---
title: Remote Senior Network Security Engineer at GovCIO
description: GovCIO is hiring for the Senior Network Security Engineer role. Pays $120K–$140K
  per year. See the full description and apply.
type: job
url: https://www.foundrole.com/jobs/senior-network-security-engineer-at-govcio-01a13a69-b38e-78b3-a40d-ee692140da75
date: 2026-11-15T01:26:44Z
og_description: Join GovCIO as Senior Network Security Engineer. Pays $120K–$140K per year. Full-time,
  remote role. Requires 5+ years of experience.
og_image: https://www.foundrole.com/og/hgqp1f.png
breadcrumbs:
  - label: Home
    url: https://www.foundrole.com/
  - label: Search
    url: https://www.foundrole.com/jobs
---

| | |
|---|---|
| **Company** | [GovCIO](https://www.foundrole.com/companies/govcio?utm_source=ai_markdown) |
| **Location** | Remote |
| **Salary** | $120K/yr - $140K/yr |
| **Type** | Full Time |
| **Posted** | Oct 14, 2026 |

## Remote check

**Fully remote: passed our check.** The role itself is remote, with no recurring office days, travel under 10%, no on-site duties and no end date on the remote setup.

- "This position will be located within the United States and will be a fully remote opportunity."

**Where you can work from:** United States

## Is this job real?

**Ghost job check:** A- · Low risk. Probably a real opening.

## Visa sponsorship

- **H-1B:** GovCIO sponsors H-1B visas. It filed 1 H-1B petition (FY2026 Q1 – FY2026 Q4).
- **E-Verify:** No E-Verify enrollment on record for GovCIO.

## Pay for similar jobs

Most similar jobs pay $125,000 – $170,000 a year (median $148,000).

## Description

GovCIO is seeking a highly experienced **Senior Network & Security Engineer** to lead the design, operation, troubleshooting, and continuous improvement of enterprise network-security infrastructure. This role is responsible for Palo Alto Networks next-generation firewalls, Panorama, High Availability, Cisco switching, network segmentation, Cortex XSIAM, and Strata Logging Service.

The Senior Engineer will serve as a technical escalation point for complex network and security incidents, lead architecture and implementation initiatives, establish standards, and partner with SOC, infrastructure, cloud, application, and leadership teams to reduce risk and maintain highly available services.

This position will be located within the United States and will be a fully remote opportunity.

**Responsibilities**  

The successful Senior Network & Security Engineer will be a hands-on technical leader with deep expertise in Palo Alto Networks firewalls, Panorama, HA, and Cisco enterprise networking. This person will lead firewall-policy and microsegmentation design, troubleshoot complex TCP/IP and packet-flow issues, ensure resilient HA operations, and integrate security telemetry with Cortex XSIAM and Strata Logging Service. The candidate must be able to independently lead technical projects, resolve high-impact incidents, improve security controls, and mentor other engineering team members.

- Lead the design, deployment, administration, and lifecycle management of Palo Alto Networks NGFW environments running PAN-OS.
- Own centralized firewall management through Palo Alto Panorama, including device groups, templates, template stacks, policy inheritance, upgrades, configuration backups, log monitoring, and firewall onboarding.
- Design and govern security policies using zero-trust, least-privilege, application-aware, and risk-based principles.
- Configure and troubleshoot security zones, NAT, virtual routers, static and dynamic routing, IPsec VPN, GlobalProtect, decryption, URL Filtering, Threat Prevention, WildFire, DNS Security, and App-ID policies.
- Lead enterprise network-segmentation and microsegmentation initiatives using security zones, VLANs, subinterfaces, virtual routers, routing controls, and application-based security policies.
- Develop secure controls for traffic between users, servers, applications, management networks, guest networks, IoT/OT devices, data-center workloads, and cloud resources.
- Architect, configure, test, and troubleshoot Palo Alto High Availability deployments, including Active/Passive and Active/Active designs as required.
- Resolve complex HA failures involving HA1 control links, HA2 session/state synchronization, HA3 packet forwarding, peer communications, configuration synchronization, monitoring failures, split-brain prevention, and failover recovery.
- Plan and execute HA failover testing, PAN-OS upgrades, disaster-recovery exercises, and maintenance procedures while minimizing service impact.
- Troubleshoot HA infrastructure dependencies, including cables, transceivers, switch ports, port channels, VLANs, routing, MTU, latency, packet loss, and redundant-path failures.
- Lead the configuration, support, and troubleshooting of Cisco Catalyst and Nexus switching environments.
- Design and support VLANs, trunking, STP/RSTP/MST, EtherChannel/port channels, HSRP/VRRP, Layer 2/Layer 3 switching, ACLs, QoS, switch security, routing, and access-control technologies.
- Diagnoses complex connectivity and performance issues through firewall logs, session inspection, packet captures, CLI diagnostics, switch counters, flow data, and network-monitoring platforms.
- Analyze TCP/IP behavior, including handshake failures, SYN/SYN-ACK/ACK flow, retransmissions, resets, timeouts, asymmetric routing, MTU/MSS issues, fragmentation, latency, packet loss, and NAT translation problems.
- Verify packet flow across firewall policy, App-ID, routing, NAT, decryption, threat prevention, VPN, switching, and server/application layers.
- Monitor firewall management-plane and dataplane health, including CPU, memory, session capacity, packet buffers, throughput, logging, and interface performance.
- Integrate Palo Alto NGFWs and Panorama with Strata Logging Service and Cortex XSIAM.
- Ensure reliable firewall log forwarding, cloud logging, log ingestion, data normalization, event availability, retention, and telemetry quality.
- Use Cortex XSIAM and XQL Search to investigate, correlate, and respond to firewall, endpoint, identity, cloud, and third-party security events.
- Partner with SOC teams to tune detections, investigate alerts, develop response procedures, improve visibility, and support incident containment and remediation.
- Lead root-cause analyses for major network or security incidents and deliver corrective and preventive action plans.
- Develop and maintain network diagrams, firewall-policy documentation, HA designs, runbooks, change plans, architecture standards, and operational procedures.
- Mentor junior engineers and provide technical leadership during projects, production incidents, and security reviews.

