Job Description & Details
This is a heavy-duty infrastructure and security role that bridges the gap between enterprise networking and rigorous vulnerability management. You will be knee-deep in firewalls, cloud environments, and compliance frameworks, making it a great fit for a seasoned security professional who still loves getting into the weeds of network architecture.
What You'll Actually Be Doing
Expect to spend your days designing, securing, and troubleshooting a complex hybrid environment that spans on-prem Cisco gear, Palo Alto firewalls, F5 load balancers, and multi-cloud AWS/Azure setups. You'll also be leading security vulnerability assessments, performing computer forensics when things go sideways, and ensuring everything aligns tightly with NIST, CIS, and state-level compliance mandates like SAM Section 5300.
The Core Tech Stack
Your bread and butter here will be Palo Alto NGFWs, Cisco ASA, and F5 BIG-IP appliances. You need to know these inside and out from an architectural and configuration standpoint, not just a surface-level overview. On top of that, deep fluency in Active Directory, Linux/Windows servers, and serverless AWS/Azure environments is non-negotiable if you want to survive the infrastructure demands of this gig.
Interview Expectations
Be ready to whiteboard how you would isolate a suspected breach across both an on-prem Cisco/Palo Alto network and an AWS VPC while preserving forensic integrity. The hiring team wants to see that you can methodically trace an attack vector from a web server all the way down to the database layer. They will also likely drill you on your real-world experience handling NIST compliance gaps under tight operational constraints.
Application Advice
Your resume needs to make your 7+ years of vulnerability assessment and enterprise network security painfully obvious right at the top. Don't just list certifications like CISSP, CISA, or PCNSE; tie them directly to bullet points where you configured F5 modules, hardened Active Directory, or secured AWS cloud environments. Ensure exact keywords like 'SAM Section 5300', 'NIST', and 'Palo Alto' are present so you easily glide through the initial ATS parse.