Sr. Security Engineer - Southeast region

General Description

We are looking for a skilled Sr. Security Engineer to deliver multi-pillar network security engagements, with a primary focus on Security Architecture & Advisory, Network Security & Firewall, and delivery across SASE/SSE. This role will engage in the independent delivery of complex, cross-pillar solutions from architecture and design through pre-sales scoping and implementation while providing “Wow Them” service to clients and internal stakeholders.

The Sr. Security Engineer will be required to demonstrate strong technical and consultative skills, led by influence, and apply sound business and financial acumen to drive repeatable, margin-conscious delivery that aligns engagements with practice objectives and lifecycle progression (Assess → Architect → Implement → Optimize → Operate → Expand).

About the Network Security Practice

The Network Security Practice is responsible for helping clients navigate the complex threat and cybersecurity solution landscape so they can make informed risk decisions at the speed of business. We assess, architect, implement, optimize, and operate network security solutions across the organization and our client base.

Our team of security engineers, architects, and advisors is organized around five market-facing pillars. As the practice scales, each pillar is supported by a dedicated sub-team, with engineers cross-trained to support adjacent pillars:

• Network Security & Firewall: next-generation firewalls, IPS/IDS, email security, content filtering, high-availability clustering, and firewall policy management.
• SASE/SSE (Secure Access & Cloud Edge): SASE/SSE, ZTNA, SWG, CASB, SD-WAN security overlay, VPN-to-ZTNA migration, and branch security posture.
• Network Access & Segmentation: NAC, 802.1X, microsegmentation, OT/IoT segmentation, identity-based access, and Zero Trust architecture.
• Network Detection & Response (NDR): NDR platforms, network visibility and analytics, traffic aggregation, breach-and-attack simulation, and threat hunting.
• Security Architecture & Advisory: architecture reviews, risk assessments, technology evaluations, security roadmaps, and vendor-neutral advisory.

Roles and Responsibilities:

This Sr. Security Engineer role is prioritized across three pillars in order of focus: Security Architecture & Advisory first, Network Security & Firewall second, and SASE/SSE third — while remaining cross-trained to support adjacent pillars as practice sub-teams mature.

• Lead architecture-level design and advisory engagements including security architecture reviews, Zero Trust strategy, and vendor-neutral roadmaps translating client requirements into defensible solution designs and serving as the practice’s senior advisory presence (Security Architecture & Advisory).
• Conduct assessments, architecture reviews, and technology evaluations that produce risk findings and prioritized security roadmaps, identifying natural next engagements across the lifecycle (Security Architecture & Advisory).
• Independently deliver firewall and perimeter engagements end to end design, configure, and deploy next-generation firewall and secure-infrastructure solutions on Palo Alto Networks and Fortinet platforms, owning technical quality (Network Security & Firewall).
• Lead firewall policy optimization, migration, and lifecycle engagements, applying delivery standards that protect margin and quality (Network Security & Firewall).
• Support secure access and cloud-edge solutions SASE/SSE, ZTNA, and VPN-to-ZTNA migrations for distributed and remote-work environments as a secondary delivery focus (SASE/SSE).
• Provide pre-sales technical leadership: lead scoping of engagements, define assumptions, level of effort, deliverables, and acceptance criteria to protect margin and prevent scope creep.
• Serve as a senior technical point of contact on assigned engagements; mentor and cross-train Associate and mid-level Security Engineers as pillar sub-team’s form.
• Enforce delivery discipline: adhere to practice playbooks, change-control, and project-health standards, and escalate delivery blockers immediately.
• Maintain a target 80% billable utilization while investing the remaining 20% in enablement, certifications, pre-sales and scoping support, and practice development.

Required Experience and Education:

• 5–8 years of progressive experience in network security engineering and consulting, with demonstrated independent, multi-pillar delivery.
• Deep, hands-on expertise with Palo Alto Networks and Fortinet platforms (firewall/NGFW design, configuration, and deployment) the practice’s primary delivery need.
• Demonstrated ability to lead security architecture and advisory engagements, including risk assessments, roadmaps, and technology evaluations.
• Experience providing pre-sales technical leadership and scoping complex, multi-pillar engagements.
• Working proficiency designing and deploying secure-access/cloud-edge solutions (SASE/SSE, ZTNA) as a secondary delivery area.
• Bachelor’s degree in Computer Science, Information Security, a related technical field, or equivalent professional experience.
• Embraces emerging technologies, including AI tools, to work smarter, solve problems, and drive better business outcomes.
• Must hold or obtain, within 90 days of hire, at least one professional-level certification on a primary platform (e.g., Palo Alto PCNSE or Fortinet NSE 4).

Preferred Experience and Education

• Palo Alto Networks certifications (e.g., PCNSE, PCNSA).
• Fortinet certifications (e.g., NSE 4–7 / Fortinet Certified Solution Specialist).
• Industry architecture or security certifications (e.g., CISSP, CCSP, SABSA, TOGAF).
• Secure-access/cloud-edge certifications (e.g., Zscaler ZDTA/ZCCP, Netskope NCCP).
• Experience leading security architecture and Zero Trust programs for strategic accounts.
• Prior consulting or professional-services delivery experience with client-facing pre-sales and scoping.
• Experience mentoring junior engineers and contributing to practice playbooks and enablement.

Travel Requirements:

• Up to 10% travel

Physical Requirements:

• Sedentary work
• Substantial movement of the wrists, hands, and/or fingers for a minimum of 8 hours a day
• Required to have close visual acuity to view computer terminal and/or extensive reading for a minimum of 8 hours a day

Note: Applicants must be authorized to work for any employer in the U.S. We are unable to sponsor or take over sponsorship of an employment visa for this role.