**Qualifications**  

Bachelor’s degree with 8+ years (or commensurate experience)

- 7+ years of progressive experience in network engineering, network security, firewall administration, or security infrastructure operations.
- 5+ years of hands-on Palo Alto Networks firewall experience in a production enterprise environment.
- Advanced operational experience with Palo Alto Panorama, including multi-device policy management, templates, device groups, upgrades, configuration management, and troubleshooting.
- Strong hands-on experience designing, maintaining, and troubleshooting Palo Alto High Availability environments.
- Advanced understanding of HA1, HA2, HA3, configuration synchronization, session synchronization, failover behavior, link monitoring, path monitoring, peer health, and recovery processes.
- Strong expertise in TCP/IP, IPv4/IPv6, DNS, DHCP, ARP, routing, NAT, VPNs, and packet-level troubleshooting.
- Demonstrated ability to investigate TCP handshakes, resets, retransmissions, MTU/MSS issues, asymmetric routing, connection timeouts, and firewall session behavior.
- Extensive experience with Cisco Catalyst and/or Nexus switching technologies.
- Strong knowledge of enterprise switching and routing, including VLANs, trunking, STP/RSTP/MST, EtherChannel, HSRP/VRRP, routing protocols, ACLs, QoS, and switch-security controls.
- Proven experience designing or implementing network segmentation and microsegmentation solutions.
- Working knowledge of Cortex XSIAM, Strata Logging Service, security-event correlation, alert investigation, XQL Search, and firewall log ingestion.
- Ability to lead technical design discussions, independently manage complex workstreams, and communicate risks and recommendations to technical and nontechnical stakeholders.
- Strong documentation, change-management, incident-management, and root-cause-analysis skills.

Clearance Required: Must be able to attain and maintain AOUSC Public Trust

**Preferred Skills and Education**

- Master’s degree in Cybersecurity, Information Technology, Computer Science, Engineering, or a related field preferred
- Palo Alto Networks certifications: PCNSA, PCNSE, PCCSE, or equivalent enterprise-level experience.
- Cisco certifications: CCNP Enterprise, CCNP Security, CCIE Enterprise Infrastructure, CCIE Security, or comparable expertise.
- Experience with Palo Alto Prisma Access, Prisma Cloud, Cortex XDR, Cortex XSOAR, or cloud-delivered security services.
- Experience with Cortex XSIAM alert triage, XQL queries, data-source integrations, detection tuning, dashboards, reporting, and response automation.
- Experience with Cisco ISE, Cisco ACI, SD-Access, or enterprise network-access-control solutions.
- Familiarity with Fortinet Security Fabric, FortiGate, FortiManager, and FortiAnalyzer.
- Experience with AWS, Azure, Google Cloud Platform, hybrid-cloud network design, and cloud-security controls.
- Familiarity with SIEM, SOAR, EDR/XDR, vulnerability-management, NDR, network-monitoring, and ticketing platforms.
- Automation skills using Python, Ansible, Terraform, REST APIs, or related infrastructure-as-code and orchestration tools.
- Experience supporting 24x7 environments, participating in an on-call rotation, leading critical incidents, and executing emergency changes.

