Job Title: Network Security EngineerLocation: Elma, NY 14059Job Type: 06 Months+/ ContractNote:This is a Hybrid position (Two days remotely and 3 days will be in the office)Job Description:Seeking an experienced Network Security Engineer with strong expertise in firewall hardening, policy design, and network security operations.The candidate will be responsible for analysing project requests and translating them into effective firewall rules and policy configurations.The role includes coordinating with project stakeholders to ensure security requirements are met and implemented correctly.Experience with Palo Alto & Tufin for firewall policy management is highly desirable.Additional experience in designing and implementing network segmentation strategies is a strong advantage.Key Responsibilities:Design, implement, and maintain secure firewall policies aligned with business and security requirementsPerform firewall hardening activities, including rulebase optimisation, risk reduction, and compliance alignmentAnalyse incoming project and business requests, translating them into well-defined firewall rules and security policiesCollaborate with project managers, network engineers, and security teams to ensure requirements are accurately implementedConduct impact analysis and risk assessments for proposed firewall changesManage firewall policy changes through established change control processesMonitor and troubleshoot firewall-related issues, ensuring high availability and performanceMaintain documentation for firewall rules, configurations, and design standardsRequired Experience & Skills:5–8+ years of experience in network security engineeringStrong hands-on experience with Palo Alto Networks firewalls (PAN-OS)Deep understanding of firewall rulebases, NAT policies, zones, and security profilesExperience with firewall hardening, audit remediation, and compliance frameworksProven ability to translate business requirements into technical security controlsStrong analytical and problem-solving skillsExperience working in structured project environments with multiple stakeholdersPreferred Skills:Experience with Tufin (or similar firewall policy orchestration tools) for rule analysis, automation, and complianceExperience designing and implementing network segmentation (including micro-segmentation strategies)Familiarity with cloud security (AWS, Azure) and hybrid network environmentsKnowledge of zero trust architecture principlesCertifications (Preferred/Desired):Palo Alto Networks Certified Network Security Engineer (PCNSE) – strongly preferredPalo Alto Networks Certified Network Security Administrator (PCNSA)CISSP, CISM, or equivalent security certification (nice to have)Relevant networking certifications such as CCNP Security or equivalentAdditional Requirements:Strong communication skills with the ability to work across technical and non-technical teamsAbility to work independently and manage multiple priorities in a fast-paced environmentExperience in regulated environments or with security compliance standards is a plus