Security Engineer

Secur-Serv is a leading managed services provider of IT, print, and hardware services, with a security focus at the core of every service.

Secur-Serv provides nationwide, on-site service to businesses of every size, focusing on the financial, manufacturing, transportation, and healthcare industries.

Why Secur-Serv?
Join Secur-Serv because we are committed to professional and personal growth, working with employees to develop a defined career path and helping them achieve their career goals with internal and external training.

We empower our employees to innovate and be a part of solutions that improve processes, systems, and transformation.

We recognize and provide an environment where each and every employee can make an impact. Explore new training opportunities through our Linked In Learning platform and partners to develop your skills and career. Free wellness and mental health resources via our Employee Assistance Program (EAP) available to all employees for help with life's stresses and up to three visits with a professional.

This is a remote, work‑from‑home position, and all qualified candidates encouraged to apply in the continental U.S., with the exception of candidates from California, Maryland, Colorado, Washington, New York, Illinois, or New Jersey.

The Security Engineer designs, implements, and maintains secure network access solutions for our customer's (Palo Alto) enterprise environment. They will work closely with network, cloud, and IT operations teams to optimize performance, troubleshoot issues, and ensure compliance with organizational security standards.

• Follow all Secur-Serv requirements, policies, procedures, and management directions.
• Migrate customers from legacy firewall technologies to Palo Alto Networks platforms.
• Build custom security policies and application signatures configured for our client’s needs.
• Maintain proficiency and increase knowledge on Palo Alto Networks SASE products, software, and services.
• Provide after-hours and weekend on‑call support as needed to support maintenance activities.
• Analyze logs and events from the solution to perform initial troubleshooting and issue identification.
• Work with our Technical Assistance Center to troubleshoot and diagnose support cases.
• Maintain the company's solution and provide mentorship on code upgrades and best practices.
• Ensure client needs are met and deliverables produced on time according to specified project deliverables and scope.

• Bachelor’s degree in Computer Science, Electrical Engineering, Computer Engineering or a related technical field, or equivalent background or military experience.
• Minimum 4 years’ experience in professional services.
• PCNSE, CCNA, CCNP, and/or CCIE certification.
• Project leadership experience – ability to drive organizations and resources to complete required tasks in service of end goals.
• Strong technical experience in the installation, configuration, and operation of high‑end firewall appliances.
• Strong understanding of LAN and WAN networking protocols and technologies, including switching, routing, firewalls and security solutions.
• Strong TCP/IP networking skills; dynamic routing skills (BGP, OSPF, etc.).
• Experience working with Remote Access VPN solutions, IPSEC, PKI & SSL, TCP/IP, Authentication Protocols (LDAP, RADIUS, SAML, etc.).
• Experience with URL filtering, Proxy and SSL Decryption.
• Experience working with Windows and MAC OS including debugging, editing Windows Registries, Plist, etc.
• Experience with one or more of these vendors:
  Palo Alto Networks NGFW, Cisco, Checkpoint, Juniper (Netscreen), Fortinet products, Symantec/Blue Coat, Zscaler.
• Good troubleshooting skills and ability to use tools like tcpdump & Wireshark.
• Application Delivery expertise – L7 SLB / Global SLB / Traditional Link LB.
• Application Performance Monitoring expertise – Response time metrics, Application identification.
• Packet capture analysis/fault isolation and remediation.
• In‑depth knowledge and deployment experience of SD‑WAN and Remote Access technologies.
• Network Security expertise (IPS/IDS, ZBFW, NGFW), in‑depth IP Routing protocol expertise (BGP, OSPF, EIGRP).
• Implementation of…