Network Security Engineer (Palo Alto Firewalls)

Role: Network Security Engineer (Palo Alto Firewalls)

Location: Remote (EST hours)

Pay Rate

$37/hr on W2 OR $52/hr on C2C

Palo Alto Firewalls Management & expertise in Tufin.

Network Security. Engineer to lead the hardening and modernization of our enterprise network infrastructure. This role focuses on "cleaning the house"—systematically auditing legacy configurations, enforcing strict network segmentation, and transitioning our environment toward a Zero-Trust architecture. You will be responsible for the lifecycle of firewall governance, the decommissioning of technical debt, and ensuring that our global network (NYU-NET) remains compliant with institutional security mandates.

Key Responsibilities

1. Firewall and ACL Governance

Audit & Rationalization

Systematically review and audit existing firewall rule sets and Access Control Lists (ACLs) across the global enterprise to eliminate redundant, outdated, or overly permissive entries.

Policy Management

Assist in developing and enforcing standardized management procedures for all firewall and ACL modifications, ensuring every change aligns with established security policies and compliance frameworks.

2. Network Segmentation & Isolation

Architectural Review

Evaluate and enhance network segmentation strategies—including micro-segmentation—to minimize the attack surface and prevent lateral movement by malicious actors.

Trust Zone Enforcement

Design and implement new VLANs and routing policies to ensure rigorous logical separation between diverse trust zones, including Student, Faculty, Research, IoT, and Administrative networks.

3. Legacy Infrastructure Decommissioning

Cleanup Operations

Identify and execute the orderly decommissioning of legacy network segments, unused VLANs, and obsolete hardware configurations.

Infrastructure Migration

Lead the remediation and consolidation of specialized networks, specifically focusing on the phase-out and migration of the OpNet infrastructure to modern, standardized platforms.

4. Documentation & Compliance

Topology Management

Maintain accurate, high-fidelity network topology diagrams and documentation for all security-related changes and segmentation schemes.

Regulatory Alignment

Validate that all network cleanup and security activities adhere strictly to internal GOIS (Global Office of Information Security) mandates and external regulatory standards.

Notes

- All qualified applicants will receive consideration for employment without regard to race, color, religion, religious creed, sex, national origin, ancestry, age, physical or mental disability, medical condition, genetic information, military and veteran status, marital status, pregnancy, gender, gender expression, gender identity, sexual orientation, or any other characteristic protected by local law, regulation, or ordinance.

Benefits

Danta offers a compensation package to all W2 employees that are competitive in the industry. It consists of competitive pay, the option to elect healthcare insurance (Dental, Medical, Vision), Major holidays and Paid sick leave as per state law.

The rate/ Salary range is dependent on numerous factors including Qualification, Experience and Location.