)
Troubleshoot networks on internal and customer environments independently and with other engineers
Implement customer services according to project requirements and best practices
Translate security and compliance requirements into practical network architecture, configurations and documentation
Support monitoring with SNMP and other products
Create and maintain complete technical documentation, drawings, and SOPs
Communicate with users and colleagues professionally
Fully track time and work done on internal and customer tickets and projects
Suggest improvements to network performance, capacity, and scalability
Participate in rotating on-call and escalation schedules
Perform other job-related duties as necessary
Requirements:
7+ years of professional network engineering experience, including at least 3 years designing and architecting enterprise network environments
Strong experience designing and securing enterprise networks, including segmentation, VLANs/VRFs, routing, switching, firewalls, VPNs, wireless, and network access control
Strong Palo Alto firewall experience, including security policies, NAT, segmentation, logging, and security services
Experience with Cisco switching and routing and enterprise wireless, preferably Aruba
Experience with Cisco ISE or equivalent NAC technologies, including 802.1X
Experience troubleshooting complex Layer 2/3 and security/network infrastructure issues
Preferred Candidates Will Have:
Experience designing and securing Azure network infrastructure and hybrid cloud connectivity
Experience designing and implementing network security controls aligned with NIST 800 and/or CMMC requirements, including deep understanding of network segmentation, boundary protection, secure communications, access control, encryption, logging, monitoring, and secure system architecture
Experience implementing controls for CUI environments and maintaining technical documentation/evidence supporting security assessments
Ability to design network architectures that enforce least privilege, segmentation, secure management, and controlled communications
Expertise with BGP design and support for multi-tenant environments
Experience in MSP, multi-customer, or managed-services environments
CCNP, CCIE, PCNSE, PCNSC, CISSP, or equivalent real-world knowledge
Compensation and Benefits:
Selected candidates' job grade and starting salary will be determined by the evaluation of factors including relevant technical and soft skills, knowledge, and geographic location. Total annual compensation for this position is expected to be $120,000 to $150,000.
Employees who complete the first 90 days of employment will be eligible for Paid Time Off of up to 10 vacation/personal days, 5 sick days, birthdays off, and 8 company holidays each year.

Work arrangement
Yes