Network Security Engineer

WCC Technologies Group is a rapidly growing Managed Network Services Provider and technology consulting firm specializing in enterprise networking, Wi-Fi engineering, structured cabling, and physical security systems. We are seeking a Network Security Engineer with 5 years of hands-on experience who will support both pre-sales and post-sales consulting engagements, advising WCC customers on and delivering advanced firewall, SD-WAN, and SASE solutions across our K-12, municipal, and enterprise client base. Job Responsibilities: Support the sales team in pre-sales consulting engagements by advising WCC customers on security requirements, recommending best-fit technologies, and designing firewall, SD-WAN, and SASE solutions. Design, configure, and deploy next-generation firewalls and secure network architectures using Palo Alto Networks (PAN-OS, Panorama), Fortinet (FortiGate, FortiManager), Cisco, and other leading platforms. Architect and implement SD-WAN and SASE solutions, including ZTNA, SWG, CASB, and cloud-delivered security services (e.g., Prisma Access, Cisco Umbrella, Fortinet SASE). Participate in customer discovery calls, RFP reviews, and requirements gathering, and help build Bills of Materials (BoMs) for firewall, SD-WAN, and SASE projects. Configure and troubleshoot advanced routing and switching environments, including BGP, OSPF, VLANs, and enterprise WAN/LAN architectures. Implement site-to-site and remote access VPNs, IPsec/GRE tunnels, and Zero Trust access policies across hybrid and multi-cloud customer environments. Perform security policy audits, firewall rule optimization, and vulnerability remediation to strengthen customer security postures. Support post-sales delivery for WCC customers, including staging, configuration, validation, on-site installation, and support during network cutovers. Create and maintain customer-facing technical documentation including network diagrams, firewall rule sets, configuration standards, and implementation runbooks. Serve as a client-facing technical resource, mentoring junior engineers and escalating/resolving complex customer security incidents as needed. Build and maintain network automation workflows and monitoring integrations using tools such as Ansible, n8n, Python, and platforms like Zabbix or PRTG to improve visibility and reduce manual effort. Experience: 5 years managing enterprise network security platforms: Palo Alto Networks (PAN), Fortinet, Cisco, or similar. Strong knowledge of SD-WAN and SASE, including ZTNA, SWG, and CASB. Advanced routing and switching: BGP, OSPF, VLANs, spanning tree, enterprise WAN design. Hands-on experience with Panorama and FortiManager. Solid understanding of VPNs (IPsec, SSL/TLS), network segmentation, and Zero Trust. Familiarity with cloud networking (AWS, Azure, or GCP) — VPC/VNet peering, Transit Gateway, ExpressRoute. Strong troubleshooting skills: packet capture, log analysis, and monitoring tools like Zabbix, PRTG, SolarWinds, or LibreNMS. Experience with automation tools such as Ansible, n8n, Python, or Terraform. Exposure to AI-assisted network operations (AIOps) or AI-driven troubleshooting is a plus. Familiarity with IPAM/DCIM (e.g., NetBox) and ITSM tools (e.g., ServiceNow, Jira). Strong communication and documentation skills; able to manage multiple client-facing projects. Certifications such as PCNSE, Fortinet NSE 4-7, CCNP (Enterprise or Security), or CCIE are highly desired.