Senior Network Perimeter Security Engineer

Job Title: Senior Network Perimeter Security Engineer (L3)

Position Type: 6-Month Contract

Location: Sugar Land, TX or Atlanta, GA (Hybrid: 3 Days Onsite / 2 Days Remote)

Role Overview

We are seeking a senior, L3-level Network Perimeter Security Engineer with deep expertise in enterprise network security. This is an engineering and strategy role—not a NOC/SOC or BAU operational position. The ideal candidate brings strong technical judgment, hands-on execution capabilities, and the communication skills required to design and deploy high-impact security solutions within complex enterprise environments.

Key Responsibilities

• Architecture & Strategy: Define, execute, and continuously improve network security architecture, perimeter defenses, and technology roadmaps.
• Engineering & Deployment: Configure, deploy, and support enterprise network security solutions, including firewalls, IDS/IPS, WAFs, and DDoS mitigation.
• Operations & Threat Management: Monitor systems using SIEM and vulnerability management tools, evaluate emerging threats, and ensure compliance with security controls.
• Cross-Functional Collaboration: Partner with infrastructure, security, and operations teams on large-scale initiatives; manage vendor relationships.
• Escalations & Mentorship: Serve as an L3 Subject Matter Expert (SME), support incident response and high-priority troubleshooting, and mentor junior engineers.
  
  

Required Qualifications

• Experience: 10 years of overall IT experience, with 5 years dedicated to hands-on information security.
• Education: Bachelor’s degree in IT, Computer Science, Engineering, or a related field.
• Core Technical Expertise:
• Advanced experience managing enterprise-scale firewall technologies (Cisco, Palo Alto, FortiGate, Checkpoint, or Juniper) across large environments (100 firewalls).
• Strong depth in enterprise networking protocols and architecture (TCP/IP, BGP, OSPF, VPN, LAN/WAN/WLAN).
• Solid working knowledge of network services (DNS, DHCP, RADIUS, VLANs) and dual OS environments (Windows & Linux).
• Work Style: Proven ability to operate independently, resolve ambiguity, and communicate effectively with cross-functional stakeholders.
  

Strongly Preferred Technical Skills

• Cloud Security: Azure, AWS, or GCP.
• Modern Perimeter & Zero Trust: Zscaler (ZTNA) and Web Application Firewalls (WAF).
• Identity & Access Management: SAML, SCIM, OAuth, and OpenID.
• Endpoint & Systems: Endpoint protection tools (e.g., SCCM).
  
  

Preferred Qualifications

• 5 years of experience with Network Access Control (NAC), specifically Cisco ISE.
• Network automation tools (Ansible, Terraform, Puppet).
• Industry certifications: CISSP, PCNSE, Fortinet NSE, CCSE/CCSA, CISM, GIAC, CEH, or ZCE.
• Deep packet analysis (NetFlow, IP SLA), QoS, Multicast, and enterprise monitoring (SolarWinds Orion).
  
  

Working Conditions & Additional Notes

• On-Call: Participation in an on-call rotation is required, along with occasional after-hours or emergency support.
• Scope: Hands-on engineering focused on both high-level design strategy and technical execution.
  
  

TeamSoft is an Equal Opportunity Employer. We do not discriminate on the basis of race, color, religion, sex (including pregnancy, sexual orientation, and gender identity), national origin, age, disability, genetic information, or any other protected status under federal, state, or local law. We are committed to fostering a diverse and inclusive workplace.