Sr. Network Security Engineer

WCC Technologies Group is a rapidly growing Managed Network Services Provider and technology consulting firm specializing in enterprise networking, Wi-Fi engineering, structured cabling, and physical security systems. We are seeking a Network Security Engineer with 5 years of hands-on experience who will support both pre-sales and post-sales consulting engagements, advising WCC customers on and delivering advanced firewall, SD-WAN, and SASE solutions across our K-12, municipal, and enterprise client base.

Job Responsibilities:

• Support the sales team in pre-sales consulting engagements by advising WCC customers on security requirements, recommending best-fit technologies, and designing firewall, SD-WAN, and SASE solutions.
• Design, configure, and deploy next-generation firewalls and secure network architectures using Palo Alto Networks (PAN-OS, Panorama), Fortinet (FortiGate, FortiManager), Cisco, and other leading platforms.
• Architect and implement SD-WAN and SASE solutions, including ZTNA, SWG, CASB, and cloud-delivered security services (e.g., Prisma Access, Cisco Umbrella, Fortinet SASE).
• Participate in customer discovery calls, RFP reviews, and requirements gathering, and help build Bills of Materials (BoMs) for firewall, SD-WAN, and SASE projects.
• Configure and troubleshoot advanced routing and switching environments, including BGP, OSPF, VLANs, and enterprise WAN/LAN architectures.
• Implement site-to-site and remote access VPNs, IPsec/GRE tunnels, and Zero Trust access policies across hybrid and multi-cloud customer environments.
• Perform security policy audits, firewall rule optimization, and vulnerability remediation to strengthen customer security postures.
• Support post-sales delivery for WCC customers, including staging, configuration, validation, on-site installation, and support during network cutovers.
• Create and maintain customer-facing technical documentation including network diagrams, firewall rule sets, configuration standards, and implementation runbooks.
• Serve as a client-facing technical resource, mentoring junior engineers and escalating/resolving complex customer security incidents as needed.

• Build and maintain network automation workflows and monitoring integrations using tools such as Ansible, n8n, Python, and platforms like Zabbix or PRTG to improve visibility and reduce manual effort.

   

Experience:

• 5 years managing enterprise network security platforms: Palo Alto Networks (PAN), Fortinet, Cisco, or similar.
• Strong knowledge of SD-WAN and SASE, including ZTNA, SWG, and CASB.
• Advanced routing and switching: BGP, OSPF, VLANs, spanning tree, enterprise WAN design.
• Hands-on experience with Panorama and FortiManager.
• Solid understanding of VPNs (IPsec, SSL/TLS), network segmentation, and Zero Trust.
• Familiarity with cloud networking (AWS, Azure, or GCP) — VPC/VNet peering, Transit Gateway, ExpressRoute.
• Strong troubleshooting skills: packet capture, log analysis, and monitoring tools like Zabbix, PRTG, SolarWinds, or LibreNMS.
• Experience with automation tools such as Ansible, n8n, Python, or Terraform.
• Exposure to AI-assisted network operations (AIOps) or AI-driven troubleshooting is a plus.
• Familiarity with IPAM/DCIM (e.g., NetBox) and ITSM tools (e.g., ServiceNow, Jira).
• Strong communication and documentation skills; able to manage multiple client-facing projects.
• Certifications such as PCNSE, Fortinet NSE 4-7, CCNP (Enterprise or Security), or CCIE are highly desired.