Lead Network Security Engineer

Salary: $65000 - 108000 per year Requirements: We require a bachelors degree in Engineering, Computer Science, Information Technology, Information Assurance, Networking, or a related discipline; alternatively, an associates degree with 4+ years of network experience, or a high school diploma with 10+ years of network experience. We are looking for at least 10 years of network security engineering experience with a strong emphasis on firewall technologies. We need 5+ years of hands-on experience designing, deploying, and supporting Palo Alto firewall environments. We require 3+ years of practical experience working with Cisco Firepower platforms. We expect 10+ years of experience with core networking technologies, including TCP/IP, DNS, DHCP, and VPNs. We prefer candidates with the PCNSE certification. We also value CCNP Security or CCIE Security certification. We prefer 5+ years of experience applying security frameworks such as NIST Cybersecurity Framework or ISO 27001. We seek familiarity with cloud security solutions across AWS, Azure, or Google Cloud. We value experience with firewall automation and network security tooling. We need strong documentation and communication abilities for both technical and nontechnical audiences. We look for candidates who can lead complex technical programs, including platform migrations and enterprise-wide rollouts. We prefer experience designing and supporting HA/cluster architectures and large-scale Panorama environments. Responsibilities: We design, implement, and operate secure network security architectures for large enterprise environments. We develop and maintain security policies and procedures aligned with regulatory and organizational standards. We provide expert configuration, tuning, and support for Palo Alto and Cisco Firepower firewall platforms. We troubleshoot advanced security issues across firewall, network, and remote-access technologies. We review, approve, and manage firewall rule changes through enterprise ticketing systems using security best practices. We support PCI, SOC, and similar compliance audits and security reviews. We collaborate with cross-functional partners to embed network security solutions into existing infrastructure. We support enterprise remote-access capabilities, including VPN platforms. We lead or assist with major initiatives such as firewall migrations, enterprise VPN deployments, acquired-site integrations, and automation efforts. We create and maintain documentation for network architecture, security controls, policies, and operating procedures. We participate in an on-call rotation and support security events outside standard business hours when needed. Technologies: AWS Azure Cloud Cisco Firewall Support Network Security TCP/IP VPN LESS More: We are Cobalt Streamworks, and we are seeking a Lead Network Security Engineer Palo Alto to join our Durham, NC team. This is a full-time, exempt role on first shift with standard business hours Monday through Friday, 8:00 a.m. to 5:00 p.m. EST, with occasional schedule flexibility based on business needs. For candidates living within 35 miles of our Durham location, we offer a hybrid arrangement that includes at least three in-office days per week to support both collaboration and flexibility. In this senior position, we serve as a technical authority for enterprise firewall and network security operations, partnering closely with infrastructure, cloud, and application teams to ensure secure, scalable, and compliant solutions while advancing modernization and automation. We offer comprehensive benefits for eligible employees, including medical, dental, vision, life, disability coverage, 401(k), paid time off or flexible time off, tuition reimbursement, and an employee stock purchase plan. We are an equal opportunity employer committed to inclusion and belonging, and we encourage all qualified candidates to apply. last updated 27 week of 2026