Network Security Engineer

World Wide Technology is looking for a Network Security Lead. This job is part of WWT’s Strategic Resourcing services. The candidate will be supporting a WWT customer and will be employed FT by Client. The client will provide full compensation and benefit information prior to employment.

Role: Network Security Lead

Duration: 1 year Contract to Hire

Location: Denver, CO or Rancho Cordova/Sacramento, CA

Rate/Salary: A reasonable estimate of the current pay range for this position is $80/hr. to $90/hr. hourly C2C. Actual pay will be based on a variety of factors, including shift, location, experience, skill set, performance, licensure and certification, and business needs, and will be set by your employer. The range for this position in other geographic locations may differ. Certain positions may also be eligible for variable incentive compensation, such as bonuses or commissions, that is not included in base pay.

WE ARE ONLY LOOKING FOR A LOCAL CANDIDATE OF Denver, CO or Rancho Cordova/Sacramento, CA

GENERAL SUMMARY

The Network Security Lead is responsible for designing, implementing, and governing CLIENT’s global network security architecture across data centers, labs, offices, and cloud environments. This role combines deep engineering expertise with strategic leadership, driving architecture, automation, and operational excellence across CLIENT’s hybrid infrastructure.

The Network Security Lead will own the architecture and evolution of all network security domains — including core and lab networks, firewalls, on-premise proxies, and cloud connectivity — while leading and managing the Managed Service Provider (MSP) responsible for daily engineering, administration, and network analysis.

This role emphasizes AI-driven automation, leveraging machine learning and analytics to reduce manual effort and accelerate detection, response, and configuration management across the enterprise.

ESSENTIAL DUTIES & RESPONSIBILITIES

Architectural Leadership

• and maintain CLIENT’s global network security architecture, spanning: Core corporate and data center networks
• network segmentation and lab firewalls
• proxies and remote access gateways
• security architecture (Azure, AWS, GCP) including hub-spoke and zero-trust models

-Develop secure reference architectures for Prisma Access SD-WAN, NGFW, Infoblox DNS/DHCP, and VPN platforms.

Operational Oversight and Vendor Management

-Lead and manage the Managed Service Provider (MSP) responsible for L2/L3 network security engineering, administration, and monitoring.

-Oversee incident response coordination for network-related security events and P1/P2 outages.

Automation and AI Integration

-Implement AI and machine learning technologies to automate network telemetry analysis, anomaly detection, and response workflows. .

Engineering and Governance

-Develop and enforce network security policies and standards, integrating with enterprise GRC systems.

-Conduct security architecture reviews for new projects and cloud integrations.

Compliance and Audit Coordination:

-Coordinate with audit/compliance teams to supply detailed technical evidence, collect logs/reports, and document SOP compliance for both internal and external audit requirements.

-Facilitate audit comment tracking and support periodic access verification activities as per SOP guidance.

Platform & Product Expertise:

-Maintain expertise in CLIENT-specific network security platforms (e.g., Panorama, NP Extranet, aiSSD), browser integrations, and licensing schemes, supporting operational SOPs and driving troubleshooting and integration improvements."

Incident Response & Troubleshooting:

-Own and participate in root cause analysis, session table clearances, and non-functional error remediation, demonstrating thorough knowledge of day-to-day troubleshooting SOPs.

REQUIRED QUALIFICATIONS

Knowledge, Skills & Abilities

• Expertise in network and security architecture design, including: NGFWs, VPNs, SD-WAN (Prisma Access), segmentation, proxies, and hybrid connectivity
• Network automation frameworks (Ansible, Terraform, Python)
• Routing and switching protocols: BGP, OSPF, EIGRP, VXLAN, MPLS
• DNS/DHCP/IPAM (Infoblox), SSL/TLS, PKI, SSO/SAML/OAuth
• Cloud networking (Azure, AWS, GCP) — transit gateways, VPC/VNet security groups, private endpoints
• Deep understanding of Zero Trust Network Architecture (ZTNA) and Secure Access Service Edge (SASE) models.
• Strong vendor management and contract governance experience with Managed Service Providers.
• Experience applying AI and automation in operational network management, security analytics, and policy optimization.
• Excellent communication and leadership skills to translate technical strategy into business impact.

Education and Certifications

• Bachelor’s or Master’s degree in Computer Science, Computer Engineering, or related technical discipline.
• 8 years of experience in network security, infrastructure engineering, or equivalent field.
• 3 years of experience in architecture-level leadership or MSP oversight.
• Preferred certifications:
• Cisco CCNP/CCIE Security
• Palo Alto PCNSE
• AWS Certified Advanced Networking or Azure Network Engineer Associate
• CISSP or equivalent cybersecurity certification

NOTE: If you have any questions or concerns about this posting, please email us at - srpostings@wwt.com