Mid/Snr Network Security Engineer - 6mos contract - view to extend

Northbridge IT Recruitment Propr – Sydney NSW

Contract

The Role

Results-driven Network Security Engineer specializing in modernizing enterprise security architectures through large-scale cloud proxy and SASE migrations. Recognized for bridging legacy on‑premises web gateways to cloud-native security platforms like Zscaler (ZIA/ZPA), while maintaining robust next‑generation firewall engineering, deep packet troubleshooting, and strict ITIL-aligned change management.

Key Responsibilities

- Migration Strategy & Execution: Architected and executed seamless end-to-end migrations from legacy secure web gateways (SWG) to cloud security service edge (SSE) platforms, managing policy analysis, translation, and phased site‑by‑site cutovers.
- Policy Transformation: Audited, re‑engineered, and optimized legacy web policies—including URL categorization, deep packet SSL/TLS inspection, authentication frameworks, and bypass rules—into modern cloud‑native access controls.
- Firewall & Traffic Steering Engineering: Configured and maintained enterprise firewalls (PAN‑OS, Panorama, and GlobalProtect) to orchestrate secure traffic steering to cloud security platforms via energetic GRE/IPsec tunnels, automated PAC files, and endpoint client connectors.
- Complex Diagnostics & Root Cause Analysis: Performed advanced troubleshooting across multi‑vendor environments using deep packet analysis (Wireshark, tcpdump), SIEM log correlation, and real‑time traffic flow tracing to resolve latency, authentication, and SSL inspection friction.
- ITIL Change & Incident Governance: Managed lifecycle operations within ServiceNow, authoring high‑risk change requests, comprehensive backout plans, and presenting technical risk profiles in Change Advisory Board (CAB) forums.
- Documentation & Cross‑Functional Leadership:



Authored detailed operational runbooks, migration run‑sheets, and as‑built architectural diagrams, facilitating coordination across identity, endpoint, and networking teams while delivering status updates to executive project leadership.

Required Qualifications

- 5+ years of dedicated experience in enterprise network security engineering.
- Advanced Palo Alto Expertise: Extensive hands‑on experience deploying and managing PAN‑OS, Panorama, and GlobalProtect security ecosystems.
- ITIL Change Management Maturity: Proven track record of planning, risk‑assessing, and executing infrastructure changes within ServiceNow in high‑availability enterprise environments.
- Advanced Diagnostics: Deep technical proficiency in packet capture analysis, log parsing, traffic flow troubleshooting, and structured root‑cause investigation.
- Core Networking & Security Fundamentals: Comprehensive mastery of TCP/IP, dynamic routing, DNS architecture, Public Key Infrastructure (PKI), forward proxy concepts, and SSL/TLS interception mechanics.
- Communication & Collaboration: Excellent written, presentation, and interpersonal skills capable of bridging technical engineering groups with business leadership.

Preferred Qualifications

- Cloud Security Specialization: Hands‑on experience with Zscaler ZIA/ZPA, SASE/SSE architecture design, and Zero Trust Network Access (ZTNA) principles.
- Identity & Access Management: Experience integrating SAML/SSO frameworks with cloud identity providers (e.g., Azure AD / Entra ID).
- Automation & Scripting: Proficiency in Python, infrastructure‑as‑code (Terraform), or leveraging security platform APIs for automation.
- Professional Certifications: PCNSE, Zscaler Certifications (ZCCA/ZDTA), and ITIL Foundation.

Tools and Technologies

- Network & Security: Palo Alto Networks (PAN-OS, Panorama, GlobalProtect), Zscaler (ZIA, Client Connector), Legacy Web Gateways / Proxy architectures.
- Operations & ITSM:

📌 Mid/Snr Network Security Engineer (Sydney)
🏢 Northbridge It Recruitment Propr
📍 Sydney