**Posted Salary Range**  

USD $120,000.00 - USD $140,000.00 /Yr.
## Skills

- Network Security
- Network Segmentation
- Firewall Configuration
- Public Trust Clearance
- URL Filtering
- Sonatype Nexus
- High Availability Systems
- Cloud Computing
- Open Web Application Security Project (Owasp)
- Address Resolution Protocols
- Internet Protocol Security (Ip Sec)
- Cyber Security
- Correlation Analysis
- Amazon Web Services
- Data Ingestion
- Inspection
- Dynamic Host Configuration Protocol (Dhcp)
- Technical Leadership
- Next-Generation Firewall (Ngfw)
- Onboarding
- Information Technology
- Cisco Certified Network Professional
- CPU/Processor Architecture
- Infrastructure as Code (IaC)
- Triage
- Investigation
- Palo Alto Networks
- Cgi-ams Strata
- Cortex XDR
- Fortinet FortiGate
- RESTful API
- Data Backup
- Log Management
- Enterprise Networking
- Network Engineering
- Least Privilege Access Control
- Cisco Certified Internetwork Expert
- Software Deployment
- Logging
- Python
- Virtual Router Redundancy Protocol VRRP
- Palo Alto Networks Certified Network Security Engineer (Pcnse)
- Cisco
- Automation
- Layer 3 Networking
- Root Cause Analysis
- DNS Security
- Virtual Local Area Network (Vlan)
- Firewall
- Microsoft Azure
- Network Routing Protocols
- Terraform
- Fortinet
- National Driver Register NDR
- Command-Line Interface
- Virtual Private Networks (Vpn)
- Network Routing
- Lifecycle Management
- Security Orchestration, Automation and Response (Soar)
- Configuration Management
- Ansible
- Xilinx Integrated Software Environment ISE
- Cisco Systems Hot Standby Router Protocol HSRP
- Network Access Control
- Security Policies
- Endpoint Detection and Response (Edr)
- Security Controls
- IPv4
- Zero Trust Security
- Fortinet FortiManager
- Policy Management
- Runbook Development
- Prisma ORM
- Extended Detection and Response (Xdr)
- Failover
- Layer 2 Networking
- Corrective And Preventive Action (Capa)
- Google Cloud Platform (Gcp)
- Diagnostics
- Rapid Spanning Tree Protocol (Rstp)
- Network Switching
- Maintenance
- Computer Science
- Data Normalization
- Incident Management
- Architecture Regulations
- IPv6
- Network Diagrams
- Domain Name System
- Network Monitoring
- Ticketing
- Security Review
- Telemetry
- Disaster Recovery
- EtherChannel
- Vulnerability Management
- Communication
- SIEM
- Transmission Control Protocol (Tcp)
- Change Management
- Network Address Translation (Nat)
- TCP/IP
- Internet Of Things (IoT)
- Quality of Service
- Transceiver

## Related

- [More jobs at GovCIO](https://www.foundrole.com/companies/govcio?utm_source=ai_markdown)
- [Technology & Software jobs](https://www.foundrole.com/careers/technology-and-software?utm_source=ai_markdown)- [Cybersecurity jobs](https://www.foundrole.com/careers/technology-and-software/cybersecurity?utm_source=ai_markdown)- [Security Engineer jobs](https://www.foundrole.com/careers/technology-and-software/cybersecurity/security-engineer?utm_source=ai_markdown)- [Browse all companies](https://www.foundrole.com/companies?utm_source=ai_markdown)

## Related pages

- [IT Services and Consulting](https://www.foundrole.com/sectors/technology/it-services-and-consulting?utm_source=ai_markdown) — 150239 jobs
- [GovCIO](https://www.foundrole.com/companies/govcio?utm_source=ai_markdown) — 242 jobs

## Browse

- [Companies](https://www.foundrole.com/companies?utm_source=ai_markdown)
- [Jobs by country](https://www.foundrole.com/locations?utm_source=ai_markdown)
- [Jobs in the United States by state and city](https://www.foundrole.com/locations/us?utm_source=ai_markdown)
- [H1B sponsors by location](https://www.foundrole.com/h1b-sponsors?utm_source=ai_markdown)
- [H1B salaries](https://www.foundrole.com/h1b-salaries?utm_source=ai_markdown)
- [Sectors and industries](https://www.foundrole.com/sectors?utm_source=ai_markdown)
- [Jobs by career field](https://www.foundrole.com/careers?utm_source=ai_markdown)
- [Latest jobs](https://www.foundrole.com/jobs/latest?utm_source=ai_markdown)