Network Security Engineer
New York, NY
New Era Technology
New Era is a Technology Solution Provider, that delivers tech solutions to securely connect people, places, & information around the globe.Join New Era Technology, where People First is at the heart of everything we do. With a global team of over 4,500 professionals, we’re committed to creating a workplace where everyone feels valued, empowered, and inspired to grow. Our mission is to securely connect people, places, and information with end-to-end technology solutions at scale.
At New Era, you’ll join a team-oriented culture that prioritizes your personal and professional development. Work alongside industry-certified experts, access continuous training, and enjoy competitive benefits. Driven by values like Community, Integrity, Agility, and Commitment, we nurture our people to deliver exceptional customer service.
If you want to make an impact in a supportive, growth-oriented environment, New Era is the place for you. Apply today and help us shape the future of work—together.
If you want to make an impact in a supportive, growth-oriented environment, New Era is the place for you. Apply today and help us shape the future of work—together. We are seeking a skilled Network Security Engineer with expertise in DMZ architecture and firewall technologies to support the migration of security infrastructure from Check Point to Palo Alto Networks firewalls. This role requires deep technical knowledge of firewall configuration, security zones, and segmentation in high-security environments. The ideal candidate will play a critical role in designing, planning, and executing the migration process with minimal disruption to critical services.
Responsibilities:
- Lead or support the end-to-end migration from Check Point to Palo Alto firewalls, focusing on DMZ and perimeter security zones.
- Analyze existing firewall rules, objects, NATs, and VPN configurations to map current-state Check Point policies.
- Design and implement equivalent policies and security controls in Palo Alto firewalls using best practices.
- Review and optimize firewall rules for improved performance, visibility, and security.
- Work closely with network and application teams to understand dependencies, traffic flows, and security requirements.
- Redesign or enhance DMZ segmentation strategy to align with enterprise security policies.
- Develop migration runbooks, rollback procedures, and test plans.
- Perform hands-on configuration, deployment, and validation of Palo Alto firewalls (physical or virtual).
- Integrate Palo Alto firewalls with Panorama, SIEM, and other monitoring tools.
- Ensure compliance with internal security standards, regulatory requirements, and change management processes.
- Provide troubleshooting support during and after migration events.
Skills required:
- Bachelor’s degree in Computer Science, Information Security, or related field (or equivalent experience).
- 5+ years of experience in network security engineering, with specific experience in firewall technologies.
- Must have prior Pharmaceutical industry experience
- Proven experience in Checkpoint to Palo Alto firewall migration projects.
- Strong understanding of DMZ network architecture, segmentation, and traffic flows.
- In-depth knowledge of Checkpoint R80+ and Palo Alto PAN-OS (including Panorama).
- Experience with firewall policy analysis and optimization tools (e.g., AlgoSec, FireMon, Expedition).
- Strong grasp of NAT, VPN, IPSec, SSL, routing, and Layer 7 security features.
- Familiarity with Zero Trust principles and microsegmentation
- Scripting experience (Python, Ansible, etc.) for automation is a plus.
- Strong documentation and communication skills.
- Ability to work independently and collaboratively in a fast-paced environment.
- Excellent problem-solving and analytical skills.
- Comfortable working after hours or weekends during cutover events.
Physical Demands:
- Regular use of hands and fingers to operate a computer keyboard, mouse, and other office equipment.
- Regular, repetitive movements such as typing, mouse movements, and scrolling. Ability to hear and understand spoken communications, both in person and via remote communication tools (e.g., phone, video conferencing).
- Ability to see and read computer screens and printed documents, as well as adjust focus. This includes prolonged periods of looking at a computer screen.
This position requires a person to work in the United States, preferably in the New York area.
Below is the pay range of this position for considered candidates based on qualifications and experience.
Pay Range $130,000—$130,000 USDNew Era Technology, Inc., and its subsidiaries (“New Era” “we”, “us”, or “our”) in its operating regions worldwide are committed to respecting your privacy and recognize the need for appropriate protection and management of any Personal Data that you may provide us. In this, we are also committed to providing you with a positive experience on our websites and while using our products, services and solutions (“Solutions”).
View our Privacy Policy here https://www.neweratech.com/us/privacy-policy/
Tags: Ansible Automation Compliance Computer Science Firewalls Monitoring Network security Privacy Python Scripting SIEM Strategy VPN Zero Trust
Perks/benefits: Career development Competitive pay Team events
More jobs like this
Explore more career opportunities
Find even more open roles below ordered by popularity of job title or skills/products/technologies used.